Locky 22/06/2017

XOR key: gIPkTavnm3kQXBJSK9viVtQt93loz0Gv
XORed payload hash: 7a6a6654e787a5e47d149b16c937972a0232b24c1b44d1a990abb710bdb88263
UnXORed payload hash: 858632df961a6d355abfe7eb090c96156d2206e9171ef07ef1857f016bf737c4

Locky payload delivery domains (22/06/2017):

hxxp://adityastudio.com/7gyjgg5r6
hxxp://aquareserve.com/7gyjgg5r6
hxxp://asathlon.it/7gyjgg5r6
hxxp://asman.railsplayground.net/7gyjgg5r6
hxxp://autobluelite.com/7gyjgg5r6
hxxp://blitzacademy.in/7gyjgg5r6
hxxp://brontorittoozzo.com/af/7gyjgg5r6
hxxp://chocolatesbazaar.com/7gyjgg5r6
hxxp://code-igniter.ro/7gyjgg5r6
hxxp://hrlpk.com/7gyjgg5r6
hxxp://i-school-tutor.com/7gyjgg5r6
hxxp://itbouquet.com/7gyjgg5r6
hxxp://malamalamak9.net/7gyjgg5r6
hxxp://melakatropical.com/7gyjgg5r6
hxxp://micolon.com/7gyjgg5r6
hxxp://randomessstioprottoy.net/af/7gyjgg5r6
hxxp://skyfling.com/7gyjgg5r6
hxxp://wowtech.org/7gyjgg5r6