Emotet Malware IoCs 2019/10/22

## Emotet Malware Document links/IOCs for 10/22/19 as of 10/23/19 01:15 EDT ##
*Notes and Credits at the bottom.* Follow us on Twitter @cryptolaemus1 for more updates.

### Document Downloader Links ###

#### Epoch 1 Document/Downloader links ####
```
<none>
```
#### Epoch 2 Document/Downloader links ####
```
<none>
```
#### Epoch 3 Document/Downloader links ####
```
<none>
```

### Payloads per Epoch by Document ###

#### Epoch 1 Payloads by Document SHA256 - All Times UTC ####
```
Creation Time	2019-10-22 21:57:00	(Attachment Only - Doc based - Office 365 Light Blue)
SHA256:
f1507db2217b0619a8c84b09b7f31cea2f721ec7422055770164a2dfe21312ba
f34bc019295883c8f69cd89246d05daee10c54665962b80b4af3bcc915c99d9a
c826f1c41bfe77405446cc434d869da1f49f6e7284ddb696307982ecfdbbe8cc
bf981db0aae3e27081f118cfb062943d8a0196beb28caa731ad41205edd04098
a366b218eacc45a2bbe4916bc2518b84b8731b40ea1384ab7d3cb3ed14354fdd
b1824e152106dcb2263b05f8264cb6f4305acae94e867e7ec9a922ad9dabbc98
8643b51b575014d24131240ec6126ccbf547ccfa6f2068a7fb2fe54a5d84455c
d22d19b1bb103beba00385e648f1feaacccb7ff3cef191ffdfa2176bcd467a0b
bddae06fd373353f28940f373737f5610c13a3be75ed2215aa237ecd7956e9d9
87e3cb42a23edd06d6dee3c063b8cd1343c8b2a7701d865d512ad3af4fc2c158
51b50b5015e7ea71b7ed72ed506fd09878868485ad38289fa53ce2952912abb4
9f8edda813d166d677bf334b4f736bb99d8ac6371979e82b943d92bc0aea5ebc
055b69065df1794bd07c01b87e330cdc8e8e58d19bac140f3ea54064828c414a
9c7e8cab6e5768aa10ce12ba57ab81533dafd9181b0fec456bf641e5b3dd7459
0cd612694653169393aaf69bc82d235ebb46df5a679316ffb3396e864d6c2c94
e52764d1b13743ea28eef283496157365103c32ec63f75dd3af67a93e8281100
392fd3d037f009e6559c179a92b63a96d63b898399c2038cfa3679029da8c481
2aabb2a596ef72434a415a9973fdc0b593595c03ed10043f877b5dd9fc23b686
3c56a73286e1074c5225926a9fa6c98ca1c8087dd745b1c1365c009377b330f3
edba6d672020a70a99566c2975eda5c29282496f53d924f1acaf79a4ed98a002
b3c6939169e537ed50f90b435f52251cf80403557f7cf114f3108d5987cc73db
94de8cd0000bd5ffca0ff9a06d788abcd9a8d1c10f6c895f4e31db644e942889
1496f3f656acf26b6387fe6a897bceb1e082403ed4bcc1dfbc9f011e53a29e00
3709331fc88b2274fc98493dc3d1df6af78d6d04c2391e90124d4cc96977d508
44bc489b19a4faa07304a4cbfe1bdee369fdcba6c64f042ca25b1c07bbf31b2d
408512a9c017f4ca89f78c14b1c285fc9f97708d9e032ca74a5d30d761c82f9f

https://www.astroshankersegurukulam.com/wp-content/ei5tkc20885/
http://www.ayamya.com/wp-content/r3237409/
http://1088a.com/wp-admin/361349/
http://www.wnunisa.com/bcr2/ydtwavn7148/
https://jiodishplan.com/wp-includes/jj581/

Creation Time	2019-10-22 18:16:00	(Attachment Only - Doc based - Office 365 Light Blue)
SHA256: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https://mijin.xyz/wp-admin/qzx869/
http://timepassmasti.com/menus/5p71088/
https://starbella.xyz/wp-content/8bv49254/
https://mo3lmk.com/auo6s/hl73v81840/
http://lengbin.xyz/wp-content/nin02302/

Creation Time	2019:10:22 17:48:00	(Attachment Only - Doc based - Safe Mode)
SHA256:
58c738c4d44486db39cd806266352de19469d02ab61392ef4ff427973f074b13
76ed97661aab1a12d835d0bedffc6a806fa6705089746ed3ec272f66711a2571
f91820204aa94e9a44171bd0cd5ed351757db4ed6788be75bc2c8371e05f0513
b8e0436eece4b0aff94a66cbdc664b3c6c6bfc64d77b1fc3e7bbf03b8d87a510
55219ee98096587de32307bf5ae82360f665f91bf16bea74d24be1f7c386c475
c5c4fff72ca389828f269b6dd0dbff197f2889f47e384e6cb423545b174554ff
50f0745f2b208f3cdf9e43ceaecfbd8b820da1d230cf6390f56cb40d84592178
c77cf58de14272069d64594d01ec1fccb6b5e7ba0c3d5dbf30e4622816956188
de1eb4b57a257e2276089c56496f6005d7f995c58c6806559fddda4d62af1064

http://timepassmasti.com/menus/5p71088/
https://mijin.xyz/wp-admin/qzx869/
https://starbella.xyz/wp-content/8bv49254/
https://mo3lmk.com/auo6s/hl73v81840/
http://lengbin.xyz/wp-content/nin02302/

Creation Time	2019:10:22 10:42:00	(Attachment Only - Doc based - Activation Wizard)
SHA256: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https://japanesepdf.com/wp-content/okbz7ps01/
http://faithmontessorischools.com/wp-includes/nq64633/
http://chefchaouen360.com/tmp/meecpy20181/
http://iltuocuore.com/wp-includes/fyu245/
https://www.yildizlar.net/yildizlar.net/3pkdr8b7881/

Creation Time	2019:10:22 08:03:00	(Attachment Only - DocX/OpenXML based - Office 365 Light Blue)
SHA256:
ee16a8b5a7f9487ae15125674a21f992017b8a9dbb15489496dec42c2ca399c2

http://vicarhomes.com/wp-admin/utvny1336/
https://www.rexprosealers.com/wp-includes-srcbak/m36am956/
http://safarbekish.com/ticket_pdf/gjb1kj16/
http://amzonfun.com/clricns/cvcuu8/
http://daytona73mock.com/ROSE-GARDEN/n498223/

Creation Time	2019:10:22 06:44:00	(Attachment Only - DocX/OpenXML based - Safe Mode)
SHA256:
44b53ad2bb4c075b65eb5885897582093204e1619fd4d6d25cc8769db287597b

https://hazelmobile.com/wp-content/s2695/
https://www.rlhwood.com/wp-includes/4uvlz44413/
https://www.thegothamhotelny.com/blog/wp-content/uploads/w925576/
http://purealeaf.com/wp-content/ydhtsy9970/
http://srinivaskasojufoundation.com/wordpress/7ao64183/

Creation Time	2019:10:21 20:07:00	(Attachment Only - Doc based - Safe Mode)
SHA256:
d6705d1bed7581e804eaff7ddc5351db04697b80f4a1c5b49b650470a62e29c1
71ef75be753bdb89289265a0f49ac12f712ce27ac32253ad4b0cc4183a0853c3
1ecf91e6cbc7d2b5707936b2efbb9af215973aaf701408c0689908d96afc37f1
6955629861663cfd5ce4617dec36f6a1806e6b2fd8506a3ab50e50ba67071ac9
52592a089f978d732d677b9587f5ae0883609c008a4817b89cbaf8534f9b4438
189c8acc547e65997d5e0d8291b163de550ec9497d4e373309cd9fa0bf15402d
8cb4075fa4dc7aaeee536abd05b1f0f73f0f2ff4c7ccd408c28fe8662c04f5c2
3d31e735314d9843da82d79c1f955b0d90b102c514b3426e7bc84bf89a7d08f8
bec41f88b4f083d6ee8c9f12e71ad5e368d92632c13239c5741727b6894fc42a
195ccebab31e64501db45687ceeecd83ba081c126f4df7047d8b497ad4e40ad2
ef52083687e90a1dc042f853f2cadf8921d70cbe5921243327d03fbc74e69aa5
948c55729449dfe6784d6ced61d102a89c1b3d459a6648d7dba1c8e1a9be6a4e
06489ae7bc99d5383825c2fc94140559cab800662ee583db23c462adb1668e49
a911c9e582a5ab455a216fd4301a36c27df06187fdfdd4053a96f822291d4f8e
8167ef96d4e7fe9a7538b409050a9a93a79a98b5195f4fc324d26350405abc21
86b79536473a44ce2a57b9467f7cbf0a0a97ec0b04ccf71912a577fcb4d91f52
19814dd4298b13c018e820752dc1681c5c1c6121dc89a10e3c31d7b740299163
a3d7bfce667ddc7e988ba6ade0651ed31fd7657fdacae1908920c55373dc8b87
0a23a54a3a34a2be0f3758efd0fa1eda59030edcdf53f855e83e918d170a65e1
9420682db5487b725ab77e92894808a72f48048cab91b183cdfd1bf654bf86de
2c662b9ac63ec745a2052e9b66d255874f8f01e5366d08c20c2f54d1dd2c44ac
3e2ad7d8fdc5bafbe0735ab8b01f9aac2c741c88fa2fe39bc6d6ab39aceb9a6e
9231df2b3b1d270bcf3b7d120020b2a1af31947b0fb27e567ababf7ec204a789
dcab5382a762cab80df14ac6464e2bab96a7986ae78901d03282b8fdc67cc3fa
bd33ea7de15b813918a093ac63e3acc7692ce9c1e5cf3a0d618d5ec8ef722a89
c86486cc2bee91f39980baba494d306f538e9221686bf466f8c7a6ae3aff89cf
e551d6c86b5a719a874eb215c491c9ed0795e1ed732c910e6449165aea9352a2
2c2fddf1a93d09232fab912175787908a060b2117a83f2fd5f9e1340fba6b1cb
bfe1ee3b2c340b8a262b510bd41cf40802a5f80164847636dbc89954ea1949e5
d1ef467899fb49b562a3aa83510b01af2ed3137c3d319cda9ac1ef4cc819262a
b037a72ca3732a7ea44eac7028b9443a76e9ca311683f4b6ffca6cbc4bdf9425
9356c9705759ad65210d56ba16e4c2569c30ce927321bdaf6b0c2fa27c5cc3ff
c7b532b79dabb8b50f0d51899a29533bf89eac8f6e040972cb4c625b7ae67b11
ef52083687e90a1dc042f853f2cadf8921d70cbe5921243327d03fbc74e69aa5
1cc24cbe4d7e425c08cdd5a8c20cda5a568c6940864d43a1d79d6379bd5ac8f4
948c55729449dfe6784d6ced61d102a89c1b3d459a6648d7dba1c8e1a9be6a4e
86b79536473a44ce2a57b9467f7cbf0a0a97ec0b04ccf71912a577fcb4d91f52
9231df2b3b1d270bcf3b7d120020b2a1af31947b0fb27e567ababf7ec204a789
fad9e3f1997aa87f49b1132a2cec3c68da871712d1bfbe573a088483a27bd86b
2c2fddf1a93d09232fab912175787908a060b2117a83f2fd5f9e1340fba6b1cb
095508a9fab12900147f0440727144b9e0665afe1b54cda02edfb64cd5363751
8cce6cd1dfed4a36d1bbfeb56454253e229b1e7878569483bc8f001f3952c3ed
5d86ede5b04a4acb672b84dd8f280790a74aaba1864ea1eb0e5eef930fdb8308
f4ce8c9eacd7c1fe81f986dccf4d50cfb01d2180b9ca471a5ddcf2a4b87d15e6
c463127da045687801ea0e36499270352ede314f5ebe7d4e658f5f26e1e2a882
20ff13300acef7f85fe407f73112091b810f4d4cd94ac453e726e0b5b839e4cf
fdd19db3a05c961cb33fc68400727591654b79874e4616c068a26af90b2a81ee
7cb1a49062d6efc5f9506a16c392e29ad9f64280254d70e7d818efa41668f4db
5d32a058beb7af0c8c606e558b025f9ac13c85a93645ef1b5a4330ef91ac5f82
210d1e099cf3fe28b6259ea08375972fae1145b9f8cbefd34d92f14280272d5b
8665c16d431782e5c30b2ed54c97212833af166048ca88d99a97f7af1532f95d
b2fdbfebab4c3d209110682ed7681ac3f157ca382b2a2b6dbe95ce70ffcb915f
e6b3d6a6591e63d814ec23356926af0e5337bab1ad5c2f5177fedb157ed58a84
38d7d0616b7f00202434c3e3cf4cb96f5105aa9f8c6da5ef6c7fc12bb78bd9b5
0d244ab90a6a0dc408bcdeac7f99bd3f218e3a558f306318c587f6e109c2a579
d51500d597947538503f48f43235b3aaec192cbf01759f4c0ed1aa21ee7e2238
2e15d34b7415fcd788a4afd2a8e048ddb09775078d41ac21a123ee932d525ae1
f9fce6efc0c3ce264911865b81cf94abf8b24de8078a3d7c9b561337d71210e2
54778e263ac0e0c4f92cb89b627f6becb3f3714ee79498f709061fca1f0c2a4a
e2f5442f1982e2c59f53aba09a5bfe7393fd437d62069ab92605a74e3b04d984
ab50e2f38bff6a665730e18cfefa4155312509b56334117a80e8e84e49abe6af
a8f86d0e50a2326f69e0fe1650efb98ae62c8154ba64eba250c38a917df39538
1b3a02cfac2df685a3382c4c29540ec6f319cc4b1deff295708e6299e238a066
6704a7e51d99a474c16ec4a2fc7e83d5531d0373a18736b170fc8eed33ecb764
bf105686b977862aceb0259ee320dc34099ec82d412b02daed1549af79304cc1
c4a2fba67b8ecff7f02d904ec7e0b488a365f342e068ee9b0f57cd94fb883908
8012cee8510b492cf3b9764e18476684226dcaa8f1fa052e13804429aeea7d21
d5848dd3a49d24d2aacc5d96609d7877ec21ad3a3ca17ef682f62fa367243067
6906ad189daa5c166395b985c1349671d8f546556a1558d597a49b8bd90a4bb0
5c6e986ae9206fa0b6eaf14d6b78fc7c0ee38240e0e478de0fea60ef454b6bee
4b28959995fb24f6b7c67f14264b590635909b4d9c5a2d2102b6f5c2db2adfc6
6927882528b76a1dbf25fc17cb4c1a3775bd3de0311b7fa490ad32d866615fb5

http://www.solapurnaturals.com/wp-content/fhh67750/
http://www.thevisionrecordsllc.com/wp-content/qpy348648/
http://greenstalkproducts.com/cgi-bin/q0a44274/
https://hsrvn.com/a/r03/
http://egemennakliye.com/wp-includes/z3iw5037/

