2019-11-13 Emotet IOCs

SENDERS OBSERVED
comercial@equitecsoluciones.com
customer7@globelink-hk.com
david@templegadsden.com
faly_vp@vivetic.com
faturamento1.inh@britta.com.br
francisco.urbina@hollywoodconstitucion.lge.mx
freddie_wee@dorware.com.sg
gerencia@tequillan.com.mx
k.sajid@pemaish.com.pk
marilo@memifel.com
n-kumagai@toraya-shouji.co.jp
nagano@shinanopkg.co.jp
nasir@reliable.com.pk
nico@classic-wealth.co.za
nurayeryigit@aktaslojistik.com
produksi1@ptnpc.co.id
rama@panzerstaffing.com
syedliaqath@elmacsco.ae
vendas26@bonato.com.br

DOCUMENT FILE HASHES
02dbd531ce326b4afb6863e1773b4091
21dbc3ec9866dfd4eaadd699589cbf85
27bc9a884995fc903a4645819ece4f0a
4de977a4111f6c46c2f4c7d6a7b3f44d
51fea98f79c2a174fda6caaf270823d5
642c68fc7997a6110643c97ce8280877
937e3c2f00098fa7e62936b1d9fac5c8
fc4ed58bf5f89bd29fc71dfac37418c5
ffac6befd048b26b85565915c5fb01e8

PAYLOAD FILE HASHES
047ffda37dd67be43e9c2d66c6d3b7e4
1d315fa11d20d72f5955c6adb77f01e0
5a854c86fde55f6039aa251830551f92
85d8dc73866486b982b8090fdcde5666

EMOTET PAYLOAD URLs
http://balimeilitravel.com/qu0zoq9p/E/
http://blog.harmonyturismosistemico.com/wp-content/u40duax2088/
http://blog.penge520.top/wp-content/n8/
http://car6c.site/wp-content/uploads/okt3uy-432g-765330/
http://chattogram.xyz/wp-includes/FDfuMBDLI/
http://ictzj.com/wp-admin/7tcsx9j/
http://jpro-bg.com/aleksblog/m6md6a/
http://kejpa.com/roundcube/plugins/codemirror_ui/lib/CodeMirror-2.3/nkq3h/
http://kirstenbijlsma.com/ecp4/m9d5/
http://ran-patch.com/fyl/wi8ge468/
http://resenderocha.com.br/Antigo/bkp_resenderocha.com.br/httpdocs-19-09-14/Data/ccv/
http://respectsolution.com/wp-admin/0d0572/
http://rrctech.com.br/testelw/2f428W/
http://sbhosale.com/wp-content/c26wz-1cdvvsn1c-07/
http://telltheworld.shop/cgi-bin/07k2z9q72485/
http://truefashion.info/validation/9lksif63/
http://www.greenedus.com/wp-admin/b2x/
http://www.hsjxpk.com/wp-admin/o9/
http://www.kmacobd.com/1364889/
http://www.lzychina.com/choujiang/b0d5xm59/
http://www.mapple.top/cache/pdVYkfa/
http://www.typonteq.com/wp-content/w87q6/
http://wwwhelper.com/comm/moneymakers/css/xzm96/
https://about.technode.com/1v9v1/kze8qa04495/
https://alfacars-airport.com/wp-admin/jqb2jc194/
https://ankboot.com/wp-admin/9wy1/
https://bonaccount.com/wp-includes/2wstr6/
https://caplem.com/mkbbl/krz50/
https://chasem2020.com/qiuu/i6g/
https://culture.kirchhoff-automotive.com/slg9np/rd62/
https://drinkgusto.sg/wp-content/8gc69/
https://eco-earthworks.com/7clsz/Di9IFI/
https://elialamberto.com/m4m_tools/v571/
https://feiashao.space/wp-content/sop33a111/
https://food.com.au/wp-includes/c3wzj22p8-7yf9jes-7673396282/
https://goa.app/wp-content/z3k3989/
https://japanhomes.net/8fu/Ye/
https://llbzy.com/wp-content/jqjsxifaf0-xcfdbj7yk-8760179/
https://namdeinvest.com/wp-content/7z/
https://outletsmm.com/4kc9b/k6go-dwjg09pd4z-8677911951/
https://pristinequill.com/createuser/mxqd13529/
https://rezilyent1.com/e2imncs0y/zpIjEOquv/
https://simplicefogue.com/rknfr/ynotf1w-8t79-59831828/
https://space.technode.com/lsa/eBVtwiI/
https://timeoffer.site/5py2rq/8ko2-qdsj9-27933275/
https://toxic-lemon.com/m2iqaxgm9eb/CtJngc/
https://wodfitapparel.fr/wp-content/themes/cleayn/6o00s4G8/
https://www.cuteandroid.com/wp-includes/u5359/
https://www.design-store.it/xunw24/5namu-e4ihyveh7-83/
https://www.erdemirinsaat.net/wp-admin/RfGVmNRnO/
https://www.insulateerie.com/wp-admin/ikPD05/
https://www.ristorantesonora.it/wp-admin/0pngr7-cinnntxa-922728/

