← Back to Pulse Feed
PULSE DETAIL
Emails imitating last weeks Locky run are dropping TeslaCrypt.
Subject: Invoice 80444459
Contains: invoice_copy_80444459.zip (aa9d717aacbf83f6238659c0cf8c52ad)
Downloads: 80.exe (a169dac40d1c7f8baa040b9aa581cd4a)
Download domain: hpareyouhereqq[.]com
TeslaCrypt C2: snibi[.]se
Javascript is different from Locky run.
Indicators of Compromise (0)
No indicators.