ExecuteMalware

2020-10-20 Bazar IOCs

Oct 20th, 2020 (edited)
3,460
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.07 KB | None | 0 0
  1. THREAT ATTRIBUTION: BAZAR
  2.  
  3. SUBJECTS OBSERVED
  4. RE: <Company Name> Employee Survey
  5. RE: Confirmation Required
  6.  
  7. SENDERS OBSERVED
  8.  
  9. BAZAR PAYLOAD FILE HASHES
  10. Report-Review20-10.exe
  11. 41a2679eebd337096f285f29b0a7ff4c
  12.  
  13. DIGITAL SIGNATURE
  14. NOSOV SP Z O O
  15.  
  16. LANDING PAGE URLS
  17. https://docs.google.com/document/d/e/2PACX-1vR9eQbtqqQvUQRxqKrWeg7ZtduxOAK0rVWkiatZ3f6Fr7H_tYVrIKbEgtcwkO2tk9Pbq_A3K2MpZbu9/pub
  18. https://docs.google.com/document/d/e/2PACX-1vSpTpo1NZmX2GJVMWeQyl4a5wg3LbIo1Gkn_woY__HRU6lGSflycZScqRG4VU6bSd3SOxLs1yHoRqPk/pub
  19.  
  20. PAYLOAD DOWNLOAD URLS
  21. https://files.slack.com/files-pri/T01DBJ7HSHF-F01CW2GTLCD/download/report-review20-10.exe?pub_secret=8caac895e5
  22.  
  23. BAZAR C2
  24. UNKNOWN
Add Comment
Please, Sign In to add comment