Emotet Malware IoCs 2020/01/30

## Emotet Malware Document links/IOCs for 01/30/20 as of 01/31/20 12:00 EST ##
*Notes and Credits at the bottom.* Follow us on Twitter @cryptolaemus1 for more updates.

### Document Downloader Links ###

#### Epoch 1 Document/Downloader links ####
```
http://agendufan.com/wp-content/common_sector/interior_profile/F156s0_Gzav5ts5ro1J/
http://aghloeshgh.ir/j1n3uc/available_box/external_cloud/79fh2t_x67w/
http://am-concepts.ca/edithluc/protected-zone/external-space/4665288-uf8wD8MvF/
http://angthong.nfe.go.th/am/closed_disk/close_space/yY1jly_oif138Kc569/
http://annamarassidolls.com/wp-content/protected_zone/special_cloud/97LksljJJyEQ_5lbJyJdKx3/
http://aprendejugando.utrng.edu.mx/whateverLib/714032559-3DtqrcPs2FnH2-box/test-v5w-tzi9d0bod8b6vo8/45023376-UZgKAEhvUeWV7rbo/
http://archive.engsoc.queensu.ca/wp-admin/305551554/5cxgtwd2qyw6tir-yulkbtx88o-box/external-forum/6173721-VKjOlYzXA6S/
http://armatujugada.online/plugins/closed-70328-D9YnKs94evHR/verified-space/CZ59xo-n1IiHnitxMl85/
http://audio.teca.org.tw/bohboh/protected-section/guarded-forum/ae4rnwo0kl-4xutzxs74ty63t/
http://aula.utrng.edu.mx/AlbaNubia/closed_disk/351690114009_hCw2LivTHToqGkg_4i5alv1r581wi_er0xx/v1kmfa_vz63/
http://azaliya95.ru/wp-content/multifunctional-box/individual-122009-ZEgTgzCVj/vqpzB-wsN8qJI0/
http://barko.info/wp-admin/dh0q_LCLGJL6X_sector/016175233907_A95DufKsuhFX_area/WWclT_Nomyqpo4/
http://bdlive24.info/hex_sym404/common-77054-ZSG661ydYrIMK9/1kQtp-pkK5bal53WqMS0-forum/060732935-PruSamZWp6nGlX/
http://bh8.ir/stats/462953_7371UwzFx7fd_box/special_44984270154_cqsxnvQMElpq/uyrk8hck0_7z429/
http://bijiakeji.com/3wd/multifunctional-resource/security-profile/VaOabQwH-J9ej6u3m/
http://bijiayingxiao.club/wp-admin/NXXSo_OG2Lhrw4SvhuP_module/external_space/942181_K5IMNLwgHNl/
http://brkglobalsolutions.com/wp-admin/0NkpVL0-CUxuPk4IaE1l-zone/security-xudWzr6-1jQaik3Zby3Ty/8599613245714-omSHK/
http://carongbinnhim.crv.vn/wp-admin/aftq7g0yi_a03l_x1e_id89zyh/corporate_area/vKRQ9AKKc_M9If1dHI/
http://ccs.elitekod.com/ccs/open_zPIGn3rt_EeaJSJaj/verifiable_bqu1ifgcp_i8w92o8n/oNx7lO5_Lt4f8L00sKag/
http://centr-arsenal.ru/libraries/0lq9_emvfi_box/uwt5c9_czeu2y_space/dzhjdnqucxa_wz5u575w21xs31/
http://chococream.uz/logs/common-49qDDDj4-RZaBv49MGao7T/close-space/83279423088407-WEksFmAvVz/
http://cisco.utrng.edu.mx/wfpagconemail/available-array/verifiable-V7ZA-y8G3j1ziOh5rEo/1ot4mn4dsey1n-zv9s26/
http://clubplatinumnepal.com/css/open_resource/open_3lkulfpf4bu_oftkgiaa/vH0rvNSSz_ovmsyh1LaIimb0/
http://cmc.inflack.net/wp-content/common-section/OdNh0-Wi98jQOTJTJBfc-zm1a40-r45gr/81746475800551-IC4S5HP0d5LN6R/
http://cosmotrendz.in/wp-content/vd1x37q93y9wvjs_2zf2nl8_array/verifiable_forum/00618576_SnxcVR/
http://cricket-info.in/holiay-tourism.com/5002812-Ickd2nNvNFdxvK5-zone/additional-warehouse/GJ9dr3EIA-co1jIIGtr5/
http://cvc.com.pl/pub/personal-03131231-HUEsJZS/ayfi7-48u72gkdnaf9u-profile/6287342-1k07cpVibHw8W538/
http://dacwp.develop.kdm1.ru/html/available_array/guarded_profile/OXU2ywYwS_tvhakv0J5z/
http://dacwp.develop.kdm1.ru/html/personal_5781776753266_qHezkMW5vn8Iqj7/interior_cloud/bCzgDcP6x_5qbsh513/
http://dev.cotidiano.com.br/wp-content/9GS8-BVrAgh3b-array/close-forum/KpcwAebSIP-g29x2eIK5/
http://dev.inovtechsenegal.com/87/available-JLki-kTXypuc/verified-portal/Lfb7m0S-GsJgy1dj/
http://devwp.socialcloset.com/wp-content/private_resource/interior_space/3tk5ji3x14qu7_422028/
http://domdlyvas.ru/wp-content/protected-4167324300887-t9SJMERlA2/guarded-space/bW6cJtUCINb-iGbIMykfiK/
http://dr-prof-sachidanandasinha-dentalclinic.com/wp-includes/closed-array/corporate-iln4anm5l1i-ddyydsv7u5/P0IxBBX-NeoI3GItnlzH/
http://emmoney.in/wp-includes/multifunctional-array/v2g1-3ewr8lo2q-38987201636-poT0voQTiPL8xB4/074012640-AAsBQsdbIHeUH/
http://fjallraven-kanken-official.ru/cache/closed_box/verified_953392_ovh0moigm7/42541456820093_ye4B8yhIACJ/
http://fresherslab.in/web_map/protected_lzrpov67ld_z5edt0a5nd8zyuw/additional_sOCUNYhZd_5IRv7DNShJVnX/b0s_91yw0vs7/
http://ft.bem.unram.ac.id/wp-admin/open_box/additional_area/513989458_ycxBGmHtHHvnuqhO/
http://futket.com/wp-includes/multifunctional_resource/verifiable_space/sTzGfDeIOWov_dtdgzhftqkH6s/
http://icairjy.org/wp-admin/gw3ow63fqqp_7pdmc_zone/verified_space/056528179_3GsDlCgKsN/
http://interstruif.eu/includes/qq0ediswabt0_aemc_section/corporate_warehouse/6rHMKUcYAU_fcybGdMd4NhLt/
http://intideares.ru/oznxsh2/multifunctional_z4CQ9r4x_NzQOVy7Cc5GXKCp/individual_warehouse/085QA_3sfcHw42/
http://intranet.utrng.edu.mx/actualizar-front/protected-zone/test-warehouse/5552705673-I6jVP4l/
http://iranpharmexams.com/wp-content/personal_array/829248_LbsXaDS1lF3d2km_profile/493176479180_lvw40nuAzbLy/
http://juniordoon.in/wp-content/personal-module/close-forum/v8q6-87u9v24u85754z/
http://kaliber.co.id/1x0xlwpowc/4511904_77NJU58vjZU_box/open_lef_m72olxe9iwe/tgzmuox4yxd_8v524swz12/
http://keys365.ru/images/closed-disk/additional-profile/czQmj6JL-98eGr5rN2l4LII/
http://kimcuongnhantaoigems.com/87/personal-box/jxmepmbdo0j-jv4x38n9ay-334052928814-0QW6rw/623236406020-7Rchn/
http://krastudio.ru/wp-content/available-module/U7g9m-qa2gBnVSA-space/5397034-0QJKs885WvKN/
http://kroha-blog.ru/cgi-bin/personal_disk/security_5536199832_MXBS4i/dpliyshi_x8z37z2/
http://kvartura.vn.ua/wp-content/233265104958-cXIWvfUqj2ufzsxS-module/corporate-bIRru-tFw8kneLIuD/577912338678-kGok7XDS2Pk/
http://langyabbs.05yun.cn/wp-admin/324451972058_nJh7zk_array/additional_Usg0bEQJ_rJgRU8n0/5y85u_e1hH8MMGdizI/
http://lapinoz.pizza/calendar/multifunctional-im599lhrmbm16m-o3ovsd9ht7sgfn/individual-forum/0130891-0KXfQtuY4bcz/
http://le-egypt.com/templates/available-zone/o8ygibu94dzhy6-9sjhg-4vc2Nt-3X18MCv8X/0qs0q-60t5/
http://leger-abraham.com/wp-content/open_box/verifiable_area/s93e0_525w2w24s/
http://lhs-kitchen.com/new/closed_resource/corporate_portal/7641332_ybOyLphwqB/
http://lider-k.com/bin/personal-array/special-space/Fool5-1w9aN32cbefpv1/
http://mahan-decor.com/b1ocu/personal-ga2yy309-6aysrp4evpu/7340747-Fbo9tORBA5gr-forum/249956083-jei3Zfm3llyCR/
http://manualwordpress.vipaweb.es/wp-content/private-zone/kCZXI3ueRd-NuCMSSvD8J2AUy-area/1129243322-vpMANfgT409z/
http://mart.develop.kdm1.ru/html/closed-kANZK6CZa-a7T5L4dD/g7z4vrc7oo50-l1i-warehouse/2710442647-ls4kzypfJVV/
http://mart.develop.kdm1.ru/html/open-81pjgcuy1fdii-8qc672hmiwrw2qzp/individual-warehouse/hi7c2gk1rhh-69xu06zswzyzy7/
http://masjidsultan.batam.go.id/wp-admin/closed-disk/security-Ad48Hwiks-Y2GlGH9S/4np4aulc-1nMqogioI/
http://megabumper.com/wp-admin/open-disk/special-forum/6xzd-w610vxww/
http://milad013.ir/not-found/n3u4m-pf72cfqn84-6ltzqtgnz3nar-oiyy2z3vt7w/verifiable-area/lYhWZMIFV-7t9hm2wi/
http://mokamelstore.com/wp-admin/gf_53cneq0vz7_UTKFOM_59bt3zGyc/verified_space/1f53gb_84yt2y051z3918/
http://mp.sjzxcx.cn/question/4w4nkee5s63juivw_l9ro_sector/Cz7bdAc_ruwEc0iZS_forum/9363104709352_QkkKMaLwy4jUR/
http://mybills.ir/wordpress/728886801472_ZvYXI_section/guarded_warehouse/ii5luJkddgyT_L4gmoH1ypNjj/
http://mysliwy.interdanet.pl/wp-content/cache/open_DVX6mBRc_ivoB9wGV/security_cloud/yuigyxlibp47c_wzw4849yw1291/
http://nhathepkhangthinh.vn/70hof/76650_meU8kh_zone/open_portal/5943680284_Rp3viGej/
http://nihilgratis.com/wp-admin/1308_oxikvan3wm_sector/additional_forum/2edf8dkl_w0t481765/
http://niholzamin.dst.uz/wp-includes/gl77-lhmkgjje4oeb8-box/test-portal/965740700536-2aAwDwd4IG7Lmq/
http://obytnaauta-liberec.cz/layouts/personal-section/security-32727833153-3HOIiLeVH/Xz35bBQ9-5eysc9x4lz1v7J/
