2019-10-02 Emotet IOCs

DOCUMENT FILE HASHES
27cfa6de61340428e3011da36b688f2e
3169cd5cd54b32f57c0fb8233cc6d5e0
3330e7a3dffaae6f92ea122adf959ad2
33931b535a8dd0f3c3b329c189074047
367ed0065ad4d75ec5b07e6526df8269
3f2151addcd48438d01f15c0ff812aab
5194faa69da7f75c93d03c40fa940998
6f4ccb4fadb75cf699d0f5bfc3661d58
81261de8ba304eb0574476990213d439
8d16fcf41fa0502fe6744fe01f434890
8f4b24477c1156129d9b50d3d46121bf
a58fcfb4caa880d2b3f3e1657a6d7d6f
b59a525112e3b7d730720ba5a4f83722
b5cbacf89891d54316c34f811dccd29b
b8c60478c4d67ab9a6bdfe415b472e4c
ba8a697cd6f117db04a2a49187836cf3
c9d477542c654c4bca8ce2603496d226
ce3e0e187aa4dde887e1d85fbe35af64
e23da3a4e6ed2ae615ddbea673455864
e4471482a706374bb37ebd744174a845
f791eefc02ccea63d9685fd3b170ba0b
ff95bdfb47ceaaa013c25b429136ae8a

PAYLOAD FILE HASHES
03df108ac1b7a295abdc965f74da39be
4d4f9ceda8d77d677a5bca14caf15d86
6a64bdd5e22f607678227c5779eb8d50
bb37af071e02e4cfd5d4760dbd4340f4
c982685bac580cab9ada1754fb24f080
e340b80798eb6c61a43efd241a8caffd
e85d4fce87870c5b8ae5537062846632

EMOTET PAYLOAD URLs
http://bahamazingislandtours.com/wp-admin/lgdf00100/
http://beaunita.com/cgi-bin/pir5272/
http://businesslawyers.draftservers.com/bv4flv4/WTKQjXtJ/
http://casadaminhainfancia.com.br/wp-admin/fURMFMqZQs/
http://jiyuchen.club/wp-includes/CAeJonfGI/
http://kaskazinimix.com/wp-includes/wvr7gpk-xavhqf1nxs-20049/
http://kish-takhfifha.com/hgmt/IcJEZkgfl/
http://larissapharma.com/wp-admin/QAKtfjxz/
http://soundlightsolutions.nl/cgi-bin/OshrdLWD/
http://www.3idiotscommunication.com/cgi-bin/uc5/
http://www.austellseafood.com/wp-includes/jb9jrq4882/
http://www.globalreddyfederation.com/ixlcx/w6178/
http://www.newuvolume2.com/lfq2zsr/iyclbvyc3-xiwo-82329/
http://www.reunionintledu.com/blogs/3alw3052/

