Jun Malspam Campaigns

gistfile1.txt

Date,Details,Email Payload Type,Users Targeted
6/1/2020,All subjects contain invoice or ledger; xlsm -> dridex,Attachment,89
6/1/2020,SPECIFCIATIONS 9144 / AMADEO ROSSI; rtf -> masslogger,Attachment,2
6/1/2020,DHL Consignment Details; gz -> lokibot,Attachment,3
6/2/2020,RE: Price Request; zip -> agenttesla,Attachment,2
6/3/2020,Various subjects o2.pl sender; xls -> zloader,Attachment,20
6/3/2020,"All subjects include receipt, intuit/amazonaws sender, xlsm -> dridex",Attachment,60
6/3/2020,REVISED INVOICE/FINAL SHIPMENT DOCS; img -> formbook,Attachment,2
6/3/2020,"Sender address domain .ml, quote - reg.rar -> formbook continued to 6/5",Attachment,26
6/3/2020,"Request for quotation, Order no: 56774387; rar -> agenttesla",Attachment,2
6/4/2020,Sender address domain .site bid_info<digits>.doc -> unknown,Attachment,8
6/4/2020,Ashley Brown RMT - Receipt; html -> get2,Attachment,10
6/4/2020,RE: ENQUIRY 05/06/2020 - WODAFLEX GROUP; zip ->,Attachment,2
6/4/2020,Reconfirm the quotation..; img ->,Attachment,3
6/5/2020,Various subjects interia.pl sender; xls -> zloader,Attachment,32
6/5/2020,REVISED INVOICE DRAFT / FINAL DOCS + DHL WAYBILL 50 9081 9087; iso ->,Attachment,4
6/5/2020,Office #<digits> ord_<digits>.zip; icedid,Attachment,4
6/5/2020,Re: Quotation; jar -> qrat,Attachment,3
6/7/2020,Beijing Arc Star Trading Enquiry; rtf -> agenttesla,Attachment,2
6/7/2020,TT Swift Copy - Application - Outstanding Payment; jar -> qrat,Attachment,2
6/8/2020,Payment Advice - Advice Ref:[G30482652755] / Priority payment / Customer Ref:[4400037369].; zip -> lokibot,Attachment,24
6/8/2020,RFQ : Laser marking PO 02062020; zip -> agenttesla,Attachment,2
6/8/2020,"RE: Purchase order no. 1254,1255 - M/s Hem Industries; rtf -> masslogger",Attachment,2
6/8/2020,All subjects contain DHL or invoices; xlsm -> dridex,Attachment,13
6/9/2020,Request for Quotation: TMS-PO200581; rtf -> broken,Attachment,2
6/9/2020,Urgent Order - <domain>; 2x7z -> agenttesla masslogger,Attachment,7
6/10/2020,All subjects contain Payment .pl|intuit sender; xlsm -> dridex,Attachment,99
6/10/2020,Request Quotation; jar -> qnodeservice,Attachment,7
6/10/2020,New Order; zip -> masslogger,Attachment,2
6/11/2020,DHL Shipment Notification : 4299690072; img -> agenttesla,Attachment,67
6/11/2020,RE: URGENT-Confirm Account Details/SOA Feb-May; rtf -> pony,Attachment,2
6/12/2020,EMAIL UPGRADE FOR comments; rar -> agenttesla,Attachment,2
6/12/2020,audit; html -> get2 -> sdbot continued to 6/18,Attachment,49
6/12/2020,Office�365�payment�successfully�approved; doc -> taurus,Attachment,8
6/14/2020,Order 0012020026; 7z ->,Attachment,12
6/14/2020,Shipment Notification DHL_0934750936; img -> agenttesla,Attachment,5
6/14/2020,PO#20180319 April-12-2020 from Anglo-Nothern Management Ltd.; zip ->,Attachment,2
6/15/2020,Payment Notification 00000787-74; xlsm -> dridex,Attachment,74
6/15/2020,Re: Inquiry for Raw Materials; rar -> masslogger,Attachment,2
6/15/2020,All subjects contain Payment netsuite|netledger sender; xlsm -> dridex,Attachment,70
6/15/2020,Completed: Please DocuSign: <digits>_Agreement; link -> get2 -> sdbot,Attachment,50
6/15/2020,Your Order Arrival Notification email; iso -> remcos,Attachment,8
6/15/2020,CBLLK Inquiry: Require Technical & Commercial Offer urgently; xlsx -> masslogger,Attachment,4
6/15/2020,Payment Advice-BG_EDG9502020061606180050_18037_950; xlsx -> masslogger,Attachment,2