http://oldqxkj.top/wp-admin/rbyc6adwr-qidh-array/close-UejQQ-aVqo9CelfX2xq6/vdVD5NhxYR-9GoHw0jiL0e0/
http://ournarayanganj.com/wp-includes/private_zone/hi5i1g1t_h5z6i7jqehpl1zs_forum/qKJyAgB_hkK5Na6l/
http://pdm.50cms.com/addons/protected-resource/test-warehouse/38094306874-CH9Qk9OXvMQIcB/
http://phoenix.web.id/img/available_resource/close_warehouse/uwyb40vp37e_2t325y13txwt/
http://pixelrock.com.au/images/images_upload/available_box/external_warehouse/t8wad_ws685zx928/
http://praiadofuturo.blog.br/wp-includes/open_2111056247_V8dtA0yOfZRRfC4/corporate_272008333_0FRSHg/oAMorgPz_1Kojrswcfx/
http://printbalcony.com/cgi-bin/closed_4nt635_uo5j0n500/security_35183209_lW9byt/newcsRsZF_dcaip8hHNhHg/
http://pufferfiz.net/SpikyFishGames/common_section/close_01Hchk4_TznuJNNiav7shG/06471990483_vP7Bn1j4/
http://qx.lc-zn.com/addons/available_36nv_3yc1nc8/security_wjxvwf7eixhzmzb_zhdf/fqabhcbdhoamlkx_z48u303t39t/
http://rendaprevi.com.br/wp-content/themes/closed-module/54258183-xBenZT-array/corporate-portal/ZjKQedY3YrA9-116l6egyyIaj0/
http://ristorantecapriccio.it/wp-includes/closed-qmisv31ai3rrb-pamuxjw/test-forum/76747775-wxmGZFvtgEOMM/
http://robotforex-indonesia.com/wp-admin/available_60860_ANfvJUP7Ootxn/external_warehouse/66u80p04ompohoz_2u4u67306/
http://sangkhomwit.ac.th/cgi-bin/multifunctional-7ba-6qeybqonk/open-portal/4442854891-LXDUv/
http://seteweb.tk/wp-admin/07kpnnir6oszb2p-ei2q6-rN98Qod3g-9PDUV1NRfL1/verifiable-space/yFKpiWjUf3-lJGMNx21sLfLGH/
http://shustovauto.com.ua/wp-content/protected-box/interior-warehouse/TJWgutJ-Khrhdeo6a1q/
http://silkput.ru/cgi-bin/9420150711-M1IIFeIOIHrMaqX3-disk/individual-space/u0z61i1-vz549y0wz32t1/
http://skoraya76.ru/wp-admin/private_box/special_warehouse/5kN1hyA_K49xLmm49J8y/
http://smm.dp.ua/wp-content/private-box/external-space/2krVGMj9-m7lHgt7dyJGn/
http://soporte.utrng.edu.mx/news_archive/personal_970405_hHYn9o2Jmw/security_7evz_suozp1/glasr12duro8_6z3v87t9/
http://ssc-uk.ir/cgi-bin/closed_zone/306168_2EaMnPlBA_area/2hlbys_2yw9ww/
http://stayfitphysio.ca/wp-content/closed-module/corporate-brrvu4m9tlr6r-7fta0r7/3qbvcm0z3i3f-499xvvu8/
http://stylethairestaurant.com/tt1axi/available-array/individual-62579871-o6eppZs1X/i2ac28s-9tw6zu2260/
http://succasucculents.com/tmp/personal_5h21t1vn5_1nqyufidojd/special_forum/861510_TenQNCUwxn9nYl/
http://tembred.com/komnat/closed-array/security-gyh6o8DR91-5zHqNa4VN/683844041-5T1iRn7QGZ10/
http://terra-sensum.ru/pmyad/private_zone/external_cloud/3rpt0s4qzvwh5hb_ux90w3u4s/
http://test.svetoalliance.ru/wp-admin/available-zone/guarded-profile/mhg2s-vs3v99/
http://thebdhost.com/ayga9/private_module/close_786492286_rS2CTq/6449931_XJWqPT3x/
http://txshop.50cms.com/wp-admin/private-10073-YvQwMwwB9pqt3H/test-area/06219566118372-0nsV0ZI3pV6rNw/
http://vivastarcoffee.com/wp-content/uploads/available_zone/special_profile/zY5ixIRHN_t8yg8pl6mrG/
http://webfactory.com.ar/wp-content/private_O9yhhqI1_W9giVHAi/open_warehouse/grl2yihoy6lni2wr_s3tu/
http://westminster.edu.vn/wp-admin/closed_6759833532741_wgqlD2dqidPARA/security_space/dxg1uz4va7_s945s4/
http://www.bluedog.tw/edu-xoop/closed-sector/security-profile/0c9fgat8o22hud-wvs8wzzv1z5xu7/
http://www.caiac.uerj.br/legislacao/common-resource/open-GB1xtJrK7-WtCsD7zdi8EQHz/7024351625680-M4VLPUbb4FUbTr/
http://www.hzylqx.cn/wp-admin/wcdqjo9sdwz8f_tzh8n_resource/38024616763_DeZuwS_cloud/5tqzhyk_24uxz36488/
http://www.jefoundation.in/wp-admin/465642238817-M1y5xPJqqyxO9-array/ktn-sy2t0u0dgyhzo-forum/hGkqq5-gpIqgsMtMh0b/
http://www.siyinjichangjia.com/wp-content/hnbi7njp26mspaq_s68h_kyb_p9na56naezyhs/verifiable_cloud/tolims6my6jypme_xyu4x5tut5w09/
http://www.sreekamakshisilks.com/newsletter-EEv3EgoH/open-528741-AebSIPq/test-cloud/58s-09466s/
http://www.visitaima.org/cgi-bin/private-sector/verifiable-area/k9gp9pxrewn-851yxs/
http://www.zhinengbao.wang/wp-content/common_array/ir5na94zc_df6ozr6m_space/zw1r26j8vkb3z17_u37x7471x/
http://xn--80aanufcfzcs6l.xn--p1ai/wp-content/uploads/closed_366950_5PtA6/805269935270_wZyvDFIHQr_forum/1Str0_JGiK8ryKk/
http://xn----btbmbi1bg.xn--p1ai/wp-content/personal-zone/guarded-area/4944062669-Ubdcc1C3/
http://ykurbanova.ru/wp-includes/personal-zone/external-warehouse/1hk36-6370vt1/
https://aellly.000webhostapp.com/wp-admin/i2z3wladwv_gc5p_sector/special_forum/518428_0ebSzxvaM4Cz6wp/
https://afges.org/onlineservicewellsfargo/closed_h50q3o2y_k3rgxm6jdw0m/091763285906_7finwQSAif35wxB_portal/4bx68_1xux8z8/
https://armatujugada.online/plugins/closed-70328-D9YnKs94evHR/verified-space/CZ59xo-n1IiHnitxMl85/
https://audioseminglesonline.com.br/yic/open_section/external_warehouse/othRpxRig7_Lvhyr3ymmvkk/
https://bellascasas.com.br/wp-content/489193-IedcC0sqozcr7-4850-4po8w/interior-space/dsppnyg-s7t4327/
https://blogg-d.azurewebsites.net/8yyqma/multifunctional_22450hrl48ciggu5_kji6fgjeev/external_space/Iz3XXOuVFd42_84voKv6I82cy/
https://bncc.ac.th/wp/wp-admin/451088015982-a92maKxP0WtyMnQ-KX1Y0Ukh-TzWpH2ZU2vm0Q/close-cloud/qe3juc-71y6wt/
https://capstonefp.s55.com.au/apply/open-module/special-cloud/mqoqeA-hgzsLNGk/
https://cosmotrendz.in/wp-content/vd1x37q93y9wvjs_2zf2nl8_array/verifiable_forum/00618576_SnxcVR/
https://devwp.socialcloset.com/wp-content/private_resource/interior_space/3tk5ji3x14qu7_422028/
https://farapakzarinco.com/wp-admin/available_box/guarded_oc4yg_9sl5d6eo/b27djcy73vlyqm_1uzv/
https://hanasan.vn/wp-snapshots/closed_z47a_0b1rVIdL/guarded_oj3h_3fqh/687w9nj6xkd9elsv_wsv6s/
https://interstruif.eu/includes/qq0ediswabt0_aemc_section/corporate_warehouse/6rHMKUcYAU_fcybGdMd4NhLt/
https://jayemservicesdev2.site/wp-admin/personal-disk/interior-space/09416522-u2gaqLVkyZ8fOr/
https://kalumpangkec.hulusungaiselatankab.go.id/cgi-bin/private-disk/interior-cloud/o1gf7v7-t1t0797zxz57/
https://kientruccb.vn/wp-snapshots/common_5133838_odPKiDxI/verified_ojjY_ezQoUMSJp/0722349821891_Rd4oQ9LZaLPIa/
https://lawtt.cn/fgzpvp/open_IOHh2_UirDdNGOWrQ9/corporate_portal/7zbsk7o40cf1h_05t0x5x/
https://lifenoids.com/wp-admin/common_disk/corporate_warehouse/1619332329_x2svHc/
https://livingartdecor.com.au/o28qyp/protected-13833-DxlCbK5yxbqq1jqP/verified-warehouse/yzM3ktL3Hm-cq5773yzwy3Kx/
https://magnopyrol.com/87/open_array/sb82t_msy7npxganq_660291924_oulZdMjwZ0CpYp/2171741077_Tk0aSeaI3O1owz9/
https://masjidsultan.batam.go.id/wp-admin/closed-disk/security-Ad48Hwiks-Y2GlGH9S/4np4aulc-1nMqogioI/
https://myenglishisgood.net.in/hindi/personal_gfjsn1tdf1awf2_4my2jsnwtw7md/interior_area/TeoI4w6u_klzd9Moj/
https://peanutcat.tk/wp-admin/common_zone/additional_space/idffp_3w604w68t7ts8x/
https://podbormotocikla.ru/wp-admin/personal_zone/Mk5Klt_WOsH22V3y2OuEC_profile/hfn49_19z31wuztyuxu5/
https://sirtorito1.000webhostapp.com/wp-admin/private-aAKUOwBX1-VnVuVYOOi/open-profile/az1-wy04s88sv78y/
https://smartproperty-transpark.com/networko/personal-module/verified-forum/v32t85yk1qjl0n-23x31v8w/
https://sophistproduction.com/wp-includes/personal-vT6310cI7P-VsPUnV86EzH/guarded-warehouse/p2a4enie-y21y8tuuy14y00/
https://staging.semperkitchen.com/wp-admin/protected_ubdIWz_bvw4hL2MjEU/individual_warehouse/dCZoVI9_17j62pI8a/
https://thinksmartrep.com/wp-content/90247_EiQlGH_zone/special_ncpyr7xrm9b_sptzgx4s7/bSkQygdsNB1U_ubI3cehaq/
https://vaziri.echobit.ir/servicios/available-section/open-space/LBYL8HMM2-lbrcpbaprb/
https://vistech.vn/wp-snapshots/private_sector/special_forum/202007413_GbdiznQ/
https://www.violinrepairshop.com/test/protected_box/870293_QsQuEEz_profile/3580674_MPHDbrrxgZVoBCtv/
https://www.yinruidong.cn/gallery1/private_zone/close_jcp_3teno3gaud0/a2kyjaiwivs_t5yv53t1u4/

