IOC Locky : 28/08/2027

### Locky campaign 28/08/2017 ###
# Infos
Tree: Zip archive > ZIP archive > script.
Script pattern: "[0-9]{9|11}.vbs"
Payload: https://www.hybrid-analysis.com/sample/cd7bcd1eeb24eafbb7ae5bc4147d0bf184af82c3b216f3b1da1384c80a110cad

# IOC

hxxp://ag.com/78wygGHDwf?
hxxp://garage-fiat.be/HGhj46?
hxxp://garythetrainguy.com/HGhj46?
hxxp://gasesysoldaduras.com/HGhj46?
hxxp://gbstamps4u.com/HGhj46?
hxxp://gel-batterien-agm-batterien.de/HGhj46?
hxxp://georgesbsim.com/HGhj46?
hxxp://germanshepherdpuppiescalifornia.com/HGhj46?
hxxp://gesamaehler.de/HGhj46?
hxxp://gewinnspiel-sachsenhausen.de/HGhj46?
hxxp://ggcadiz.com/HGhj46?
hxxp://gigaga.de/HGhj46?
hxxp://ginnungagap.net/HGhj46?
hxxp://gioiellidelmare.it/HGhj46?
hxxp://giselacentrodedanza.com/HGhj46?
hxxp://givensplace.com/HGhj46?
hxxp://glendoradrivingandtraffic.com/78wygGHDwf?
hxxp://global-stern.com/HGhj46?
hxxp://glostrap.com/78wygGHDwf?
hxxp://gmcint.com/HGhj46?
hxxp://goldenspikerails.net/HGhj46?
hxxp://gotcaughtdui.com/78wygGHDwf?
hxxp://gousiaris.gr/HGhj46?
hxxp://gpsgeneo.com/HGhj46?
hxxp://graficasicarpearanjuez.com/78wygGHDwf?
hxxp://grafosdiseno.es/HGhj46?
hxxp://granitodeoro.es/HGhj46?
hxxp://greatesthits.mygoldmusic.com/HGhj46?
hxxp://griffithphoto.com/78wygGHDwf?
hxxp://grlarquitectura.com/78wygGHDwf?
hxxp://grossklos.de/78wygGHDwf?
hxxp://gruporoados.com/78wygGHDwf?
hxxp://gruppostolfaedilizia.it/78wygGHDwf?
hxxp://guestbook.secraterri.com/78wygGHDwf?
hxxp://hendrikvankerkhove.be/78wygGHDwf?
hxxp://informatica.com/78wygGHDwf?