# ------------------------------------ #
# -- 2020.10.15 Observed Emotet IOCs-- #
# ------------------------------------ #

# -- MD5 Hash -- #
411F7A1BB87AD01EF7270AC2B33662E5
85808773635BA4F498902DCC30A749A7
4FFCB03E5638679058E8BE355F4C7E18
CDD3F252372FA2EE63D99E219E92456D
F76299F8883C9C0A840E946D63929847
6EA8DF5DEBA38159EA864F6A7EABAD6F
2B2D51274E7C0BD72BB2451D1910F86F
A98CF53B8984E28632B9A7FD74B606C9


# -- Domains -- #
hxxp[://]veccino56[.]com/gjpra/4ZR/
hxxp[://]girlgeekdinners[.]com/wp-content/Hpz/
hxxp[://]marblingmagpie[.]com/COPYRIGHT/Ak/
hxxp[://]aplicativoipok[.]net/wp-includes/ONW/
hxxp[://]ec2-52-56-233-157[.]eu-west-2[.]compute[.]amazonaws[.]com/wp-includes/35/
hxxps[://]shd7[.]life/mlktv/r6/
hxxps[://]www[.]hairlineunisexsalon[.]com/demo/UX/
hxxp[://]blackwellhvac[.]com/wp-admin/VaJD330/
hxxp[://]gnlsafety[.]com/cgi-bin/eAD/
hxxp[://]greysonproducts[.]com/4446/d9NCKQQ/
hxxp[://]eyesnerart[.]com/my-ex/ldtK/
hxxp[://]gentecoyol[.]com/riot-vanguard/Hb/
hxxp[://]flyshoes[.]gr/Stormworks-radar/d/
hxxp[://]pagina[.]emcascavel[.]com/cummins-kta/ywR/
hxxp[://]savetheboom[.]com/admin_access/xht/
hxxps[://]dakwahwisata[.]net/wp-admin/c/
hxxps[://]popcornv[.]com/wp-includes/KHKX/
hxxps[://]dusitserve[.]com/gethits/o3A/
hxxps[://]asc-kl[.]com/v2/Ztf/
hxxp[://]gaashaan[.]com/cgi-bin/O/
hxxp[://]inmaainv[.]com/site/cLDOJFI/
hxxp[://]newcarturkiye[.]com/wp-admin/Sbp/
hxxp[://]lilianwmina[.]com/wp-includes/Y/
hxxp[://]hbmonte[.]com/wp-content/wer/
hxxp[://]thewakestudio[.]com/wp-admin/3D/
hxxp[://]formedbyme[.]com/wp-content/3e/
hxxp[://]unitedway[.]giving[.]agency/sys-cache/XnT/
hxxp[://]partners[.]ripplealpha[.]com/data/ultimatemember/L/
hxxp[://]turismochaco[.]com/wp-admin/R2/
hxxp[://]cuctin[.]com/wp-admin/cgw/
hxxp[://]meijizs[.]com/wp-admin/XK41SvB/
hxxps[://]pianobanan[.]com/wp-admin/CCY/
hxxps[://]sms[.]rahatexltd[.]com/AhJ0HN/
hxxp[://]lifestylesdriven[.]com/wp-admin/GBZqUrs/
hxxp[://]susanamorales[.]com/wp-content/vK/
hxxp[://]vastraindia[.]com/cgi-bin/YZ/
hxxps[://]sharansundar[.]com/upload/v5n/
hxxps[://]cmnivaria[.]com/wp-content/dXg/
hxxp[://]tsrj[.]monster/wp-admin/Hhl/
hxxps[://]hasem[.]app/storage/OM/
hxxp[://]musc[.]health/wp-content/h/
hxxp[://]ladylike[.]house/wp-content/B/