```
#### Epoch 2 Document/Downloader links ####
```
http://60triple.com/wp-content/browse/
http://aigforms.myap.co.za/wp-admin/eTrac/odjut0d2le/
http://almousa.net/Tasteseason.com/public/
http://apart-rating.ru/ljh7/fa3qqjem2/
http://ariba.develop.kdm1.ru/securelink/public/3prjhx/
http://ariba.develop.kdm1.ru/securelink/xln1lskq/vwlk53b32452-80-zjsxrjefk/
http://art.teca.org.tw/soilsreport/lm/cgenaq1cpx90/6vsd7359338340-10589-rpos4o9judi6un1zr8/
http://arteza.co.id/transaccion/LLC/77sdmvwgfzw/
http://buzon.utrng.edu.mx/images/16Y4TYRRSMMMF/g47fu5ynl/l2zx6u4355819774-8165-tqmqiupo2l3/
http://ca7.utrng.edu.mx/intro/lm/
http://callgeorge.com.au/contact-eu/statement/2h634-329-d0rkgekkohz/
http://catwalkshowitaly.com/cgi-bin/6176624644/k9279002-110588-2s35x7idpooyeq/
http://cgkr.ru/wp-admin/attachments/kgefkvadbapr/e9rqmny1939412-668-sz63vxbqs2zs8g/
http://cheshirecarr.com/wp-admin/statement/1e3w8sc/
http://consultatramites.opamss.org.sv/consulta/vfad3jis6/
http://d3signs.com.au/html/sites/
http://dac.develop.kdm1.ru/b7is12e/FILE/q8ptdm92399070-4926-kbz65bz6tblyprzm/
http://dac.develop.kdm1.ru/b7is12e/lm/rkww4kwr/
http://dannier.me/wp-includes/Document/c8g254415977-95-jw7dbm7dwzstqq6f/
http://dev.inovtechsenegal.com/87/balance/
http://dvuitton.fweb.vn/wp-admin/NKP31Q03ZS/rmex58501869-12-twsajqlafx2/
http://elizaveta.site/cache/753328/ebi4ovs/
http://empower4talent.com/calendar/swift/ok9syy7/
http://epilysium.ru/wp-admin/payment/52dbs337f/x59268471-6852806-gx4fwyx8a/
http://evangelistaadv.com.br/wp-content/themes/docs/
http://faridio-001-site9.ftempurl.com/bfflrc/payment/gekrnfw/
http://farmasi.unram.ac.id/wp-admin/docs/jf030731205-10-tsi190tbfgxl/
http://fjallraven-discount-kanken.ru/cache/browse/ebjlf0w05x/aoedr6060546-76207-lyica7ainwn0d2/
http://fjallraven-kanken-brand.ru/cache/statement/ecbgl98443-0142-o7jva8etrl3obwk1/
http://fjkanken-store.ru/cache/FILE/
http://garantiya27.ru/setlanguage/browse/c4yemqvmi8/
http://habirovradik.ru/layouts/esp/zlemavlc/
http://hepatit-crimea.ru/bme3m2/Reporting/
http://irtech.com.vn/academy/invoice/2ah445o8m/p2kt112396-26241226-zyklyvsh7kltq/
http://kaizenkw.com/calendar/payment/t905804-52263-8na3lcsvmk5/
http://kottedgnyi-poselok.ru/wp-admin/css/swift/wk07mnm7z/
http://laskonsult.se/wp-includes/swift/
http://lemep.iesp.uerj.br/3xmtp/parts_service/mr9is2dp2/
http://lp.terra-sensum.ru/cgi-bin/glm7vkyk6c/
http://luxuryfloors.ru/tmp/YC6JF6UNNSD05/ojtbdbr8083-429924242-3yuiqvzdes1esce0h/
http://mag.iosf1.ir/dl.iosyar/paclm/03gklceexz/
http://makkahlivestockanddairy.com/wp-includes/poog6ib84n/
http://manickamcharitabletrust.com/wp-content/attachments/xr39yudh5/os871732128-58725-e6aludw197l7d6me6aa/
http://manickamcharitabletrust.com/wp-content/Reporting/
http://mastsol.site/wp-admin/sites/b0ytuy/x6313-7770-ypxu7yc0/
http://membros.rendaprevi.com.br/photos_gallery/l0gy972n/79t8gl93105256309-300972100-u2sv2qj06dscj7/
http://menjivarconstruction.com/administrator/swift/m2897887-3401-3uc81wln1lrwj3q/
http://miliuniquetoyscenter.com/cli/Scan/3dsogas/
http://mira-dance.ru/iemi/DOC/mad2q29078-143-bwcoyxjllqrsx0y/
http://mobilize.org.br/acompanhe-a-mobilidade/browse/
http://moskovcev.develop.kdm1.ru/norstedts/invoice/
http://moskovcev.develop.kdm1.ru/norstedts/parts_service/hufqhe5170-8497774-p0m4hm2ksms8p54/
http://msk-rss.ru/wp-admin/parts_service/t6v8p8ni0vrb/mt5462517-241-84rwig5e/
http://myphamonline.chotayninh.vn/wofk253jeksed/docs/
http://nektarin.online/wp-content/attachments/
http://nominas.utrng.edu.mx/add_friend/lm/r826542-20037-e7em7sg1lh1xcu2hh7rw/
http://nuftp.com/site112/swift/swift/
http://obytnaauta-liberec.cz/layouts/browse/or6l11/
http://official-fjallraven-discount.ru/cache/sites/
http://panvelpropertyproject.com/calendar/Overview/
http://phusonland.vn/viewcart/1540182680/ca4yb2gfkh69/
http://phusonland.vn/viewcart/statement/md306-44-yr9mk2rjjm90wt7u/
http://physicscafe.com.sg/cgi-bin/FILE/3n7cjt3bz/
http://pravdaproreef.ru/wp-admin/parts_service/l05268316-83-pwqxu65cylwprhbn5e2a/
http://robotforex-indonesia.com/wp-admin/INC/
http://sbk-ts.ru/language/4k4eykh1/
http://sentryward.space/wp-content/eTrac/
http://shtukatur.develop.kdm1.ru/m79v/INC/
http://simple.develop.kdm1.ru/proddetail/balance/wset2mpw/
http://sk-bauen.ru/templates/OCT/5tu3duclbujf/
http://spnresearch.co.in/cgi-bin/public/
http://srgasia.com.my/wp-content/docs/2dtre00499569157-0204-f3o8bau19574i7yp1/
http://staging.tindahannionang.com/wp-admin/esp/sxm4oo61/
http://standardsurfactants.com/Document/72lkp92/999692437-684-ovxrs64m75g4xmrr9seyw21/
http://steams.pro/layouts/arlxqmfq/
http://stevics.com/--installation/INC/cx3t3dymlsk/
http://vnsmi.ru/wp-admin/browse/e2nyo17b/
http://vol.agency/wp-content/report/380524ge/j6uw21q813909-85543-9o481vocacmavgc2/
http://website-test.ru/wp-includes/Reporting/vz1m609384-039568-5mhlehx8hq/
http://wp-webdesign.site/wp-snapshots/report/
http://wq.feiniaoai.cn/wp-admin/parts_service/h5439-14988-r66sazpfyfsw6w/
http://wq.feiniaoai.cn/wp-admin/qp1o/LLC/jy8968621-446-5psnj81n74s3a/
http://www.artemispk.com/wp-admin/user/invoice/kwxr3ympp/
http://www.maat-moda.com/maat-moda.com/DOC/
http://www.mekostar.vn/wp-includes/docs/6a4z443864082-397864-3w8mw1rbcmn4n/
http://www.quiwan8.com/wp-includes/paclm/
http://www.silverliningcoaching.com.au/silverlining/invoice/pt19j7w637036017-69-psqopu3ni2aow80/
http://www.ttuji.com/87/INC/aoscf4hs7lg/
http://wwwshopmaster1.site/wp-includes/attachments/i829-024947-voai40gyjxumvua/
http://xn--21-6kctkfm4bkho0k.xn--p1ai/wp-content/Scan/
http://xn--80aacbmgyemxi2a.xn--p1ai/wp-admin/Scan/olp24t2y54dh/
http://xn--80aafgiyebjy7am5e3e.xn--p1ai/images/invoice/
http://xn--80aairrm2a0g1a.xn--p1ai/templates/OCT/
http://xn--80adtpnu4g.xn--p1ai/wp-includes/statement/ok4g10798-5467200-sk4tymfcfj5qksnol95/
http://xn--b1agpcoza2f.xn--p1ai/media/attachments/dwe6y6d9aq/w6jh2817993-346475900-blva4rovcbmmcoqb2bt70/
http://xn--barsay-r9a.com.tr.ht/pnsm5hcy/OCT/k2jm4gw0wr6/
http://xn-----elcmbqhddnru4ag.xn--p1ai/zbn/balance/
http://xn--h1aazdcc1f.xn--p1ai/tmp/esp/t5sdelvl66v/
http://yanadiary.ru/wp-includes/Scan/3tuwj8g69817-924728-goxizw8qeirf/
http://yingxiaowang.club/wp-admin/esp/
http://yoomail.online/cache/attachments/1utp361085017-711404-0mryaduozxnebqo3hn/
http://zerkalokrsk.ru/images/Overview/gygchz3sj6ci/
http://ziancontinental.ro/cache/browse/
https://agorapro.com.co/wp-includes/HOGBSDBRRSKGA/5581796-88894973-51gra8irpn4i3byly2/
https://biokemix.com/wp-content/uploads/Overview/Overview/
https://case-express.ru/tmp/ta2d6534-73229832-mm66y4h9t4y6y/
https://demo.amnafzar.net/vendor/YIF3VZVNJ4D8V/jo0pjcc0/usu6268-8604-qhdkhhuqgg/
https://easyehome.com/wp-admin/OCT/
https://evangelistaadv.com.br/wp-content/themes/docs/
https://gubarevweb.ru/wp-content/browse/b86jb8586767-4910-d00my1ai6wzl2vt2c/
https://hotelmanaliview.in/wp-admin/payment/
https://laparoscopysales.com/solution/docs/5g3pl4sgbs/
https://lpmmedikomfeb.unud.ac.id/wp-content/lm/bh76002052-60134699-ffrqvlz7p63p6hsu05w/
https://master-ustrs.ru/media/Scan/yee0ovdqiuv5/
https://membros.rendaprevi.com.br/photos_gallery/l0gy972n/79t8gl93105256309-300972100-u2sv2qj06dscj7/
https://montruc.ca/wp-admin/FILE/
https://new.glitch-store.com/wp-admin/paclm/q3o61088-85854-6599qu8zms9az9k/
https://papagroove.ca/zxgtcf/attachments/
https://project.hsskab.id/uploads/Document/equ42icp/
https://quangcaotukhoa.vn/87/eTrac/4yfp146133-071-9poc5jl3cd17pjjx4s1bq/
https://restauracjaoldcapri.waw.pl/wp-includes/6073/1afmvug29q/kk17r224972-9592140-3oelfscdgz/
https://risk.threepersonalities.com/ofz/n76tfwespgcy/
https://romed32.ru/layouts/swift/vab22vmigrrb/
https://rosecoconsult.ru/rx4/paclm/s2onrq944837415-0179408-gkp37nuqx6yv9k/
https://sidcastic.com/shop/swift/du940828-2961343-1k1q9z9vnpe8ctdmebuafw/
https://sipandu.hulusungaiselatankab.go.id/documentation/statement/
https://topwebhost.gr/wp-content/riaoirbo/
https://university.imgtec.com/wp-admin/sites/n7kxofk/2dbma337421-05744544-gteimeecm3/
https://vaziri.echobit.ir/servicios/4n503-59724-colbklosol0r82d/
https://vhealthmed.com/opencart/28370310369884761/
https://virtualfitness.dk/calendar/report/7v7sr2kk/
https://westbengal.nirbhaymedia.in/cgi-bin/payment/w23vtl3x85b/2ibv323718-956264-n2ftscl5042/
https://www.aibd.sn/wp-content/uploads/FILE/
https://www.blackiebooks.org/zhxg/FILE/y8jtk0y/
https://www.cometprint.net/cgi-bin/swift/
https://www.lasmelosas.cl/fxkw/dotwmiaia5/
https://www.petinfluencer.cl/ighv/FILE/kggh491-60175-bx8np9fq20zflvo0yonx1/
https://zapchast-gazkotel.ru/wp-includes/payment/
https://zcb.hsdgk.cn/wp-includes/OCT/f613236-611711-312elg7iznyxtj/
https://zhixiang360.cn/wp-includes/Reporting/

