2017-08-01 GlobeImposter "Emailing DOCxxx"

2017-08-01: #GlobeImposter email phishing run "EMailing - DOCxxx" / "Emailing - PDFxxx"
Samples: 480

Email sample:
-----------------------------------------------------------------------------------------------------------
From: HARRIS CRAKE <Harris7189@projekton.com.br>
To: [REDACTED]
Subject: Emailing - PDF312
Date: Tue, 01 Aug 2017 17:54:43 +0700

Hi [REDACTED]

See attachment

Attachment: PDF312.zip -> LN9851145.js
-----------------------------------------------------------------------------------------------------------
- sender is random
- subject is "Emailing - <DOC or PDF><3 digits>"
- attachment "<DOC or PDF><3 digits>.zip" (same as in subject) contain file "LN<7 digits>.js"

Download sites, malware as same as in https://pastebin.com/ubYAgQb1