SHARE
TWEET

2017-08-11 Locky ""Emailing: xxxxxxxxx.pdf""

Racco42 Aug 11th, 2017 316 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 2017-08-11: #Locky email phishing campaign "Emailing: xxxxxxxxx.pdf"
  2. Samples: 519
  3.  
  4. Email sample:
  5. -----------------------------------------------------------------------------------------------------------------
  6. From: "Armand" <Armand@[REDACTED]>
  7. To: [REDACTED]
  8. Subject: Emailing: 970037364.pdf
  9. Date: Fri, 11 Aug 2017 23:02:19 +0700
  10.  
  11. Your message is ready to be sent with the following file or link
  12. attachments:
  13.  
  14. 970037364.pdf
  15.  
  16.  
  17. Note: To protect against computer viruses, e-mail programs may prevent
  18. sending or receiving certain types of file attachments.  Check your e-mail
  19. security settings to determine how attachments are handled.
  20.  
  21. Attachment: 970037364.zip -> 20170811820.pdf
  22. -----------------------------------------------------------------------------------------------------------------
  23. - sender address is forged to look like coming from recepient's domain
  24. - subject is "Emaling: <9-12 digits>.pdf"
  25. - attached file "<8-12 digits>.zip" contains file "20170811<3 digits>.pdf", which contains embedded MS Word macro-enable file which will download malware
  26.  
  27. Download sites and malware is same in https://pastebin.com/V2FbZHXb
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
Top