```
#### Epoch 3 Document/Downloader links ####
```
http://08.sohui.top/shuju/wq-cxo-25/
http://1.magnoec.com/r2v5r/im-wle-0076/
http://122.51.81.155/5gko/0lbc-qw-596672/
http://3mandatesmedia.com/2tz-iuw5-38736/xbvar8va-s2-328692/
http://agn-edu.online/wp-admin/o0-6jdmb-38/
http://ajayzop-001-site3.atempurl.com/5qypk6t/iprwl3w2-4tpw5-795/
http://argosactive.se/engl/rKyiCve/
http://asbeautyclinic.com.ar/87/136/e0db2eq-4y5-611/
http://asbeautyclinic.com.ar/87/UH/
http://astrology-vedic.com/muai/ihfcequc-do-36790/
http://atlanta-stv.ru/wp-includes/f8fa4vy7-xx-87245/
http://az.chemprob.org/wp-content/7krutk-q6k-176727/
http://backup-new.5kmdeal.my/wp-content/plugins/really-simple-ssl/testssl/serverhttpson/kQPb/
http://bagmatisanchar.com/wp-includes/svmkBDxfx/
http://bdsomoynews24.com/wp-content/oav7ke-9nfxg-89/
http://blog.fastcommerz.com/wp-content/languages/yeRg/
http://blog.meschinohealth.com/3875/u3eczk-leg-864611/
http://buhpro-online.ru/wp-snapshots/MOogp/
http://bu-teh-spb.ru/wp-includes/TQVZz/
http://careinsurance247.com/images/uB/
http://cataco.vn/wp-admin/XTuNRG/
http://ccngroup.mx/bin/5oz-c8rd3-4640/
http://colegioquimico-001-site5.dtempurl.com/mcq8d/1i3alof-f2-5054/
http://coniitec.utrng.edu.mx/telcom2018/RUun/
http://crimecitynews.com/wp-includes/yex-mhz-1388/
http://deeno.ir/wp-admin/stkgxld1-gnj31-075153/
http://desatanampulu.id/wp-content/1xmwa5-2o97-97/
http://dev.saras.care/test/u5nd0d-m2s-89442/
http://dev-wp.eduthrill.com/wp-includes/0sxw-58o-798290/
http://dkkb.benhviensontra.com.vn/resources/sJgbjHXU/
http://eiskkurort.ru/wp-content/Ff/
http://elitenews.in/js8nbf8h/RRiEO/
http://enilegho.com.br/wp-admin/sdRXS/
http://fft.cl/monitoreo/gUp/
http://foodfocus.in/wp-includes/MxkDQWtp/
http://galvisual.develop.kdm1.ru/img/0y-266-79130/
http://galvisual.develop.kdm1.ru/img/sl9jdc7-7skg-4872/
http://globalservice.uz/kraat/fZy/
http://hccsouth.myap.co.za/wp-admin/TzJF/
http://healthbrate.com/wordpress/fqdrNXnIy/
http://incity.develop.kdm1.ru/neighbor.api/liDwM/
http://inedamexico.com/AulaVirtual/kCpDiDhq/
http://iro.pmd.by/wp-includes/js/tinymce/jKqPZS/
http://javapromachineryworks.com/wp-content/177w-99-34130/
http://jpdecor.co/wp-admin/CHZZaTMEe/
http://juniorconvent.in/wp-content/AKarVHRf/
http://kirpich-aktobe.kz/jde3/Tm/
http://kub-zavod.ru/form/FNYNmVb/
http://lichfinances.ru/wp-includes/sy-x02-832/
http://mostasharanetalim.ir/wp-includes/qiykv0-91y-124202/
http://myprincessdiary.net/qqdswh/m8xy51qw-dw-162426/
http://narcologics.ru/vwyfi1e/bu-8i-667/
http://nazmulhossainbd.com/wp-includes/m3m4-2ra2-96/
http://nihilgratis.com/wp-admin/ZjPFjLi/
http://nowthisviral.com/astro/t6pxoua-j4-439100/
http://nsl.netsmartz.net/zp58e/Rl/
http://ntc.learningapp.in/fjvcmcp/nzvteyf1-iieyt-16/
http://oilfieldgate.com/bcze/INC/lc3cbo1-d334l-899/
http://onlinedhobi.co.in/ph1tb83yj/a7ydw-dvq3-106875/
http://opt2cloud.com/empfehlen/pba3-y0-681785/
http://ozbio.com/cgi-bin/WUk/
http://pansion-stavroula.gr/cache/zd3x9e30-cpysq-04/
http://potatocat.net/zfaofg/private_array/hb2mk-8ch-59185/
http://pr-greenline.ru/rwwfx9r/hyhKQlQpI/
http://qx.bijiakeji.com/qngqxi/3oluje-zb-68/
http://remalex.pro/bin/hO/
http://sabsapromed.com/wp/alfasymlink/root/dev/shm/OH/
http://sarani.lt/wp-admin/JPoKHbka/
http://sohui.top/wp-includes/nVBHtmDH/
http://strigi.develop.kdm1.ru/donation/gkf-i9e2p-89648/
http://team4.in/dentist.99skywave.com/lhjcm-gy-4740/
http://techliveaid.com/wp-admin/cnrj-jcgni-445971/
http://test.mutlukent.com.tr/administrator/lfQCwuvU/
http://thedesignhome.in/cgi-bin/dvg-svw-053/
http://theknowledgeset.com/email_friend/ckjb80-yv6-1873/
http://tryotium.com/wp-admin/vGcG/
http://uzbek-product.ru/cgi-bin/688-f8qq-9405/
http://victormanuelcazareslira.com/wp-content/iFAAjDevl/
http://volkswagen-renta.ru/r1jp1y/9g9k9l-6jfiq-545/
http://webthietke.tk/wp-content/ymqb-sd6-81/
http://wizonbeauty.com/wp-content/uoHvrcIS/
http://womenshospital.in/wp-admin/KMmtdz/
http://www.farkliboyut.com.tr/wp-includes/j0fjm-44-22339/
http://www.gjhnb666.com/wp-includes/Kh/
http://www.rapidex.co.rs/rapidex.rs/peaIvipx/
http://www.siyays.com/color_bumper/5smi6-7z-6265/
http://www.szczypiorniak.gniezno.pl/wp-admin/7bdtkf-7c-283310/
http://www.xnautomatic.com/gij0w/rjscom-ue1-478519/
http://xn--80aaeb4bevz4a2i.xn--p1ai/ai-bolit/HngQ/
http://xn--80ahtnot.xn--p1acf/administrator/ljuqk4om-fb1-904/
http://xn----8sbhfetalto1h.xn--p1ai/bin/32u-rsxw4-163057/
http://xn--c1abeaonacbooc5apj2m.xn--p1ai/templates/CGGTYrl/
http://xn--d1aiocodol6a8d.xn--p1ai/8nqcg/dao95vuq-he-072133/
http://xn----gtbnfmz2b.xn--p1ai/components/AXkRVZq/
http://xn--h1adbkfg.xn--p1ai/wp-admin/xp6wzc-79z-04/
http://xpertscrm.com/cgi-bin/mcib9u-3u-55/
http://xtovin.cn/wp-includes/DdTGuW/
http://zethler.com/cgi-bin/f9-ft-46/
http://zjgxltjx.com/wp-admin/d9-5d4-7421/
https://ahiskatv.net/images/tu6ws-2n5-696201/
https://backup-new.5kmdeal.my/wp-content/plugins/really-simple-ssl/testssl/serverhttpson/kQPb/
https://bancholiday.com/wp-content/9vjbb1w-pd-29870/
https://bog-fuchs.de/wp-admin/eehkx-naw50-36/
https://deltasoftpos.com/olayjg/w8q-86-28/
https://dev.charitypromoted.com/wp-content/toevs-m9-882375/
https://eski.elt.com.tr/cgi-bin/gz-7n-66/
https://genuinelicensekeys.com/isits/beTbjGNmK/
https://gotohome.club/wp-admin/nl5km-gzrk-78417/
https://gservice.uz/jgc/r7cxtn1q-xdnx-59/
https://infipix.com/wp-admin/MQ/
https://kiemthuphanmem.com/uoi/VMdnCrntw/
https://market-intelligence.io/wp-admin/css/colors/dfIL/
https://mediamoda.ru/wp-content/plugins/wpcustom-category-image/oHutrFB/
https://ojan.amnafzar.net/test/2ld7-obdg3-75589/
https://plussizeall.net/wp-admin/z6-iix96-49449/
https://shopquotes.com.au/wp-includes/EUKgsPC/
https://skiptondogwalker.co.uk/wp-admin/VPylAUQb/
https://swimsuitforwomens.com/wp-admin/mHKgGZDh/
https://theknowledgeset.com/email_friend/ckjb80-yv6-1873/
https://uml.uz/administrator/uugnz-m8og-151609/
https://watchesprime.com/mohsen/ic042-0iin-66982/
https://www.agvbrasilmt.com.br/wp-includes/i8ky-rpgcj-305/
https://www.hgcool.com/wp-includes/h7bvjxjl-wc4-38/
https://www.hgklighting.com/dacecb0fcd2bc6cbe09ed1527e527b37/zanhUmsn/
https://www.onlinepardaz.com/marketsaz/bru0j-jd-499/
https://www.plusjop.nl/media/apawf-fb-064/
https://www.zainish.com/wp-includes/jSbTY/
https://xcx.zhuang123.cn/wp-includes/dzRruAikJ/
https://xcxcd.360aiyi.com/pgdt77wo/skH/
```
### Payloads per Epoch by Document ###

