Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 2016-08-01 #locky email phishing campaign "Sales charts"
- Email sample:
- ------------------------------------------------------------------------------------------------------------
- From: "Concepcion Wynn"
- To: [REDACTED]
- Subject: Sales charts
- Dear [REDACTED],
- See the attached charts about last month’s sales growth.
- Kindest regards,
- Concepcion Wynn
- ------------------------------------------------------------------------------------------------------------
- Attachment: 2efee36f61c.zip, contains file "sales charts BEEC4834.wsf"; JScript donwnloader
- Download sites:
- http://66.133.129.5/~kvas/dpgrl
- http://akristall.ru/7d16r
- http://amrbouw.atspace.com/f9fwqw
- http://andreysoloviev.ru/ltcnp
- http://anotherstandard.com/ppdwguh
- http://arusoraku.web.fc2.com/64hmb
- http://berndburgdorf.de/nkpsvbsy
- http://carallergyfilter.net/0l0py
- http://cyobitshop.web.fc2.com/s8sfib
- http://dancingb1.net.amis.hr/mqddi300
- http://doklens.nl/2pp1bxn
- http://hikmetakdemir.50webs.com/pd1a1az
- http://kallait.szm.com/t6wq2
- http://logior.de/lu991yt
- http://loneian.cz/puzig
- http://pkgame.cba.pl/mj545ykg
- http://st-giraffe.homepage.t-online.de/x4fbx
- http://terminatorhc.50webs.com/y0bkw5hr
- http://twup.com.br/z12k0
- http://w5zz6gu77.homepage.t-online.de/golxykto
- http://www.autoservice-odenwald.homepage.t-online.de/29gubsj8
- http://www.desmitse.nl/tmuwcpav
- http://www.diacelalimentacion.es/xkiwfk7
- http://www.freerider.it/vm5483
- http://www.galleriacolonna.org/kpv1lg2x
- http://www.jacquesdalne.net/g438lq86
- http://www.jansen-consultancy-machines.be/wjhwnqm
- http://www.jramirez.com/9omwdsk
- http://www.liviazottola.it/pwa9ri7z
- http://www.lusignolo.com/xd9baodd
- http://www.opal.webserwer.pl/je19nms
- http://www.smoes.net/uo0bkz
- http://www.valmon.it/t9t8k956
- http://www.young-boys-hawisch.de/p0wg4e
- Added:
- http://archiwum-zzmk.cba.pl/6y35j
- http://jasper.ojaru.jp/vrwo3r
- Encrypted malware, filesize 138756:
- 8e4e66c35f54a125f3ac86cab87d2306374e06ad00de05f93c038b688b10d0f6 http___66.133.129.5_~kvas_dpgrl
- 08fb072c4ce39daedadc9a97b1199752d653b2b5042715228f28bbc9df477ee6 http___akristall.ru_7d16r
- 364fd3eb41981d5d74a03457755d9d9940fab145a5ea07beba9352e1cd0fde9d http___amrbouw.atspace.com_f9fwqw
- 368b50d23b89b0028e221eeb5c5d115855451758e3154f2f027aeeabbba37b9c http___andreysoloviev.ru_ltcnp
- 3212df34478658574f475c6d70581ef27f1c3c2b76cc27ee50bc7d0de4ff3c0c http___anotherstandard.com_ppdwguh
- a0265bedd1c358e3762e6a95d3fe193f43f207c12d5e13dc7de7ce8a76a5b65e http___arusoraku.web.fc2.com_64hmb
- 737497fa766dca356e3785238c41ca03036bda5f332a3a78ea711246c73f93b3 http___berndburgdorf.de_nkpsvbsy
- 296a34f2ff4b7f412ae016153796a55b9f030282f0ccdd24f66e6937c83b210b http___carallergyfilter.net_0l0py
- 15359ec3b0cbc7fe0dc3a6e5c66273000682c33f3f7ed924ca2ea5ea6488d236 http___cyobitshop.web.fc2.com_s8sfib