```
#### SHA256s for Epoch 1 Payload EXEs ####
```
688333ec672e9d1e7c0f29ebfb25f2fe070302f32b5981871be523ca5f2983fc
a3e8d01c5afe28891fe1d23981f1e6eb8caa4290e5e1a28f1f376050bde6b235
4755bb4b100d79d9731888c089f005f2edc84752093daca747ee457010252f3f
101e2b5cc1090847367f311928dfb4fb599378f12a3f26ddc6b271f726ace9c3
6c66fb184a28057d2e9ba62ba69ad500f0b27b07eefd235ec1e339e441ec40f5
92218de91127f7e0fb6b8b8be0af9d3812236a98463e3416873289f70ae3cffd
7776c072ef378f12553ae5526e06a5c317efa4b81502171b1293b40394efd600
dcf191abbb7b6299d32cbc4590e7649ad0e7818d5e8a5ed98fbac6efd975dab5
71e998b54f501e1ff6364c24c084a94b7c007bf59728cfbad8c21c4d36a88901
1621d7e621506e474f33a523879c8fd3e32eb3e664f59ca7aa3f5dd4705ed43b
47405857d7f43dc1340e4b61b9b65d39e77457733ff6ce128563edf4836a2463
520a784aa2d6457ed880885d34c23eefdcf66c2179d9dc917e9a817be7b55b5a
e1446614d1193da3afbca381e6d76337ebe0930064a4ae85194c9a48c1843f40
2c9e5e1c05810e20fa07083e2d8c1e5cb9c4b7cbc6ae045107794a3f92db86e6
07e308e1ab0dc2f23469d62c09f06f7c2ed1577f321edabfd746b2c53f291e60
35bab467679965759bc27435f493105cdda872d9e3b8f9dee7fb6cc6c187b170
270f0e6212a95f3af77b01a68c12fc5780d002ee1f70b1a3a0fe65d54d990272
c8b45580dd79fe34f2b48d13eade9c330a4f2d11baacbfa32e2c6b57fb8c1489
f741b46566ddbf71f8d374c67b101a28ff8e5d79cf9cd8674cfaf152274a1aa1
87f630e9da6442f11a0e14cb457f9b309d7939c7a04eb92f56583b189bb59d46
7e92f9406bbe22cda796a2a756a1eab7800e41a094c5577c69f16b366d4d3943
afa511dbaa090bf377b43dc5cabe4350b0b14436d144c019c0df9a237ee41099
0f023da114724d9d31ad541ec9247b12f9dadc5e7795d4a05d17f868bc6f0ad5
870baa8737e3a6f9b7c3efcd78dd6c8fa9c2726f005217083df2618f046626bd
524e11e5b681c15d646cdcc918d20203aa692c633b74759a7788b6ed758fce9b
650945995a209993611563da714923e82f1e0f85f5d3767b53b94e7f7ec7cffa
6a6e734764b74fb05914c8d89a0cb8a78943d979ff8d419e76b6c71509e7577d
0d32e494d3ecc6d3850d7a186fa7e95e44089afaed694e52b16fa884eeab8065
a6ec6f9c5ae1c6ade26635498dffadf558bb882383a9fcf2f155c8a099240c3e
6ae0eae0bd83ed4206c359abd734232a0488311f106b54202c808f2b3415e788
6edf33e474c080a0904ce0698627183e3ce034a9b0f1e4e23845ff53f959ef62
ad3563a736e2005dd3633462d593cb0ba01e5f16e272885b3507682b5dd91a50
e820fb341640dda2033f6a209c0b3d9621629199fc09ce8ef7f801e78f3a7c4c
4c6f57185e9b1427885feb2ce6ae31aef6f8d1f65284a749257f28012c44a16c
98691a8bddca56aa21f5491d1dcf3048851d619e05fc73bffb9174ad43789e97
28ea5899335879e9596cb974cd440e9704355eeb7feb41519e675aa4b52cde5b
43b6a06c163cd067de7a77e537ee5f953618ac3fa194fe2c4bdd3249c1b5cd39
66e4f94b7b1ae376ccf79fb349aa515a7e46c88bd446f621297fafaf3fdfbb3e
08fbb1efcd5bef2304f2e735796b0fd0b0fe1e43f4d9a7829065ce9d041b5837
2c234380f809adbc5952c8807a1456bb88b8492ad19a029e4c2f64ae314b6498
8f67ba6854b397f17cfeb64d15ba9b92229a0a61871077bd9e3da756e0188ce4
e25117ce54a86477baa7474e2a7960c1408b4be1c5a859b63b174d0dce3e6a02
d5e75e9f5a97473eb8e57fbfa8807fea6dc214e6c76b8075e31feb4d8bdca6cc
b75ff13c1504b2c0f43aff9f0a1699f0c5c059a472824309dc655995109d257e
2297aff09b007eab3fc4d4da51674a13c0f97b4df05b7ab4f28b50accac09f68
91b7b9f2b198934c77c7531010cfeb65a36a658eb2563b57ca3ae3a07eab7a1e
c71ce6c1f21175b35dbe17ebeef870847fb9809ab63003fd6d7e14f15e2deacd
634b5322713381c68b6ce5563e83b560fa897ca2fd97f2bd388f44b5b6ffc20d
b6860f136be8378836f0531d8043db95db9c7321a35fbcc906b59745e235010d
8f7e59dfd01868fe46054f48f2c6ff2e29e4e48c71f9b3a776674547666c3443
2b31133f5e18ba8f02b10a49f0663a3944584b6590e34eb6e290705174368aa0
454fa7504e882f5cc5e1888ca735441a970894f211d487c0fab0e1f1ba0f77d7
a6983585a07261ebb36ade44ed37ccf772f89bb67b7cfb6464988b4d295a6850
d37f4eb4ee6f2d02ea88065e1005c8636ac82df267838eeedd2c3fa55f457abb
97a886cf072c49ad51962a7d774aac9505bc908499a168d8ac404a057b285815
6e386473ab7f708d5a59d6c2fb25fbea1955be3edb8945284f879c36fc844c26
d1c5f81ad6808dbbb0fb38a6ca682547219a1bf15da3bb322c0016b2b519ffd8
88631ea7a255c03c2b5db00ef66ba0407f1a93e142af6e25ad37f96064ba4cdc
3879aec2e9d3885b345e67b0828aece1082d2e248963ca02570fc4aab2571eac
bd70dd632ca046be02d496542e024927f13cc156c52c122cb6e4a6e4720388f2
dd476400d6ddf41961fdfc33da347a2529c47513e71ffd1a6eff4b73aab1c5c8
82845ccda6919727c183b56ff1256cf0f3660d397269175d1fd7e609f6e0e515
df47823bc5f7bd59dade1cc405df76b2706c7cac16b660a60e159d9ee8db33d0
018af93893898ba08fdac72ca2aa37e2c692918ce9547be2eba70fc696699032
e15a1ef51905e66281bfb12b831941433521362a861170ce227562e1ad051349
36e2d78a7be9453458f516cf982586727df3b29d407a46456f6b4c5d75e9c22b
18fc7d335384461487fbbdfbcd9d797ce00ebfd7f46f06652d30fa1170998bbe
86443215dd233b23a37dbc3f5b9288e43251c2eff78b688d1f544133a22d9cd7
aaaa1a6c866fca49e5994a736598447183cbcc1ece1a959f00dcfc2f4a3aaf87
fb41feacde37830fb81c49dff5ed831c859f38388310f20c198a2aa6215ef162
0e06094c2520996e3b257027efa8d166bf5858f532a74df1771c3e89196124a4
fbf54723ce4576c60c85f4acfc0e646238c80a02b4668227f02694a9ea29f13c
2323e4d2997ac22c810cd0d7751a94f623dfa03c9f1f6ce93b646178cb7254a5
e977ff7059d68e8aaffe2853ff7cfe566879ddc3b11a200d99cc76713fbc13b6
4aa4bab06102fb6014d075c59f039f327273536a4b899a552efaafd6b28cd5dc
d478967402d8c637ffd12dfe5cea0b469b886ffa00bb93f02059ee828b601eb6
fa77178a3f06409d7080e70da1601983d2b2b276c8f16cd1fa98d4b821986986
c7e6b6a2b733ee3db3040d8971add080513057a66d314b620b91740a0312dbb2
7d840282c015c9408e6a4176500a6f6055f3d98c1afb2e40e6f64a5f3a71e65c
9bc5ed99fd13ad28eaa481e7bc65aacb036ac7988e15462ac6e907babe96705a
1d4cbd36035d89ceec228c283af64c66c6da1ef050d24884e7f7708e5c1d9258
4917544637e77dbc75d786c88aaee1f32f262b2333cd23da182377d718d61562
8cf8c520f96f8efb627f5b00894975c0edc8077d3b8fd41fd4aff64d2d2d9586
eb6fadc888193659b49dc869ea6f6394ce76e18cec9c84e2329865f42f09cac9
302e4922128e648171fbb9732de5b4e9fe122b0687201c02f46ded24615b7641
352acef4233539e784ab902fec8a4eb0cf9cfd166b8b88b2cc948ff8eca342c0
e8478a98ed99ddd3f3e62c9703d7e43dd14e4be0d83dbbc21547fb305063dd34
e1159340211afef4645dd77153727893aca0cff0892edd108f7307b9f650ae12
cce03aea665d21c97167b91ba876b0a9ce23c6a53382aa24163c2ba2fe2ba9c3
988f43e50c0b1d5533d00938664eac7112f51b965d86866ef71479574f06fc33
db4790296b70e37bae3bbfa5563698faf1f53209f4ae911a0fc4f2e24100a499
6f2d5810716c241eafe8b02d45a777e352eb069fe1857eca4a1d43ee4514fcef
e058b913008f69d476bcb3db9809415f5b8024e20a03b80246a2a5b9e8264e73
ba40cccafbfb8a540c58b3602fc3c89ee27ed6f11d3589354c8a8ed029da8f35
82f5286ce5b99f4ff1accf417082cb73cb0594708ece111feb5d4ebe7d097334
8c56297f79df3b7228fe41053ca97b825f29c93b486731d336ac643ccd9af9b5
876674e9ec748255881316cc771183924a4eb95c1edf28744e98ac9163373f7a
