2019-09-20 Emotet IOCs

WORD DOCUMENT FILE HASH
213ecd867e66c6b31c4d6a5870c466bd
223dc32350f288ce06bae8b69a612b06
3e80fccb3ad0cd8ae99fa1a1689ac22a
571ffcf884ee508359677dd0d6a78cda
9bd448b069b85e253b1122d334615bb4
c2aec64cd9c0a2fc95b205786b715f8b
d2532c5469c3c3ecec8747ae0cc74777
d2532c5469c3c3ecec8747ae0cc74777
e8554809ec3c8dfb68f2dd37027dadea
e8554809ec3c8dfb68f2dd37027dadea
ea6e8eeb90d52b4345bd65304a0462e2
efbdc511ee4eddfbe487d7b3e10e58f3
fe66b58f46a18033068c0c8ba8af2e0c

PAYLOAD FILE HASHES
1106fffa7df7a782b39b81d828690ee6
d6292a033cb1bd643a7a380efef6d015

EMOTET PAYLOAD URLs
http://www.albajifood.com/wp-content/kn4qd6/
http://bulbulstore.com/configweb/82oua00_nmnza-219207040/

EMOTET C2s
http://109.104.79.48:8080
http://109.169.86.13:8080
http://114.79.134.129:443
http://119.59.124.163:8080
http://119.92.51.40:8080
http://123.168.4.66:22
http://123.168.4.66:22/
http://138.68.106.4:7080
http://149.167.86.174:990/
http://149.62.173.247:8080
http://151.80.142.33
http://159.203.204.126:8080
http://178.249.187.151:8080
http://178.249.187.151:8080/
http://178.79.163.131:8080
http://179.62.18.56:443
http://179.62.18.56:443/
http://181.143.194.138:443/
http://181.164.8.25/
http://181.188.149.134
http://181.36.42.205:443
http://181.81.143.108
http://183.82.97.25
http://183.87.87.73
http://185.86.148.222:8080
http://186.83.133.253:8080
http://187.155.233.46:443
http://187.188.166.192
http://189.129.4.186
http://189.166.68.89:443
http://189.187.141.15:50000
http://190.1.37.125:443
http://190.104.253.234:990
http://190.117.206.153:443
http://190.117.206.153:443/
http://190.19.42.131
http://190.200.64.180:7080
http://190.221.50.210:8080
http://190.230.60.129
http://190.38.14.52
http://200.21.90.6:8080
http://200.57.102.71:8443
http://200.58.171.51
http://201.163.74.202:443
http://201.184.65.229
http://203.25.159.3:8080
http://211.229.116.97
http://212.71.237.140:8080
http://217.113.27.158:443
http://217.199.160.224:8080
http://217.199.175.216:8080
http://23.92.22.225:7080
http://46.163.144.228
http://46.21.105.59:8080
http://46.28.111.142:7080
http://46.29.183.211:8080
http://46.41.151.103:8080
http://5.196.35.138:7080
http://5.77.13.70
http://50.28.51.143:8080
http://51.15.8.192:8080
http://62.75.143.100:7080
http://62.75.150.240:7080
http://62.75.160.178:8080
http://71.244.60.230:7080
http://71.244.60.231:7080
http://77.245.101.134:8080
http://77.55.211.77:8080
http://79.127.57.42
http://79.143.182.254:8080
http://80.85.87.122:8080
http://81.169.140.14:443
http://86.42.166.147
http://87.106.77.40:7080
http://88.250.223.190:8080
http://89.188.124.145:443
http://91.205.215.57:7080
http://91.83.93.124:7080