2020-08-20 TA505 IOCs

TA505 IOCs

SUBJECTS OBSERVED
Natalie Clark shared "Corrected PO66748 - AUG2020" with you.
Natalie Clark shared "Corrected PO27654 - AUG2020" with you.
Natalie Clark shared "Corrected PO18063 - AUG2020" with you.

SENDERS OBSERVED
biuro@psgeo.pl
postmaster@cocn.co.kr
reklamace@nabytekmagenta.cz

MALDOC FILE HASH
Corrected PO38051 - AUG2020.xls
d9de0b08b868d994417a5c931b5d1f93

PAYLOAD FILE HASH
None

MALDOC LANDING PAGE URLS
http://assostudiosrl.it/mh3oug0.html
http://bascole.nl/kl7rfy.html
http://bootsstation-reiherhals.de/fvrm.html
http://col-med.com/kxeoqt1.html
http://cotas.co.uk/qzz8.html
http://cs-kn.de/jptffv.html
http://cue4you.nl/sctho.html
http://deechtebol.com/pjcj.html
http://diesilberamis.meeriwelt.de/dcw3.html
http://grandeweddings.com/g94yx.html
http://jav.ee/u8xr2da.html
http://jsfactory.net/q5ys9kt.html
http://lapinmuistomerkki.fi/necl.html
http://madeleinekrook.nl/iqiklp.html
http://mladez.webzdarma.cz/pdsbw1.html
http://reachtherapyllc.com/1q0hts9.html
http://redir9.alteabz.it/efs5ub.html
http://safaursevilla.com/zhy965l.html
http://smarine.mu/iv60t3.html
http://smitt.nl/vnhv.html
http://takeoneaudio.jp/2byx.html
http://victorlutte.cl/v4hyl8.html
http://www.bluecrabhosting.co.uk/dkk23.html
http://www.ozonatory24.pl/~ozonator/8497s5v.html

assostudiosrl.it
bascole.nl
bluecrabhosting.co.uk
bootsstation-reiherhals.de
col-med.com
cotas.co.uk
cs-kn.de
cue4you.nl
deechtebol.com
diesilberamis.meeriwelt.de
grandeweddings.com
jav.ee
jsfactory.net
lapinmuistomerkki.fi
madeleinekrook.nl
mladez.webzdarma.cz
ozonatory24.pl
reachtherapyllc.com
redir9.alteabz.it
safaursevilla.com
smarine.mu
smitt.nl
takeoneaudio.jp
victorlutte.cl

MALDOC DISTRIBUTION URLS
https://one-drives.com/download.php

TA505 C2s
see-back.com