Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- THREAT ATTRIBUTION: TRICKBOT
- SUBJECTS OBSERVED
- Past_due_payment request_1305141
- Past_due_reminder_1841084
- Tardy_notification_7567057
- SENDERS OBSERVED
- shauntel@talbertsmedical[.]com
- MALDOC FILE HASHES
- Reminder_1305141.xls
- 4507dd1b700e5dff8390a002fb9af352
- Document_7567057.xls
- bbd57324ce7dd4f03fb0d76a1df4cb90
- TRICKBOT PAYLOAD URLS
- hxxp://198[.]46[.]198[.]11/ipA2Rn8FCh6b[.]php
- hxxp://51[.]89[.]177[.]17/34fhjdgEN3voc6[.]php
- SUPPORTING EVIDENCE
- https://urlhaus.abuse.ch/browse.php?search=http%3A%2F%2F198.46.198.11%2FipA2Rn8FCh6b.php
- https://urlhaus.abuse.ch/browse.php?search=http%3A%2F%2F51.89.177.17%2F34fhjdgEN3voc6.php
Add Comment
Please, Sign In to add comment