4823b6eef3e05fa64f66f29162239ce0141ed9fb84032145276c5417bcd34f5b
e30af4cd60cc7edd9175f5f9056a2a746ee745968ddf55b44dc439cebbd2aa02
b98fa936946cc3abcecdc72e7cf59027d0bce7e13eadf50fbcfb24839fd56afb
cef079bdc34f376ab35377a2c610877f31f49cbffe47e9ff0aa829c13f0a90bd
1efd351ea734be4585d0ae3508a54cea45a74b0ed34d56619ec5d1458c56c144
84b9d1be89cb137c05d6c6e82ca2665800ece5e0143065015357dce8dfdc10d4
efc9dcb04adaba6930d881120acca7ba08d6b016762fc83600a79ffa102afbd1
69014618d0c89b1906c513e0ebec3b06ab56dfdf022016fedd1baa5882cf80cd
fc2d055ade96152aa8ae37015865b39a3acd119301cf2f4b5125fa531d9cf964
2523bf7a5598bfe44660f153d6eafb96534f68d6da7ee4bb5d51d7d32a4456a2
9591c18f41a5a7a83743dc463dc1de5a78037c0aa0baafef20ba352fa2ba070a
4f7096c8e77008b1beb8eb2400bb0b14452ade4b15aa38417c2af802f727b1f4
7cd8c4a6f60de68ba636932f68a27167847cdbe27b081a50e9aea9d155d4557c
b3c40934f740706c4527ccae8f171bf0d860cf655f3d65ad7ae8d603a20ad21d
2942b8f5cf0a0159837fa223abac060318fb3dd0c6eb7d78322e00bd11d42202
d20c10896c62a8ce39ea38ddadb52e889e60f6cfddfe7b0a908bc681dd61fa11
42b510f361387e2d1211c0b964d1570003d044ea02007925b88b069f3148fad8
1a296b0cc8472409e80468eda13959963275320702be1c49e3f25a6403fa9a14
50f46ec61479147446ebfc66618f89564f566e91091820bd9e6eb0684ce5e152
5bffde5dba8e2fa18e5b135a0b368b1f13ae6bc1a9731dcde62bf4971d33211d
a88573b2f464f392bbd6fe3a095db5e03f0d899785bb4042475b4690892cb8d6
d7d1588c230d16b7e405602cb0e0221760240883d7a9556e28099f1957d8cc2b
17a26e996ff70f5f51f53b49e90414f80ec5bbcf49bc02b23060e8837acacfac
72f5a42701d0b6f20156d6c734a91b8fe2bccb2c83a43eded71a618be8979871
8da54a05332b19709214737299c99bd04d4006468f07ddce458a535c18a64995
5e8a5c1fd0ae787e7d661b94f31a90f0499e710f6c3ff404ad511a23550ec688
aa421285f72e5aa788964085214c6cced35329d27e3d4d6b161fd65e24f0fcef
37844022c6e481d7cd062a4f61e165e1a30225373f29834ac285c3f1f3c50698
414222932026e27bd7d0884d7b4bd28844cba270554c94ef75a711ee61ba9c8c
a5d930b0af409c7e72d779a0d19af277dbca89a6490bca74248295fa27e6dcc5
4759c4e78964555efa2b8dc8a68def4fe5c64b1d83e216278d24d12333dcf94c
2ec78f3c899bf588ee7d0c281f3cc67e7f35b93f1cc95f6d32a08070ec3a4bec
12b6a4b86af50ed7668ea231af1fd0dc6b4ed45e1e8022666c927830b4497400
5b74fe3f01c6be92e92717e6d9eea695755a3f77484fe40e184320d4d027b208
0b274ce88413807afe9f17cccbbca551009cd17529fbfe03de9b01ccfe64617e
9ef513ef66e54865b723caafeee66068007a9b720388a7a12397ace0c55f210e
ff90533c9ecfc993468b1e99b99945742290c95c80e3b6712bbee128f44c6d46
58ec1f18376654fd33c6cd5f8f7e09663d08c053b85a4f93c6d501b7bc70ff0e
f612be0ec9e65c949ccd663b406e9faaa7ba037b37fdbb0ca84ee0ec69aac77d
ccd10f2d4623bcd5164a04ea8015b1c6d71f73dbbb67946f20ce7fb616877b83
57d5cce7bd8e265a0f8bb82e7a03beea3aaa94f37b53cf5f88d578b1d5a03d56
e051c38495c21cfd0df06f959bdf981c2314d93adcf0c23465ba486d191c4a9a
b70f7293ac778d845984a2da6019de5c87037ee155d49c8e41b67770cd9e0d0a
0ab964b8281c950240e8abc2242e83cedbb0a2559563fc4da85226493bea658b
5095a0379d00a762a87f55e492106c946e66c11407a1160e32deb168fee4e2b6
d56337c64a6e59cd9bcbf05e5c351e79e5f45c63817f23ecca38a46af84992b9
3bb46863b843f1b7eac90a36283c6ec2007aaf5b051623274a916433f498f2ae
c9c5fb9c69bfdb2102b770746e874a701c847f06b1c89e4f8fbc77c10b2e7d53
f34e8b5f27e38f0f7079f5fa8e62dfc0cf6f4b70cc8b16b15899bd54040aa10a
3f2e4eed85c64700ee4bf50da7f13624404a8f7ac5d86dcbb5bc5cb21c3e50b5
9f85182a1802574bed173ebcdb9d1c68be4c492a7d274d6b09d1b8c510805340
c94791dfc6279b01b8e1c35ef45bb25dbb4e65fd17be03888bd38adda386bb9d
ebad42172512b4f46945237623cb9c84662425c9ff18a2862f0a069b41a616d8
c77f66cfaf0b5a51302471bfe1b5631ebb84cc53dd190c446284847a7f3dc423
b1d824a2fbaa9ade48c6f4324538a34d936352d688e971f17abfd93e994ce086
859d5e9f4343e0c246bfcac3cc5f835c5c9a2bd1233e082b59e127f2f28cc945
8ba83e1b6daa32f7d01dcbcf3874ce6700f55a09d9dd3bfa2acd7eca6de90daa
23ab7038b4cde0ceeae784f32a24109a1a084a6c6b4945b171df31b9c365109c
e13dfeac19560ff78b1941c77b58a52aec186c0668ccbce416e1e302c5f30def
4c21da73483761716ceaa4fe6c9e810aa1cca11424b494bced5e2efba54c80ab
2ec72bbe9b1f99078767994edecd5d49b2f31eef4bfbeaf6073f8fd33e33ffcc
aa4c3ef6e56e4df89cbb18c300eb2c6e5dd0d8972424dad32e888d8734be6858
80e4a98c3ed36bda8da647d5192e2665a82afde94d76f508c6c38146ca2b0018
a4e1449b490041a49d2df64bf44750320f3db2e71eac3111dcc6f0b94d980b8f
bec2cd0d3b413f0c941ce39a5bd13923a01b2521a9459d6040e29e21dfc83ba6
6724ef9a0af6e06c43e4cc075f4aa64715acabc37f6c4bc48553387690c258f3
280f7f18a4c39a075f20ebe8f4e4381b79c7cdd12b44900a7f2ad99bed7b664d
5422e884d46f43ad0cb8d9101193ccd0f7b8a537b8333c5cb42eb5b0663cabbf
460a2f11f45d6ad524df532c3760a28d928b18987d8101aa276acdfff6632261
3c9411ca977369f76078ca146d74e92c17bd76cdebebe8a04936e9b8e60ed2d4
3abea4fcc2d8c87e5f81e42fd3223deae05e366175839f81135558b5c971e27b
377b0553879abead63a133e8baa474d9e3e8a9134b9101515af62cc3909080b2
f2554e5225d8067d98372a7961d86d4d7792bc85da01b56b6d57d140075286e4
12da0597dbd76d34376e8e018d56be1cfc976ecb37418880045f79bc9c3d9440
6c462ee268abf27b0cdc4966358738321b575e5811f1c2a1fd7a6de569038ec6
1cc23d53fc1acc9cf36d0b7f399066ee368904a3c5cc28ced20adee1f62e2b90
a6a4c213b019a7dcbce1909b4ba5adba76fa27d0f37ae6edba248e98fb92010f
5f43b0e37f183f017cb76449a2cebc2e88bad19d17e9cc680ad2e1ba2e952d2a
e43d6d4a65e95e38d14e1986c26b7e69c260a58ce60489cc4ecbaf1f1f7f7fec
eee14604d8e33c4adf08e35685a138f5dabd3d363ce9fe208041b000a64327fc
bd3e13dcd8d1108b85189a4c66a051b98edf4ebfce9a04d7613970abaa840946
76982f02f21c2e5539c8f508c4bc28a56d4e526e77458070dca4a4447cc88847
cc3f26bcdca4cfc6786744079ff4365a9a71e820d23f8d7752b959b749b036c4
3dcfe4f1a4be07d5078b1892693c000b20c32c3c2bb585f7c6a6ed921b75ca1b
a1402c0727abc4d91bb2594e2a2ceeeb88987f378d8f5cde74a0c9ba6f0c3eb5
11fdbbb3f3809d38075904a1961486b43b23b25fed2c5f7a890ff84f7c18b804
2474870b069e74419ae3ead1b26ce713144255b46d9bf642485df8309724c202
bfc3176b61c9897560f4535697176221bf4711d4eb27f9fa3758253199753a91
c60c3c124afb22bf12a65a6d7b1a926ca50784f6f886118edaf4f296ca82d66b
2f359ab1146978797bfad128004837e7f54128309b81041d9bc35d0b94e3debb
095a618026f973d49955f1186d8d4f8d9b595332bd2f4fd8393a2aa5387c5bc7
af859706fe942c107b311484bae01843902c1b0dbf77eae9a2e113ba237975e2
8f5238debef56e9bc1c6daf262e3ba1c86e6f34c9e8d4064eba570b5ee51c207
b4712980ba1f3fd8f4a08368e428be81f9eb2046fa838be91ff19b6108d51301
e5e6e2707cfe6bc3c86c188acc5b75a5b841732f82ac903b37e68688349fe5d6
44dc611e753b8733608fc3a842af73cc12dd60ba6cc8e627ca84a0e1605a0e05
ee06367365c6e6c1b2e86489c6f77c3b8f6a22443ea89c7fc2ca80258523d8e4
f17def5ed5223c5378c55c5a460f62cd872d0aac00266f1371a2fba7b3c8a68c
