2022-03-18_Mekotio_Chile

Campaña Mekotio dirigida a Chile, suplantando al SII y TGR.

SPAM desde: 
viv@viv.az
159.69.42.89

Redirectores y descargas:
http://164.90.151.88/imbox/
https://5aa20a4eab0b.ngrok.io/PDF-0027430505S3B101lF3.zip
https://dkloja.com.br/OLD/
https://makeupkala.com/well-known/
https://zakatalquds.org/profiles/contts/
https://177.53.143.142/
http://178.128.146.61/imbox/
https://agtta.co.in/src/Box/
https://ruaylink.com/home/service/

Payload Mekotio:
EokzVFCKbV.dll cc080c6336299f2f333f466e7450e946bca7009b5be6cbac04e289b40c07ccaa
VT https://www.virustotal.com/gui/file/cc080c6336299f2f333f466e7450e946bca7009b5be6cbac04e289b40c07ccaa/detection