Locky "54ghnnuo"

#locky, phishing emails with .docm attachments
http://blog.dynamoo.com/2016/07/malware-spam-sent-from-my-samsung.html

Subject: COPY<xxxxxxx> or scan<xxxxxx>
Body:

Sent from my Samsung device

------------------------------------------------------------------------
download links:
http://bursaforex.home.ro/54ghnnuo
http://car-sound.go.ro/54ghnnuo
http://cats.ugu.pl/54ghnnuo
http://city4you.go.ro/54ghnnuo
http://dottie33.0catch.com/54ghnnuo
http://eightplusnine.com/54ghnnuo
http://enpitsutenpura.web.fc2.com/54ghnnuo
http://folkstorm.free.fr/54ghnnuo
http://fss.neostrada.pl/54ghnnuo
http://howtosucceed.tripod.com/54ghnnuo
http://iss0.tripod.com/54ghnnuo
http://iviarc.republika.pl/54ghnnuo
http://klasste.tripod.com/54ghnnuo
http://majincreeper.cba.pl/54ghnnuo
http://marcinek.republika.pl/54ghnnuo
http://matisport.strefa.pl/54ghnnuo
http://mfg.heimat.eu/54ghnnuo
http://naturopatheenligne.free.fr/54ghnnuo
http://pacyna2.republika.pl/54ghnnuo
http://pichuile.free.fr/54ghnnuo
http://sgvillage.com/54ghnnuo
http://shutadds.w.of.pl/54ghnnuo
http://solti.free.fr/54ghnnuo
http://static.indirveoyna.com/54ghnnuo
http://www.carboplast.it/54ghnnuo
http://yifruit.com/54ghnnuo

