API tools faq
paste
Guest User

Untitled

a guest
Jun 13th, 2018
1,555
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.15 KB | None | 0 0
raw download clone embed print report
  1. 13 Jun 2018 - Morning Malspam Mix
  2.  
  3. #Emotet
  4. Sender: Jubel3@bobmail.info
  5.  
  6. Document Download URL Subject Document Name
  7. --------------------- ------- -------------
  8. semadecon.com/IRS-TRANSCRIPTS-01/72/ Tax Return Transcript tax-transcript-01709_5.doc
  9. 24tube.tk/IRS-TRANSCRIPTS-062018-074/54/ IRS Tax Account Transcript from 06/13/2018 transcript-08-88406.doc
  10.  
  11.  
  12. =============================================================================================================================
  13. # .iqy attachment - final payload = FlawedAmmyy again?
  14. Attachment is "Subject.iqy"
  15. All .iqy files download the same files. Here is the flow:
  16. hxxp://brtt7.com/preload.gif (script) ---> hxxp://brtt7.com/load.gif (script) ---> hxxp://brtt7.com/target.gif (pe)
  17.  
  18. From Received From Subject
  19. ---- ------------- -------
  20. Fern@mailback.com 5.234.31.212 COPY0000487470
  21. Lucy@bobmail.info 177.126.80.75 CP0000018
  22. Brandy@safetymail.info [106.223.85.117]([106.223.214.45]) COPY0000112
  23. Stanley@mailinater.com 201.144.36.200 COPY00004956775
  24. Eugenia@reallymymail.com 83.48.18.99 COPY00000020332
  25. Homer@mailinater.com 27.7.105.236 CPY00006073
  26. Jay@zippymail.info [197.149.189.186]([154.113.84.61]) COPY0000378
  27. Katie@chammy.info 96.30.65.127 CP0000555
  28. Jacques@safetymail.info [223.185.50.234]([223.185.48.211]) CP00007063
  29. Lindsay@mailback.com 92.53.49.196 CP0000551
  30. Lenny@mailinater.com [27.114.168.35]([27.114.151.51]) CPY00001101
  31. Rosella@mailinater.com [202.123.145.237]([202.123.145.237]) COPY00000043
  32. Kitty@monumentmail.com 116.72.41.4 CP0000372
  33. Corey@safetymail.info [103.84.187.81]([103.84.187.187]) CP00001542856
  34. Vincent@mailinater.com 49.207.84.63 COPY0000899554
  35. Amanda@chammy.info 84.120.168.172 CP00007131
  36. Deandre@bobmail.info 200.105.221.14 CP000064060
  37. Betty@tradermail.info 91.143.223.70 COPY0000657159
  38. Deandre@bobmail.info 200.105.221.14 CP000064060
  39. Alejandro@safetymail.info 201.150.37.122 COPY000040060
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!