# ------------------------------------ #
# -- 2020.09.14 Observed Emotet IOCs-- #
# ------------------------------------ #

# -- SENDER ADDRESS --#
zajednica@svivanodboga.eu
maya.sabbagh@ldrs-co.com
pestrada@lannet.net


# -- MD5 HASH --#
52D6B293F39CECE43D6AEAF8899E74D3
C2394D811043B023778E5A6AC4E045B6
085026A53C839719B7DD6705B735EFA7
FF682263E35826716C29998EE1F70CFE
44DD6FC40BA6DB3719375D45E97EACA6
61E20CE0ED58EFC4BC9141AD8A53B83F


# -- DOMAINS --#
hxxp[://]everhappen[.]com/wp-content/ja/
hxxp[://]susumiller[.]com/wp-admin/1/
hxxp[://]leadercleverinvestissement[.]com/wp-admin/Ud/
hxxp[://]laladiwanchandmodernwrestlingandyogacentre[.]com/wp-content/yuI/
hxxp[://]ec2-52-56-233-157[.]eu-west-2[.]compute[.]amazonaws[.]com/wp-includes/VyI/
hxxp[://]kavensports[.]com/wp-includes/o/
hxxp[://]wordpress-330097-1043717[.]cloudwaysapps[.]com/w0hd/u/
hxxps[://]blueyellowshop[.]com/wp-includes/mihae8A/
hxxp[://]kingsalmanquran[.]com/wp-content/wuPyeI/
hxxps[://]dagranitegiare[.]com/wp-admin/Z21r6R/
hxxp[://]acontarborreguitos[.]com/acontarborreguitos/I/
hxxp[://]atenaclinicaesegurancadotrabalho[.]com/cgi-bin/NlMH/
hxxp[://]digitalbazar[.]com/wp-admin/RVEzrK/
hxxps[://]byc-center[.]com/wp-admin/Z4r/