locky 10-19-2017

################# subject: "Emailed Invoice - nnnnnn" #######################
DDE linked download:
hxxp://alexandradickman.com/KJHDhbje71
hxxp://arkberg-design.fi/KJHDhbje71
hxxp://ryanbaptistchurch.com/KJHDhbje71

Payload URLs:
hxxp://shamanic-extracts.biz/eurgf837or
hxxp://centralbaptistchurchnj.org/eurgf837or
hxxp://conxibit.com/eurgf837or
hxxp://shamanic-extracts.biz/eurgf837or

d2cca5f6109ec060596d7ea29a13328bd0133ced126ab70974936521db64b4f4

####multiple subjects: "Paper", "Document", "Documents", "Order", "Scanned document", "Scan", "Receipt", "invoice", "DC000NNNN.doc"####
DDE linked download:
hxxp://missinglynxsystems.com/hjergf76
hxxp://pdj.co.id/hjergf76

Payload URLs:
hxxp://deltasec.net/jnoiuy876g
hxxp://pac-provider.com/jnoiuy876g
hxxp://arkberg-design.fi/jnoiuy876g
hxxp://basedow-bilder.de/jnoiuy876g
hxxp://hair-select.jp/jnoiuy876g

C2 POST:
gdiscoun.org
axtes.com