2020-06-10 Stealer IOCs

SENDERS
office@parkmart.bg

SUBJECTS
swift payment week 1

MALDOC FILE HASH
IMG20200906.ppt
1a26cded6543d7e9e2a77def50854664

STEALER PAYLOAD FILE HASHES
960d9f5926917093307becf0962970f5
86c693abab750424e82e890c45861429

STEALER PAYLOAD LANDING PAGE
http://j.mp/bulbulbulkilolkokovko

STEALER PAYLOAD URLS
https://pastebin.com/raw/J4z0yv0p
http://pastebin.com/raw/xVUCCEeh
https://pastebin.com/raw/HQfpGJee
https://pastebin.com/raw/gys5e31w

SUPPORTING EVIDENCE
https://www.virustotal.com/gui/file/e4d14ba73670184066a00cf5d3361580f6c4fbc5d0862a90278d82e95426faa5/details
https://bazaar.abuse.ch/browse.php?search=960d9f5926917093307becf0962970f5