EMOTET C2s
http://101.187.237.217:20
http://103.255.150.84
http://104.131.11.150:8080
http://104.236.246.93:8080
http://109.104.79.48:8080
http://109.169.86.13:8080
http://113.170.129.113:443
http://114.79.134.129:443
http://115.78.95.230:443
http://119.159.150.176:443
http://119.59.124.163:8080
http://119.92.51.40:8080
http://123.168.4.66:22
http://124.240.198.66
http://136.243.177.26:8080
http://138.201.140.110:8080
http://138.68.106.4:7080
http://139.5.237.27:443
http://142.44.162.209:8080
http://142.93.82.57:8080
http://144.139.247.220
http://149.167.86.174:990
http://149.202.153.252:8080
http://149.62.173.247:8080
http://151.80.142.33
http://152.89.236.214:8080
http://159.203.204.126:8080
http://159.65.25.128:8080
http://169.239.182.217:8080
http://170.84.133.72:7080
http://170.84.133.72:8443
http://173.212.203.26:8080
http://178.249.187.151:8080
http://178.254.6.27:7080
http://178.79.161.166:443
http://178.79.163.131:8080
http://179.32.19.219:22
http://181.123.0.125
http://181.143.194.138:443
http://181.188.149.134
http://181.29.101.13:8080
http://181.31.213.158:8080
http://181.36.42.205:443
http://182.176.106.43:995
http://182.176.132.213:8090
http://182.76.6.2:8080
http://183.82.97.25
http://184.69.214.94:20
http://185.14.187.201:8080
http://185.187.198.10:8080
http://185.86.148.222:8080
http://185.94.252.13:443
http://186.0.95.172
http://186.1.41.111:443
http://186.4.172.5:20
http://186.4.172.5:443
http://186.4.172.5:8080
http://186.75.241.230
http://186.83.133.253:8080
http://187.150.150.127:7080
http://187.188.166.192
http://187.235.239.214:8080
http://188.166.253.46:8080
http://189.166.68.89:443
http://189.187.141.15:50000
http://189.209.217.49
http://190.1.37.125:443
http://190.10.194.42:8080
http://190.104.253.234:990
http://190.106.97.230:443
http://190.108.228.48:990
http://190.145.67.134:8090
http://190.158.19.141
http://190.18.146.70
http://190.186.203.55
http://190.211.207.11:443
http://190.221.50.210:8080
http://190.228.72.244:53
http://190.230.60.129
http://190.230.60.129:8080
http://190.38.14.52
http://190.85.152.186:8080
http://192.254.173.31:8080
http://199.19.237.192
http://200.57.102.71:8443
http://200.58.171.51
http://200.71.148.138:8080
http://201.163.74.202:443
http://201.183.247.58:443
http://201.184.65.229
http://201.199.93.30:443
http://201.251.43.69:8080
http://203.25.159.3:8080
http://206.189.98.125:8080
http://211.63.71.72:8080
http://212.71.234.16:8080
http://212.71.237.140:8080
http://217.145.83.44
http://217.160.182.191:8080
http://217.199.160.224:8080
http://217.199.175.216:8080
http://222.214.218.192:8080
http://23.92.22.225:7080
http://27.147.163.188:8080
http://27.4.80.183:443
http://31.12.67.62:7080
http://31.172.240.91:8080
http://37.157.194.134:443
http://41.220.119.246
http://45.123.3.54:443
http://45.33.49.124:443
http://45.79.188.67:8080
http://46.105.131.87
http://46.163.144.228
http://46.21.105.59:8080
http://46.28.111.142:7080
http://46.29.183.211:8080
http://46.41.151.103:8080
http://47.41.213.2:22
http://5.196.35.138:7080
http://5.196.74.210:8080
http://5.77.13.70
http://50.28.51.143:8080
http://51.15.8.192:8080
http://62.75.143.100:7080
http://62.75.160.178:8080
http://62.75.187.192:8080
http://63.142.253.122:8080
http://67.225.229.55:8080
http://71.244.60.230:7080
http://71.244.60.231:7080
http://74.208.74.92:8080
http://76.69.29.42
http://77.245.101.134:8080
http://77.55.211.77:8080
http://78.189.76.2:50000
http://78.24.219.147:8080
http://79.143.182.254:8080
http://80.11.163.139:443
http://80.240.141.141:7080
http://80.79.23.144:443
http://80.85.87.122:8080
http://81.169.140.14:443
http://83.136.245.190:8080
http://85.104.59.244:20
http://85.106.1.166:50000
http://85.54.169.141:8080
http://86.42.166.147
http://86.98.25.30:53
http://87.106.136.232:8080
http://87.106.139.101:8080
http://87.106.77.40:7080
http://87.230.19.21:8080
http://88.156.97.210
http://88.250.223.190:8080
http://89.188.124.145:443
http://89.32.150.160:8080
http://91.205.215.57:7080
http://91.205.215.66:8080
http://91.83.93.124:7080
http://92.222.125.16:7080
http://92.222.216.44:8080
http://94.205.247.10
http://95.128.43.213:8080