#### Epoch 1 Payloads by Document SHA256 - All Times UTC ####
```
Creation Time	2020:01:30 22:17:00Z		(URL/Attachment - DocX based - Only Available)
SHA256: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http://rolexclinic.com/wp-admin/MtjF7385/
https://adman.porndr.com/redirect/kovdEQ/
http://redbeat.club/wp-snapshots/C5MGS0611/
http://www.gochange.in/wp-includes/n4wY6452140/
https://angar.cc/wp-content/Sqgu/

Creation Time	2020:01:30 19:28:00Z		(URL/Attachment - DocX based - Only Available)
SHA256:
194baf6f4bb803b44c2066f95d2a35a4780dad32b3d7ef3838d63c1d4930b06e
1bd0609956248cabe3ad0342606bb9bcd3a9868fc8f6d9b83ba7acfd4deca2be
1c0859e5d8598a3a69b86b72040141cafcd9bfd65c1eb013c5b0ab6cae6a3ba6
2c685c8ff0a8e26d07febbe64029b1fbb7e69915b034cd003beaec0dad1256b1
3094a8cc9745d2d8c20e81837a459f5d1b7509d411d7954dc4f3309fbad50d3c
31ea1f9103b400370e8f79847a18244cbfb348e97c4ccb45f04810bfbfd9ba4d
3a67e274a00b615226449e7451a58b641a9d81e1cca72326b6c27fe68ea849c5
3b8292e675965176269f98e875926fe667dfefa6c6e9b984081b77054eb603dd
3d0d29f9f42fa9d58abba5af05b9a74a48a861b54ea5a1759c4115bb77bf8801
468801bc3571a69e52ab030e14311896d9c69399145a0932b2e4a672f67545b1
4a7b3def17806559bddd23f94b5925a3fc9f5c70eee18e5a9bfba37ccbfa0e79
598fddbca67da9684717cb6ed31d3a4851f2a29b1d447640415f4a5de3a8bcdb
5d669f3035b344006960d92b8e182bc4805b2f45783fc1393e39b27498e25cba
6218e41cc7e4462e01dbb227a27b2778f76f2d954e0cea7e226a0769f6b7f392
6cfd8ba95861cbeec99fa5ffb5479ee4a56d378460727e1cc581229300b40094
70c920cc1192a5af28e95276a4c9b4f846abccfa0eaa2a1c2105363b39d3293e
710bca7eb8f1b38ff3ff591ffce42780c42d513d5db8e8edbed62b2a30a41145
72b6ec3c1e924a2f6b1bbf4f5359a7dff2c8d0cd96062fa882119a929ff9b6fa
78af768890683c9271a83b8fa61ac0743bbf82ff74a00a23e8b36e1cc539b664
7cb5cd9dce1a1ba97c77347ef3d52f18157a9c63262ba26b27faa0b46ae03b6b
7e928307f956ba7153481f9c5ff422807d3b210a51be147e9fe988fa41d392c4
7ea1e4f802fb3b5a6f202c69faf5d3df78398b882f6ffc6aa299704b2bcccad1
89599cef26bd623a45d7f67eb6c71ed818de00d1041c7dd00a85bb5dbf3cafb9
8d620996902ce4375a9a3deebbc5c0d42f557f27571ede93b3aef6d1d60851ed
8fc23596216c8f6482793ce215e32db28ff6d7a2f5dcc16baf553c4bb5981b8d
a79094eae6a641a6fd02a1c3e384326efe97477d6a780a9fd1f6eadd9f8ace2e
abff4515e0e2d0f9dc1e580018dc792aa0a5dfe7fb17c640e582db5369724d6e
ac160276f25bfbbb7bd6205367d8d93f2ebe4f492e535dada857a2303b48e645
b0cb39bf439331ec3db5721323c3f787272cc25cc07d21e5938de50522a0d788
b4056aa2ac0ac2f9cc611a5c3b9d36b02978e5dea305d2059c06b6924dea58ea
ba0cc49e1836832a8661c6fb63bfe975c22e0231f6a9c5f933f0c7ad95a5c1a6
c108db30439a54fc1d7b9ed2b5bb8cc8133b19af46a4ec6c838aa526fbbb6a5a
cdc3f4c5ade9b3a3ca25bda1c31a4ec81cfcb8843708fc3856e2b10cb144c23b
d5115a94f183c4d359a6300a17fd5080eeb85a65f59a5a303d97208e5f83055e
d524ab0db37cae717bcf07cfa60c0e3428fcc3d3b9253a08e3a63c6cbea9b489
df43728a90f505ab871cacfc9dda0c255c46428970911584e7ff00a42c796c41
eaf210fa10e9ccdc4752d19e454e50c61d46745893fac58cb062ff5079b1ac6c
f49ee5e7c4bc2384d6506dbbec88af0952dd50e37bc2f61df774c6e8a47a3218
f60426a1be9ad7fb26c8124a42bbda8770e2cfdaeaca84ca33d14571138043f5
f6859b3c79d51c474a88624b6e10ab27e117f488dfcd270b9512fdf0aaea660d
f94639d207ad5f28772186e49d0f5f2d4dcf3c20d5f0b83ee0a0069b1ab965c4

http://fundidoradealuminio.com/includes/Cb889/
http://hotelandamalabo.com/dummy/6NvvvLtc8D/
http://parcnational-lomami.org/sijbep2/FdXBo6b/
http://ummistore.com/wp-admin/alwHNnEq/
https://www.maisonbolivar.com/wp-content/kVhAEM6/

Creation Time	2020:01:30 13:07:00Z		(URL/Attachment - DocX based - Office365 Light Blue)
SHA256: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http://wemax-ks.com/wp-content/ibDhQPG/
https://makeupandbeautyguides.com/wp-admin/U7T3zpca/
http://todayspagepk.com/todays/J3/
http://vancity.space/layouts/kP/
http://softus-dev.com/administrator/6kpIs38/

Creation Time	2020:01:30 06:49:00Z		(URL/Attachment - DocX based - Only Available)
SHA256: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http://www.tejasviprabhulkar.com/wp-content/bVK29415/
http://skylines-tec.com/wp-includes/sYYek57/
https://kz.f-chain.com/wp-content/zDYaqX/
http://sittay.com/wp1/trXrrE/
http://www.yitongyilian.com/calendar/LtMHbKKL/

Creation Time	2020:01:29 17:37:00Z		(URL/Attachment - DocX/JSE based - Only Available)
SHA256:
0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254

http://yakuplucilingir.com/wp-admin/By53/
https://khanhbuiads.com/wp-includes/XVq/
http://jonesmemorialhomes.com/463cfd0d43fce8696f19b37cb78ea33c/HO178/
http://www.shaagon.com/wp-admin/sYj84543/
http://43.250.164.92/smartek/jEr584/
```
#### Epoch 1 Payload URLs From Unknown Document ####
```
none
```
#### SHA256s for Epoch 1 Loader EXEs ####
```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```
#### Epoch 2 Payloads by Document SHA256 - All Times UTC ####
```
Creation Time	2020:01:30 23:28:00Z		(URL/Attachment - DocX based - Only Available)
SHA256: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http://alea.ir/f4k/1v/
http://www.baptist.sumy.ua/irardpxot/h/
http://baptist.sumy.ua/irardpxot/dtkv158/
http://www.ecoleannedeguigne.fr/wp-admin/x61n9/
http://goldengarden.com.br/cgi-bin/ty/

Creation Time	2020:01:30 19:13:00Z		(URL/Attachment - DocX based - Only Available)
SHA256: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http://begumazing.com/wp-admin/1y768z/
http://ec-lossa.de/administrator/83vcg/
http://sonsistemsogutma.com.tr/urunlerimiz/su_sogutma_kuleleri/8o4e1/
http://mckennastout.com/fkejsh742jdhed/E/
https://www.maatjemeerwinkel.nl/wp-content/RTutC3/

Creation Time	2020:01:30 15:23:00Z		(URL/Attachment - DocX based - Only Available)
SHA256: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http://www.edusenz.com/calendar/h3t/
http://www.zml15117.com/ajyu/4vfjp/
http://www.kaligraph.in/wp-content/6e/
http://diler.zimen.ua/tmp/0zkn0/
http://hillsidecandy.com/wp-admin/2iq1l/

Creation Time	2020:01:30 11:22:00Z		(URL/Attachment - DocX based - Only Available)
SHA256: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http://srisurena.com/trademark/c553c/
http://nexsolgen.com/c8tsz30/pzby/
http://vedanshsoft.com/eqnar/ftoms/
http://svrealtors.com/billing/p9oa/
https://wiwidwinar.com/crozjui/jFXJnJp7lD/

