Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save silence-is-best/e735efaac2d974399b00cba58114264c to your computer and use it in GitHub Desktop.
Save silence-is-best/e735efaac2d974399b00cba58114264c to your computer and use it in GitHub Desktop.
November Malspam Campaigns
Date, Details,Email Payload Type,Users Targeted
11/1/2024,New Purchase Orders for Span|PO018 | Hydraulic Parts | Spare Parts; rar -> xloader,Attachment,8
11/3/2024,Purchase Order; zip -> snakekeylogger,Attachment,2
11/3/2024,IRS Customer Service; zip -> lnk -> vidar,Attachment,3
11/4/2024,PR # 3000005991 - Quotation Required | Spare Parts; rar -> xloader,Attachment,4
11/4/2024,re:payment; z -> xloader,Attachment,4
11/5/2024,New Inquiry // INQ24561; iso -> xloader,Attachment,4
11/5/2024,Novaj Aĉeto-Mendoj por Span; rar -> xloader,Attachment,4
11/5/2024,Request of payment - 364898 FD PO# B2023-21508; zip|rar -> xloader,Attachment,4
11/6/2024,Shipping docs and schedule; tar -> xloader,Attachment,3
11/10/2024,New PO (#1437); rar -> xloader,Attachment,4
11/11/2024,Re: Invoice & Packing list For Sea Shipment; r15 -> xloader,Attachment,3
11/12/2024,New Order list; zip -> xloader,Attachment,2
11/12/2024,Filename is item-rqf-9456786.arj; arj -> xloader,Attachment,2
11/18/2024,Updated Price List; zip -> xloader,Attachment,2
darkcloud, a13d0004ba8e2b152c92485096ccbfd2b3e8f80ea25aeaa39fc8ed007239f673, https://api.telegram.org/bot7824077250
darkcloud, b1ee7dbcee5056c7e11b064f15afe453e4382d38f7c3741dff986b139e096bd8, https://api.telegram.org/bot7824077250
nov, d4719004280501b5675b81449dc5cd9ed62dec2b35910f5b2322826cae5227a8, ftp://ftp.libreriagandhi.cl
originlogger, 0cd355d2088c326f4d07bb3202055e30e8f0509bad28b17a75ffcd3b353f9389, mail.azmaplast.com
originlogger, 59189df2a774319d207c1a5a7d0ec820a7c37f89d2c4f8e4bc0a50001a3e2ba6, mail.thelamalab.com
originlogger, a36c66fb7fdfb2639cc0ccdeaeef4e6c1a1cd103ba76309ed32777b3f2ab069d, https://api.telegram.org/bot7180778750
remcos, 7a422ffa32fcdb0ca5698ef80ea3a7bed96b3fc42e008b0458256f4c680bd395, dotatech.de:30908
snakekeylogger, 1238d57c43e9c243f486f1bce62eb357cbca88026d60ed5b4c52ff9dd0447369, https://api.telegram.org/bot8080123058
snakekeylogger, 8764a4a7a61aa1387c3e99200d8c35c89d0723e3e489da7abbb76559ac543deb, https://api.telegram.org/bot7399492470
snakekeylogger, 8fac798eed550d831ff4e34b8567d3f8645bb0604d910f9004c93eaa8fd3d4a4, https://api.telegram.org/bot7458941296
snakekeylogger, a27429d5a914a1833582c0b43382adbed5cd83ccd93b3f43a4483b39f68f569b, https://api.telegram.org/bot7967467250
snakekeylogger, a5773a12d80db7b99dd8e64d3eb6b2a3ec7f0639055a801f075f4cd8aa4f03cc, https://api.telegram.org/bot7967467250
snakekeylogger, b821ff32a1b0314cfa230a212103305d18695e4c95e3d94fd69097db8019833c, https://api.telegram.org/bot7399492470
snakekeylogger, f32af695424c19ad7ba48fc23dee2d20cbf4263103e35309199890eeadc017d8, https://api.telegram.org/bot7458941296
vidar, a9157bff7034c95796152201796c6f97530e27277429af9ff350ac554bd37939, https://steamcommunity.com/profiles/76561199794498376
