Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Agreement-of-Sale.zip
- major.exe
- Formbook
- AnyRun: https://app.any.run/tasks/21cc2022-4816-4ee6-806b-10cc9cd4d43d
- Domains:
- tv17260[.]info
- wedi[.]ltd
- fotostudiobrugge[.]com
- seedsofgreen[.]net
- lifeatthelanding[.]com
- gzakyy[.]com
- gan915[.]com
- IPs:
- 217[.]19[.]237[.]54
- 206[.]188[.]192[.]94
- 107[.]183[.]183[.]57
- nass.exe
- Formbook ??
- AnyRun: https://app.any.run/tasks/385747ef-c537-48f4-acac-167b077ebdff
- Domains:
- ankaramerkezservisleri[.]com
- covzin[.]com
- tstryout[.]com
- tksmediaservices[.]com
- illmakeufit[.]com
- riverfronthemp[.]com
- hvwrb[.]info
- aspolycraft[.]com
- IPs:
- 199[.]192[.]23[.]156
- 103[.]224[.]212[.]222
- 93[.]89[.]226[.]17
- 173[.]194[.]72[.]121
- 184[.]168[.]221[.]59
- new.exe
- Lokibot
- Anyrun: https://app.any.run/tasks/3d07b705-201e-4ab5-ad1e-2a6e9d0a751c
- Domains:
- avertonbullk[.]com
- IPs:
- 31[.]184[.]253[.]234
- orig.exe
- Agent Tesla
- AnyRun: https://app.any.run/tasks/004e15db-720c-44ac-90c8-119017d7750d
- Maildomain: smtp.yandex.com
- TLS encrypted no pass or user
- origin.exe
- Wouldn't Run
- pato.exe
- Agent Tesla
- AnyRun: https://app.any.run/tasks/36fa1c21-ce26-48b5-8a6a-e50326ced596
- Maildomain: smtp.yandex.com
- TLS encrypted no pass or user