4cd59e3703badce2ca5345c729d81b0f949cd7defd4e56cc4b793eead7964231
27802dab566cbbc19aeae2067d9f2f6093e4a15554611bc8552f4e1950890cf5
0f3b2bad30995b99bb28c7a028fc3575e0714db19d1a40b2cd95acf28056e365
2c96b0b5d36ba41c4de78a993a2e66b2b76a1b73a7040cfe224d3a16dc5c6b5c
f01a50153b22a5065538771fb49781fdd6e463814755735d8e6e829a07dceffd
b1664fc57acebb2c3c6ac22171788c58f1d781b5d60dd8eb5d0b20052c3d4490
0805fe46ca17c9f8e040b7f92942d4dcf20a52c4a7cefa8e042fcff45d1ebb60
17602e120dc7d957e93e6d27e3d6f4921cce5a80fda0f056aa5bef0fe899aeac
aff5272c7eeaf7e6610d9d30f55889738f85536769281fd541f23aa1ff42537d
66df6d34fa854c016d9d24d655b308dc72b46f4f716e054d5a35e8855666bb1c
ffd9bdb860dba987ebc55ab92c5344e85853449bc3b7c31934e4e0787ef1c37f
fae89e02ea4a6af112f2a4755b9081a4e0b0fc679785590bdbbaac00016197b2
844e2d978634bda9cb13ef7ddce1e9041be829e277d77ce0d8ed685727896436
9a0eb48ec3028adf7ae7563af77ad404a788857cbd78b606797eb537a085dcc4
e0b97178a1dd0b9d0c0fbfd96aec804dfc6764f8f26a0791880a2979223097c3
bcfd7919db667e06f65a6ea228f7e02e4ed0f226dc02bee933e6efc4a64e024b
c43c1dabfcaa14fd46d77b489433a13016d0cb710f7198729c9b3728a6ccdd02
6276c7ed5e961528b6265c20dd2fbca237f69ab68bc06e870c9982956d3d1bca
77f609aacccfda0474b79cf96f7c8bec7ec8154a937d7e3239cf80278963a198
a59ba3e32bbd22d61e2f32e0bb95e7942b430ff18d72e9fa98f5b2a8d1932db9
8d1d20a147058364b3194dbd90c2ae81d404eb1697efec0812bfcb5f0396d888
8f0b05333d3db4a7dd34f52d4a2019346f3fcc23544190e4a65175089e9567e7
21a20adee38b76f68d025329ea31a16e2948bb17af818abaf2cbb844b0f6b1cc
9ab3a6b3c3a39ffd8c6fbe3ff4aa8fd7f49a08db7bc04e1540b63db83ab08af9
c87d47271f5ac87b2663d68e082ed4a1da47b37d430cd7d86e51f9a7f70b4369
4d589bfc32e31cca7a9d303fb08cbbc8a24f5f20c8bcd78a834dce9ca16fcfe4
6965bcf0d5fbb9bc9e777862b61f47dd3e8050746a3b7b77f59be84152a06da1
e5a9727afef71b7eb30f4c13031885186edcf7b93a232ae98a64be1e631c872d
29f694ecf446aef2bd505ab6c98e198fe1d56956757abae03086a50f653bb58c
c7f456213a284c1168679616e6a0ab5b1357f9b4635f4d63925230323998aecb
9cb3dd47b895dd496de2bbdc586c20812aca07e861466a855f2b86059ec7fe81
68807d93c041e4d8b424551506b7a4064e6bdd61824e1af3e346828b15549594
6ca62b2c5293be096b4d2e75401f76320ab7f89fdf3720f5308cab607eb549ae
91492b9919d273beca19aefbb0df94ab241eb63c26c6885116ed24495651dfd9
778d5825e843d5f0c3c5601eb07603f7e7f2e63d7ad726a7557f713418661697
3ec9118bf1436462e99e0dd4672855331a9731a0f69bc700f247fc19eb094999
13d5b7738398503ab69db7801ebd25473c5da6258bcab358946637fafec53135
fe3245dc46f5f549a4776d837c6070336e6cf52905d5b06ad564cb80b5aa41b0
fec0db9c1dc5939827e83b53a6539b7897ecdf1215b25936a523c7bd3a29096a
b91626d77d1b7802f63b77d4e2c625e3a01fb4e730c3cb199c44b95f2938a6b9
515315c1f47a1ea4b9ebc4a3bf1b867b0ccbff21a604e3bcc3a6704bac69d946
402e5dd743b4d877719ece877b95721bc60252ed0eb1c1cd540d55ba6a9bb8e5
b63abe04760961e18a3dfac212af3c19fe4003ad6d9022783e2006e840173662
4f771bf21e05da53f00381e555c3086475f6a924cb493d70349a7574de7773e7
68efc6f8b8929d32130359537d4f6156e26e75240f37e27d7f8d5aa6e179497f
458ff5c10ad95753c4fecba50fb7fbc7f8c118396337da2b0cce2bf239e3d69e
45a486443066410516d7d2af2bf0e5a1608818199d7d863c3c158f69e5dbc394
8b8c6a69ec2c7015ec64dc87431e4c4bfea9d700800b005e46db2a4641a7166c
57bdd32f93ac8e5bfc144efeefba04c551f22e12f8388229828201ba3ef8a0bb
34acaaa0bd1550836d6267c31089ef748377a13b484cc3312243423061e6e821
7fc7e0f6ff1183a56ffcf572e200971c4eb918e3734de34cf5a85ad16432e4e0
dd4a195a747cae278e3959619bc5827f54cd88e1bba4e7d7315c4214ec9a6975
1e4757a8f7a69490685e821306963ef473505c060bb4518e644995d9ecb3b412
016ab43b32cf3132d4e96cb3131281b6cfed7595e7bd6247953a6f664b03943f
6c77b24f61a31148f5ffe7cd19d423cb15bbb44e6a58f885cbf7c7925a00cf2a
65c3897cc0f38053c9bff3a1260ec73329e2d8b6ac207a6488455d2765bc354e
4c8b4fcc1eb459b9305069fa43363b0f4507b8c1d2f7b258cf88e3c568294e7d
01ae044d1cd374144e350fa3866e2b2e549f27268e394fcb89f726d7c7cb0e26
4142f6768c440ebec1f860d0f74cf3d776ededbbe0d162a15a59f6d4836c2631
965ef0494e6073fe832967fde801119bf9d82de7971f11b0113be76e30238457
1d57af094be4e5fa6f3902c437e565c0d9bd7f49de0a7c4bdede48fd00a52fe0
c48e290048bedb294911e33086cd43ef86a86809477838c9e4ff9168122b3479
8412857056652dfa35a182e9531bc2b4cb262db5116a9914455cf2e62b9ac43f
a5825d12569d57a63589509b1d8386044a480e243bb71efdc7419637cec9dd5e
d11c26e9fdcdfb8a58e17cf3e50f4b46586e6cda18fbad2aa31be4575545c6bf
a5bcf35613bb4e4aa9a04f7d8d7959543b0fa99ceb84a5346ef315fa8371b13d
ef66aabf0f6b1e5f7b52256a5f889301b3c20ed6ece9770448f60683e0ad518c
2e42ea15e6dc5e03ff186afb399d55b50f3c6bbe3ce217c79635606d61de9f5c
9e545579f4bd9aca8394c1d228891ce5be9bb3baeeb0da2b56181ae97164991f
e88332140da9af0857e96c23caf7ece36d5cb44ead7a48da1acbd21d0d54b2e8
c781c3c6baedb37cc7477bc1dec6d7c20717756aaed7aa03e6e420d20d2bb670
609235f83dd2a42c5194a0c1142d0ebf2d529b9a0197d701c41fa06f72c00139
16fa2f054a80896ae945523af2a63a36fe65c953f63cef52e4e72415215d3bf8
108f3989f07677dd2d1daf0fdd79147e2c3c01b29e51f3875f26d0e04e3e7b9f
5c8420f7666731f304a4d417af2e8eed59ee28784578eb6b5bff0fc58cc6b827
8d04c8cde0771b3c2f39911107881891329b6616e909836d24044820f76ab1e7
aebbf46af9f35a520a824db4b0492b008a99a1c5fa07a1e7fbc36d9209566258
dd74417e2254e31381123c9780ee5c9089202f41d5efc8321d12ac61f39f7395
1c8af95deb2a803bcd37b670f214bf03c863a96f34e90230d043bd19fb3eccd2
4db2ddb4f3a3d332356881eacdada0d047ccff405a3825853c56b54d27437a7f
0b71711239e7abbb416900aa990baedaaea5d894d5c18aca4e51db0ecdd35496
3180461c4830701f13cc6658f20dd2da39b61263e99940c0a9a2b679999ae788
5b37868585683bbe5e403fb4c84e5baf9b7f41609217c742e30cf8458ec14c84
5b37868585683bbe5e403fb4c84e5baf9b7f41609217c742e30cf8458ec14c84
79f1f2787dafbd14a6c3e5e9799c894a1eaf3d0edfb3705c0482e1c449653137
9463afeff924ed99269084654fb9404ecd401e726a8d442a67145e9ad0b3ed0a
7da3805b15d12d98f1aaa96bb4a4c6bdcabeffeeac4fa6289ed90a4903b91741
4474c2e87fb1292b284eaafe924e11b77c29fa7aa9a3f5e346f408da40b129d5
40bce9dfe06320dd2956552c845a2ac0d74cd3794f4be13ddf7420c3809c50f7
57f44d9b2820f0b4ac48a58f51bc1ecab110f5346a2c72609d1d849e551a2133
e8d1b2fa5724543ff8efedc38e11af75ab1402f5b4f7a16baae7522f0b28f78a
e87c5a62d2c1bfc3b8e85f9207e8b176f2df5a7f02d39a1b2a4a2d6e9ba0e785
513db42db5bd0af5d9abf6c7ed6e9bc2217a0799fd8c53d102af8774a1c446af
09e08757c25751e2230128599ff1a4b577cdf8245b62c2a35894fb98b7c87373
1defde0c862c0dc80e8e71ec63a3962d6df48f63728dc1cb8fff85eb41f6c48e
ec76876678c33c55a3afde1845b1689fbc380f38b118193df20e754068ea3162
1e077ca3ef25575929df390644931ca4db3178a392310b19dc62506ee64c0e1c
90af6d1efb232ec86b5f7485ef9056b1f8a31f220885855e16d6b73417f7626c

