X.W32.Zbot.deu

Subject: Ich weiß nicht, wie ich es sagen, aber ich habe vor langer
Attachment: Bild.zip

Body:

Hallo Man,

Ich weiЯ nicht, wie ich es sagen, aber ich habe vor langer Zeit zu euch senden einige Fotos tryed, aber ich habe gedacht, dass Sie nicht interessiert sind, mich zu sehen.
Aber jetzt werde ich Ihnen die Fotos in der Anlage.
Laden Sie die Bilder und extrahieren sie, ich bin sicher, dass Sie sie mцgen. Das Passwort ist: 123456

Machen Sie einen schцnen Tag.

X.W32.kryptik.hpqb

Subject: UPS Invoice copy N47204
Attachment: UPS_document_ID38967.zip
AVs: (18.2% detection rate)

Body:
(see image)

X.W32.Oficla-A1020

Subject: Your package is available for pickup.ID25391 (random number)
Attachment: UPS_Label_NR7753.zip

Body:

Hello

Your parcel has arrived at the post office on October 18.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest UPS office and show your mailing label.
You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.
UPS Global Services.

X.W32/Bredolab.2a

Subject: UPS Online Service. Error delivery address number 7114
Attachment: dode.jpg
AVs:10 /43 (23.3%) Au, Cat, Cl, eS, F-P, Jia, K7, PcT, So, TheH

Body:

Dear client
Your parcel has arrived at the post office on October 12. Our Driver was unable to deliver the parcel to your address.To receive a parcel you must go to the nearest UPS office and show your mailing label.Mailing label is attached to this letter.

You need to print mailing label, and show it in UPS office to receive the parcel.

Thank you for your attention.

UPS Global Services.

X.Win32/Oficla.T1

Subject:USPS Delivery Problem NR5170282
Attachmant: USPSLabel.zip
AV's: 2/ 43 (4.7%)

Body:
*Uses image as shown above