EMOTET C2s
http://103.205.177.229
http://103.39.131.88
http://104.131.11.150:8080
http://104.131.44.150:8080
http://104.236.246.93:8080
http://104.238.80.237:8080
http://104.239.175.211:8080
http://113.52.135.33:7080
http://115.78.95.230:443
http://119.159.150.176:443
http://124.150.175.129:8080
http://124.150.175.133
http://138.197.140.163:8080
http://138.201.140.110:8080
http://139.162.185.116:443
http://142.93.87.198:8080
http://143.95.101.72:8080
http://144.139.247.220
http://149.202.153.252:8080
http://152.169.32.143:8080
http://152.89.236.214:8080
http://154.120.227.206:8080
http://157.7.164.178:8081
http://159.65.25.128:8080
http://165.227.156.155:443
http://167.71.10.37:8080
http://167.99.105.223:7080
http://169.239.182.217:8080
http://171.101.153.86:990
http://172.104.70.207:8080
http://172.245.13.50:8080
http://173.212.203.26:8080
http://173.249.47.77:8080
http://176.31.200.130:8080
http://176.58.93.123
http://177.226.25.78
http://178.210.51.222:8080
http://178.249.187.150:7080
http://178.79.161.166:443
http://179.12.170.148:8080
http://181.143.194.138:443
http://181.197.108.171:443
http://181.198.203.45:443
http://181.31.213.158:8080
http://181.36.42.205:443
http://181.57.193.14
http://182.176.132.213:8090
http://183.102.238.69:465
http://186.4.172.5:20
http://186.4.172.5:443
http://186.4.172.5:8080
http://186.75.241.230
http://187.147.152.244:8080
http://187.177.155.123:990
http://188.220.235.237:8080
http://189.154.130.167:443
http://189.209.217.49
http://189.218.243.150:443
http://190.128.222.14
http://190.145.67.134:8090
http://190.211.207.11:443
http://190.217.1.149
http://191.100.24.201:50000
http://191.92.209.110:7080
http://192.163.221.191:8080
http://192.241.220.155:8080
http://192.241.220.183:8080
http://192.241.255.77:8080
http://192.81.213.192:8080
http://193.34.144.138:8080
http://198.57.217.170:8080
http://200.55.168.82:20
http://200.71.148.138:8080
http://201.196.15.79:990
http://211.229.116.130
http://211.63.71.72:8080
http://212.112.113.235
http://212.129.24.79:8080
http://212.71.234.16:8080
http://216.70.88.55:8080
http://216.75.37.196:8080
http://217.160.182.191:8080
http://23.253.207.142:8080
http://31.12.67.62:7080
http://31.172.240.91:8080
http://37.157.194.134:443
http://37.187.2.199:443
http://37.59.24.25:8080
http://45.33.49.124:443
http://46.105.131.68:8080
http://46.105.131.87
http://46.17.6.116:8080
http://5.189.148.98:8080
http://5.196.74.210:8080
http://50.116.78.109:8080
http://51.38.134.203:8080
http://59.103.164.174
http://62.75.187.192:8080
http://67.225.179.64:8080
http://70.45.30.28
http://72.47.202.235:8080
http://78.24.219.147:8080
http://78.46.87.133:8080
http://78.47.106.72:8080
http://81.2.235.48:443
http://83.136.245.190:8080
http://83.169.33.157:8080
http://85.104.59.244:20
http://86.22.221.170
http://87.106.136.232:8080
http://87.106.139.101:8080
http://87.230.19.21:8080
http://91.109.5.28:8080
http://91.205.215.66:8080
http://92.222.216.44:8080
http://94.205.247.10
http://95.128.43.213:8080
http://95.216.207.86:7080
http://95.216.212.157:8080