2019-10-03 Emotet IOCs

DOCUMENT FILE HASHES
094ff45011198652a61dcd3b09866dfd
188952f0f7faec140abf8c77a16b2f03
19ed4b2cbd4630d6ca0d8cf05ac0f55b
1bddd3fdbd50b5c8c641a3b5e650c7a7
40e4bbca1719770cbc9829fb807a9e2d
517c1c13e97282d7aed77a485f30dbc4
68b5e4344493e2fef5b92173febc135d
6adfa5361a8fd65e5a222b7b3bbb556a
99b0a6aad0e3fa350d0b77cc5715eb33
f3fb71251bea13b2203259db369e6617

PAYLOAD FILE HASHES
23b4c1ca292b603acdae670c038a101a
e370f76ee4a2a52e5bffaa0db81c19ad

EMOTET PAYLOAD URLs
http://01synergy.com/eventApp/mh79kti8-zefcx8vbrw-2881640262/
http://3idiotscommunication.com/cgi-bin/uc5/
http://aecraft.ca/yluv/ibx8sls7m_fzcrgy-13/
http://almaei-hr.com/idol_wordpress/c6n2-g9a11-598783/
http://austellseafood.com/wp-includes/jb9jrq4882/
http://azharsultan.com/wp-includes/e132n-m48mek-05/
http://biswalfoodcircle.com/vcobhlons/kaf6j_71wzkgvqso-8/
http://blog.myrenterhero.com/wp-content/3ti4iw_9qj2n25sb-92037/
http://citizensforacri.com/cache2fdabbafc385c5752f54f46a083809ec/i24ob20308/
http://cjb-law.com/wellsfargo_online2/cDncHuJLtBKu/c16/
http://combinedenergytech.com/wp-content/n6/
http://dilandilan.com/wp-admin/l4zy_lntjocgxg-769120353/
http://dogustarmobilya.com/wp-admin/zqs99389/
http://dopenews.pl/wp-content/iIGWYuWcCZ/
http://emergences.besancon.fr/wp-includes/oh4qowoxd_v4j2t-7157558/
http://globalreddyfederation.com/ixlcx/w6178/
http://hatterandsonsinc.com/wp-includes/GqxCjvhs/
http://huangao6.com/wp-content/o1x564/
http://iproinfotech.com/ufdgo/m9ts_iiiuh4-405768154/
http://juice-dairy.com/wp-snapshots/pti210/
http://leadsift.com/wp-includes/0qqmm4-uk847qkjw-2272/
http://mammothstraw.com/wp-admin/14t76_66uqo-53122714/
http://nevanadesigns.com/npjcq/p4/
http://newuvolume2.com/wp-content/upgrade/g1z8jf7/
http://parck.net/old/rn5o70dhz-evons7oico-7475/
http://pieceofpassion.net/0xrnl3/a27xm99fgd_on7xp-31134189/
http://pl.thevoucherstop.com/wp-admin/xdx66dy1/
http://politecompany.org/wp-content/upgrade/sTjLvDY/
http://pratham.org/wp-content/LnqwUGqmF/
http://prewento.com/imageupload/7uds29752/
http://raisabook.com/wp-content/NjBtuxBzkD/
http://reunionintledu.com/blogs/3alw3052/
http://santakpo.com/wp-admin/j0fqauc78/
http://sh-tradinggroup.com/cgi-bin/5g7o7p9629/
http://sieuthitrevakhoe.com/wp-content/3s354eomqv_ocec0v-6228728/
http://stewardtechnicalcollege.com/wp-includes/z3311/
http://tananfood.com/wp-includes/yoclwyWE/
http://tancoskert.hu/wp-includes/prcyny7fi_9wowhphm-428749/
http://telemedics.co.tz/eric/YCGPYeyX/
http://thebloodhandmovie.com/whlpnx/n7700/
http://tilsimliyuzuk.com/wp-admin/4668/
http://todofitnessperu.com/wp-admin/pRZlsRlfw/
http://vicarhomes.com/hzwoew9/k47/
http://www.aecraft.ca/yluv/ibx8sls7m_fzcrgy-13/
http://www.combinedenergytech.com/wp-content/n6/
http://www.koodakeayande.com/wp-admin/j0ntww8qe-y1kxqzz3-03/
http://www.mammothstraw.com/wp-admin/14t76_66uqo-53122714/
http://www.marketfxelite.com/wp-admin/unnJtCHk/
http://www.n01goalkeeper.com/wp-content/t69/
http://www.newuvolume2.com/wp-content/upgrade/g1z8jf7/
http://www.pieceofpassion.net/0xrnl3/a27xm99fgd_on7xp-31134189/
http://www.sh-tradinggroup.com/cgi-bin/5g7o7p9629/
http://www.sofitec.fr/wp-content/uploads/o6wusx-uo201vwd5-09901/
http://www.thebloodhandmovie.com/whlpnx/n7700/
http://yh-metals.com/calendar/uj06uw140491/
https://87creationsmedia.com/wp-includes/t9svk97118/
https://ahmmedgroup.com/cgi-bin/pnqyIc/
https://bestsexologist.xyz/wp-includes/rest-api/c4xl3273/
https://carina-barbera.com/wp-admin/w292/
https://cjb-law.com/wellsfargo_online2/cDncHuJLtBKu/c16/
https://dogustarmobilya.com/wp-admin/zqs99389/
https://donvosphotography.com/applechilli.com/d57b203/
https://emergences.besancon.fr/wp-includes/oh4qowoxd_v4j2t-7157558/
https://gamestrefa.com/nuoaw/luDPoOwF/
https://latinannualmeeting.com/dhm/665siogumh-ivchy86o-7624673657/
https://levarilaw.com/wp-content/rVRTTz/
https://naijaclockwiseconcept.com/wp-admin/eg0dax86/
https://nevanadesigns.com/npjcq/p4/
https://nhadepkientruc.net/wp-content/ogi3nl90/
https://otomotifme.com/mdnh/3f1e16-4y58-4538/599254/
https://superecruiters.com/wp-content/o2p55rh89356/
https://tananfood.com/wp-includes/yoclwyWE/
https://teesvalleyinnovation.com/wp-includes/k8/
https://thelooptravels.com/wp-content/kHYJBg/
https://www.eurosima.com/6rpbk/sEhWBEfsv/
https://www.lenoxsalons.com/cgi-bin/vVHqRUObG/
https://www.notihote.com/wp-content/fLtwHqtO/
https://www.skylandtowncenter.com/wp-includes/JTmLLzo/
https://www.stewardtechnicalcollege.com/wp-includes/z3311/
https://www.unidadejardins.maislaser.com.br/politica-de-privacidade/5s5-fxq4k-26612745/
https://www.yh-metals.com/calendar/uj06uw140491/

