Locky URLs

gistfile1.txt

2017-10-06
==========
Subject: Invoice INV000(3 random numbers)
ilibarcelos.pt/9hgfdfyr6?
mrscrowe.net/p66/9hgfdfyr6
conxibit.com/9hgfdfyr6?
georginabringas.com/9hgfdfyr6?
ecofloraholland.nl/9hgfdfyr6?
pnkparamount.com/9hgfdfyr6?
highpressurewelding.co.uk/9hgfdfyr6?
www.100kisses.org/9hgfdfyr6?
lasdamas.com/9hgfdfyr6?
eurecas.org/9hgfdfyr6?
troyriser.com/9hgfdfyr6?
emeryconsult.com/9hgfdfyr6?

Binary hash from site: 86927f4d92665747679ab72a9be87b05
https://www.virustotal.com/#/file/33b62b95281bb0ecbad2523bb99e4853fd516044b8f2b42ef4a1e29903e7bd0f/detection

2017-10-09
==========
Subject: Invoice IP(7 random numbers)
scottfranch.org/p66/8734gf3hf?
drspay.com/8734gf3hf?
asesoreszapico.com/8734gf3hf?
hard-grooves.com/8734gf3hf?
intra.cfecgcaquitaine.com/8734gf3hf?
121-psychic-reading.co.uk/8734gf3hf?
cfai66.fr/8734gf3hf?
domke-engineering.de/8734gf3hf?
easyhousedev.gr/8734gf3hf?
dewekker.nl/8734gf3hf?
miyatakewind.com/8734gf3hf?
prueba.depaterna.com/8734gf3hf?
amatuermatch.org/8734gf3hf?
prova.eshopavant.it/8734gf3hf?
designordie.ca/8734gf3hf?
anderlaw.com/8734gf3hf?
edeldestillerie-mair.at/8734gf3hf?
cagliaricity.it/8734gf3hf?
depomedikal.com/8734gf3hf?
hellonwheelsthemovie.com/8734gf3hf?

Binary hash from site: be499852672e9a1e5d222427978ea421
https://www.virustotal.com/#/file/dcf9187f2f18fb96c69d2184c46fb635c1c5a1890354354f70c089b088106f36/details