SHOW:
|
|
- or go back to the newest paste.
| 1 | *Email sample* | |
| 2 | ||
| 3 | - | _Subject_: Final version of the report |
| 3 | + | _Subject_: Problems with item delivery, n.XXXXXXXXXXX |
| 4 | ||
| 5 | _Body_: | |
| 6 | ||
| 7 | - | Dear [NAME], |
| 7 | + | Dear Customer, |
| 8 | ||
| 9 | - | Lance Davis asked me to send you the attached Word document, which contains the final version of the report. |
| 9 | + | We could not deliver your item. |
| 10 | - | Please let me know if you have any trouble with the file, and please let Lance know if you have any questions about the contents of the report. |
| 10 | + | Please, download Delivery Label attached to this email. |
| 11 | ||
| 12 | Kind regards, | |
| 13 | - | Kind regards |
| 13 | + | Neil Osborn, |
| 14 | Operation Manager. | |
| 15 | - | Faith Leonard |
| 15 | + | |
| 16 | - | Chief Executive Officer |
| 16 | + | |
| 17 | In attachment a zip archive with a javascript file. | |
| 18 | ||
| 19 | ->Nemucod PHP variant<- | |
| 20 | ||
| 21 | - | Javascript sample - MD5: c4b65cb100b08a3e3b366ccf7c161dc9 |
| 21 | + | Javascript sample - MD5: 5483fbf4d4a7810b6a887403b4f85c5a |
| 22 | - | VT: 1/55 - https://www.virustotal.com/en/file/3fe9169a286bcedc3c7ba1da0160dded07af0540211ed32c6144cc4435f4a42e/analysis/ |
| 22 | + | VT: 9/55 - https://virustotal.com/en/file/b3e3f40ab35c55ea3c50c55ca9f0229252e54027378f99131db7f429e08e23ee/analysis/ |
| 23 | ||
| 24 | - | *Compromised domains (49)*: |
| 24 | + | Distribution sites: |
| 25 | ||
| 26 | - | 3141592.ru/ wyesvj |
| 26 | + | xn--69-6kcia4af1cchlv\.xn--p1ai |
| 27 | - | 4k18.com/ u69f97 |
| 27 | + | www.website43\.ru |
| 28 | - | aberfoyledental.ca/ 6dil05 |
| 28 | + | xn--80adehatavpchebumw6c5a1f\.xn--p1ai |
| 29 | - | abligl.com/ 8v62l4i4 |
| 29 | + | xn----7sbabh0bdoslin5s\.xn--p1ai |
| 30 | - | adbm.co.uk/ 1o2wejz |
| 30 | + | www.xn--80acysaebioq5f\.xn--p1ai |