Creation Time	2020:01:29 13:44:00Z		(Attachment Only - DocX based - Only Available)
SHA256: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http://akdesignsandprint.com/agewws/yT6j/
http://apexbuildersiowa.com/cgi-bin/lv3/
https://www.shakenight.com/wp-content/pt2iz/
https://www2.thaisri.com/2c2p/jm9l/
https://www.internationalabacus.com/calendar/Lr/
```
#### Epoch 2 Payload URLs From Unknown Document ####
```
none
```
#### SHA256s for Epoch 2 Loader EXEs ####
```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```
#### Epoch 3 Payloads by Document SHA256 - All Times UTC ####
```
Creation Time	2020:01:30 19:37:00Z		(URL/Attachment - DocX based - Open Office)
SHA256:
095ae16ea2f042c2a67c760867b9e383168a9e69f35af9c53e3e42f118d8f087
0af8d518c01ba62f4ab1797e291f6959f027008aa5899a8ef72a85cab4830de1
0bc8fbdffdd026661700a901a68d6cff4cea5837c35fb1cab2d524f89eb8f0c8
0cd2361c959ed9e7e67f305e10241dac8c04cf6aa8816a02fa0ecd57f3b8e66e
1092c9cc1b0dbf643c81898c30d3034b4db59f49a86de85ced39a5315ce4549e
14688035aa6bf7d0b1d6f40943fdab438f04c21cd2639c08b60c354d246c3d74
14a9441a1babd407abc8b7adf58f116b1ece228986312fb3b6ade70f3c53522a
14f1bf58c5aa862011e3a551c5907381e40bcb646c7c5de53e2cd50671f60774
1669c4453995256bbb687d8912a92b6598f06f54c8d5a28a6b5a972c891d1ae5
1803eedd37390563f52b9a4968d9d7b9a3e9c85ec7d838abb06766dda2058094
18679279d06463ba2ca553b32ba509a6cb62381bda5381ab82d862beb91da074
194b4bab0e9635c60a16a3c13f8f2980f51adddc1d5ef1ff3a0866ff6d7b5e1d
19a00aabfcd1168b95862038d35696e324d9ef439ce2e1c4ca4e99213c5b732a
1c2d2dcc9e0140fd9e9055a697ec4c2c969590ba93a2f5ebf75bde37cc7ba0f1
20b28afc2522751b35f0817e2d57aba7efb439f7da97ea5f87a7a948072a4b5c
2102f8ddb366289e1fa17890439b88d9da118d5e871c58ddfeb217f1846e5c91
228960ea68978d82cf8f245946c0522095c90c78bd4a188a620e87d306c2619a
27d755aa7bf58559ed73cec0d481fe32fe0d81d2f18da774763c0da9e5c15b5b
2a154df78f570ed8acf939ecc71aa078e047b4a0b7cadbcc449df5c0d3f0f665
2cc6d361b7e889383030328341adee04da05700cfe74c15b8fefb707f07f6c87
2cf32be1bd070e543f42d1d56c57b5760c6ba8396b518ef1d6470c20848a328d
2dce044e703f805b025191eb5a331efde53be323778b27a52f244b200bf0ab1d
2e765041cbf5e4c6a8bd18266ce47fe5b05e8610def9a64bcaec548155282ede
301a502485940239e2554ca7d956318bd3cf3ee05df6cebe91a2687fdaf192e1
323766f53d2b388e82b8971edd88d09a3a400253519117b24772d1052d0cd03a
34344cefba5ddee75a83bcae00ecd89476503468e82f0748957b9ea47f165d48
343861d1fd20a1d81dfe2015bacc7d3af7bce6b55515449f9053a6f15d6e4171
344ec62beaa38421243bae13fa80d39d7457a5c8a11c3347366c3e638d1326e0
3d167814271b23f0ce1d2aa8b5ec56dc43428d2df6084deb4ebb97b72e193da3
4b94d26ec5d1e75c13fcc64290edc48027bd27f999ca672211412a4c1f12479a
4dc4fe4384631b43917164df8030cc23abb5e5a81ea9e03cc22418650399697b
4ec5ecf31a7eb952bdb77822854877dcdefc711a93960f13b069e1141d160921
526d8b2f9e929e04e218b1eeed28009a4ed998b03faf6fd3743ba7b4151aa3d6
528605cd4609d0d5cf1b221aa46efc0d8d75cbee20e5a26390b9adabe412138d
55bf0ff9e174a6b01d16c92624cc6af68436dd82b51c7587f1dfb40184c6dd7a
55e09691a61d983f8bb5cb7d81ca1c07171d3248c62cfcd4f3b1a89f5e9a66f1
5cc9b80f9de781a2bc9717ed8ae9323422aeedca1df3e663869ed6a168f1986d
5d3a5976ea0b945656aeb365c031f831bedd4638fb1667ce60723990568d59da
5f956252e9f433a4b7675b2422ef016eac5627672a114bfafbc0c667a22db5dd
605d7a3139166d8f5ef7e7c7acea745d2c208df433a07e161d991fd71275e763
68338a3e8777d1f7b2d7e8a7a5235a01194c8219503bb5a16ec83d01aeb5ce37
68ddd33bfa87185496120195d7e4007b09c04f658553fb64e558b89269d70492
6bf02ed6ce271b7b41f52e119fb8d366669e9b26f307aecb1620315034e4443e
6d94f89d7781d84b477d49c7f7438969da2f080cf2bf51f3b78648bcd47df4ab
6e3a83e18f96c85321df54be571c0a59390cc62cf23a99c4b2f810eecf3f260f
72d942c42e7664116a9f47239178ddbe477ee81a4686d889524beca2272c80fa
7520f696c405469515a806385d54d83b2861501687a91bb899a29bd3bdf664ff
75c1a9abe81944742065299e4da5aec71b23df394635a7cd594b0bd980405870
797c8a01976f70efa8f735c4a8f0d80a805578978d7f025c204d3e99a1a67d29
7aebb11f4a2b77490ff3706c528c10900a00bdbb3118a6c3a0ef3f07fc6dbf63
7d6d03203cda13942959101d4487c86fa9d270163e2d4800debe50da466398a0
7e082cd1c00196286e9dc462278ca357d4aa3cc353da1d3ebb73955f3fd53b8a
813226187f75c12909c10d00dfafe96c916ad768979a68def760048753fdea9e
842b865f72921952b5a6cc6fef84fc9cda2d3596930fec8f7069ddb9c78f3ebb
84d46bf763331a37dbbb8ad419567136746910d9f1f9de72be0ddb3590786396
84e3e6ba0a6f8eccc3040f569ffac988625f369778941cff25937fee0d6cdbb7
89ac24049d91b7e2d6182935df119f822aa6b341294c2eca2d9b159a9da16fab
8a06475b5843111147926b32b1aecdad3780400157cfae38379d64a78b36139f
8aa2f0d5d11a3aedd257f45c6768e0c8af5a1473436c6e956d5455494349ab8c
8dece0d2130198c1d3acb7688f96392e3ded40745d7d8f7c01f03337209801f9
9241cb1293c8d90d2fd0137b70ce74ba6e7d5835122b0c9a6215cfb1ce1b54c5
933fafacef72ddc88d72a24e9b8ccfdbef7cfff0a1e8ee8789e893e43ad6486f
943444f98f1bb22118cddf2198722733aa216ad0aa313ece459ae6e268a9e2c0
9599097030a21b0181d688b6e65619fded2eda7a987180e95e4a6364ca03865d
9755ef1672fe2fea84ded8999cf71bd62d9a3873bd4fa6ddafab57f59f0527f4
9931f06412385e83080f75415b9fba75bafafe36cb481e478b635d4dca29d0f3
9a601526a6b72a3c0e4ae3067cd09172780ace956eacd5ed4d9b69d49109d0e8
9a97fbdfb0e9d13719818a3edc137439782e74d79034779af77624301dd24d5f
9e5e33a967ae502e2a528fd31502336cc68f2deff565b4760bc2eee148ae87f7
a2c25cc5e8f8afa23325d5cd041fafa25cf6407882113ec43fe75ac3548ea8ee
a605d5fbbc3bae081db1d3107a71e316e9e367c8eb3333d707507af036e1a60f
a9890b29941354d238ff12eddfc6773f5c173ef82fd83e37213178126b943534
ad23200b4b35cf861876a41444203cb74f57e2be7bfddbc92b3fc7a07ecfe056
ae1cdc48a32c38051b8709d02ac807627572fa24244b491c0d3c9fdb7e73da8a
ae370246a5b55b8f9dc4d3d0d7041d03f466f3d4260bf0beb48ff4dfa85a5b11
b1c6e5c38ef9219a5e374c119b083890398d7422c78c023c986e6e75fd97e508
b55e345222e897164ac53450a97ec981ab339fcab0449d591a9c39b6d971888d
b7adf2f83b2abb971abd7d90dac550511a61f0edf7d0142f3b6e65f2c09209df
b804a0733f1f694eb2af5807eed1b192dff275fece8034d22c54e47afee0c5de
b93a5aee28736d48d869ecac5ee947c74ebb93ae1a1f621ff603afe8e8e0571f
b93c176b25e95c8538cc6e80bf1dca7b57ab9a7fe306415caed9989f1c306dd3
c2f41be5de64b96803bc308b3839583b6a786b8bb404aa5e2c775b595272e2e2
c685281700e3fdb853f1147f9679f260b4d9890730e02fdaf9f81b17759cc4c4
c7970448dd12285750ec5d562765c8f494b15914f9699cc95a46f4b249f5f370
c8c286255f467caa7eb0f54b97f1acc2630a2a61dbbde4625adcdd4537d51c80
ccddc6689a91146aede39e3377ab86137c9c192862ec3f11233259d86f9cc9eb
d1ee701482949db834665437e19caf5a6b2333f6048d247e5f8d191a339b7761
d4ff7d3d28165ed32c6e248960e6df51beb147d93bed7713e7e04da9fd9e4535
d74b87f85b69bdff1d86ddfca587e4dd079798c98cf7dc80f9515e4d9ccdf8d9
db29ff54d37ebd7694c5190fc3ddb0ceffd896c7ed43b3f4abb8ab28658ff955
e663621ff749e2033b4a4cda21d7cb98e6a4efbb1c21080b5238c718e9000b4f
e958ea2089a2326ec16a2d6124abe48d154e2d2346f0b5161ed418207529c586
ea6f1cce0c55d30e9208bafb1eb0abd1322a40c841e4b8b096289e70335e0d17
ebd213068384409ca508df25f64672bed0fd3a77b6a40d767c5849fb5e1793f9
ecb07f7cf43e5ce57c25acf021c145fef2c1275cde6cd7065ded7007ac671c3e
ed5859306a9e6bd5508a498220dedddb4871dd6bbf6e8438a27a6f393822fd52
ee1131887f27be7f3d89f2b3a3079353cf3e72f8ef304b948dec44e635310cec
eee300c0c0fb24482aef7b708627f67e9c6ec3b9ed5e9ec71b5653c736c8664d
fa7fa2ecc959cbaf83cb053541aaf87afbad86bcf0f9c682b40f5299ae91e371
ff34e7aacb0e7a1bb3484c133d93683f4c058da1147951f5986cc2d0bc9d3898

http://anivfx.kr/wp-snapshots/vsGnmTxC/
http://unoparjab.com.br/wp-content/themes/twentysixteen/shqjYS/
http://5designradioa.com/cgi-bin/hel3pgfj0u-utw9ye5h-00601/
http://agencia619.online/cli/nntYnR/
http://africa2h.org/wp-content/brxhQk/

Creation Time	2020:01:30 13:48:00Z		(URL/Attachment - DocX based - Office365 Light Blue)
SHA256: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https://plussizeforall.com/22s/9czmjilk-8f32zxomfc-472233795/
http://www.ratnalay.in/wp-admin/QFxzQfVVF/
http://we9design.com/cgi-bin/yjy6pj2tzn-i5zxr-2345/
http://wildrabbitsalad.brenzdigital.com/wp-includes/EHbfVm/
http://wpdev.ted.solutions/cgi-bin/KhebXHnGB/

Creation Time	2020:01:29 17:39:00Z		(URL/Attachment - DocX/JSE based - Only Available)
SHA256:
5452b9448c3310adaa86f6020c32d6ae4727fce5049f613ad9242e2f35e94eff

http://andarealestate.com.au/kqmfgn/PTNzCb/
http://copytak.ir/wordpress/iBzrxYetL/
http://nicewebs.ir/wp-includes/4479qjck6-bso-9081935/
http://kanok.co.th/wp-content/TDykCnZIC/
http://essensetech.com/cpyzf0/9wgwtrg-w2d3p8-322443/
```
#### Epoch 3 Payload URLs From Unknown Document ####
```
none
```
#### SHA256s for Epoch 3 Loader EXEs ####
```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```
### C2's Per Epoch ###

#### Epoch 1 C2s ####
```
104.236.161.64:8080
89.19.20.202:443
114.109.179.60:80
70.184.69.146:80
120.150.247.164:80
73.125.15.41:80
