Emotet Malware URLs 01/03/18

#Emotet malware IOCs 01/03/18 Updated 18:00 EST

Download Links:
hxxp://adra.fr/Gift-Card/
hxxp://altafidelidad.net/Order-Confirmation/
hxxp://amblesideonthelake.com/Outstanding-INVOICE-AVJT/916866/3318/
hxxp://www.coastguard.gov.lk/assets/Outstanding-INVOICE-HIY/9958117/164/
hxxp://www.dagilelis.lt/Invoice/
hxxp://www.deportes.sanluis.gov.ar/wp-content/languages/Overdue-payment/
hxxp://diantajayasemesta.co.id/Overdue-payment/
hxxp://www.ehrs.org.uk/Invoice-15336230/
hxxp://emmats.vn/wp-content/plugins/Final-Account/
hxxp://www.epicamedia.com/wp-content/upgrade/Your-Holidays-eCard/
hxxp://fah.se/Final-Account/
hxxp://goodmanmagicmilerun.com.hk/Sales-Invoice/
hxxp://juelich.fh-aachen.org/Christmas-card/
hxxp://intermc.com/Purchases-2018/
hxxp://jkgvp.com/Final-Account/
hxxp://kvest.ee/Outstanding-INVOICE-SNGT/9989742/866/
hxxp://www.lewdownscaffolding.co.uk/INCORRECT-INVOICE/
hxxps://www.migrationarena.com.au/Outstanding-Invoices/
hxxp://mydivinity.de/Overdue-payment/
hxxp://www.ossig.at/Overdue-payment/
hxxp://www.radhini.com/wp-content/ngg_styles/Purchases-2018/
hxxp://www.schlatzerbus.at/Outstanding-INVOICE-999470/
hxxp://www.successbookkeeping.com.au/Invoices-Overdue/
hxxp://www.techstreamcapital.co.za/Your-Gift-Card/
hxxp://torqueo.co.uk/Invoice/
hxxp://jubileum.ujeuropaalapitvany.hu/Overdue-payment/
hxxp://utthuong.com/Final-Account/
hxxp://www.wedowebdesign.rs/Final-Account/
hxxp://wraclinics.ca/Invoices-attached/


Email example:

Subject: Seperate Remittance Advice Layout - paper document A4

Hi [Victim],


Please find attached copies of invoices as requested which I trust clarifies some of the costs as claimed.

hxxp://intermc.com/Purchases-2018/


If it has been received in error please notify the sender and destroy any copies. Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful.
Any views expressed in this message are those of the individual sender.



Regards

[Spoofed Contact]