API tools faq
paste
Advertisement
Guest User

Trickbot malspam data - Early Oct 2018 campaign targeting US

a guest
Oct 8th, 2018
1,215
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.27 KB | None | 0 0
raw download clone embed print report
  1. TRICKBOT MALSPAM DATA - EARLY OCTOBER CAMPAIGN TARGETING UNITED STATES
  2.  
  3. EXAMPLE FROM 2018-10-05 POSTED AT:
  4.  
  5. - https://www.malware-traffic-analysis.net/2018/10/05/index.html
  6.  
  7. TARGET COUNTRY:
  8.  
  9. - United States
  10.  
  11. DATES/GTAGS:
  12.  
  13. - Friday 2018-10-05 - gtag: sat74
  14. - Monday 2018-10-08 - gtag: sat75
  15.  
  16. SUBJECT:
  17.  
  18. - Subject: PayPal account verification form
  19.  
  20. EXAMPLES OF SPOOFED SENDING ADDRESSES:
  21.  
  22. - From: noreply@californiapaypal-c.tk
  23. - From: noreply@californiapaypal-e.tk
  24. - From: noreply@californiapaypal-f.tk
  25. - From: noreply@californiapaypal-i.tk
  26. - From: noreply@chicagoofficepaypal-b.tk
  27. - From: noreply@coloradoofficepaypal-b.tk
  28. - From: noreply@coloradoofficepaypal-c.tk
  29. - From: noreply@coloradoofficepaypal-d.tk
  30. - From: noreply@coloradoofficepaypal-e.tk
  31. - From: noreply@coloradoofficepaypal.tk
  32. - From: noreply@indianapaypal-i.tk
  33. - From: noreply@ohiopaypal-b.tk
  34. - From: noreply@ohiopaypal-f.tk
  35. - From: noreply@ohioserverpaypal-b.tk
  36. - From: noreply@ohioserverpaypal-e.tk
  37. - From: noreply@parkingofficeorgkfc-c.tk
  38. - From: noreply@paypalcalifornia-a.tk
  39. - From: noreply@paypalcalifornia-e.tk
  40. - From: noreply@paypalchicagooffice-a.tk
  41. - From: noreply@paypalchicagooffice-c.tk
  42. - From: noreply@paypalchicagooffice-d.tk
  43. - From: noreply@paypalchicagooffice-f.tk
  44. - From: noreply@paypalillinois-e.tk
  45. - From: noreply@paypalmontana-e.tk
  46. - From: noreply@paypalohioserver-d.tk
  47. - From: noreply@paypalohioserver-e.tk
  48. - From: noreply@paypalohioserver-j.tk
  49. - From: noreply@paypalohioserver.tk
  50. - From: noreply@paypalorgservermontana-c.tk
  51. - From: noreply@paypalorgservermontana-i.tk
  52. - From: noreply@paypalsericedenver-b.tk
  53. - From: noreply@paypalserverorg-d.tk
  54. - From: noreply@paypalserverorg-e.tk
  55. - From: noreply@paypalserverorg-j.tk
  56. - From: noreply@paypalserverorg.tk
  57. - From: noreply@paypalservicedallas-a.tk
  58. - From: noreply@paypalservicedallas-b.tk
  59. - From: noreply@paypalservicedallas-i.tk
  60. - From: noreply@sericedallaspaypal-c.tk
  61. - From: noreply@sericedallaspaypal.tk
  62. - From: noreply@serverorgpaypal-c.tk
  63. - From: noreply@serverorgpaypal-d.tk
  64. - From: noreply@serverorgpaypal.tk
  65. - From: noreply@serviceparkingorg.tk
  66. - From: noreply@washingtonpaypal-c.tk
  67. - From: noreply@washingtonpaypal.tk
  68.  
  69. ATTACHMENTS ON FRIDAY 2018-10-05 - 43,520 BYTES:
  70.  
  71. - 1475c1ef5a476f0349f1fc708408b74e0b37fc5d8ed1a7919c3b21ae252756e9 - PP23-380165-071.doc
  72. - 38f1500d383579bccf8626caceeab47d9dbc3a1e641f2ee9ad618d2a90825c3e - PP23-380165-010.doc
  73. - 99da75e175a1587f787b4bd36e4055d5623b7b4b6a932caa904e2aaef5425e38 - PP23-380165-180.doc
  74. - a8cb3d81ad12638cc7be2a11e17616d4a2a9c0f72b7da4c14c6ee4b777807116 - PP23-380165-002.doc
  75. - ba1786c5dba3863eaaf7b128cc949d48dc7818e56753ddb1c000c3aeab8c00ba - PP23-380165-047.doc
  76. - d6d337bec4fa31b901ce0940bdb44f7401d389f3ead4d90e37e2a734ffaa2a58 - PP23-380165-028.doc
  77. - f131b5203bfc9b7f3b1a01398ab52e42f6d78f8422ad3ac891328ca8aa4f16eb - PP23-380165-046.doc
  78.  
  79. ATTACHMENTS ON MONDAY 2018-10-08 - 47,104 BYTES:
  80.  
  81. - 072b2e79a6124172a6e2d6dfad666e83aace3d52c865ce57df914434cb503914 - PP-577013-037.doc
  82. - 0d29dcfd2c0ff3d955485ee5de710c7878d6b343e2810ff91814f728f333325b - PP-577013-094.doc
  83. - 13b54c1bf6ad1078f4edd789d2997cc742ae66520abfb93232adb9e0961258c2 - PP-577013-016.doc
  84. - 336cdc3f8d839fa2c924a804e278fc0f7fc2f219e861baa1bca3d500346704f5 - PP-901338-032.doc
  85. - 4c351e3fa06541889b05d1a91a81477959b3f44334b6954679df28d7c22f4cad - PP-414038-093.doc
  86. - 4f09ab58c7c1614b9f6934d76ce90e8b6d31d929a74e5e01ace88783344163cb - PP-577013-020.doc
  87. - 509fe361205f867e36708937940bcacc9d43a3583fd95347c591e71571b144a0 - PP-414038-086.doc
  88. - 62a4c943d4fe87223626f2a72bb018dac9624c7a39c2fcae9ef798bfb670463e - PP-414038-095.doc
  89. - 63c03514f2bf69e9d37a57cbfae12ab89cdc7a1fe0320ad1d237a816a508e940 - PP-414038-051.doc
  90. - 73b6806fe28610fab66aba407c7506a67b2f7e3695b82901925cb39b78918c71 - PP-414038-096.doc
  91. - 782a8334992902ef6fccb1291f5aaadfcd79acb945298b2a4a574400185a359d - PP-414038-070.doc
  92. - 7ee18135d756b38458c674b73a22453a959ed028e270a228f146c3c698b109d0 - PP-414038-076.doc
  93. - 8c6d8c1b0994a81617b5c826221e792ca14332e1cb33b306736f7a03fcf92458 - PP-577013-048.doc
  94. - 953751e712ab7038b609bea7b12686d2db8433f98890daffc2dc1a694f8203a9 - PP-577013-087.doc
  95. - b4a2e5f65e14cde8f1c23a215c511ce1f8f067aa17e2cc480b6cec07aad346d2 - PP-414038-012.doc
  96. - fb694dcf568956f9b6ba28c9f2e139b71f9c5c37a1670388ccc7f80e544bfd14 - PP-577013-036.doc
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!