EMOTET C2s
http://109.104.79.48:8080
http://109.169.86.13:8080
http://113.170.129.113:443
http://114.79.134.129:443
http://119.159.150.176:443
http://119.59.124.163:8080
http://119.92.51.40:8080
http://123.168.4.66:22
http://138.68.106.4:7080
http://139.5.237.27:443
http://142.93.82.57:8080
http://149.62.173.247:8080
http://151.80.142.33
http://159.203.204.126:8080
http://170.84.133.72:7080
http://170.84.133.72:8443
http://178.249.187.151:8080
http://178.79.163.131:8080
http://181.188.149.134
http://181.29.101.13:8080
http://181.36.42.205:443
http://183.82.97.25
http://184.69.214.94:20
http://185.187.198.10:8080
http://185.86.148.222:8080
http://186.0.95.172
http://186.1.41.111:443
http://186.83.133.253:8080
http://187.150.150.127:7080
http://187.188.166.192
http://189.166.68.89:443
http://190.1.37.125:443
http://190.10.194.42:8080
http://190.104.253.234:990
http://190.158.19.141
http://190.221.50.210:8080
http://190.230.60.129
http://190.230.60.129:8080
http://190.38.14.52
http://190.85.152.186:8080
http://200.57.102.71:8443
http://200.58.171.51
http://201.163.74.202:443
http://201.183.247.58:443
http://201.184.65.229
http://201.199.93.30:443
http://203.25.159.3:8080
http://212.71.237.140:8080
http://217.199.160.224:8080
http://217.199.175.216:8080
http://23.92.22.225:7080
http://46.163.144.228
http://46.21.105.59:8080
http://46.28.111.142:7080
http://46.29.183.211:8080
http://46.41.151.103:8080
http://5.196.35.138:7080
http://5.77.13.70
http://50.28.51.143:8080
http://51.15.8.192:8080
http://62.75.143.100:7080
http://62.75.160.178:8080
http://71.244.60.230:7080
http://71.244.60.231:7080
http://74.208.74.92:8080
http://76.69.29.42
http://77.245.101.134:8080
http://77.55.211.77:8080
http://78.189.76.2:50000
http://79.129.0.173:7080
http://79.129.0.173:8080
http://79.143.182.254:8080
http://80.240.141.141:7080
http://80.85.87.122:8080
http://81.169.140.14:443
http://81.213.215.216:50000
http://86.42.166.147
http://87.106.77.40:7080
http://88.250.223.190:8080
http://89.188.124.145:443
http://89.32.150.160:8080
http://91.205.215.57:7080
http://91.83.93.124:7080