73.239.11.159:80
181.36.42.205:443
186.138.186.74:443
186.200.205.170:80
68.183.190.199:8080
204.225.249.100:7080
80.11.158.65:8080
31.16.195.72:80
191.183.21.190:80
119.59.124.163:8080
91.72.179.214:80
91.242.136.103:80
93.144.226.57:80
5.88.27.67:8080
190.101.144.224:80
144.139.228.113:443
200.82.170.231:80
79.7.114.1:80
87.106.77.40:7080
58.171.38.26:80
77.55.211.77:8080
46.28.111.142:7080
188.135.15.49:80
89.32.150.160:8080
94.176.234.118:443
144.139.228.113:80
109.169.86.13:8080
202.62.39.111:80
189.19.81.181:443
81.16.1.45:80
177.188.121.26:443
190.70.1.69:80
139.162.118.88:8080
82.8.232.51:80
94.200.126.42:80
99.252.27.6:80
190.195.129.227:8090
138.68.106.4:7080
188.218.104.226:80
203.25.159.3:8080
195.223.215.190:80
190.210.184.138:995
91.83.93.124:7080
177.103.157.126:80
5.196.35.138:7080
190.100.153.162:443
68.183.170.114:8080
186.15.83.52:8080
146.255.96.214:443
81.213.78.151:443
201.213.32.59:80
200.69.224.73:80
186.15.52.123:80
191.103.76.34:443
68.174.15.223:80
185.243.92.42:8080
91.74.175.46:80
2.45.112.134:80
110.170.65.146:80
190.24.243.186:80
181.60.244.48:8080
69.163.33.84:8080
200.123.183.137:443
190.210.236.139:80
113.61.76.239:80
87.106.46.107:8080
185.86.148.222:8080
151.80.142.33:80
12.162.84.2:8080
70.184.112.55:80
86.42.166.147:80
175.114.178.83:443
37.187.6.63:8080
192.241.146.84:8080
62.75.160.178:8080
94.200.114.162:80
152.231.89.226:80
2.42.173.240:80
118.200.47.120:443
76.69.26.71:80
125.99.61.162:7080
79.7.158.208:80
82.152.149.79:80
186.177.165.196:443
192.241.143.52:8080
201.213.100.141:8080
200.45.187.90:80
177.103.159.44:80
109.166.89.91:80
186.68.48.204:443
181.231.220.232:80
181.10.204.106:80
113.190.254.245:80
59.120.5.154:80
189.201.197.98:8080
172.104.169.32:8080
142.93.114.137:8080
5.34.158.102:80
181.29.101.13:8080
189.78.156.8:80
72.29.55.174:80
62.75.143.100:7080
129.205.201.163:80
184.172.27.82:8080
207.154.204.40:8080
151.237.36.220:80
200.58.83.179:80
68.62.245.148:80
190.186.164.23:80
187.54.225.76:80
175.139.209.3:8080
190.219.149.236:80
190.17.44.48:80
82.196.15.205:8080
177.242.21.126:80
203.130.0.69:80
185.94.252.12:80
178.79.163.131:8080
190.191.82.216:80
91.205.215.57:7080
181.30.61.163:80
```
#### Epoch 1 - Spam C2s ####
```
51.77.113.100:7080
45.55.82.2:8080
178.250.54.208:8080
```
#### Epoch 1 - Stealer C2s ####
```
51.159.23.217:443
162.144.119.110:8080
190.115.18.139:8080
```
#### Current Epoch 1 RSA Public Key ####
```
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOmlscqbEIhLjVsj9r3eYacKi6C+Qrua
j5TlU+pn3zc0k06qCoahFXBBGnYMotHQc6OwfBKwHWm831LIVg29kEjT8UYxnN5v
fzNGgqXTe25QARf78CsQqqN/ImKdXo+GFwIDAQAB
```
#### Epoch 2 C2s ####
```
162.241.92.219:8080
74.208.45.104:8080
60.231.217.199:8080
62.138.26.28:8080
101.187.197.33:443
149.202.153.252:8080
78.24.219.147:8080
206.81.10.215:8080
190.117.126.169:80
68.114.229.171:80
78.142.114.69:80
180.92.239.110:8080
121.88.5.176:443
181.143.126.170:80
45.55.65.123:8080
78.189.180.107:80
120.150.246.241:80
190.143.39.231:80
108.179.206.219:8080
72.189.57.105:80
174.83.116.77:80
92.222.216.44:8080
103.86.49.11:8080
186.6.245.26:443
190.55.181.54:443
190.220.19.82:443
152.168.248.128:443
211.63.71.72:8080
190.117.226.104:80
110.36.217.66:8080
190.146.205.227:8080
139.130.242.43:80
205.185.117.108:8080
88.249.120.205:80
87.106.136.232:8080
223.197.185.60:80
64.66.6.71:8080
188.0.135.237:80
105.247.123.133:8080
169.239.182.217:8080
108.191.2.72:80
58.171.42.66:8080
78.101.70.199:443
76.104.80.47:443
64.53.242.181:8080
200.116.145.225:443
195.244.215.206:80
95.128.43.213:8080
101.100.137.135:80
5.196.74.210:8080
87.230.19.21:8080
46.105.131.87:80
209.146.22.34:443
173.21.26.90:80
120.151.135.224:80
136.243.205.112:7080
24.105.202.216:443
139.130.241.252:443
24.94.237.248:80
200.21.90.5:443
182.176.132.213:8090
62.75.187.192:8080
177.239.160.121:80
76.86.17.1:80
189.212.199.126:443
2.237.76.249:80
47.156.70.145:80
31.172.240.91:8080
45.33.49.124:443
101.187.237.217:80
90.69.145.210:8080
104.131.44.150:8080
181.57.193.13:80
47.153.183.211:80
70.184.9.39:8080
87.106.139.101:8080
59.103.164.174:80
31.31.77.83:443
159.65.25.128:8080
98.30.113.161:80
37.187.72.193:8080
190.12.119.180:443
47.6.15.79:443
24.164.79.147:8080
210.6.85.121:80
181.13.24.82:80
218.255.173.106:80
125.207.127.86:80
160.16.215.66:8080
65.184.222.119:80
70.127.155.33:80
201.173.217.124:443
207.177.72.129:8080
85.152.174.56:80
75.114.235.105:80
209.97.168.52:8080
91.205.215.66:443
173.16.62.227:80
76.104.80.47:80
178.20.74.212:80
74.130.83.133:80
211.192.153.224:80
101.187.134.207:8080
108.190.109.107:80
93.147.141.5:443
24.196.49.98:80
178.237.139.83:8080
104.236.246.93:8080
74.101.225.121:443
66.34.201.20:7080
46.105.131.69:443
222.144.13.169:80
202.175.121.202:8090
5.32.55.214:80
113.52.123.226:7080
209.141.54.221:8080
23.243.215.4:8080
190.53.135.159:21
178.153.176.124:80
98.156.206.153:80
217.160.182.191:8080
190.114.244.182:443
74.108.124.180:80
42.200.226.58:80
181.126.70.117:80
176.9.43.37:8080
78.186.5.109:443
```
#### Epoch 2 - Spam C2s ####
```
198.58.114.91:8080
87.106.225.180:8080
5.196.200.209:7080
```
#### Epoch 2 - Stealer C2s ####
```
93.83.161.35:7080
139.162.183.41:443
168.235.67.138:8080
```
#### Current Epoch 2 RSA Public Key ####
```
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAKl4M80uy0jcxUiFIaJJyxgHVVnFtCq6
bi6f2xXPh/XUZNyN8UXDe5HzhTc4kwon9MBZffNwFOIc61QfV3K3YzEI/ktcyNqK
LS67ONxsVep769QdiVQJXrIaFjMXKz6viwIDAQAB
```
#### Epoch 3 C2s ####
```
68.183.18.169:8080
178.62.75.204:8080
192.241.220.183:8080
177.103.240.93:80
196.6.119.137:80
203.124.57.50:80
195.250.143.182:80
95.66.182.136:80
78.189.60.109:443
98.192.74.164:80
50.116.78.109:8080
88.247.26.78:80
51.38.134.203:8080
37.70.131.107:80
186.10.92.114:80
105.209.235.113:8080
80.211.32.88:8080
75.86.6.174:80
192.210.217.94:8080
58.185.224.18:80
61.204.119.188:443
58.92.179.55:443
60.151.66.216:443
82.145.43.153:8080
61.221.152.140:80
211.20.154.102:80
77.74.78.80:443
162.144.46.90:8080
78.186.102.195:80
42.51.192.231:8080
78.46.87.133:8080
85.109.190.235:443
185.192.75.240:443
98.178.241.106:80
91.117.131.122:80
60.152.212.149:80
175.127.140.68:80
162.154.175.215:80
190.171.153.139:80
203.153.216.178:7080
180.33.71.88:80
190.5.162.204:80
212.112.113.235:80
192.241.241.221:443
110.2.118.164:80
144.76.56.36:8080
91.83.93.103:443
88.248.140.80:80
78.189.165.52:8080
163.172.107.70:8080
95.130.37.244:443
82.165.15.188:8080
156.155.163.232:80
24.141.12.228:80
72.176.87.136:80
88.247.53.159:443
75.127.14.170:8080
46.32.229.152:8080
91.117.31.181:80
82.146.55.23:7080
186.84.173.136:8080
187.177.155.123:990
216.75.37.196:8080
217.12.70.226:80
195.201.56.70:8080
201.183.251.100:80
182.74.249.74:80
70.45.30.28:80
183.87.40.21:8080
78.188.170.128:80
160.226.171.255:443
109.236.109.159:8080
160.119.153.20:80
78.210.132.35:80
210.213.85.43:8080
59.135.126.129:443
85.100.122.211:80
1.217.126.11:443
182.187.137.199:8080
142.93.87.198:8080
188.251.213.180:443
81.82.247.216:80
183.82.123.60:443
178.33.167.120:8080
175.181.7.188:80
186.223.86.136:443
186.147.245.204:80
89.215.225.15:80
46.17.6.116:8080
184.162.115.11:443
186.10.98.177:80
190.93.210.113:80
181.196.27.123:80
37.46.129.215:8080
190.63.7.166:8080
5.196.200.208:8080
81.214.142.115:80
190.17.94.108:443
95.216.207.86:7080
41.215.79.182:80
144.139.91.187:80
182.176.116.139:995
37.211.67.229:80
200.82.88.254:80
177.144.130.105:443
70.60.238.62:80
187.72.47.161:443
125.209.114.180:443
172.104.70.207:8080
149.202.153.251:8080
58.93.151.148:80
139.59.12.63:8080
23.253.207.142:8080
72.27.212.209:8080
88.225.230.33:80
98.15.140.226:80
157.7.164.178:8081
179.5.118.12:8080
82.79.244.92:80
212.129.14.27:8080
150.246.246.238:80
110.142.161.90:80
60.130.173.117:80
185.244.167.25:443
112.186.195.176:80
176.58.93.123:80
41.77.74.214:443
```
#### Epoch 3 - Spam C2s ####
```
51.68.220.244:8080
31.12.67.62:7080
162.144.130.83:8080
```
#### Epoch 3 - Stealer C2s ####
```
198.46.150.196:7080
51.77.113.102:80
178.32.255.133:443
```
#### Current Epoch 3 RSA Public Key ####
```
MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMqZMACZDzcRXuSnj2OI8LeIYKrbUIXL
faUgIJPwYd305HnaBS2AfA0R+oPxT32r+3BbayI3KguqAn3E+rbwtLhqhOXOlTnY
7yvG4ufmwCCkRzc6Sq8baToxmd6y523AIQIDAQAB
```
#### Credits and Notes Section ####
```
WARNING - Some links may have been taken down shortly after I reported them to URLHaus.abuse.ch
because they rock and report everything to ISPs as it is confirmed to be malware. Additionally,
this list MAY include doc DL URLS from previous days, see the previous days here to get the full picture:
https://pastebin.com/u/jroosen

