Advertisement
Racco42

Locky "report"

Aug 3rd, 2016
1,552
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.65 KB | None | 0 0
  1. 2016-08-02 #locky email phishing campaign "report"
  2.  
  3. Email sample:
  4. --------------------------------------------------------------------------------
  5. From: "Jaime Salas"
  6. To: [REDACTED]
  7. Subject: report
  8.  
  9. Hi,
  10.  
  11. I attached the project status report in order to update you about the last meeting
  12.  
  13. Best regards,
  14. Jaime Salas
  15. --------------------------------------------------------------------------------
  16. Attachment: 77c76a3130.zip, contains "report ecee8948.js"; JS downloader
  17.  
  18. Download locations:
  19. http://ary.ken-shin.net/jc6f3r
  20. http://bizconsulting.ro/mgld4
  21. http://czerwinski.ciesielstwo.cba.pl/6qxwpzt0
  22. http://edicionesmayo.com/~pressline/aambzou5
  23. http://equalityindonesia.com/mdxrgr
  24. http://essenciadoequilibrio.net/jl6aq
  25. http://essenciadoequilibrio.net/szbcfto
  26. http://go4leiner.de/vm3u88
  27. http://hitoribotch.web.fc2.com/73bm9p96
  28. http://ikkyohawks.web.fc2.com/e61h18
  29. http://lifeserv.myarena.ru/mp9133x
  30. http://locogallery.com/dz0lw6
  31. http://mephisto.nd.e-wro.pl/05fvl56n
  32. http://miyadu.web.fc2.com/hrdl2sh8
  33. http://namarinoko.hariko.com/376wx19
  34. http://nedayepak.ir/eu9om
  35. http://rsxxx.com/jsc6uao
  36. http://russiansnow.web.fc2.com/yfu287q
  37. http://setcoop.com.br/omkjsnj
  38. http://setcoop.com.br/tex9z
  39. http://slava.nsknet.ru/hi65u4w
  40. http://sugetipula12.hi2.ro/rwnmj
  41. http://sugetipula12.hi2.ro/v2gbzo0s
  42. http://sumrmo360.web.fc2.com/hv07h
  43. http://sven-jaenecke.homepage.t-online.de/1siww
  44. http://teatr-x.ru/b7djdx
  45. http://tip.ub.ac.id/m7blnpxy
  46. http://trans-free.ru/lve7y
  47. http://vakantiehuisinauvergne.com/npvkwo
  48. http://watafuku.web.fc2.com/ao0dw
  49. http://woblk17jc.homepage.t-online.de/xckpw14
  50. http://wt7dzbn78.homepage.t-online.de/qxyc94p
  51. http://www.am-i-evil.de/hkak1si
  52. http://www.arstaelteknik.com/7o6uw8w
  53. http://www.arstaelteknik.com/se0hgcy
  54. http://www.bagana.net/oucgn5
  55. http://www.breuninger-web.de/c1gjikd8
  56. http://www.cafealaska.es/znsih5
  57. http://www.carrelliusati.it/7zf90
  58. http://www.closecombat.mynetcologne.de/cddpnu
  59. http://www.cosentinoarredamenti.com/o77fzv
  60. http://www.dsalchi.org/z4fry
  61. http://www.e-bev.com/7dl4wjqt
  62. http://www.jansen-consultancy-machines.be/cnipq7ja
  63. http://www.networkerakademie.de/99uqvcy
  64. http://www.puntoit-informatica.com/6jnx8ms
  65. http://www.sashraf.plus.com/d9g6d
  66. http://www.serial-production.com/vqprmy
  67. http://www.stucchifedele.com/wg4spe
  68. http://www.vincenzofranchino.it/aymbt6k7
  69.  
  70. Encrypted malware, filesize 140292:
  71. b2f711c1182533bf53247f1d0a39924305cb3582f04c472f051cf8c5dce97514 http___bizconsulting.ro_mgld4
  72. 5fdcb1410c517ebd1b9634ae9f3b4d2f2dec3f1487a5cfb3c4206e536af043f7 http___czerwinski.ciesielstwo.cba.pl_6qxwpzt0
  73. 66c33a21da058b8b21c3267e12fd5430a032ea28dd5547664febd01b28fe0e54 http___edicionesmayo.com_~pressline_aambzou5
  74. 9a3902b68bac3898091c363b8c9d09bd32207b80c8206d197bbfd9f1aae980ea http___equalityindonesia.com_mdxrgr
  75. 1e036dadd7ea19ae1827ff363983b9d42c705520b179b8a0481d75f6f03e2d1e http___essenciadoequilibrio.net_jl6aq
  76. 6daceeb6bd3e6134d0debcc9ec41ff2ea676afa85e061665a1110c78ec1de548 http___essenciadoequilibrio.net_szbcfto
  77. 5ecbd7673ede0addef88656279dfe2f01ecea8a00eca0b4abd9cdfdbc04391e7 http___go4leiner.de_vm3u88
  78. 8bc3d9705817afc90c033332e537c3f312a7dc547012a557cd428a71c177c472 http___hitoribotch.web.fc2.com_73bm9p96
