Malspam hitting mailboxes in Germany , distributing #GuLoader -> #AZORult

GuLoader payload:

https://bazaar.abuse.ch/sample/98c39c41a62349078a4b09ae665ed9945dd207b7c02b38fa58a639089721bc5e/ …

AZORult payload URL:

https://urlhaus.abuse.ch/url/366085/ 

AZORult C2:

http://infosales.duckdns\.org/index.phppic.twitter.com/AC8wbTgMNV