It's a scam. Apple will never ask for your SS#.
In a message Apple will always address you by your real name, never by your email address or Dear Customer. Also the sent-from address should be @apple.com or @itunes.com Additionally Apple does not send attachments.
https://support.apple.com/en-us/HT204759
Forward it to reportphishing@apple.com