MD5
2d457efdf4fe1dd0cfd671b528a1f896
2e2c9f07f99791d6482e4839b95ec1ef
579318df19a21d08754a187d70f4a759
0a7e92be902c6dc59f15b048c44d8b42
b9fc8771e7cb3b5ec723207f5343d770
bf9c876f23f775582d9a6d4db13e6aae
d648f3d304eb459e04b1f6fae252e5a8

SHA1
3095fcb9162cda9f0259e873b4b0cdc53baa469e
c074f0d4503a3b5fce4bbefc5422da20c5c3dc91
26177dfeb5bfae444a24ab8e2d5b7885a93a7fd7
ebf4b8097462d1fdbfdc395a563aa45f9aa2644c
078fd5bc6f6c1c503dbbbf81f733b3bbc8ec75f7
d40df68f07e6c869dc5a7289633aae601a50a252

SHA256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DOMAIN
gstat.peshtigodental[.]com
gstat.securityguardlisting[.]com
222.222.67[.]208.in-addr[.]arpa
gstat.sloleaks[.]com
gstat.securezal[.]com
gstat.securezal[.]xyz
gstat.secundato[.]com
gstat.secundato[.]net
gstat.secundamo[.]com
gstat.premiamo[.]eu
gstat.premiamo[.]com
gstat.securezzas[.]com
gstat.securezzis[.]net
gstat.securanto[.]net
gstat.securanto[.]com

IP
62.173.145[.]113
87.248.114[.]11

URL
hXXp://line.ehrlum[.]com/favicon.ico
hXXp://line.ehrlum[.]com/images/E6ATGqWO5qj2fbjnePQ/zhWJPobmAB7cB7V36hApb6/TcuL_2FXmfXI4/NP01ITcy/QC9MwWO0g9_2BGN_2FHnDSb/T_2BVIkZxl/Q8XeIjrdW43dDnLyF/9gLqOqPPtzQr/eJk0z3ik1EK/DR1sJgpDt88nue/jBxtL_2F3w/L.avi
hXXp://line.ehrlum[.]com/images/YL8E_2BQoPnlSjHsiJvfpFL/Gh_2BDU5fK/8fZUguL0hEmXEgC8B/lvBOxOCFeXZ9/DFzV_2BZU3_/2BbGGgmaQ1Cv_2/FLXiRn0vjIpdslrh6Dyl1/blpodKXfKRWGyn83/LHlWXjUrZrsLz9t/eY35r00o/ECslB_2F/K5tFinN.avi
hXXp://line.ehrlum[.]com/images/Xp9u6gc3ZwEA5HobN/p0J79FAybRYU/VwIFgWNg1FM/76SV8CQX3254ol/HWmLJ_2F2mf_2B176dAWp/58m8ycd7dIkbrWx9/o9o4Dqck9dRtpvR/LoBXkkNOhxdq62Kg_2/B5YjK7fSo/VUi97_2B8L1LeI08cfmV/kFJS0.avi
hXXp://line.ehrlum[.]com/images/
line.ehrlum[.]com/images/
hXXp://gstat.securityguardlisting[.]com/setup.exe
hXXp://line.ehrlum[.]com/images/YL8E_2BQoPnlSjHsiJvfpFL/Gh_2BDU5fK/8fZUguL0hEmXEgC8B/lvBOxOCFeXZ9/DFzV_2BZU3_/2BbGGgmaQ1Cv_2/FLXiRn0vjIpdslrh6Dyl1/blpodKXfKRWGyn83/LHlWXjUrZrsLz9t/eY35r00o/ECslB_2F/K5tFinN.avi
hXXp://line.ehrlum[.]com/favicon[.http://line.ehrlum[.]com/images/Xp9u6gc3ZwEA5HobN/p0J79FAybRYU/VwIFgWNg1FM/76SV8CQX3254ol/HWmLJ_2F2mf_2B176dAWp/58m8ycd7dIkbrWx9/o9o4Dqck9dRtpvR/LoBXkkNOhxdq62Kg_2/B5YjK7fSo/VUi97_2B8L1LeI08cfmV/kFJS0.avi
hXXp://line.ehrlum[.]com/images/E6ATGqWO5qj2fbjnePQ/zhWJPobmAB7cB7V36hApb6/TcuL_2FXmfXI4/NP01ITcy/QC9MwWO0g9_2BGN_2FHnDSb/T_2BVIkZxl/Q8XeIjrdW43dDnLyF/9gLqOqPPtzQr/eJk0z3ik1EK/DR1sJgpDt88nue/jBxtL_2F3w/L.avi
gstat.securityguardlisting[.]com/setup.exe

SUBJECT
ILDIRETTOREDELL’AGENZIADELLEENTRATENNNNNN@

FILENAME
utente_3405.zip
utente_3405.xls
utente_2410.zip
utente_2410.xls
setup.exe
utente_NNNNN.zip