Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- THREAT IDENTIFICATION: BAZARCALL
- SENDERS OBSERVED
- SUBJECTS OBSERVED
- Congratulations! Your order has been approved.
- Congratulations! Your order was approved.
- Well done! Your order has been approved.
- Your order Z0012############ has been confirmed. Address delivery will not take long!
- LURE PHONE NUMBER
- 1 323 540 5822
- MALDOC LANDING PAGE URLS
- https://prinpro.us
- https://printequip.us
- https://printools.us
- https://proprin.us
- https://profiprint.us
- MALDOC DOWNLOAD URLS
- https://prinpro.us/cancel.php
- https://printequip.us/cancel.php
- https://printools.us/cancel.php
- 302 to:
- https://printools.us/suspicious-traffic
- MALDOC (XLSB) FILE HASHES
- order_Z0012112202927225.xlsb
- ae7ee17fe1beca77792942d4401c3f50
- ADDITIONAL/CAMPO LOADER FILES
- 28222.dr1
- 547a4e8b1b3bf3359785479e768fa246
- 28222.dr2
- 547a4e8b1b3bf3359785479e768fa246
- 28222.dr3
- fe696977648eed8a2b0ab9dcdd70aca2
- CAMPO LOADER PAYLOAD DOWNLOAD URLS
- http://lie3.xyz/campo/li/e3
Advertisement
Add Comment
Please, Sign In to add comment
