Advertisement
Racco42

Locky "Sales charts"

Aug 1st, 2016
1,722
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.49 KB | None | 0 0
  1. 2016-08-01 #locky email phishing campaign "Sales charts"
  2.  
  3. Email sample:
  4. ------------------------------------------------------------------------------------------------------------
  5. From: "Concepcion Wynn"
  6. To: [REDACTED]
  7. Subject: Sales charts
  8.  
  9. Dear [REDACTED],
  10.  
  11. See the attached charts about last month’s sales growth.
  12.  
  13. Kindest regards,
  14. Concepcion Wynn
  15. ------------------------------------------------------------------------------------------------------------
  16. Attachment: 2efee36f61c.zip, contains file "sales charts BEEC4834.wsf"; JScript donwnloader
  17.  
  18. Download sites:
  19. http://66.133.129.5/~kvas/dpgrl
  20. http://akristall.ru/7d16r
  21. http://amrbouw.atspace.com/f9fwqw
  22. http://andreysoloviev.ru/ltcnp
  23. http://anotherstandard.com/ppdwguh
  24. http://arusoraku.web.fc2.com/64hmb
  25. http://berndburgdorf.de/nkpsvbsy
  26. http://carallergyfilter.net/0l0py
  27. http://cyobitshop.web.fc2.com/s8sfib
  28. http://dancingb1.net.amis.hr/mqddi300
  29. http://doklens.nl/2pp1bxn
  30. http://hikmetakdemir.50webs.com/pd1a1az
  31. http://kallait.szm.com/t6wq2
  32. http://logior.de/lu991yt
  33. http://loneian.cz/puzig
  34. http://pkgame.cba.pl/mj545ykg
  35. http://st-giraffe.homepage.t-online.de/x4fbx
  36. http://terminatorhc.50webs.com/y0bkw5hr
  37. http://twup.com.br/z12k0
  38. http://w5zz6gu77.homepage.t-online.de/golxykto
  39. http://www.autoservice-odenwald.homepage.t-online.de/29gubsj8
  40. http://www.desmitse.nl/tmuwcpav
  41. http://www.diacelalimentacion.es/xkiwfk7
  42. http://www.freerider.it/vm5483
  43. http://www.galleriacolonna.org/kpv1lg2x
  44. http://www.jacquesdalne.net/g438lq86
  45. http://www.jansen-consultancy-machines.be/wjhwnqm
  46. http://www.jramirez.com/9omwdsk
  47. http://www.liviazottola.it/pwa9ri7z
  48. http://www.lusignolo.com/xd9baodd
  49. http://www.opal.webserwer.pl/je19nms
  50. http://www.smoes.net/uo0bkz
  51. http://www.valmon.it/t9t8k956
  52. http://www.young-boys-hawisch.de/p0wg4e
  53.  
  54. Added:
  55. http://archiwum-zzmk.cba.pl/6y35j
  56. http://jasper.ojaru.jp/vrwo3r
  57.  
  58. Encrypted malware, filesize 138756:
  59. 8e4e66c35f54a125f3ac86cab87d2306374e06ad00de05f93c038b688b10d0f6 http___66.133.129.5_~kvas_dpgrl
  60. 08fb072c4ce39daedadc9a97b1199752d653b2b5042715228f28bbc9df477ee6 http___akristall.ru_7d16r
  61. 364fd3eb41981d5d74a03457755d9d9940fab145a5ea07beba9352e1cd0fde9d http___amrbouw.atspace.com_f9fwqw
  62. 368b50d23b89b0028e221eeb5c5d115855451758e3154f2f027aeeabbba37b9c http___andreysoloviev.ru_ltcnp
  63. 3212df34478658574f475c6d70581ef27f1c3c2b76cc27ee50bc7d0de4ff3c0c http___anotherstandard.com_ppdwguh
  64. a0265bedd1c358e3762e6a95d3fe193f43f207c12d5e13dc7de7ce8a76a5b65e http___arusoraku.web.fc2.com_64hmb
  65. 737497fa766dca356e3785238c41ca03036bda5f332a3a78ea711246c73f93b3 http___berndburgdorf.de_nkpsvbsy
