#graftor

https://www.reverse.it/sample/f130ad89d5a0da71d9258172ea8cfd05092fccb859135eff54ae4e2332f30642
https://www.reverse.it/sample/bd39e1b20b552389bf96c7ad9ee004dda53547d49490e1600bf38bb0eca60fcc

mails send from public domains to another public domains. real target in bcc.

from:

zv@express-office.ru
duplex-info@yandex.ru
kat2057@yandex.ru
jurist-ubt@yandex.ru
s_malinskiy@step.ru

to fake mails:

figaro_1@mail.ru;
finek-ufa@mail.ru;
gareeva-len@yandex.ru;
gimaeva@garant-ufa.ru;
gkb13market@mail.ru;
gkb5-pol@mail.ru;
gkbikmaeva@sberbank.ru;
guinevere114@gmail.com;
holina@ufanet.ru;
i0280@r02.nalog.ru;
info@eko-ufa.ru;
info@oob-rf.ru;
info@roseltorg.ru;
info@unecoms.ru;
iptbyx@mail.ru;
krasnova@ufacity.info;
lunkova-ubt@yandex.ru;
maestroklass@mail.ru;
vm1687@mail.ru
.... and more more...