vipkeylogger, d6460174d8bf59b3a191241de505047d5ef7ec7ae6f22bef0490697b39d77a40, https://api.telegram.org/bot7396856636
xloader, 089d8381834066449bcd52d04db467353e195fe84745a8d2587bacf93802a706, hongrobert.top/cd36
xloader, 0af4e0443ef67307163134b3fb9cbd5454cbfe00bd29ecf57573643be9b5fbd8, ww.ila.beauty/qq33
xloader, 0cb2677cd3e5d125ad43fb092df59bfc49c8ffbf5c826bc19d0005b4dade6d87, amyard.shop/ge07
xloader, 1f9fc55d94da0f03f055cced46fdf1a408dbee7d9573d27a92172dda1e0e9bff, amyard.shop/ge07
xloader, 20973191d7a161b20753a6dfbb0113761bdbfaabece56d6725dd476de4402e77, www.istorted.app/md49/
xloader, 219b2f19475b0ba36726568f9dd52320c1c44f24c9e3ac018c0742967e157ba2, www.college-help.info/fu91
xloader, 23fd85e7d0e1f372bd11f594fc1a64ac020f4a8c5adce87a70f5e9f81a66da44, enithpro.shop/md49
xloader, 392d0101e35db0734783ac87d4dd920f178b414cd0027eedd391fc0fcadc5798, www.jllllbx.top/s7rc
xloader, 412b1b95c19cec39bff18aad7a381270169adc21e86b456cdf4896e8373b1bbc, amyard.shop/ge07
xloader, 51132cd1705668a4b8b716b3169779133de701532821ba4d9cbea174143fceb8, amyard.shop/ge07
xloader, 63cfb08a37c680b7bd8c3a16340a69f92e1837b9ec57104e1f826c675316e278, amyard.shop/ge07
xloader, 67188cc5e647161585ae99abf924ba1c2a38902a016e19218e4707eef1531b50, www.jorgenunezfilms.online/138r
xloader, 67605bfe77b822b7256723089082b0f15b23bb69e6de86191750b660c0a438e3, enithpro.shop/md49
xloader, 75a9948f63204ab951dbd23559bf5c796dd51c3b0fae019f3c97ec0f1d6b6bca, amyard.shop/ge07
xloader, 806bbc725eb88231d1612c1269aeb39c1e6973aff10926d8da5da3e4823c7e15, amyard.shop/ge07
xloader, 865ba0cdbc273e3d3035ec2acaf6510977798e008e79546e96e33e289b22c3b2, www.marketplacer.top/xprp
xloader, 87e77805c61d64114809ab00f0d224e261109e968300ae193c0a9024caa97807, amyard.shop/ge07
xloader, 88e7becf09f33e1db8fe108dbe9687a13bf1225ecf322a00f2e67b86a8931813, amyard.shop/ge07
xloader, 892afee18338ccbf6b2215beeb24dcfdedec12a9712ebad5d4a5a227e9fc9b4d, amyard.shop/ge07
xloader, 9b250f96c8e383893d2c2f0ae940312d86e6aec8d0e27aadd9087dce67d17c46, amyard.shop/ge07
xloader, a6383c0e6d1660f45356eb6b6cfcb90d7558682c94994b7f23c02764a7d4fc08, amyard.shop/ge07
xloader, b9b0327d4591495bae143b906e51addfbb328981aca725fdbdb45e80031a166d, amyard.shop/ge07
xloader, c51ca12f5158ea6d07f3def983ae49f6127696f23244cf0a857da46a6d640b25, enithpro.shop/md49
xloader, c7f7388cba691a5b5d8786804468d00489d228bc887f17768d26faf7df9c78ca, amyard.shop/ge07
xloader, cbfdeb71b1ac7005db8f731de7bfea8471ef47c2ab2e1d0414719c549da8c3c1, istorted.app/md49
xloader, d3fcbc56da2d26372226d0e313d9f5af80f4df67b3477cc519c071beab7cea76, www.44ynh.top/l9wb
xloader, eaf2ff4102bf38e71a1783dcbb934bbc7cd6520cbec7446b0cb5858e2e78ec95, amyard.shop/ge07
xloader, f7cfd8a77e099b053a939902b4bc371cf0660070287b7f9f89971181d36be10e, enithpro.shop/md49
xloader, fce3183e9d396e2fe176392fbdcd765daa5154aa9187a7dbbdde77c38dd1e079, www.buckser.info/4a2y
xworm, 030324e0a31427fd63213acd29f3cdf5b445a6ec03eb803fb08dbf3a0c1b258b, 176.9.162.125:4060
[email protected]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment