Emotet C2 Info - 10.28.2020

# ------------------------------------ #
# -- 2020.10.27 Observed Emotet IOCs-- #
# ------------------------------------ #

# -- MD5 HASH -- #
697F802974A17417631F7CDB18CFDC04
F388B7DB6E52C336F27F6F7C0324EBBF
AE0C1D0CD4E981ABD936C91C244C194C
6C9267774DA2A2F1089DDF939B43DCE5
68C9E544E8FB8519980BBDFBE0A60953
E02296BAFD7596B19D2DCA94E4515A5E
74FB9D10BA43021B578E45D74A22ED4B
38F315ADBCB83736E6E20F713E171BCA
DCB08863D84D5BC88EBADD5C07CA2BA3
485E9229AF5FDE399E588683DB795A3A
CDA636925B7818FE1FD4084855F33A89
D69DE0E158399955CFDB552F2AB25250
0E37CEC4DDE9AFADCD3BAE16801AA736


# -- DOMAINS -- #
hxxp[://]anpbodysculpting[.]com/wp-content/themes/twentytwenty/c/
hxxp[://]biharbhumibazar[.]com/wp-admin/D/
hxxp[://]coolchacult[.]com/wp-includes/i/
hxxp[://]fit[.]develab[.]mx/wp-admin/sjai4FA/
hxxp[://]jeffnissan[.]com/wp-content/N7/
hxxp[://]jiehost[.]com/wp-admin/6ZFh6A/
hxxp[://]khoedepdn247[.]com/remington-870/5DNY9x/
hxxp[://]mueindustries[.]com/wp-admin/D/
hxxp[://]nanettecook[.]org/wp-admin/x/
hxxp[://]neoconcept-ci[.]com/securityl/cid/
hxxp[://]new[.]outfitsbrand[.]com/wp-includes/N1va/
hxxp[://]odmova[.]pl/retranslate/OqLdry/
hxxp[://]personalizedjigsaws[.]com/replace_img/qG6D9T/
hxxp[://]scalarmonitoring[.]com/wp-admin/js/widgets/S0A/
hxxp[://]seasonaloutfits[.]com/gfeed/j154TTx/
hxxp[://]stabri-thailand[.]org/cgi-bin/1GKI/
hxxp[://]tangshizhi[.]com/wp-admin/pcFD/
hxxp[://]weeklyoutfits[.]com/how-much/zw2z/
hxxp[://]wethotpornpussy[.]com/cgi-bin/TXGpC07/
hxxps[://]3equations[.]com/wp-content/j/
hxxps[://]blog[.]6b47[.]com/Assets/w5U/
hxxps[://]critical-thinking[.]fr/wp-includes/vHQWren/
hxxps[://]cuutrolulut[.]info/logs/L18FV/
hxxps[://]delightarabia[.]com/wp-content/JJ/
hxxps[://]fourseasonsjsc[.]com/wp-admin/hzu9vvt/
hxxps[://]gayatrienterprise[.]org/wp-admin/DPBsj/
hxxps[://]kramedas[.]lt/wp-admin/E9Gciyc/
hxxps[://]lamajesteindustries[.]com/wp-content/DRTujMR/
hxxps[://]ningyangseo[.]com/wp-admin/am/
hxxps[://]onlineqeramika[.]com/wp-admin/Jmm/
hxxps[://]ursuperstar[.]com/wp-admin/AAxKlbV/
hxxps[://]vastintegrated[.]com/wp-admin/b/
hxxps[://]weparditestaa[.]fi/wp-admin/72uPk/
hxxps[://]www[.]bestabortionpillsrx[.]com/sys-cache/4PE/
hxxps[://]www[.]easeiseasy[.]com/wp-admin/q/
hxxps[://]www[.]msmconsultoria[.]net/assinaturas/aBb/
hxxps[://]www[.]rapidcarwash[.]net/wp-content/nO6U/
hxxps[://]www[.]saintmarcel[.]com/wp-includes/VKbL2/
hxxps[://]zardoubbeauty[.]com/FullCalendar-BS3-PHP-MySQL-master/D/