SHARE
TWEET

2016-12-12 Locky "New(xxx)"

Racco42 Dec 12th, 2016 256 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 2016-12-12: #locky email phishing campaign "New(xxx)"
  2. http://blog.dynamoo.com/2016/12/malware-spam-new910-leads-to-locky.html
  3.  
  4. Email sample:
  5. ---------------------------------------------------------------------------------------------------------------
  6. From: "Tonia" <Tonia877@[REDACTED]>
  7. To: [REDACTED]
  8. Subject: New(63)
  9. Date: Mon, 12 Dec 2016 17:21:53 +0700
  10.  
  11. Scanned by CamScanner
  12.  
  13. Sent from Yahoo Mail on Android
  14.  
  15. Attachment: New(63).docm
  16. ---------------------------------------------------------------------------------------------------------------
  17. - sender varies between emails, but sender domain is faked to be same as recipient's
  18. - subject is "New(<1-3 digits>)"
  19. - attached file "New(<1-3 digits>).docm" (same as in the subject line) is Microsoft Word file containing macro that will download the malware
  20.  
  21. Download locations, malware etc. is same as for "Attached, Copy, Emailing, File" campaign http://pastebin.com/7rvsVkSN
RAW Paste Data
Pastebin PRO BLACK FRIDAY Special!
Get 60% OFF on Pastebin PRO accounts!
Top