```
#### Epoch 2 Payloads by Document SHA256 - All Times UTC ####
```
Creation Time	2019-10-22 22:17:00	(Attachment Only - Doc based - Activation Wizard)
SHA256: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https://shreebankebihari.com/wp-admin/kbq/
https://traininginstituteahmedabad.com/wp-admin/ppl/
http://bayhtml.com/wp-includes/3aqq/
http://alukorwindowsystems.com/wp-content/xVD30oU6/
https://vncservtec.000webhostapp.com/wp-admin/rccl/

Creation Time	2019-10-22 17:42:00 (Attachment Only - Doc based - Activation Wizard)
SHA256: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https://ariastock.com/wp-admin/OiYUXyMm/
https://ddrcsangrur.com/wp-includes/o8b/
http://www.rbcfort.com/wp-admin/rd62/
https://bobmaritime.com/9bm/ldr/
https://www.todofitnessperu.com/wp-admin/3wtne/

Creation Time	2019:10:22 10:22:00 (Attachment Only - Doc based - Safe Mode)
SHA256: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http://www.eskisehir3d.com/wp-content/1k/
http://intro-app.herokuapp.com/wp-includes/8fLZ/
https://www.bestimulated.com/error/3g7/
http://zhuanmeng.net/wp-includes/cr2gkuc/
http://aspirecalgary.org/wp-content/themes/bridge-child/zey/

Creation Time	2019:10:22 07:06:00 (Attachment Only - DocX/OpenXML - Safe Mode)
SHA256:
2ac1e1a61af9e48225aca780d1302d9bb797326d770833ad2cc0a8c09859bdcc

https://boom-center.com/wp-includes/Pp7qrhF3z/
https://bazarche24.com/wp-includes/w31e9rf/
http://bigplan-alex.com/APP.bigplan-alex.com/zvsgen/
https://berryaudits.com/ymgogr/O0e/
http://zetaspace.tk/fmmmsqes/2xu1sn0/

Creation Time	2019:10:21 23:03:00	(Attachment Only - Doc based - Safe Mode)
SHA256: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https://zh.sg/wp-includes/qxlcre/
https://dprince.org/rising_api/wrN/
https://days14.com/wp-admin/q9/
https://webarteronline.com/wp-admin/nq5/
http://connect360bd.com/cgi-bin/q6GHjb9Ua/

