Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Document download link: hxxp://gslegno[.]com/De_de/MSLDAMBXHP4663794/DE_de/Fakturierung
- Document md5:3a25f7c3861531ef2b0caac1a3ef0b79
- == Powershell / Macro Domains ==
- hxxp://shashlichnydom[.]ru/NbEDRSsyiy_Rl2
- hxxp://wolf[.]camera/jkeU0iK6Mf8v_dy0Ad
- hxxp://www[.]marekvoprsal[.]cz/s1yTiin0l_AUP
- hxxp://www[.]eufacopublicidade[.]com[.]br/ULxnLcrzzz4E
- hxxp://londonmarathon2019[.]kevinmiller66[.]co[.]uk/9bT6FbyqID9O9B
- hxxp://emploired[.]com/}pFvWHkpIOZ0Sl89_qI
- hxxp://hoanglonglightng[.]com/03q47xywwOugYVF
- hxxp://brazenfreigt[.]co[.]za/eFNCAwCOCUbf_lTFb
- hxxp://cbd-planet[.]c/7ON6ZtCGM_Wv
- hxxp://foldio360[.]nl/kS}atJQy5U
- Emotet md5:15540ff28e1cfcfdb68ed1d321de8dff
- Emotet C2: 67[.]254[.]13[.]154:80
- Autostart Location:
- HKLM\System\CurrentControlSet\Services\svcswithout
- HKU\...\Software\Microsoft\Windows\CurrentVersion\Run\tuipalaska
- Path:
- C:\Windows\System32\svcswithout.exe
- C:\Users\<username>\AppData\Local\tuipalaska
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement