SHARE
TWEET

2016-12-02 Locky "Attached document"

Racco42 Dec 2nd, 2016 (edited) 197 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 2016-12-02 #locky email phishing camapign "Attached document"
  2.  
  3. Email sample:
  4. ---------------------------------------------------------------------------------------------------------------
  5. From: canon@[REDACTED]
  6. To: [REDACTED]
  7. Subject: Attached document
  8. Date: Fri, 02 Dec 2016 23:50:34 +0700
  9.  
  10. Attachment: 8606_0059.docm
  11. ---------------------------------------------------------------------------------------------------------------
  12. - sender is canon@<recipient domain>
  13. - subject is "Attached document"
  14. - email body is empty
  15. - attached file "<4 digits>_<3-4 digits>.docm" is Microsoft Word file with embedded macro that will download malware from:
  16.  
  17. Download sites, Malware etc... is same as in "Please Pay Attention" campaign http://pastebin.com/Cwjfp9SR
RAW Paste Data
Top