2021-04-07 BazarCall IOCs

THREAT IDENTIFICATION:  BAZARCALL

SENDER EMAILS
chefnamursi@yahoo.com
debrapsoadic1996@yahoo.com
no-reply@worldbookpoint.com
pulprecvira1984@yahoo.com
sararibat@aol.com
singhsmutunul80@yahoo.com
tinadolam@aol.com
veronicacongnoces1982@yahoo.com

SUBJECTS
Your current premium demo ends in 24 hours 0407#########
Your current premium plan demo comes to an end in 48 hours 0407#########
Your current premium plan demo expires in 24 hours 0407#########
Your current premium plan trial comes to an end in 48 hours 0407#########
Your current premium trial comes to an end in 24 hours 0407#########
Your current premium trial expires in 48 hours 0407#########
Your premium demo ends in 24 hours 0407#########
Your premium demo ends in 24 hours 0407#########
Your premium demo expires in 1 day 0407#########
Your premium plan demo comes to an end in 1 day 0407#########
Your premium plan demo ends in 24 hours 0407#########
Your premium plan demo ends in 24 hours 0407#########
Your premium plan demo ends in 3 days 0407#########
Your premium plan demo ends in 3 days 0407#########
Your premium trial comes to an end in 3 days 0407#########

LURE PHONE NUMBER
+1 929 224 5129
+1 901 584 0490
+1 816 307 4271
+1 909 741 1518

MALDOC LANDING PAGE URLS
https://bookpoint.us
https://bookspoint.us
https://pointbook.us
https://pointbooks.us
https://subsbookpoint.us

bookpoint.us
bookspoint.us
pointbook.us
pointbooks.us
subsbookpoint.us

MALDOC DOWNLOAD URLS
https://bokpoint.xyz/unsubscribe
https://bokspoint.xyz/unsubscribe
https://pointbok.xyz/unsubscribe
https://pointboks.xyz/unsubscribe (down)

bokpoint.xyz
bokspoint.xyz
pointbok.xyz
pointboks.xyz

MALDOC (XLSB) FILE HASHES
0cdbb13bee293bc76871ab81e019930e
8e1cdb7400d9743032e4a85721231519
d14a8f12b56c25e48bee497f91a4c4be
ea9ba57db7701e9d59284522367b7482

PAYLOAD DOWNLOAD URLS
http://basket2.xyz/campo/u/u1