Locky "list of activities"

2016-07-26 #locky email phishing campaign "list of activities"
ref: http://blog.dynamoo.com/2016/07/malware-spam-list-of-activities-leads.html

http://akva-sarat.nichost.ru/bokkdolx
http://alanakamine.com.br/wnp98we4
http://anttention.tv/xl5pz72q
http://beautifulhosting.com.au/o2quvvbq
http://biovinci.com.br/ux3i84lv
http://bisericaromaneasca.ro/0ttiak
http://bobbysinghwpg.com/1fh58s
http://brasconsult.ru/hmhsrda
http://candobetter.net/zu7eu
http://clinic.gov.ua/lvzceu0
http://darkhollowcoffee.com/5yppf0xu
http://darkhollowcoffee.com/fpzxu6kv
http://dreamfleet.ru/7q3hffm2
http://enexp.ru/75e2r8
http://fotografuj.pl/m0dscybb
http://gp-logistics.ru/9g8hct
http://heonybaby.synology.me/urc4zqpo
http://keven.site.aplus.net/7edknu6k
http://krvrn2.bget.ru/ctzmjgp
http://madiv.ru/qdxed
http://mindfocus.com.br/utyr4d
http://mobile-kontent.com/6tybhy7w
http://mylimajai.lt/rnpkuoj
http://mystyleparrucchieri.com/yfgsk24
http://nolwo.ru/mwxt4
http://openspace.pro/99g06u
http://psclimat.ru/qn3xh3
http://redpower.com.au/11crg
http://relive-clean.ru/d4ahlxa
http://rom-stroy.ru/8w08utn
http://sancompany.ru/qgdtb
http://schlebach.25mm.ru/hwb19
http://sigovka.ru/dc60xx1
http://siteriqi.bget.ru/rjdaod
http://stroymonolit.su/ikrkz88y
http://sveikata-jums.lt/sn9gp21
http://tvoy-android.com/jlel0f
http://u2319351.plsk.regruhosting.ru/cwqwg8qt
http://wordpress.pro-tiler.ru/4uqshme
http://zobov.org.ua/ibei9t

Downloads (encrypted malware):
f9eef2d9d40bfa21fd2100ddce66e7e154222469d4783ebf1d11aa04612d8e53  http___akva-sarat.nichost.ru_bokkdolx
f7b8648aa6c12d0459dd50abb5a5bcce8276ac7fc2de4d13e9beaa16574f9f30  http___anttention.tv_xl5pz72q
0333fbcc2e584ce625f92c40c1be0c8167205ef441febc8308362034932ba341  http___beautifulhosting.com.au_o2quvvbq
32a1a573cf53092be4f6798ca0a4cbb8f8b8f0746f48f53ff03774ae15d0546e  http___biovinci.com.br_ux3i84lv
acaaadc4b9bf3515631a997c1835c3629a709bc240de4414571d9ffd9b17734f  http___bisericaromaneasca.ro_0ttiak
4e0bea39b83553f7729d1965ba5ec36ba9930e70adc22e197784b79c96ef4c19  http___brasconsult.ru_hmhsrda
28ee39f8558643f243df42794b3fae47a951ac09e19cadd19f7b9a6017bbed38  http___clinic.gov.ua_lvzceu0
354c2e03203bb10ccdfb3edf5092e6b31c84def8739e5c1ed464976c55b57c85  http___dreamfleet.ru_7q3hffm2
1ffe052bff55d1abe72acd1bb04fe3e8a8519503455e04d31ef783e7119c7c26  http___fotografuj.pl_m0dscybb
e7dee0b78d5ff882f834c0b8287a5a3c49d2c0f1ce9c7012f31df20c7d7511c8  http___gp-logistics.ru_9g8hct
02ab66036b6e64aa0eb12e6d1ecc7c31af6658f1e0519cfe751d1da8ed833884  http___heonybaby.synology.me_urc4zqpo
0537fde9ec5acda3fbfca7b3084e2da0883872d95da119c8d5a3601e5583561f  http___madiv.ru_qdxed
17ed96122f9fe5fb5f0166b2ebae8663db11904a8975dd3ae2c79acd5d582151  http___mindfocus.com.br_utyr4d
6b80813fe379dc863fa3bc05946184aad6f9de0954b246f4f6f2ffd177dd4d3d  http___mobile-kontent.com_6tybhy7w
1079569210ebb4a69695d1c6db6e2f777e1b053be8f72f36bab53e5b620325fc  http___mylimajai.lt_rnpkuoj
c37b7da530bfd4c5b330158e2ba518b70a36b01b5809bde224964808e4180815  http___mystyleparrucchieri.com_yfgsk24
09453038d173fbc0fa4964b5f6d3e2bb628c4fe6afdbd3d8eec11963a64413da  http___nolwo.ru_mwxt4
f3d109f9c1d73c667de12a76dff200f4eb4008ff34d39ddb217692c3357f44d8  http___redpower.com.au_11crg
b881b2de256170116e1bb9066a262e03d9e36861f18779bee445c6f113823f7a  http___rom-stroy.ru_8w08utn
3a0139effc8c46b48e0be9213da0740bdf37a92bb97b0161dfbd7e51a5ecf5cf  http___schlebach.25mm.ru_hwb19
249a381fa11bcf5bf835661cb318b87ae0c8c088d03e1e045ff14cda26f75e5d  http___sigovka.ru_dc60xx1
a52ccf82b82fbc21d946bb662b5fdb48b4ff8114c0fe5f0ad571d63adc2ff47d  http___siteriqi.bget.ru_rjdaod
f08213bc69082f478febb5d2869c815b505c5026af926f7eb56d0743b23abebe  http___stroymonolit.su_ikrkz88y
c1e3520257771f79ee7d60d0bc4cf17b34a3e5fcf6d4f5b7b5af83e9af91defc  http___sveikata-jums.lt_sn9gp21
05cc5d6462e8f0bd676cb775acbecba8d53abd23fdac57389bc58762789a943f  http___wordpress.pro-tiler.ru_4uqshme