Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Phishing campaign uses MSI file to disseminate banking malware in Brazil
- IOCs
- Network
- 209.159.149.195
- hxxps: //bitly.com/2HENdA6
- hxxp: //bit.ly/2K80dQz
- hxxp: //ec2-54-94-178-251.sa-east-1.compute.amazonaws.com/softwares/VisualStudio / hxxps: //s3.amazonaws.com/manager2020/Valve.zip hxxps: //s3.amazonaws.com/manager2020/EXTRAIR+COMPLETE.zip
- Files (sha256)
- 8e2019a6336b57164314eb41fdf09f25a2fb33d61dee41339a02df106b96df8f 9e8c0a4953180b10b6bf15a44fbc4e4a9ce0ab4764ddf3001845eeaca4fc30b5 3aa4d8373b205bc6a15ac17e88369a24e25a77e0a548d20e63f4c7a93e9ac772 9354757bbafbeea2c637426dca801d93f34a6fa43f99213b4d8672f49dc8fd68 f2a9547e167f04a49138ec0a86a6e2aa934e21326fee1cffd693484db1717d96 ddd396e03e23b3df33a0850643b7fe54274419dd06dfd1aa5b480c747bff9632 0815a80fa73286d8c6bf0982471c61833821d9f10a20612deaa134562e7a3cda
Add Comment
Please, Sign In to add comment