API tools faq
paste
pandazheng

2021-04-15 BazarCall IOCs

pandazheng
Apr 15th, 2021
190
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.57 KB | None | 0 0
raw download clone embed print report diff
  1. THREAT IDENTIFICATION: BAZARCALL
  2.  
  3. SENDER EMAILS
  4. [email protected]
  5.  
  6. SUBJECTS
  7. 0413########. All set to go for a premium plan?
  8.  
  9. LURE PHONE NUMBER
  10. +1 816 307 4271
  11.  
  12. MALDOC LANDING PAGE URLS
  13. https://readebook.us
  14.  
  15. MALDOC DOWNLOAD URLS
  16. https://readebook.us/request.php
  17.  
  18. MALDOC (XLSB) FILE HASHES
  19. subscription_1618516110.xlsb
  20. d2edbd5bd63e2f84ab746886e3b99f74
  21.  
  22. PAYLOAD DOWNLOAD URLS
  23. UNKNOWN
  24.  
  25. ADDITIONAL DROPPED FILES
  26. 105011.oop
  27. 3c79791ee7bbb25eb4139886bb27038d
  28.  
  29. 105011.xlsb
  30. 3c79791ee7bbb25eb4139886bb27038d
  31.  
  32. 105011.gof
  33. 2ecee3dd510442f9b28d62a339a6b7a0
  34.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!