View difference between Paste ID: NkvRcZ0m and sKScRRZV
SHOW: | | - or go back to the newest paste.
1-
[]
1+
[Formbook 09052018]
2
==
3
4-
[][1]
4+
Main object- "sales4me.exe"
5-
[1]: 
5+
	sha256	71732f6a692b3a351690c54ca8ac75420939aeadc39b2b68aaca896aed143782	
6
	sha1	99ad84908ad50161909cfb0f5fcf7c62b038bb88	
7-
[]
7+
	md5	cf77073ac819fd7afece721af84bdb00	
8
9
[https://app.any.run/tasks/3d9fa754-fd72-4552-a356-92089d73b808][1]
10
[1]:https://app.any.run/tasks/3d9fa754-fd72-4552-a356-92089d73b808 
11
12
[Formbook Download from RTF doc]
13
--
14
trendingbrandedlookover.com/osas/sales4me.exe
15
16
[Formbook C2 Domains]
17
--
18
www.honddal.com
19
www.1024hhhr.info
20
www.bdmjxl.com
21
www.energievoorhetleven.net
22
www.gsaserlinklist.download
23
www.voipchain.tech
24
www.riyalic.com
25
www.iwlaser.com
26
www.escrivividora.com
27
www.r499cr.link
28
www.wtbff.info
29
www.minidumpero.com
30
www.casiildot.com
31
www.guokevc.com
32
www.lagomcocoon.com
33
www.brttkorea.com
34
35
36
37
***
38
![Pastebin Logo][image]
39
40
[image]: https://zerophagemalware.files.wordpress.com/2017/09/zerophageicon2.png