I didn’t mention this before but Ann
is an Australian. At least her message went primarily to SophosLabs spamtraps in Australia. It seems that Ann has a German cousin called Anne!
Her email is remarkably similar to her “cousin’s”
Even, the website is familiar
The only real difference is that Anne will try to infect you with Mal/Basine-C.
Though as both Mal/Behav-121 and Mal/Basine-C are both written in Delphi it is possible that they are first cousins.