2021-07-30 BazarCall IOCs

THREAT ATTRIBUTION:  BAZARCALL

SUBJECTS OBSERVED
Car accident demand notification
Crucial notice! Abandoned place of vehicle accident
L0#########
Motor vehicle accident report

SENDERS OBSERVED
alfiedustrere39@aol.com
andreadawnlike8@aol.com
dikathnily2001@gmail.com
dreak5a@mail.com

LURE PHONE NUMBER
+1 646 980 6856

EMAIL BODY
Meagher Insurance company
Re: Left site of vehicle accident on 07.22.2021
Request No.: L0#########

Greetings, dear <First> <Last>,
This notification is accepted as an authenticated notice that bank payment is being requested from for the automobile accident that has taken place on 07.22.2021. The total demand amount, with direct payments included, is $346.87
Kindly give us a phone call at +18646298056856
Monday to Friday from 9 am to 6 pm. Our customer support will assist you in getting the complete info on the vehicle accident along with videos, images of the vehicle plate, and all the other sensitive information about this certain scene.
As it was highlighted before the location of a automobile accident was abandoned. By following our insurance company's policy, we'll have to report this vehicle accident to the police after 3 days, please give us a phone call as soon as you can to take care of this inconvenience.

Thank you,
Meagher Insurance company

MALDOC LANDING PAGES
https://meagherinsurance.net/
https://meagherinsurance.net/case

MALDOC DOWNLOAD URL
https://meagherinsurance.net/download.php

BAZARCALL MALDOC FILE HASHES
case_L0277271758.xlsb
bca5d2db1447e42e8d2d22d8bbb4378e

BAZARLOADER PAYLOAD DOWNLOAD URL
http://185.158.250.200/index.php
http://185.158.250.200/main.php

BAZARLOADER PAYLOAD FILE HASHES
I was filtered from getting the payload DLL.

BAZARLOADER C2
N/A