A zip attachment contains a img with an exe: the malware. The other, a pdf downloading a zip with an exe: the same malware. The data is exfiltrated via SMTP.
Ukraine, Israel targets Iranian drone factories in Syria

Israel targets Iranian drone factories in Syria. At least two strikes in the last few days on Dimas airport in Rif Dimashq. Shahed-136 UAVs, sent to Russia, are produced here
Israel is targeting Iranian Shahed-136 drone factories in Syria, used by Russia against Ukraine. In the past few hours, it seems there have been several waves of air strikes against military installations at the Dimas airport in Rif Dimashq. The first one occurred on 21 October and subsequently there would have been at least one more attack on the same area. The premier of the Jewish state, Yair Lapid, said he was concerned about the “dangerous proximity” between Moscow and Tehran, stressing that his country will not stand by and act accordingly. Israel also confirmed its support for Ukraine, although it will not send weapons for the time being. This, however, does not prevent it from providing Kyiv with intelligence information useful for neutralizing the UAVs and hitting their factories outside Iran to slow down their production and delivery to Russia.