#trickbot IoC 20190703

mailchimp again

from: CO-Star sales@co-star.co.uk
X-MC-User: 4565758f2bfe6483ce7e20945
subject: Your order is on the way

s://lp.constantcontact.com/su/ka321sv

https://urlscan.io/result/c58419d6-80af-4e8a-9c70-9e557c6a52cb
 

VBS (64.37.52.189)
s://rosixtechnology.com/

EXE (64.37.52.189)
s://pouyas.com/format.php 

https://app.any.run/tasks/85d85c54-7dff-48ae-8954-d4402f4059bc