- 4c817fdfb4504023bd2c1c1b7d191fc7de66b6eec00c6323be72aa13d38db73b http___dancingb1.net.amis.hr_mqddi300
- da780f588370602321b6c1c99b37372f247f3ab19598d1a39745047b38a6eeee http___doklens.nl_2pp1bxn
- f8476719af9585b9b7ef6e8d9ef9cea558a3e2fcaba8ff981f7141fd02294599 http___hikmetakdemir.50webs.com_pd1a1az
- 6fcf1fcc572a6fa07bbb8934c406f3d8ff7829098ed978afeb31a0d0d183d46e http___kallait.szm.com_t6wq2
- 8ab00966380349f6e0785bac427ac47e54d760dd2047839be11f304b36dcedc6 http___logior.de_lu991yt
- 614bac88583a8f5117e3274ddb7d5925255e5c14a413e717f84ae14d6144ddb1 http___loneian.cz_puzig
- 5e4631451e5f98508fcb43bc6f68acaf1b2476b7ad61e8615c971077b8a46d39 http___pkgame.cba.pl_mj545ykg
- d70030a7a0cbe952c1afe6ed9903c22f883890d530039201c2fc43ac9dfa23c8 http___st-giraffe.homepage.t-online.de_x4fbx
- 6be5e391b8088e181c8d65b28fba74f16d185a7907469331221dbd7fb9cd70a4 http___terminatorhc.50webs.com_y0bkw5hr
- 94564ce5f96b3dafbe51bc66bea6bce8ed81475df2501b0223af5b09d1eb43e6 http___twup.com.br_z12k0
- 0acef7e8114b15cef3c4692c6734a5329f48190b1636542f0527ae0c1ca3fe41 http___w5zz6gu77.homepage.t-online.de_golxykto
- e1e654489954b1d2a000b3ef7b68c937c0dcfd9b689088d19a63fbff56df3bca http___www.autoservice-odenwald.homepage.t-online.de_29gubsj8
- 340e5aae311d657e0a622c71647bcb3334d2ff742c07b70515fb6c18e270d2ff http___www.desmitse.nl_tmuwcpav
- ca72f5b94eac333ce312fed64444baeaabac050f66c7f866054c63ceee26f2a5 http___www.diacelalimentacion.es_xkiwfk7
- a914353a0b67f4c10c1dc32ab54e1571911c0bc404b35253019edb25c5a683e4 http___www.freerider.it_vm5483
- 1b0e1c7cd90883e05cf5683de344b1c13ea9f2d104a85b98ec54c19ff08df0fd http___www.galleriacolonna.org_kpv1lg2x
- 43908a407e7575adc4123434d7663281849432084d63e8cd91f2f23c01847082 http___www.jacquesdalne.net_g438lq86
- 3ab9eebccfd3f98aaae515533c104dd36d35c0a6d409121c1cff5321bc79faa0 http___www.jansen-consultancy-machines.be_wjhwnqm
- 8a749ece4b59b450df8fa9d49e40cf26810ab723e1e065c916e99dd48eac1118 http___www.jramirez.com_9omwdsk
- a4ab84d5c08326221d0b51865eaf7f24f6c661e9e204f44dde97febf06008e9d http___www.liviazottola.it_pwa9ri7z
- 5d4bb14ff2f5f9b8aa97fab9ef39ed14a76c38a1b506a25956a50ee062a11369 http___www.lusignolo.com_xd9baodd
- 8516b0071f4869614822c5ee9171f55008a6e9b508aa112ff9ddb18ded1bad18 http___www.opal.webserwer.pl_je19nms
- a353e8f6ed9ea5dd615a7ccfe3b30d9c7bcc6d230765b1572aff4f7d320b1a9d http___www.smoes.net_uo0bkz
- d8f997d9e457874d94fb412150c10e9a5369d719dc5ee978e1728c72b0a2740c http___www.valmon.it_t9t8k956
- 856c5a98b7e46537f11c55dacfa8a1110af0e1bcdf9cd0bc242afca17dcd3b89 http___www.young-boys-hawisch.de_p0wg4e
- Added:
- 2dfca70707bf1aa31c8c3a10d14a254550d2c9ed48dabca9324b780e85a63eee http___archiwum-zzmk.cba.pl_6y35j
- f25dc9802fae7ed6384d37c8ac130545855613f3d5b27835ec48bdab4576a5c1 http___jasper.ojaru.jp_vrwo3r
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement