WU SPAM wave

Western Union SPAM wave

Comes as a ZIP file attached (ex. Auto refund report 576886420.zip)
ZIP - MD5 e26f787cad35c25663a9ce671a570651
EXE - MD5 6e748eeda0c8ef7a36ed79cbe8c6682e

https://www.virustotal.com/en/file/b4d7a867350ab0a48c8e0bd2bbfd62facb23709bfbcbe3d6a4f8654ed993d39e/analysis/

GETs:
simplesites.gr/vr75i.exe
www.sheltiezuchtverein-deutschland-ev.de/bn43.exe
mdebra.o2switch.net/2ccVsM9z.exe
ciclografico.pt/9Up.exe

POSTs:
smallproductphotos.com/forum/viewtopic.php
setandforgetwebsites.net/forum/viewtopic.php
timetoeatout.com/forum/viewtopic.php
mypersonalpathtopregnancy.com/forum/viewtopic.php