SHOW:
|
|
- or go back to the newest paste.
| 1 | THREAT IDENTIFICATION: BAZARCALL | |
| 2 | ||
| 3 | SENDER EMAILS | |
| 4 | [email protected] | |
| 5 | ||
| 6 | SUBJECTS | |
| 7 | 0413########. All set to go for a premium plan? | |
| 8 | ||
| 9 | LURE PHONE NUMBER | |
| 10 | +1 816 307 4271 | |
| 11 | ||
| 12 | MALDOC LANDING PAGE URLS | |
| 13 | https://readebook.us | |
| 14 | ||
| 15 | MALDOC DOWNLOAD URLS | |
| 16 | https://readebook.us/request.php | |
| 17 | ||
| 18 | MALDOC (XLSB) FILE HASHES | |
| 19 | subscription_1618516110.xlsb | |
| 20 | d2edbd5bd63e2f84ab746886e3b99f74 | |
| 21 | ||
| 22 | PAYLOAD DOWNLOAD URLS | |
| 23 | UNKNOWN | |
| 24 | ||
| 25 | ADDITIONAL DROPPED FILES | |
| 26 | 105011.oop | |
| 27 | 3c79791ee7bbb25eb4139886bb27038d | |
| 28 | ||
| 29 | 105011.xlsb | |
| 30 | 3c79791ee7bbb25eb4139886bb27038d | |
| 31 | ||
| 32 | 105011.gof | |
| 33 | 2ecee3dd510442f9b28d62a339a6b7a0 | |
| 34 |