attachments:
a1eb1b975d778e69f7ffd6b17da6f1e8d2a38fcac8269d0652cc895734d71e9c  0001.docm
830b7dd8decb0f618264b36950a819aa5e13ece181643f95f3c6b29e16f24c61  0002.docm
96e7009ef7a0904f68fa3e1ffbf345345977fc8b2d6a597bfe24fbf5207115ac  0003.docm
e9b66675f5333873d6df12b592a5b74648d21d15e50b9f195eac329f31a0f1d8  0004.docm
c843c16ea29211c21462c7ad3db990937529361905b16818ba92ff1fa186957e  0005.docm
fb55b18f5ba17d533d9531d47c22038eb352c2c63a9c53147bffb375885a876e  0007.docm
1f176b04937f9615bb613e9a972e395d958158eeafcf36a931ff98bd1fc45697  0009.docm
69db0361eaf7e7d047e3222ffbd1eec11d38c007a9d45c5314f0c5bf3b16f19b  0010.docm
d40b8e8b61c1d459d4bb63b2c7c432accb5a19691a5d9c78a31dbde67e999b53  0012.docm
ba09a9cd2a84f22bd0e8ddac26dbf1ed2d19507cd0400a55027ce6344a5abdbf  0013.docm
a21bf8ee834c8af56050a11331d268a806e6ce05b2821d10848ace42b88f5695  0014.docm
e0c9a6893b63ac994e2e1943e86d2d6c76d6a1f28e8fbb1224ae0654b9c4f25f  0022.docm
96346d53b5f85d373ac1e98554695bda6380f569b0073273e920e8101a9ca231  0024.docm
3be8e0706fc7ff505c5b8a18fa0f5f14639ac1247245a687715432e24a564c66  0029.docm
494bfd874e6f81151c6402dd41d0c46712af2ab08f18416319361bf88742a963  0030.docm
a9b45047fb242ef83a1a5b39fb298578d9f86000cfe03aeb1c5d997c23c21dff  0031.docm
a7b2ffae062acc2516d53eef05fd203f03ecd032cd44a6c4eee953e30e610a02  0032.docm
c19c3f61b8a7652aa292a7b821876cff1995d0553fe9f4265bfb88337735f5b1  0034.docm
8cea75b950b51223f3f4f901efef593ba7c632c08dee8b5904bf856fcb867b70  0035.docm
5d1bdeed2ea169182eca277ad86f0fa4d5363608644315eae6583b2b691f8c95  0045.docm
b5943054f4c0dfd5624c36085d75f11b8e3d206519bc047b9e25800fad96166b  0046.docm
e751f69fd4651a86554364db9a89fac9831cd164999c0f910b839a9f50695f62  0049.docm
dfc3c864d8dc820972c9dc7929f651143dfaf7d52b1c5db82f6e6411f892b762  0051.docm
aba68022eea1b8d27ea0ad967bc58e59e1e42d3d4390e35fb7745ff75b8921ce  0054.docm
04c4523a4ad5a395949cd4c8e889e0d669366018c6a523a94e36c573e339b0f3  0060.docm
1b0095a5dacadc11230a0d60d467596c83868448e9519cc7ea2b9060eb6043b5  0063.docm
f483efa09d48b7326809c630b30f4e30b5f4bdb6eb753cd76106139eb29ac697  0064.docm
48d71d0362f6c5539848b6cdf20e3e0311334ba96a4e09dc0966c35729f916fc  0068.docm
678086ef4ea6f6b4eeb957f764ce291c0a6f500e74c47c59f9b25ba076d89169  0069.docm
ef84c4a4ef9eab515057dad8c7b563a281768bce12ee7e0bb9e1009418bb08d7  0074.docm
f3ebc4b456e0094d0a747605bb9b8717862551f0401a2e7697017a17e3d0610e  0076.docm
e0a25348ec5a8300acb8e90b335912dc08905f4bc673570e9dd2bbb2da1a236b  0085.docm
6cca2de7053542670ce18f527e4a026b75f2d2e126d90f3275768abb49747bfd  0087.docm
0081bcfffeb56712f3ff15fd14cdf36aebde469a2cf740eddb875de302d01edb  0091.docm
e00cecf42e76da7f1f9e4ebab532646a761ec12e4bd3ea9c26d2aa8453142741  0092.docm
00975f5ead05925c403f9b9217894584f03b04a9220d1d7b9a5e423fe7951ae6  0098.docm
9553c1e10af50be4b7125a15d9f83626c44daac91feea631477c87a4d40e711f  0099.docm
66602329d3fb7887aee486da0c3a5029137daa0f2b7551a1306e229937218b3f  0105.docm
59aea2ae4974dd22e2292cd43a9a740c374b34bf2ce237ba27650fbecfb122ae  0110.docm
009a12644af96ce43ad2473e4b516d3e7e6be8afd244e08810bee57157cfcc5f  0119.docm
e48aacc5023ea6b7b212f95d03a560bfdc419c5c93e36fe5b2259f66ddae4878  0121.docm
aa38a06064d0f10a85bed71e5450338715a1f40037467ddda2d03be7ac23ae4d  0124.docm
66200907d69731126ec8b85a84296c0944790d65482ccb752d33b29ac9b7ea93  0126.docm
3f56c74e3dbb549cc7b38f334b4524c0dbeee0cb934f4bdf771fbfbd6e60e5b1  0128.docm
91fdf9b02433cf376ba4b5db171d59903f3b0dfacc3360e97ac1a1562bdc0064  0130.docm
86dbf9a44308dfd4c54a34aa24393340886b13a879fb69c978910395d250a215  0185.docm
79d3dcdeb08755c95c144f786e1dfc849305c5715f43ec41d08f528801ca2717  0187.docm
9e8eab063d8183bf822e6436795a01957b4eacfcedcac4a3cf25d0d21d616265  0188.docm
6c2a1cff3cd9cbdb5c3fd9dd8a6640bb188bfb5b4ba2d8fcd6e8dbeaa08ce033  0190.docm
62f98702028433cb5b10365f85b3ce647322992be1b64a3d2ddedb163a6dc555  0211.docm
6ae518ffa7671e16289cca62b05320765413de6206aeb58040502339ac815957  0224.docm
31267eec224f3f9f8920bfee55835928bd0222badd40f9b9dafdcd11d149110f  0226.docm
585b0142e33f31d3c8a5c47e580abf504a5acbb4d893632b3c117605abf2d05b  0255.docm
c8badcc18b774ce72d41a6d0ab97e8d659f3c4abc9b7c1b87a05bcc34bf912d9  0260.docm
426cbea0af8b17b30a766a28f21c4e2d77c0958912710fc093e7825a698cce67  0275.docm
aa60ac029ce135f12479d0c06c6edf81a39229b083d44ec8b33be2a4141c7199  0297.docm
71ab0aa25d07efa2f953dba8eff185a2ca2b80574fa0e7fc34b05f32ff4129b8  0372.docm
b053579cff3cafb36f332ea1a9ab353596551c8748baf69e61633cc1e44b36aa  0400.docm
07b2683fb654fa80b28a0fe4da78a562813bee34ab2b05a11df34d3879db9932  0499.docm
f510185750323e5c8dc0fe5b508db3cf263de7ddc22160329ce93a99f5426566  0503.docm