Emotet_IOCs_2019-09-19_00_36.txt

#Emotet

MD5s:
0073d6e3bd4c940a100794d49c585b1a
9d2c8aa881245d48496f998f4194a8b4
c111676f8b28e4d0dae911cd0622e057

IPs:
117.197.124.36
139.59.242.76
142.44.162.209
152.168.220.188
178.254.6.27
178.62.37.188
185.129.92.210
186.4.172.5
188.166.253.46
190.104.64.197
190.13.146.47
190.146.81.138
190.171.105.158
190.55.86.138
192.163.221.191
198.199.88.162
201.212.57.109
203.150.19.63
216.154.222.52
45.33.1.161
59.152.93.46
70.45.30.28
78.109.34.178
83.110.75.153
87.106.136.232
91.92.191.134
92.222.125.16
95.128.43.213

URLs:
http://70.45.30.28/loadan/child/site/
http://78.109.34.178/tlb/odbc/cab/
http://152.168.220.188/cookies/usbccid/cab/
http://83.110.75.153/iab/xian/cab/merge/
http://190.146.81.138/vermont/attrib/cab/
http://45.33.1.161/entries/badge/
http://192.163.221.191/sess/sym/cab/merge/
http://190.13.146.47/pnp/jit/cab/merge/
http://139.59.242.76/glitch/iab/
http://203.150.19.63/window/tpt/cab/
http://190.104.64.197/raster/
http://190.171.105.158/forced/srvc/cab/merge/
http://216.154.222.52/loadan/health/

#malware #OSINT #IOC