6/16/2020,RE: Re: SOA for May 2020; img -> agenttesla continued to 6/17,Attachment,35
6/16/2020,Your latest DHL invoice : CAII000080521; ace -> formbook,Attachment,4
6/16/2020,All subjects contain DHL; doc_<digits>.zip -> dridex,Attachment,29
6/17/2020,All subjects contain DHL; awb_<digits>.xslm -> dridex,Attachment,23
6/17/2020,June Payment; rar -> agenttesla,Attachment,2
6/17/2020,Manufacturer directly sell steel products; zi p-> masslogger,Attachment,2
6/17/2020,Purchase Order from Softlogic Sri Lanka - PO 4553924020; doc -> masslogger,Attachment,2
6/17/2020,Balance Outstanding Statement; z -> isrstealer,Attachment,2
6/17/2020, RE: Confirm revised invoice to proceed; zip -> agenttesla,Attachment,2
6/18/2020,Urgent Enquiry # Order 2020-06-22 <domain>; jar -> qnodeservice,Attachment,4
6/18/2020,Re:Coperation Offer; ppt -> agenttesla,Attachment,4
6/19/2020,RE: BOOKING PNH FOR ETD JUNE-2020 BKG# PNPN203746; zip -> agenttesla,Attachment,3
6/20/2020,All subjects contain photo; zip -> js -> avaddon ransomware continued to 6/22,Attachment,53
6/20/2020,DHL Shipment Notification : <digits>; ace-iso -> lokibot,Attachment,13
6/22/2020,Expense Report and Hours to date for June 2020 (Plus Finance comments on Excel file); html -> get2,Attachment,73
6/22/2020,All subjects contain Payment netsuite|netledger sender; xlsm -> dridex,Attachment,70
6/23/2020,Pension Certificate; html -> get2 -> sdbot,Attachment,10
6/23/2020,Past Due Invoice No. #<digits>; xlsm -> dridex,Attachment,5
6/23/2020,New Purchase Order (N6A802020) EUR:TOP_URGENT; zip -> agenttesla,Attachment,2
6/23/2020,DHL Express Shipment Notification : 6082330180011105; ace -> formbook,Attachment,9
6/23/2020,MY CV; zip -> pony,Attachment,4
6/24/2020,Past Due Invoice No. #<digits> .website .xyz sender; xlsm -> dridex,Attachment,3
6/24/2020,RE: ORDER CONFIRMATION; rar -> masslogger,Attachment,2
6/24/2020,Confirmation order: RFQ #031-24062020; zip -> masslogger,Attachment,2
6/24/2020,Agency appointment for MV. PRAVIK - SECOND SHIPMENT; xlsx -> lokibot continued to 6/25,Attachment,12
6/25/2020,Purchase Order.; zip -> agenttesla,Attachment,2
6/25/2020,Your Pracel Has Arrived; img -> remcos,Attachment,3
6/25/2020,RE: Order details.; zip -> pony,Attachment,6
6/25/2020,FINAL PURCHASE ORDER; doc -> agenttesla,Attachment,2
6/26/2020,FW: Order_01172305_pdf; zip -> agenttesla,Attachment,2
6/28/2020,Shipment Date; xlsm -> masslogger,Attachment,2
6/28/2020,AW: INV_N-735409270//001531; iso -> agenttesla,Attachment,60
6/28/2020,RE: DHL ARRIVAL SHIPMENT PRE-ALERT FOR HCL :CPWMANR2015726; img -> agenttesla continued to 7/1,Attachment,20
6/28/2020,DHL PO1001910 Sample Arrive : Tracking No_SINI0068206497; rar -> agenttesla,Attachment,4
6/29/2020,All subjects contain Invoice netsuite|netledger sender; xlsm -> dridex,Attachment,21
6/29/2020,Request for Quotation - RFQ # 2020-139; xlsm,Attachment,4
6/29/2020,RE: Purchase Order; rar -> agenttesla,Attachment,2
6/29/2020,DHL Shipment  Arrival Notification; ziip -> formbook,Attachment,3
6/30/2020,NIEUWE BESTELLING BEVESTIGING; rar -> nanocore,Attachment,17
6/30/2020,Enquiry - Order <domain>; jar -> qnodeservice,Attachment,5
6/30/2020,REMITTANCE ADVICE; rtf -> masslogger,Attachment,2
6/30/2020,Environmental Products Corporation; zip -> lokibot,Attachment,6
6/30/2020,NOTIFICATION for Scheduled delivery for AWB no.: 746262783-3(3).; img -> agenttesla continued to 7/1,Attachment,17