  66. 296a34f2ff4b7f412ae016153796a55b9f030282f0ccdd24f66e6937c83b210b http___carallergyfilter.net_0l0py
  67. 15359ec3b0cbc7fe0dc3a6e5c66273000682c33f3f7ed924ca2ea5ea6488d236 http___cyobitshop.web.fc2.com_s8sfib
  68. 4c817fdfb4504023bd2c1c1b7d191fc7de66b6eec00c6323be72aa13d38db73b http___dancingb1.net.amis.hr_mqddi300
  69. da780f588370602321b6c1c99b37372f247f3ab19598d1a39745047b38a6eeee http___doklens.nl_2pp1bxn
  70. f8476719af9585b9b7ef6e8d9ef9cea558a3e2fcaba8ff981f7141fd02294599 http___hikmetakdemir.50webs.com_pd1a1az
  71. 6fcf1fcc572a6fa07bbb8934c406f3d8ff7829098ed978afeb31a0d0d183d46e http___kallait.szm.com_t6wq2
  72. 8ab00966380349f6e0785bac427ac47e54d760dd2047839be11f304b36dcedc6 http___logior.de_lu991yt
  73. 614bac88583a8f5117e3274ddb7d5925255e5c14a413e717f84ae14d6144ddb1 http___loneian.cz_puzig
  74. 5e4631451e5f98508fcb43bc6f68acaf1b2476b7ad61e8615c971077b8a46d39 http___pkgame.cba.pl_mj545ykg
  75. d70030a7a0cbe952c1afe6ed9903c22f883890d530039201c2fc43ac9dfa23c8 http___st-giraffe.homepage.t-online.de_x4fbx
  76. 6be5e391b8088e181c8d65b28fba74f16d185a7907469331221dbd7fb9cd70a4 http___terminatorhc.50webs.com_y0bkw5hr
  77. 94564ce5f96b3dafbe51bc66bea6bce8ed81475df2501b0223af5b09d1eb43e6 http___twup.com.br_z12k0
  78. 0acef7e8114b15cef3c4692c6734a5329f48190b1636542f0527ae0c1ca3fe41 http___w5zz6gu77.homepage.t-online.de_golxykto
  79. e1e654489954b1d2a000b3ef7b68c937c0dcfd9b689088d19a63fbff56df3bca http___www.autoservice-odenwald.homepage.t-online.de_29gubsj8
  80. 340e5aae311d657e0a622c71647bcb3334d2ff742c07b70515fb6c18e270d2ff http___www.desmitse.nl_tmuwcpav
  81. ca72f5b94eac333ce312fed64444baeaabac050f66c7f866054c63ceee26f2a5 http___www.diacelalimentacion.es_xkiwfk7
  82. a914353a0b67f4c10c1dc32ab54e1571911c0bc404b35253019edb25c5a683e4 http___www.freerider.it_vm5483
  83. 1b0e1c7cd90883e05cf5683de344b1c13ea9f2d104a85b98ec54c19ff08df0fd http___www.galleriacolonna.org_kpv1lg2x
  84. 43908a407e7575adc4123434d7663281849432084d63e8cd91f2f23c01847082 http___www.jacquesdalne.net_g438lq86
  85. 3ab9eebccfd3f98aaae515533c104dd36d35c0a6d409121c1cff5321bc79faa0 http___www.jansen-consultancy-machines.be_wjhwnqm
  86. 8a749ece4b59b450df8fa9d49e40cf26810ab723e1e065c916e99dd48eac1118 http___www.jramirez.com_9omwdsk
  87. a4ab84d5c08326221d0b51865eaf7f24f6c661e9e204f44dde97febf06008e9d http___www.liviazottola.it_pwa9ri7z
  88. 5d4bb14ff2f5f9b8aa97fab9ef39ed14a76c38a1b506a25956a50ee062a11369 http___www.lusignolo.com_xd9baodd
  89. 8516b0071f4869614822c5ee9171f55008a6e9b508aa112ff9ddb18ded1bad18 http___www.opal.webserwer.pl_je19nms
  90. a353e8f6ed9ea5dd615a7ccfe3b30d9c7bcc6d230765b1572aff4f7d320b1a9d http___www.smoes.net_uo0bkz
  91. d8f997d9e457874d94fb412150c10e9a5369d719dc5ee978e1728c72b0a2740c http___www.valmon.it_t9t8k956
  92. 856c5a98b7e46537f11c55dacfa8a1110af0e1bcdf9cd0bc242afca17dcd3b89 http___www.young-boys-hawisch.de_p0wg4e
  93.  
  94. Added:
  95. 2dfca70707bf1aa31c8c3a10d14a254550d2c9ed48dabca9324b780e85a63eee http___archiwum-zzmk.cba.pl_6y35j
  96. f25dc9802fae7ed6384d37c8ac130545855613f3d5b27835ec48bdab4576a5c1 http___jasper.ojaru.jp_vrwo3r
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement