ExecuteMalware

2021-07-30 BazarCall IOCs

Jul 30th, 2021
16,076
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.74 KB | None | 0 0
  1. THREAT ATTRIBUTION: BAZARCALL
  2.  
  3. SUBJECTS OBSERVED
  4. Car accident demand notification
  5. Crucial notice! Abandoned place of vehicle accident
  6. L0#########
  7. Motor vehicle accident report
  8.  
  9. SENDERS OBSERVED
  10.  
  11. LURE PHONE NUMBER
  12. +1 646 980 6856
  13.  
  14. EMAIL BODY
  15. Meagher Insurance company
  16. Re: Left site of vehicle accident on 07.22.2021
  17. Request No.: L0#########
  18.  
  19. Greetings, dear <First> <Last>,
  20. This notification is accepted as an authenticated notice that bank payment is being requested from for the automobile accident that has taken place on 07.22.2021. The total demand amount, with direct payments included, is $346.87
  21. Kindly give us a phone call at +18646298056856
  22. Monday to Friday from 9 am to 6 pm. Our customer support will assist you in getting the complete info on the vehicle accident along with videos, images of the vehicle plate, and all the other sensitive information about this certain scene.
  23. As it was highlighted before the location of a automobile accident was abandoned. By following our insurance company's policy, we'll have to report this vehicle accident to the police after 3 days, please give us a phone call as soon as you can to take care of this inconvenience.
  24.  
  25. Thank you,
  26. Meagher Insurance company
  27.  
  28. MALDOC LANDING PAGES
  29. https://meagherinsurance.net/
  30. https://meagherinsurance.net/case
  31.  
  32. MALDOC DOWNLOAD URL
  33. https://meagherinsurance.net/download.php
  34.  
  35. BAZARCALL MALDOC FILE HASHES
  36. case_L0277271758.xlsb
  37. bca5d2db1447e42e8d2d22d8bbb4378e
  38.  
  39. BAZARLOADER PAYLOAD DOWNLOAD URL
  40. http://185.158.250.200/index.php
  41. http://185.158.250.200/main.php
  42.  
  43. BAZARLOADER PAYLOAD FILE HASHES
  44. I was filtered from getting the payload DLL.
  45.  
  46. BAZARLOADER C2
  47. N/A
  48.  
Advertisement
Add Comment
Please, Sign In to add comment