Emotet dropper 21122020

*** EMOTET DOCUMENT 21122020 ***

NAME: KUXXJ_21_1_2020.doc.doc
SHA256 5336b3d845148e2cd8ddd1fee644595200847a55289082eec6071400c85f7bc4
Sender: 210.131.0.52
Type: MS-Word

NAME: BG3741061_12.2020.doc.doc
SHA256: 8886c93296db85f9cd7999376d8e54bfae6fef669677031ed11a516fd19e8fac
Sender: 210.245.23.20
Type: MS-Word

URL

http://riandutra.com/img/dRWJ5aN5/
https://mrveggy.com/erros/s0/
http://assecon.com.br/novoassecon/diagnostics/
http://siamimplement.co.th/images/System32/
http://megasolucoesti.com/R9KDq0O8w/MicrosoftNET/
http://aeropilates.cl/wp-content/Service/
https://mobgroup.com.br/wp-content/font/


CnC

http://73.55.128.120/xhjjqe98931p05fjzs/vy5gcg4/xnk9c5r46npb6py/m9u0qdpe58tolh6/0pv6i2w8use/

FILES:

SHA256          F66AD623E5C99273EE2FDE856F4741A6635C6457852AF21262B269FF83BDC9FC       1OCCd.dll
SHA256          263DDA254DB9F16554F27F0501FDFC54541C41C68CC575284E23C30D8246C342       EGHUGjqvLW3oCz8Cn.dll
SHA256          2AAC23F53D9A09D70A54658479317D3FB2100564ABF9E4FF4453B7AEFB569544       F.dll
SHA256          0E8DA8D050A3D11E8BB416B2116D012F22C192F7B46021329B8CAD806558232C       F3UJtp.dll
SHA256          E56FCC4017F306BA055B529214EBB6B1B7F70BA87E7866BEB764F7F81720E39A       nm.dll