# ------------------------------------ #
# -- 2020.09.15 Observed Emotet IOCs-- #
# ------------------------------------ #

# -- MD5 -- #
515a9bf910d1fc47fb271a0bbce217ea
cf113a155cf29a22650bb23025581d10
c2a39a73b02de307015e3ff1fa81617f
249b4d8b96750d124c73f7065566c3ea
b92021ca10aed3046fc3be5ac1c2a094

# -- Domains -- #
hxxp[://]cnnmediaservices[.]com/wp-admin/czBMOhz/
hxxp[://]ak3[.]net/t0XJ/
hxxp[://]ovday[.]com/1umq/S5IWl04/
hxxp[://]gch7[.]com/wp-includes/Nkwp/
hxxp[://]chengmikeji[.]com/wp-includes/9QQ/
hxxp[://]blog[.]anseeing[.]com/sys-cache/h/
hxxp[://]1sync-wp[.]x[.]opencrm[.]eu/wp-content/Bu/
hxxp[://]mendozagroup[.]ca/wp-includes/qqiB/
hxxp[://]aeropilates[.]cl/wp-content/VAjqCR9q/
hxxps[://]bondart[.]eu/docs/hk8GK/
hxxp[://]axz[.]pt/wp-snapshots/Kiw/
hxxp[://]wa3idoun[.]com/ay8yjk/774x/
hxxp[://]karachiupdates[.]com/277p/EBYnXXE/
hxxp[://]injazjordan[.]com/moodle/NWgrYEp0/
hxxps[://]an9news[.]com/aokhf/XPXV7/
hxxps[://]www[.]17geci[.]com/vi2w6/Z5i/
hxxps[://]rubycityvietnam[.]com/wp-admin/1c0NVtp/
hxxps[://]lami-jo[.]com/wp-admin/VMeklEt/
hxxp[://]vayvontinchap5s[.]com/vayvon5s[.]com/YH3mx/
hxxp[://]jiamini[.]us-east-1[.]elasticbeanstalk[.]com/static/P1Vcv/
hxxp[://]wach8[.]com/cgi-bin/5JyZcRU/