```
#### SHA256s for Epoch 2 Payload EXEs ####
```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```
#### Epoch 3 Payloads by Document SHA256 - All Times UTC ####
```

Creation Time	2019-10-22 18:40:00	(Attachment Only - Doc Based - Office 365 Light Blue)
SHA256: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https://patriciayork.gq/jaxnm86/jLmMOOdb/
https://bprint.co.il/catalog2017/rAwBLsgU/
https://postalandcourieretc.co.uk/p7los/28xmt-0khzsp5s8d-6136326/
http://interfacefive.com/wp-includes/LSJkGf/
http://www.kaanmed.com.tr/en/wp-content/WYdgTaSsr/

Creation Time	2019:10:22 10:41:00	(Attachment Only - Doc Based - Activation Wizard)
SHA256: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https://glamtalks.in/0patwzsb/nERUpLQIJ/
http://threestaraqua.in/js/ZhuvWJ/
https://jepri-link.org/wp-admin/q620mvhgsg-xjxla-94724095/
https://qrtalk.nl/wp-content/yp5ol-n2x18-0827380177/
http://www.e-bilab.gr/wp-content/uploads/mStIrflpD/

Creation Time	2019:10:22 06:07:00 (Attachment Only - DocX/OpenXML - Safe Mode)
SHA256:
826fd7d7274f5652b7e0900ae69537e9a599071bdd8235d950c44b7d21e7a48e

http://mumbaiedu.in/wp-includes/mXbxEtrKd/
http://thepressreporters.com/health/2l51-w1kc2l-278107/
https://nanavaranisatis.ir/wp-admin/jx2-fpuo-427148426/
https://stefangraf.at/wp-admin/AKpXSCGI/
http://www.ramper.es/sdlkitj8kfd/wAdBOwvJ/

Creation Time	2019:10:21 21:25:00 (Attachment Only - Doc based - Safe Mode)
SHA256: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https://spongedesign.eu/wp-content/xfULMXHj/
http://xn--80ac1bdfb.com.ua/wp-includes/iKdeWcRji/
https://rezept.site/wp-includes/mGgwkq/
https://careerbd.tk/test/jAHrxtRY/
https://topgeartires.ca/wp-admin/WxeQnDM/

```
#### SHA256s for Epoch 3 Payload EXEs ####
```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```
### C2's Per Epoch ###

