2018-01-07 & 2018-01-08 EMOTET STUFF

***Note: incomplete list***

MALDOC DISTRIBUTION:
http://blog.patrus.com.br/UPS-View/08-Jan-18-04-33-35/
http://mondosonoro.brooktec.com/Final-Account/
http://orbehome.com.br/Overdue-payment/
http://physlab.edu.uoi.gr/Sales-Invoice/
http://www.funnyorange.cn/Invoice-2800536/
http://www.limonaria.com/Sales-Invoice/
http://www.mediacendekia.com/Outstanding-Invoices/
http://www.playapy.com/UPS-Quantum-View/07-Jan-18-04-37-41/
http://www.radom.centrumdemed.pl/Invoices-attached/
http://www.refugeesunday.lirs.org/Outstanding-Invoices/
http://www.service-uri.ro/UPS-US/07-Jan-18-04-30-28/
http://www.xn-----6kcb0abiizdwci5bw3dxh.xn--p1ai/INCORRECT-INVOICE/
https://www.migrationarena.com.au/Invoices-attached/

MALDOCS OBSERVED:
349e496eb1f18a76975c1945fcbcbf5c
d038049d22c876e826cf41e0f69089d9a01654f48790c53202cbfa98bcf8c6eb

9a9c7eefca053923ceb0351fdc1b359d
c412ad121682d33210402955ad330fbd182c5c57155bab2db659c7557d4a417b

PAYLOAD DISTRIBUTION:
http://sca4christ.org/ZLkpa/
http://www.faradaymuhendislik.com/9AIW/
http://www.koziolku.pl/omgr/
http://www.lebenares.com/pqZzbw/
http://www.lowcarbusa.org/dvwoM/
http://www.lucropc.com/OM0KDO/
http://www.oceanicogroup.com/assets/U5PXQ/
http://www.prynczwlotoj.com/zBW829/
http://www.quintessence-community.fr/1GgLWQ/
http://www.warmer.life/JKJW9qz/

PAYLOADS OBSERVED:
ef483d4cde9c99aadbc00a79b9d4e44f
16695968943ab1fc671d04f0b413346d52ad83ab250dd93175e2c67f8ccb0b8c

6404079117fdcfa3a34eecb4009b407e
bbd2e2fbf9de689b293485b4cd01e9455201a3974a3082b68862e2e98d76d65c

C2:
69.16.193.12:4143
172.217.22.142:80
74.125.160.39:80