2019-09-18 Emotet IOCs

WORD DOCUMENT FILE HASH
0de1e4aa009b3d70f90e250cf5fb2368
11aeba89608c7a1c76c03124c0deb224
2004854b2cf5ec2b4e7fcd7e3483571d
2ea05092b941bd56a5be5c93a0b9361a
3f0a6312e4a11f42d3fb2f82294e3808
440f1cec1da6b8c3d643694d4cef711c
611e1f0d8d8b5ea6021b80c57521dd5f
7c802231644da0e328ae0bd88bbeb104
b8331a3b2d36b5d3240c654ccd6dc0ed
bbb6ca9833ac1eafa81e3864748eb52b
ddd84921602ff5cb88ce0a42434ba2ad
e6ff6ffe6ab711fdba6c38c5d11859bd

EXECUTABLE FILE HASH
f7a31719c91770d2f7f945c5acba4116
bf2a3bbe79924e52be9e18824c1e1550

EMOTET PAYLOAD URLS
http://endofhisrope.net/2008-08_PSBearDonate/qmiuOZvDj/
http://higo.net/JupvMyhM/
http://kursy-bhp-sieradz.pl/pub/dDqkeXb/
http://leafdesign.jp/imge/QfFPZDeO/
http://lesantivirus.net/css/qj199-j311-12675/
http://nfbio.com/img/upload_Image/edm/pic_2/u6q4ucq7_hyg8uzhh-369963559/
http://shael.org/hosting/TYXchcKkHz/
http://thinhvuongmedia.com/wp-admin/n2keep7/
http://tpc.hu/arlista/OmwmIQkgP/
http://trunganh.xyz/wp-content/uzq50/
http://www.lottizzazionesavarra.it/wp-admin/zMifZDPur/

C2s
104.131.11.150:8080
104.236.246.93:8080
109.104.79.48:8080
109.169.86.13:8080
114.79.134.129:443
117.197.124.36:443
119.59.124.163:8080
119.92.51.40:8080
123.168.4.66:22
136.243.177.26:8080
138.201.140.110:8080
138.68.106.4:7080
142.44.162.209:8080
144.139.247.220
149.202.153.252:8080
149.62.173.247:8080
151.80.142.33
159.203.204.126:8080
159.65.25.128:8080
162.243.125.212:8080
169.239.182.217:8080
173.212.203.26:8080
175.100.138.82:22
177.246.193.139:20
178.254.6.27:7080
178.79.161.166:443
178.79.163.131:8080
179.32.19.219:22
179.62.18.56:443
181.188.149.134
181.36.42.205:443
181.81.143.108
182.176.106.43:995
182.176.132.213:8090
182.76.6.2:8080
183.82.97.25
183.87.87.73
185.129.92.210:7080
185.86.148.222:8080
185.94.252.13:443
186.4.172.5:443
186.4.172.5:8080
186.83.133.253:8080
187.144.189.58:50000
187.147.50.167:8080
187.149.84.80:8080
187.155.233.46:443
187.188.166.192
188.166.253.46:8080
189.129.4.186
189.166.68.89:443
189.187.141.15:50000
189.209.217.49
189.244.245.238
190.1.37.125:443
190.117.206.153:443
190.145.67.134:8090
190.18.146.70
190.186.203.55
190.19.42.131
190.200.64.180:7080
190.201.164.223:53
190.221.50.210:8080
190.230.60.129
198.199.106.229:8080
200.21.90.6:8080
200.57.102.71:8443
200.58.171.51
201.163.74.202:443
201.212.57.109
201.250.11.236:50000
203.25.159.3:8080
206.189.98.125:8080
207.180.208.175:8080
211.63.71.72:8080
212.71.234.16:8080
217.113.27.158:443
217.160.182.191:8080
217.199.175.216:8080
222.214.218.192:8080
23.92.22.225:7080
31.12.67.62:7080
31.172.240.91:8080
37.157.194.134:443
37.208.39.59:7080
41.220.119.246
45.123.3.54:443
45.33.49.124:443
46.105.131.87
46.21.105.59:8080
46.29.183.211:8080
46.41.151.103:8080
47.41.213.2:22
5.196.35.138:7080
5.77.13.70
50.28.51.143:8080
51.15.8.192:8080
59.152.93.46:443
62.210.142.58:8080
62.75.143.100:7080
62.75.187.192:8080
71.244.60.230:7080
71.244.60.231:7080
75.127.14.170:8080
77.245.101.134:8080
77.55.211.77:8080
78.24.219.147:8080
79.127.57.42
79.143.182.254:8080
80.85.87.122:8080
81.169.140.14:443
85.104.59.244:20
86.42.166.147
86.98.25.30:53
87.106.136.232:8080
87.106.139.101:8080
87.230.19.21:8080
88.156.97.210
88.250.223.190:8080
89.188.124.145:443
91.205.215.57:7080
91.205.215.66:8080
91.83.93.124:7080
91.92.191.134:8080
92.222.125.16:7080
92.222.216.44:8080
94.205.247.10
95.128.43.213:8080