#### Epoch 1 C2s ####
```
104.131.58.132:8080
109.169.86.13:8080
119.159.150.176:443
119.59.124.163:8080
138.68.106.4:7080
139.5.237.27:443
14.160.93.230:80
144.139.158.155:80
149.62.173.247:8080
151.80.142.33:80
159.203.204.126:8080
170.84.133.72:7080
178.249.187.151:8080
178.79.163.131:8080
181.135.153.203:443
181.16.17.210:443
181.36.42.205:443
181.44.166.242:80
181.51.251.236:443
181.59.253.20:21
183.82.97.25:80
185.187.198.10:8080
185.86.148.222:8080
186.0.95.172:80
186.1.41.111:443
186.23.132.93:990
186.68.141.218:80
186.92.11.143:8080
187.193.89.61:50000
190.1.37.125:443
190.10.194.42:8080
190.104.253.234:990
190.146.131.105:8080
190.230.60.129:80
190.230.60.129:8080
190.38.14.52:80
190.85.152.186:8080
190.97.30.167:990
200.113.106.18:80
200.30.227.135:80
200.57.102.71:8443
200.58.171.51:80
200.58.83.179:80
201.163.74.202:443
203.25.159.3:8080
212.71.237.140:8080
217.199.160.224:8080
45.79.95.107:443
46.101.212.195:8080
46.163.144.228:80
46.28.111.142:7080
46.29.183.211:8080
46.41.151.103:8080
5.196.35.138:7080
50.28.51.143:8080
51.15.8.192:8080
62.75.143.100:7080
62.75.160.178:8080
68.183.170.114:8080
68.183.190.199:8080
69.163.33.84:8080
76.69.29.42:80
77.245.101.134:8080
77.55.211.77:8080
79.127.57.43:80
79.129.0.173:8080
79.143.182.254:8080
80.85.87.122:8080
81.169.140.14:443
82.196.15.205:8080
86.42.166.147:80
87.106.77.40:7080
89.188.124.145:443
91.204.163.19:8090
91.205.215.57:7080
91.83.93.124:7080
94.177.183.28:8080
94.183.71.206:7080
```
#### Epoch 1 - Spam C2s ####
```
37.187.5.82:8080
45.55.82.2:8080
185.94.252.27:8080
```
#### Epoch 1 - Stealer C2s ####
```
60.250.141.134:80
75.127.72.18:8080
190.115.18.139:8080
```
#### Current Epoch 1 RSA Public Key ####
```
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOzoTryw1r9RxRJPFKalO4+q7JaDZWSB
KZlEc22H6ITuE06tvJspue42TF1yk8xN+1bqW++QeV6Clm1uRswA/qoao/6p4eN0
h4zIO8PEaJ0C/9EO4cx9yfRLlVpjdEkP0QIDAQAB
```
#### Epoch 2 C2s ####
```
103.39.131.88:80
104.131.11.150:8080
104.131.44.150:8080
104.236.246.93:8080
115.78.95.230:443
124.240.198.66:80
133.167.80.63:7080
136.243.177.26:8080
138.201.140.110:8080
144.139.247.220:80
149.202.153.252:8080
152.89.236.214:8080
159.65.25.128:8080
162.241.208.52:8080
167.71.10.37:8080
169.239.182.217:8080
173.212.203.26:8080
178.210.51.222:8080
178.79.161.166:443
181.143.194.138:443
181.143.53.227:21
182.176.132.213:8090
182.76.6.2:8080
185.187.198.15:80
185.94.252.13:443
186.176.138.171:7080
186.4.172.5:20
186.4.172.5:443
186.4.172.5:8080
186.75.241.230:80
189.209.217.49:80
190.145.67.134:8090
190.211.207.11:443
190.226.44.20:21
190.228.72.244:53
190.53.135.159:21
192.81.213.192:8080
198.199.114.69:8080
200.113.106.18:21
200.113.106.18:465
200.51.94.251:80
200.71.148.138:8080
201.250.54.115:50000
201.251.43.69:8080
206.189.98.125:8080
211.63.71.72:8080
212.71.234.16:8080
217.160.182.191:8080
222.214.218.192:8080
24.45.195.162:7080
27.147.163.188:8080
31.12.67.62:7080
31.172.240.91:8080
37.157.194.134:443
45.33.49.124:443
46.105.131.87:80
47.41.213.2:22
5.196.74.210:8080
59.103.164.174:80
62.75.187.192:8080
67.225.229.55:8080
69.164.201.54:8080
78.24.219.147:8080
80.11.163.139:21
80.11.163.139:443
83.136.245.190:8080
85.104.59.244:20
85.25.255.207:8080
85.54.169.141:8080
86.22.221.170:80
86.98.25.30:53
87.106.136.232:8080
87.106.139.101:8080
87.230.19.21:8080
91.205.215.66:8080
92.222.216.44:8080
92.233.128.13:143
94.177.216.217:8080
94.192.225.46:80
94.205.247.10:80
95.128.43.213:8080
```
#### Epoch 2 - Spam C2s ####
```
54.38.94.197:8080
178.128.148.110:8080
37.46.129.215:8080
```
#### Epoch 2 - Stealer C2s ####
```
173.214.174.107:443
104.131.58.132:8080
176.31.200.130:8080
46.105.131.69:443
176.31.200.130:8080
139.162.185.116:443
209.141.41.136:8080
173.249.47.77:8080
```
#### Current Epoch 2 RSA Public Key ####
```
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALk+KlHgOKXm9eDkWu2yN9lanjwOm6W2
PV0tgr4msNVby2pOJ6S1MZQnQwxl7y6WWzT4kveAQhLmW8JB2M2PDOxZOgVMJH2C
AtkVW1p/P9jNJWVvjK9SmrbLdIeiKNtRfQIDAQAB
```
#### Epoch 3 C2s ####
```
113.52.135.33:7080
120.138.101.250:80
131.0.103.200:8080
138.197.140.163:8080
143.95.101.72:8080
144.76.62.10:8080
152.170.220.95:80
154.120.227.206:8080
157.7.164.178:8081
176.58.93.123:80
178.249.187.150:7080
181.197.2.80:443
181.36.42.205:443
181.47.235.26:993
181.61.143.177:80
181.99.223.250:8080
184.82.233.15:80
185.45.24.254:7080
186.109.91.136:80
186.146.110.108:8080
186.84.173.153:80
186.92.11.143:8080
187.188.166.192:80
189.132.130.111:8080
190.113.146.128:8080
190.117.206.153:443
190.13.146.47:443
190.228.212.165:50000
190.96.118.15:443
192.241.220.183:8080
200.55.168.82:20
200.90.86.170:8080
201.196.15.79:990
201.217.113.58:8080
203.99.182.135:443
203.99.187.137:443
203.99.188.11:443
203.99.188.203:990
212.112.113.235:80
216.70.88.55:8080
216.75.37.196:8080
5.189.148.98:8080
51.38.134.203:8080
70.32.94.58:8080
75.154.163.1:8090
83.169.33.157:8080
91.109.5.28:8080
94.177.253.126:80
95.216.207.86:7080

```
#### Epoch 3 - Spam C2s ####
```
192.241.241.221:443
185.187.198.5:8080
41.185.29.128:8080
```
#### Epoch 3 - Stealer C2s ####
```
178.32.255.133:443
198.46.150.196:7080
```
#### Current Epoch 3 RSA Public Key ####
```
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAM426uN11n2LZDk/JiS93WIWG7fGCQmP
4h5yIJUxJwrjwtGVexCelD2WKrDw9sa/xKwmQKk3b2fUhwnHXjoSpR7pLaDo7pEc
iJB5y6hjbPyrSfL3Fxu74M2SAS0Arj3uAQIDAQAB
```
#### Credits and Notes Section ####
```

WARNING - Some links may have been taken down shortly after I reported them to URLHaus.abuse.ch
because they rock and report everything to ISPs as it is confirmed to be malware. Additionally,
this list MAY include doc DL URLS from previous days, see the previous days here to get the full picture:
https://pastebin.com/u/jroosen

NOTE: The doc DL URLS are in alphabetical order now. The community lists below may contain content I do not have in my list.
I am providing them for your benefit in case you want to parse them to be sure.

```
#### What is Epoch 1, Epoch 2 and Epoch 3? ####
```

(09/17/19)
With the find of Epoch 3 that split from Epoch 1, this section will be rewritten to reflect these changes in time.

