Yes, it is phishing.
In a message Apple will always address you by your real name, never by your email address or Dear Customer. Also the sent-from address should be @apple.com or @itunes.com Additionally Apple does not send attachments.
Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support
Forward it to reportphishing@apple.com