locky 11-3-17

Subject: Scanned image from MX-2600N
Sample: https://www.hybrid-analysis.com/sample/f565ff19d4e0ac9ca104458bac2f776045f4c4e5694f57f91b019e1a2860dd90?environmentId=100

#word doc URLs
deltaled.es/lbMld6sGda
themollymalone.es/lbMld6sGda
watchez.biz/lbMld6sGda
comercialarques.es/lbMld6sGda
336.linux1.testsider.dk/lbMld6sGda

#locky payload URLs
hxxp://pabxconsultants.co.za/dhYtebv3
hxxp://san-syo.co.jp/dhYtebv3
hxxp://saranville.com/dhYtebv3
hxxp://pwmsteel.com/dhYtebv3
hxxp://visualindesign.be/dhYtebv3
hxxp://twonkygames.com/dhYtebv3
hxxp://evengrollighromsof.net/p66/dhYtebv3