Subject: [found threat a variant of Win32/Injector.Autoit.FHP trojan] SHIPPING DOCUMENT
From: "[email-masked]" <[email-masked]>
Date: Wed, 13 May 2020 21:33:17 +0000

Dear Sir/Madam,

Attached is the Shipping documents and BL as assigned to deliver to you.
kindly confirm if the address is Correct.
Original copy of Bill of Lading and other relevant documents for 
clearing
of consignment in your port

Notification for shipment event group "Clearance event" for april 25.

Shipment Details

Best regard

Katie Park

Business Division/OPS Team Leader/ Deputy General Manager

¦ SUN ACE Shipping Co., Ltd. ¦

¦ 11ST FL., DANAM BLDG., 10, Sowol-ro, Jung-gu, Seoul, 04527 Rep. of 
KOREA

¦ Tel +82-2-3788-9993(Dir.) Fax +82-2-774-8743 Mob +82-10-2744-4628

¦ Email [email-masked] / SKYPE : [email-masked]

__________ ESET Mail Security __________

Threats were found in this email:

  shipping doc_pdf.arj - a variant of Win32/Injector.Autoit.FHP trojan - deleted
   shipping doc_pdf.arj > ZIP > shipping doc_pdf.exe - a variant of Win32/Injector.Autoit.FHP trojan - deleted
    shipping doc_pdf.arj > ZIP > shipping doc_pdf.exe > AUTOIT > script.bin - a variant of Win32/Injector.Autoit.FHP trojan - deleted

Detection engine version: 21322 (20200513)

https://www.eset.com