```
#### Community Lists/Samples ####
```

@b4rtik
https://pastebin.com/32MAKivP

@paladin3161
https://pastebin.com/hQETkDUs
https://pastebin.com/JkNXXwYf

(sorry if we miss anybody, make sure to send it to @cryptolaemus1 in your tweet and we will try to include it!)
```
#### Credits ####
```
Combination work of the Cryptolaemus Team - https://paste.cryptolaemus.com/about/ and/or specifically the following:

Doc DL URLs - @devnullnoop, @p5yb34m, @malware_traffic, @dms1899, @Paladin3161

C2 info/RSA Keys - @CapeSandbox, @devnullnoop, @MalwareTechBlog, @lazyactivist192, @VK_Intel, @Paladin3161

Payloads - @devnullnoop, @MalwareTechBlog, @lazyactivist192, @TheHack3r4chan, @p5yb34m, @malware_traffic, @Paladin3161, @ps66uk,
@bomccss, @reecdeep, @CholeVallabh, Anonymous :)

Spam Templates - @devnullnoop, @lazyactivist192

Special thanks to @lazyactivist192, @devnullnoop, @2sec4u, @unixronin, @pollo290987, @ps66uk for creating scripts/servers/
infrastructure and helping out with this!

Very special thanks to @Binary_Defense, @lazyactivist192, @capesandbox, @bigmacjpg and @decalage2 of the ViperMonkey Project
https://github.com/decalage2/ViperMonkey, @digitalocean, @mploessel, @anyrun_app, @unixronin, @hurricanelabs, @MalwareTechBlog,
@KryptosLogic, @0xtadavie, @MsftSecIntel, @abuse_ch/urlhaus.abuse.ch, @urlscanio, @BlackLotusLabs, @TrendMicro and @Virustotal
for providing services/software at no charge to this cause!

```
### Daily Log 10/22/19 ###
```
This report was gathered by @ps66uk and @jroosen

@jroosen here, all I got today from emotet was one generic malspam this morning. I am not sure why but it seems like they do
not like me much anymore. :) Unfortunately though, it seems like a lot of areas of the world are getting dumped on with malspam
in all languages. The joke today was the sun never sets on the Emotet spam empire as of late. Currently it looks like Pacific/Asia
is getting spammed. Ivan also brought out some DocX/OpenXML attachments that did not seem to be hashbusted yet. I wonder if we will
see "Operation Zip Lock" come back shortly where everything is zipped up and hashbusted?

```
#### General News ####
```

Brian Laskowski @laskow26 added some additional info into his blog on using Wazuh for watching Emotet:
https://laskowski-tech.com/2019/10/22/emotet-and-analysis-of-ttps-part-ii-for-the-watch/
https://twitter.com/laskow26/status/1186614994345119744

```
#### Drops Report ####
```
In case you missed it - Brad over @malware_traffic dumped info on an emotet/trickbot gtag:
mor27 infection last night:
https://twitter.com/malware_traffic/status/1186471771479801856

```
#### Email Template Report ####
```

Ivan pulled out the DocX/OpenXMLs today to try out in the morning. The templates basically looked the same
as we have seen of late with the Safe Mode and Office365 Light Blue ones specifically being used. These were
not hashbusted it seems.
https://twitter.com/Cryptolaemus1/status/1186564060046942208

Once again we see near constant spamming all over the world. As of late E2 seems to really have it out for
Asia Pacific regions and this is shown in the reporting from this region of the world from @bomccss:

https://twitter.com/bomccss/status/1186796998550151168

We have been getting reports of very recent emails being used for reply chain malspams of late. No longer
is the reply chain thread from this summer! We seen them as recent as within the past 2 weeks! Clearly
email is still being stolen and actively used to spam again. Ironically we have even seen the original
emotet message used to infect one person stolen from that bot and then used to spam others!

@ps66uk's matrix of docs:
E1 CreateDate:	2019:10:22 06:44:00Z hazelmobile.com				safemode	DocX/OpenXML
E2 CreateDate:	2019:10:22 07:06:00Z boom-center.com				safemode	DocX/OpenXML
E3 CreateDate:	2019:10:22 06:07:00Z mumbaiedu.in					safemode	DocX/OpenXML

E1 CreateDate:	2019:10:22 08:03:00Z vicarhomes.com					office365	DocX/OpenXML
E2
E3

E1 CreateDate:	2019:10:22 10:42:00 japanesepdf.com					wizard		doc
E2 CreateDate:	2019:10:22 10:22:00 www.eskisehir3d.com				safemode	doc
E3 CreateDate:	2019:10:22 10:41:00 glamtalks.in					wizard		doc

E1 CreateDate:	2019-10-22 17:48:00 mijin.xyz						safemode	doc
E2 CreateDate:	2019-10-22 17:42:00 ariastock.com					wizard		doc
E3 CreateDate:	2019-10-22 18:40:00 patriciayork.gq					office365	doc

E1 CreateDate:	2019-10-22 18:16:00 mijin.xyz						office365	doc
E2
E3 CreateDate:	2019-10-22 18:40:00 patriciayork.gq					office365	doc

E1 CreateDate:	2019-10-22 21:57:00 www.astroshankersegurukulam.com	office365 	doc
E2 CreateDate:	2019-10-22 22:17:00 shreebankebihari.com			wizard		doc
E3

```
#### Link Regex Report ####
```
(These are experimental, use at your own risk.)

No document download links today but here is what works lately:

These were revived/updated:

These were not:
https?:\/\/.+?\/(AMAZON|Amazon)\/.+?\/([0-9\-_]{5,7})\/
https?:\/\/.+?\/(administrator|academy|alphabet|App_Data|assets|backup|beta|blogs|cache|cgi-bin|checkformats|cfm|consultation|core|css|DANE|Dane|demo|discuss_lib|direc|Document|DOC|Dok|DOK|esp|FILE|function.cheese|gallery|GoogleSpeech|hino|homepage|images|INC|Inf|INF|js|lib|LLC|lm|menusa|paclm|Pages|parts_service|phpmyadmin|Plik|popup_index|public|Scan|sites|sitemap|sox62c|SOUBORY|test|trademark|themes|tmp|uploads|wc-logs|webalizer|wordpress|WP2|wp-admin|wp-content|wp-Enfold|wp-includes)\/([A-Za-z0-9|]{7,36})\/(\"|\n)
https?:\/\/.+?\/([0-9a-z\-_]{3,11})\/([A-Z0-9]{7,32})\/([A-Za-z]{7,32})\/(\"|\n)
https?:\/\/.+?\/([A-Za-z0-9]{8,30})_([a-z0-9]{5,10})-([0-9]{8,15})\/
https?:\/\/.+?\/(Document|DOC|FILE|INC|LLC|Scan)\/([a-zA-Z0-9]{4,30})\/

Also keep in mind, your filter needs to look inside PDF files to find the URI to test against these above. Otherwise
this does not help.
```
#### Payloads Report ####
```

Looks like hashbusting continues on distro but strangely binaries stopped updating around 0200 on E2 only.
C2 updates still seem to be on a slow train.

E1 22/10
Range		Size	CAPE
00:00 - 06:00	537kb	5694
06:50 - 08:00	533kb	5691
08:00 - 13:30	266kb	5688
13:30 - 22:30	669kb	5683
22:30 - 00:00	529kb	6064

E2 22/10
Range		Size	CAPE
00:00 - 06:00	533kb	5695
06:50 - 07:55	529kb	5692
07:55 - 13:30	262kb	5689
13:30 - 21:55	665kb	5684
22:30 - 00:00	525kb	6065

E3 22/10
Range		Size	CAPE
00:00 - 05:50	541kb	5693
**:** - **:**	533kb	5647
08:20 - 13:30	268kb	5690
13:30 - 22:30	673kb	5685
22:30 - 00:00	529kb	6066

```
#### C2 Report ####
```

E1 now 78 combos, was 74 for a net +4
E2 still 82 and no change.
E3 now 49 combos, was 47 for a net +2

```

#### Closing ####

```

With the addition of DocX/OpenXMLs again, I am sure we are due for more crap from Emotet on the stage 1 download.
Dont be surprised if you start seeing zip/js or zip/xml or even zip/jse tomorrow delivering a quintet of urls to download
emnotet binaries. Be prepared and be on the lookout!

TT

```
#### Sandbox 10/22/19 ####

```

E1
https://capesandbox.com/analysis/6064/


E2
https://capesandbox.com/analysis/5958/


E3
https://capesandbox.com/analysis/6070/

```