  79. c604b677dc9b9c61689729fda631d61ce27acc9d87f5b507bb3a697f11580de4 http___ikkyohawks.web.fc2.com_e61h18
  80. 1078a9fc6f13ef80edea1bf46456d7405b6e9df8bcf619dac9a0c55ac22115a5 http___lifeserv.myarena.ru_mp9133x
  81. 4ac712a6254fdceb317c3bc1ea8e3ee85c62802dd6fb356f08091acacc67666e http___locogallery.com_dz0lw6
  82. c5e840ad581207f966a44e15bb8815ae3a3882841da4b0178747bcbe84604feb http___mephisto.nd.e-wro.pl_05fvl56n
  83. 5fc9a8d2321ae66b29172a89b9a25dca3c2355215b86c73e487f6c9d37368343 http___miyadu.web.fc2.com_hrdl2sh8
  84. 4b272b8c4620f8c22963040b20ed2b06cb9077b699270fe9544b0dedea460372 http___nedayepak.ir_eu9om
  85. dbde040584622f36e8fe02db6e11a7d95f37ddca88eabd250e40ea8a5c1576f9 http___rsxxx.com_jsc6uao
  86. 879e1b14c7c4a2adb7791956ddd3d966a9284a5a1f1be4accc7d9bdc834354f1 http___setcoop.com.br_omkjsnj
  87. 750b8650c158ab620e37172a127850f16cd0b3e3efcbbdc68d73c9a0de886a19 http___setcoop.com.br_tex9z
  88. bb1390c0dcf60bd4a71b1aacf7127e128d78b3003d7bd3ca36a5d10351d67b5a http___sugetipula12.hi2.ro_rwnmj
  89. 8e208381c3b21e853ee5d453bf53db51d9b3cbcbcf16fcaa998bcf67b425c38d http___sugetipula12.hi2.ro_v2gbzo0s
  90. 1f63be492881e40ab345422ef0a840e458624f5a418b023af526a2ac8525f287 http___sumrmo360.web.fc2.com_hv07h
  91. 6e7ce3da704f74fa108deb5c9115d24cbe27cd5c54dab15be62f7f1b6a69c1bd http___sven-jaenecke.homepage.t-online.de_1siww
  92. 63e5affb001bed52a2ec8d09f0b71f282096edfae9d2ccb75b07345a0a0819b1 http___teatr-x.ru_b7djdx
  93. 190e1112426a910abddeb45d5f2f4afa38cdc92177d5708600aa9d67756c002d http___tip.ub.ac.id_m7blnpxy
  94. bab864bde2286721cdd880565ff55b231ad6973e33f2afc4b73b73194e0d2ea1 http___trans-free.ru_lve7y
  95. a0ffee16d146d1e1c0c6e5372d4d7056fd5fad4f8bb9c0dcd1d8d2e0056ae3fc http___watafuku.web.fc2.com_ao0dw
  96. 75d13e0439b331ecf1c7c56beba6094aa5d15c44925b3580da6b025d066aa2ea http___woblk17jc.homepage.t-online.de_xckpw14
  97. 817062836f749b9601fc61f8b123e3714c03ee274d5b301dd534feca4df9acfd http___wt7dzbn78.homepage.t-online.de_qxyc94p
  98. 99990a9187e08cd8cc5039b3b1d12f3417b0a709887fbeb95b57ba32c04b9fb7 http___www.am-i-evil.de_hkak1si
  99. 5eb3644786cba31203a18fa6a8e302aac06f5617d2736a3b7b5868e5bfb5d447 http___www.arstaelteknik.com_7o6uw8w
  100. db6256e95647ff7131a5c4d5af4c5a3c0d11fc50823cac0a23c102154eb1c554 http___www.arstaelteknik.com_se0hgcy
  101. 7666e20c16e0f38ec7eec6519063d7960b04d4c4bc842e5b8e2fb174035e8f03 http___www.bagana.net_oucgn5
  102. e74f60a4fbe672f8810aa36eea6e27fedc8ee1816148c5d311eaf936650fdc45 http___www.cafealaska.es_znsih5
  103. 2ebc4fb8347f0cad0c81ee6bd968609875fc8a1d9587d9b8f9eb8a7b41260d31 http___www.carrelliusati.it_7zf90
  104. e38938e86759a951b247424dd222d989971bebceddaf614f7625ef593eee0aef http___www.closecombat.mynetcologne.de_cddpnu
  105. acd288927dd829575fa4512182038cc3fc1402da994a12535ffafd54f112c525 http___www.cosentinoarredamenti.com_o77fzv
  106. 5a9cbef850d19e18863b464b71679a4a4e1cf2ec19e67bc936127269a26d81f0 http___www.dsalchi.org_z4fry
  107. 02269b3c94f2edfdd604bcf54287c1819a784b23efbd5c4858c57c153827070c http___www.e-bev.com_7dl4wjqt
  108. c9dfb40201867cccbb6a93f0c0418440d570a63be4a79caa68825c0240345714 http___www.jansen-consultancy-machines.be_cnipq7ja
  109. a539816f21815984ab5de9afe7846c93843c474b909d15fd3d3cda8db7ed0fd1 http___www.networkerakademie.de_99uqvcy
  110. 53984a25d261d5fcb463a8501c24fe81311f729485cc7698365f2b7e020ccf6d http___www.puntoit-informatica.com_6jnx8ms
  111. c591b4e49d1d7770839f6eb675c07f4886ff26be060589902e4a98acf1b5cb02 http___www.sashraf.plus.com_d9g6d
  112. 23298d62eef9093e423121783d7f6e3497fc4df2126f07e1758fc60d62beee93 http___www.stucchifedele.com_wg4spe
  113. f17ed722eff97b9ac8609721ade9f9ebd39e4138f09e9b1d208660d4966740fd http___www.vincenzofranchino.it_aymbt6k7
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement