Emotet 5/22/2018

Doc:
lucky-link-design[.]de/STATUS/Invoice-612513047-Invoice-date-052218-Order-no-5006892825/
epsilonsoft[.]de/ups.com/WebTracking/SW-479969478012/
lucasweb.com[.]br/ups.com/WebTracking/DQO-48692864/
mossbeachmusic[.]de/ups.com/WebTracking/CA-558328620148089/
mytaxaccountant.net[.]au/FILE/Emailing-K16564OT-39016/
homexxl[.]de/images/supplier/ups.com/WebTracking/ZQW-768705390/
liveinfiji[.]net/account/customer-invoice-du-7959379/
c-daiko[.]com/topics/ACCOUNT/Invoice/
miracletours[.]jp/ACCOUNT/Services-05-22-18-New-Customer-XE/
mimhospeda[.]com/FILE/Invoice-7549648648-05-22-2018/
mrwashingmachine[.]com/ups.com/WebTracking/ZJ-5861489840444/
metroweb[.]de/DOC/New-Invoice-VS74508-UC-1686/
mthtek[.]net/ACCOUNT/invoice/

Dropping:
tecnauto.]com/zDEi01h/
hellcatshockey.]org/phirqc72400/
marianamengote.]com/uNGdg5/

C2:
http://173.78.254.86:8080/