29.04.2024 | Latrodectus | Version 1.2 | CampaignID: Facial

*************************************************

.url https://cricrapid.com/wp-content/plugins/share-private-fls/shared/
.pdf fcb578b52a686ed9b202295cbae84e20e0533caa4f8b6fffce6ee9f74ce33268
.js bb9203ca1305e47a2ec1443a640efcd5e2c7d11223184639729673579e12967e
.msi a9fa025fe912c8ad5e6566c675e045732c4d89f4187bfd94c4e916dd9fe25417
.dll 53e65d071870f127bc6bf6c8e8ddfd131558153513976744ee7460eeb766d081

*************************************************

.pdf > url > .js > .msi > .dll

wscript.exe C:\Users\Admin\AppData\Local\Temp\Document_b48_15w635167-5740247h6548-3238a9.js

C:\Windows\system32\msiexec.exe /V

MsiExec.exe -Embedding 495D3AD9014FCD04925DC82F1604BC64

MSIBE26.tmp C:/Windows/System32/rundll32.exe C:\Users\Admin\AppData\Local\glosar\beta.dll, homq

rundll32.exe C:\Users\Admin\AppData\Local\glosar\beta.dll, homq

rundll32.exe C:\Users\Admin\AppData\Roaming\Custom_update\Update_2c23aa6.dll", homq 

*************************************************

distro

http://161.97.170.81/ceptics/wp-content/plugins/share-private-fls/shared
http://azucania.com.ar/wp-content/plugins/share-private-fls/shared
http://besparta.com/markaworks/wp-content/plugins/share-private-fls/shared
http://dsengineer.in/wp-content/plugins/share-private-fls/shared
http://especial.cargasproprias.org/wp-content/plugins/share-private-fls/shared
http://onemascot.com/wp-content/plugins/share-private-fls/shared
http://vridhifashions.com/wp-content/plugins/share-private-fls/shared
http://www.loja.consolata.pt/news/wp-content/plugins/share-private-fls/shared
http://www.skytechtraders.com/wp-content/plugins/share-private-fls/shared
https://790wolseleymanagement.com/wp-content/plugins/share-private-fls/shared
https://99homes.co/wp-content/plugins/share-private-fls/shared
https://aavishkaar-palampur.org/wp-content/plugins/share-private-fls/shared
https://abd.com.tr/wp-content/plugins/share-private-fls/shared
https://abhitaak.com/wp-content/plugins/share-private-fls/shared
https://alealealpargatas.com/wp-content/plugins/share-private-fls/shared
https://alsiga.com/wp-content/plugins/share-private-fls/shared
https://ariesjagnivas.com/wp-content/plugins/share-private-fls/shared
https://aryanlogisticpune.in/wp-content/plugins/share-private-fls/shared
https://bar.dosdevelopers.com/wp-content/plugins/share-private-fls/shared
https://blog.multitamamedia.com/wp-content/plugins/share-private-fls/shared
https://brikule.cz/wp-content/plugins/share-private-fls/shared/?check=true
https://camerabaoha.com/wp-content/plugins/share-private-fls/shared/?check=true
https://christianbookindia.com/wp-content/plugins/share-private-fls/shared
https://compresoresdetornillo.com.pe/wp-content/plugins/share-private-fls/shared
https://contractnerds.com/wp-content/plugins/share-private-fls/shared
https://coronacreatives.com/wp-content/plugins/share-private-fls/shared
https://cricrapid.com/wp-content/plugins/share-private-fls/shared
https://cytotecsolutions.com/wp-content/plugins/share-private-fls/shared
https://deadvogados.com/wp-content/plugins/share-private-fls/shared
https://dealerpertamini.com/wp-content/plugins/share-private-fls/shared
https://delight.mv/wp-content/plugins/share-private-fls/shared
https://dhlawfirm.site/wp-content/plugins/share-private-fls/shared
https://dickypommini.com/wp-content/plugins/share-private-fls/shared
https://didacweb.xyz/intuitionbycg/wp-content/plugins/share-private-fls/shared
https://digitalssystems.com/wp-content/plugins/share-private-fls/shared
https://djibg.eu/wp-content/plugins/share-private-fls/shared
https://dolasimuka.com/wp-content/plugins/share-private-fls/shared
https://doulosarts.com.br/wp-content/plugins/share-private-fls/shared
https://dpmpommini.com/wp-content/plugins/share-private-fls/shared
https://ebs-company.xyz/wp-content/plugins/share-private-fls/shared
https://elitpuro1.com/wp-content/plugins/share-private-fls/shared
https://equranteacher.net/wp-content/plugins/share-private-fls/shared
https://espaciodiseno.es/wp-content/plugins/share-private-fls/shared
https://friendswekeep.vecloffy.co.za/vecloffy/wp-content/plugins/share-private-fls/shared
https://gaming-gears.com/wp-content/plugins/share-private-fls/shared
https://gifdemo.com/gps_sunum/wp-content/plugins/share-private-fls/shared
https://gifdemo.com/mertmetdemo/wp-content/plugins/share-private-fls/shared
https://goasoftwarecompany.com/Doxa_Organic/wp-content/plugins/share-private-fls/shared
https://grupobudeguer.com/wp-content/plugins/share-private-fls/shared
https://guidespharma.com/wp-content/plugins/share-private-fls/shared
https://hadjer.boutique/wp-content/plugins/share-private-fls/shared
https://hakelectromechanical.com/wp-content/plugins/share-private-fls/shared
https://hawaiismartshopper.com/wp-content/plugins/share-private-fls/shared
https://himeraveteriner.com/himera-v1/wp-content/plugins/share-private-fls/shared
https://hunarghar.org.pk/wp-content/plugins/share-private-fls/shared
https://hvg.si/wp-content/plugins/share-private-fls/shared
https://infojobone.com/wp-content/plugins/share-private-fls/shared
https://ivtmarkets.com/wp-content/plugins/share-private-fls/shared
https://jasarenovasibangunrumahmalang.com/wp-content/plugins/share-private-fls/shared
https://jms.edu.np/wp-content/plugins/share-private-fls/shared
https://jobsportal360.com/wp-content/plugins/share-private-fls/shared
https://joshiwater.com/wp-content/plugins/share-private-fls/shared
https://karamelitses.gr/wp-content/plugins/share-private-fls/shared
https://kartsiotis.net/wp-content/plugins/share-private-fls/shared
https://ladakhescapades.com/wp-content/plugins/share-private-fls/shared
https://lew-hoad.com/wp-content/plugins/share-private-fls/shared
https://lle.uz/wp-content/plugins/share-private-fls/shared
https://lurningbuff.com/wp-content/plugins/share-private-fls/shared
https://mahmoud-radwan.com/wp-content/plugins/share-private-fls/shared
https://manuurulwaahid.sch.id/wp-content/plugins/share-private-fls/shared
https://mathsclass.vn/wp-content/plugins/share-private-fls/shared/?check=true
https://mbdashcam.com/wp-content/plugins/share-private-fls/shared
https://meletesergon.gr/wp-content/plugins/share-private-fls/shared
https://mining.jaguarmall.in/code/core/database/press/wp-content/plugins/share-private-fls/shared
https://mixstore.com.mx/wp-content/plugins/share-private-fls/shared
https://mozkraty.org/wp-content/plugins/share-private-fls/shared
https://mundo-felpa.es/wp-content/plugins/share-private-fls/shared
https://mydesinger.com/wp-content/plugins/share-private-fls/shared
https://myquickandeasy.com/wp-content/plugins/share-private-fls/shared
https://narutoanimes.com/wp-content/plugins/share-private-fls/shared
https://new.botellaflaske.com/wp-content/plugins/share-private-fls/shared
https://nickicecream.gr/wp-content/plugins/share-private-fls/shared
https://nobledeals.co.ke/wp-content/plugins/share-private-fls/shared
https://nyklawyer.com/wp-content/plugins/share-private-fls/shared
https://panakalresidence.com/wp-content/plugins/share-private-fls/shared
https://parthait.com/wp-content/plugins/share-private-fls/shared
https://patriziamarazzi.com/wp-content/plugins/share-private-fls/shared
https://pavicomsa.com/wp-content/plugins/share-private-fls/shared
https://penjualanpommini.com/wp-content/plugins/share-private-fls/shared
https://ponyevent.vn/wp-content/plugins/share-private-fls/shared
https://portstanleycalipso.com/wp-content/plugins/share-private-fls/shared
https://ptcmbp.com/wp-content/plugins/share-private-fls/shared
https://puntobar.cl/wp-content/plugins/share-private-fls/shared
https://sanvikevents.com/wp-content/plugins/share-private-fls/shared
https://shredderindia.com/wp-content/plugins/share-private-fls/shared/?check=true
https://slot.hoki66.com/wp-content/plugins/share-private-fls/shared
https://smartoptiontrade.online/account/wp-content/plugins/share-private-fls/shared
https://sociallysnap.com/wp-content/plugins/share-private-fls/shared
https://streetpulsedev.wpengine.com/wp-content/plugins/share-private-fls/shared
https://subwaymenu.uk/wp-content/plugins/share-private-fls/shared
https://summerlanddogtraining.com/wp-content/plugins/share-private-fls/shared
https://svango.com/wp-content/plugins/share-private-fls/shared
https://take3llcphotobooth.com/TakeNew/wp-content/plugins/share-private-fls/shared
https://templarstore.com/wp-content/plugins/share-private-fls/shared
https://template.majestic-corporation.com/wp-content/plugins/share-private-fls/shared
https://testing.vidharm.com/wp-content/plugins/share-private-fls/shared
https://thecocopacific.com/wp-content/plugins/share-private-fls/shared
https://themetafounders.com/web/chris-csp/wp-content/plugins/share-private-fls/shared
https://themusclemob.themetafounders.com/wp-content/plugins/share-private-fls/shared
https://things101dev.wpengine.com/wp-content/plugins/share-private-fls/shared
https://tirtaningnusantara.com/wp-content/plugins/share-private-fls/shared
https://tomitakaengenharia.com.br/wp-content/plugins/share-private-fls/shared
https://toptradingoption.com/account/wp-content/plugins/share-private-fls/shared
https://tour.culturetoursja.com/wp-content/plugins/share-private-fls/shared
https://turkishmarinesurvey.com/wp-content/plugins/share-private-fls/shared
https://vcfiling.pk/wp-content/plugins/share-private-fls/shared
https://vhs.decospaacloud.in/wp-content/plugins/share-private-fls/shared
https://vilape.online/wp-content/plugins/share-private-fls/shared
https://vincecomfort.com/social/wp-content/plugins/share-private-fls/shared
https://vnfreetourguides.com/wp-content/plugins/share-private-fls/shared
https://vridhifashions.com/wp-content/plugins/share-private-fls/shared
https://warriorstaging.wpengine.com/wp-content/plugins/share-private-fls/shared
https://wecancity.org/ahmed/wp-content/plugins/share-private-fls/shared
https://wisdomlawacademy.com/wp-content/plugins/share-private-fls/shared
https://wlfw.themetafounders.com/wp-content/plugins/share-private-fls/shared
https://www.bodegabudeguer.com/wp-content/plugins/share-private-fls/shared
https://www.crickrocket.com/wp-content/plugins/share-private-fls/shared
https://www.darkknight-media.com/tasawer/wp-content/plugins/share-private-fls/shared
https://www.eurotravel.com.gr/wp-content/plugins/share-private-fls/shared
https://www.ferentino.org/wp-content/plugins/share-private-fls/shared
https://www.fit4life.es/wp-content/plugins/share-private-fls/shared
https://www.hawaiiislandmidweek.com/wp-content/plugins/share-private-fls/shared
https://www.kathatours.com/wp-content/plugins/share-private-fls/shared
https://www.loja.consolata.pt/news/wp-content/plugins/share-private-fls/shared
https://www.meilinhotels.com/wp-content/plugins/share-private-fls/shared
https://www.qi-code.com/wp-content/plugins/share-private-fls/shared
https://www.tajimateknikservis.com/wp-content/plugins/share-private-fls/shared
https://www.tatuhirdavat.com/wp-content/plugins/share-private-fls/shared
https://www.topinoxsenegal.com/wp-content/plugins/share-private-fls/shared
https://www.valex-dz.com/wp-content/plugins/share-private-fls/shared
https://www.vccg.com.au/wp-content/plugins/share-private-fls/shared
https://www.wonderwritings.com/wp-content/plugins/share-private-fls/shared
https://youpickcarepackages.com/wp-content/plugins/share-private-fls/shared
https://zatracon.com/wp-content/plugins/share-private-fls/shared
https://zeemark.in/wp-content/plugins/share-private-fls/shared
https://zk1construction.com/wp-content/plugins/share-private-fls/shared

.dll distro

https://dimozti1.org/security_check/ > 144.76.231.240:10000
https://firebasestorage.googleapis.com/v0/b/case-419310.appspot.com/o/CZCzc1LrbT%2FDocument_b48_15w635167-5740247h6548-3238a9.js?alt=media&token=f0362973-0cf1-48c9-ae4c-8745ccf5e867
http://185.219.220.149/bim.msi

*************************************************

c2's

https://jarinamaers.shop/live/
https://startmast.shop/live/

*************************************************