Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- THREAT ATTRIBUTION: ZLOADER
- SUBJECTS OBSERVED
- Invoice number 5785 info
- Nov. Service Invoice
- You have Customer Invoice number 2535
- Your Incoming Invoice
- SENDERS OBSERVED
- allencarol860@aol.com
- millerbetty86@aol.com
- kulakov.97@aol.com
- robertsrobert12@aol.com
- EXCEL FILE HASHES
- e3d5acb66464b3059b50ac72202aff64
- 2a41ca4ae24eb91c03c3dce10d402f96
- EXCEL FILE NAMES
- Pay_5785.xls
- order-3327.xls
- Pay_2535.xls
- ZLOADER PAYLOAD URLS
- https://leadingpips.com/crypt.php
- https://mobitel-servis.si/vendor.php
- https://sadiahyat.com/scan.php
- https://www.localco.ae/wp-scan.php
- leadingpips.com
- localco.ae
- mobitel-servis.si
- sadiahyat.com
- ZLOADER PAYLOAD FILE HASHES
- xS5r.txt
- d739f2a40c41d99855ed49ddff5cf5b3
- ZLOADER C2s
- https://agrospas.co.rs/wp-punch.php
- https://fnxcrypto.com/server.php
- https://lywakelireal.ga/wp-smarts.php
- https://maschuquisaca.tk/wp-punch.php
- https://nature4health.id/wp-punch.php
- https://serproimsas.com/wp-punch.php
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