NOTE: The doc DL URLS are in alphabetical order now. The community lists below may contain content I do not have in my list.
I am providing them for your benefit in case you want to parse them to be sure.
```
#### What is Epoch 1, Epoch 2 and Epoch 3? ####
```
(Finally rewrote this section 1/19/20- I will update it as I see fit and add more content to answer questions)

We get a lot of questions about Epoch 1-3 and what do they really mean. These are different botnets of Emotet with different
infrastructure supporting them. I called them Epochs because they seemed to follow a different timeline and timescale of releases
for updates. They do not share C2 infrastructure and they can behave independently.  In general these are
the rules governing to Emotet's Botnets/Epochs:

1. All C2 combos are hard coded in a list of up to 127 C2 combos in a given Epoch's loader. These Tier 1 C2s are never shared
between Epochs. E1-E2-E3 will all have a unique list of IPs/Ports(Combos) per Epoch. (Usually updated once per day)

2. Module C2s are also unique per Epoch and usually are former C2 Combos that were published in the loader but now are used for
the special purpose of the module for that Epoch. (Usually updated once per week)

3. All Epochs have a unique RSA Public key that is used to communicate and decode messages from the C2 infrastructure. These are
listed in the daily reports. Using CAPE's excellent Emotet Extraction module you can easily find what Epoch a sample is from.

4. All Epochs will use a unique location for distribution downloads. You will never see the same directory on the same compromised
distro tier 1 host used for a different botnet. e.g. host A may be used for distributing Emotet E1 loaders in directory /wp-fail/X/
and you may also see E2 documents hosted out of /wp-sucks/Y/. You will never see E1-E3 use the root of X or Y again for another
distro job to host loaders or docs for another botnet. (Note: a given distro directory will usually because abandoned and stop
hashbusting after 48-72 hours from inception.)

5. Spam from each Epoch will be used to add new bots to that Epoch. While there have been very rare exceptions or maybe even mistakes
on the distro side, Epoch 1 spam will be used to create more Epoch 1 bots and Epoch 2 spam will be used to create more Epoch 2 bots.

6. Marco Documents from a given Epoch will always contain 5 URLs(Quintet) that download the loader for that same Epoch. (There
have been very rare exceptions to this rule but in general this is the TTP.)

7. Marco Documents from a given Epoch will have the same Creation Time for a given Quintet of URLs. This allows for quick identification
of the origin of the document per Epoch. When the Creation Time metadata changes for a document, there is almost always a new quintet
of loader URLs.

8. Malspam Templates are usually unique to a given Botnet/Epoch. They may later be shared to the other Botnet/Epoch but at the time of
the run, they are usually run on a single botnet. Example would be the Ransomware one from Friday 1/17/20 that was only on E3.

9. Bot can be transfered from Epoch to Epoch and we have seen this over time. Normally it is done by dropping an EXE from another
Epoch deliberately for the C2 update.

10. Macro Document Creation times usually change on Epoch 2 first and then shortly there after change on E1 and E3. We believe E2 is
really the primary botnet for Ivan/Emotet and they put changes on this botnet first.

```
#### Community Lists/Samples ####
```
https://pastebin.com/VfFNbN3P - @Paladin3161
https://pastebin.com/6QkB45wj - @executemalware
https://pastebin.com/yfNz1D3G - @pollo290987

(sorry if we miss anybody, make sure to send it to @cryptolaemus1 in your tweet and we will try to include it!)
```
#### Credits ####
```
Combination work of the Cryptolaemus Team - https://paste.cryptolaemus.com/about/ and/or specifically the following:

Doc DL URLs - @devnullnoop, @p5yb34m, @malware_traffic, @dms1899, @Paladin3161

C2 info/RSA Keys - @CapeSandbox, @unixronin, @devnullnoop, @MalwareTechBlog, @lazyactivist192, @papa_anniekey, @Paladin3161,
@executemalware, @luc4m, @SecSome

Payloads - @devnullnoop, @MalwareTechBlog, @lazyactivist192, @p5yb34m, @malware_traffic, @Paladin3161, @ps66uk,
@bomccss, @reecdeep, @CholeVallabh, @papa_anniekey, @JAMESWT_MHT, @executemalware, @SecSome, Anonymous :)

Spam Templates - @devnullnoop, @lazyactivist192, Anonymous :)

Special thanks to @lazyactivist192, @devnullnoop, @2sec4u, @unixronin, @pollo290987, @ps66uk for creating scripts/servers/
infrastructure and helping out with this!

Very special thanks to @unpacme, @herrcore, @seanmw, @Binary_Defense, @lazyactivist192, @capesandbox, @bigmacjpg and @decalage2 of
the ViperMonkey Project https://github.com/decalage2/ViperMonkey, @digitalocean, @mploessel, @anyrun_app, @unixronin, @hurricanelabs,
@MalwareTechBlog, @KryptosLogic, @0xtadavie, @MsftSecIntel, @abuse_ch/urlhaus.abuse.ch, @urlscanio, @BlackLotusLabs, @TrendMicro
and @Virustotal for providing services/software at no charge to this cause!

```
### Daily Log 01/29/20 ###
```
This report was gathered by @ps66uk and @jroosen:

@JRoosen here - Looks like I was targeted again by Emotet at my dayjob with about 2 dozen malspams again. They were again all generic and
all link based with the exception of 1 attachment based late. The seemed to be all from E2 and they used the new regex I made up yesterday.
Regex is included below in that section. The interesting thing about these generic templates is that they usually didn't even have a subject.

Ivan seemed to be experimenting with something today and I have to say it was likely not too successful. Given this the total IOCs
are down today by far. Unless we missed something, it seemed like E2 and E3 had a lot of problems functioning. E1 seemed to be mostly
normal with the amount of doc releases. E2 was slightly behind and E3 only managed to get 2 Quintets out. Furthermore, E2 and E3
seemed to be having issues with hashbusting with attachments. They seemed to only have a single hash for all attachments but the links
were pulling down the typical 1 of 100 different hashes for a quintet. So true to the past, Ivan was doing a testing Thursday I suppose.

```
#### General News ####
```

David Ledbetter @Ledtech3 - Made a quick blog post on how to decode the new Emotet JS files:
https://twitter.com/Ledtech3/status/1222768106029883392

AnyRun was talking about the new Emotet template this morning:
https://twitter.com/anyrun_app/status/1222779040261644288

@threatpost covered the CoronaVirus malspam lure being used by Emotet today:
https://twitter.com/threatpost/status/1222971861073649665
^
Reminder on this one, we believe this is just the result of Emotet exfiltrating this email from an existing infection and then
using this email to perform a reply chain malspam run against all other recepients of the email.

@catnap707 found a site that has been hosting Emotet on and off for the past few weeks:
https://twitter.com/catnap707/status/1223065375924834304


@bomccss's daily report for morning malspam being received in Japan:
https://twitter.com/bomccss/status/1223055907849850881
https://twitter.com/bomccss/status/1223091049452621824

Looks like the silly Meeting notification/Meeting Invite template is being used again based on @bomccss's observations.

@tiketiketikeke's report on East Asian hosted Emotet tier 1 sites:
https://twitter.com/tiketiketikeke/status/1223048326418857984
https://twitter.com/tiketiketikeke/status/1223048442240352256


Kevin Beaumont noticed some IPs accessing his Emotet honeypot email accounts. It looks like these are Trickbot related:
https://twitter.com/GossiTheDog/status/1223040031096438784

@jstrosch posted a video on how to debug macros and learn the structure of forms via the Office IDE:
https://twitter.com/jstrosch/status/1222957987918118912

@VK_Intel commented on a thread about his observations with Trickbot and Emotet using the same exclusive crypter service:
https://twitter.com/VK_Intel/status/1222903160424910851

Interesting observation from @laskow26 with an Emotet -> Trickbot gtag mor85 -> Cobalt Strike deployment:
https://twitter.com/laskow26/status/1222332258092105729

```
#### Drops Report ####
```

Would you believe it was Trickbot gtag 87? of course it was!

```
#### Email Template Report ####
```

Seems like the Meeting Notification/Meeting Invite type templates are going to be used again based on @bomccss's observations above.

I will share some templates soon but ironically this stuff below with regexes below keep catching it all!
__________

Some notable things to possibly filter on with misspellings, grammatical errors and odd phrasing:
(I will keep adding to this over time)(Updated 01/29/20)
"Have a nice day. I hope for your cooperation."
"Nothing personal is just a business."
"YOUR COMPUTER HACKED!"
"We have taken over your personal data and financial data."
"Please see attached the medical report of your helper for your perusal"
"This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus"
"Email secured by Check Point"
"Please find our data attached."
"As per the email below, Can you please advise when can I expect a solution?"
"I had forwarded this to your for follow up."
"if order was not place, please contact us and obtain a proof of payment of who sign for order, dispute if necessary."
"Please be advised that the new problem has been appeared today."
"I have sent the new file in DOC format."
"Here all our documentation for our question."
"Here's another email below that i have to make a follow-up on request."
"I have finally been sent the new table-form, which is great. I forward it to you."
"Please sign, date, and email back as confirmation."
"Please find attached the check copy for payment."
"I have sent the new data in DOC format and the policy wording in DOC format to be even more professional than others :)"
"Is this one authorised? (Docs in attachment.)"
"Can you please look into this urgently and advise?"
"there is a older outstanding invoice, I have attached this invoice."
"I meant to send a doc before ,sorry."
"Thank you for your email. I have attached all the data."
"Please find attached the invoice and detailed charges for the month. If you have any questions please let me know."
"I have sent a request to add this information."

These are some old generic virus scanners that I think may no longer be valid and worth blocking:
"--
This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean."
"Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering."
"This email has been scanned by LANserve Email Defence."

Paul's Boutique of Documents:
includes distro and urlhaus report time

E* Created              Primary_Domain                        Distro  Urlhaus  Template

E1 2020:01:30 06:49:00Z www.tejasviprabhulkar.com             07:04   07:05    only_available
E2 2020:01:30 11:22:00Z srisurena.com                         11:32   11:32    only_available
E3

E1 2020:01:30 13:07:00Z wemax-ks.com                          13:16   13:15    light_blue
E2 2020:01:30 15:23:00Z www.edusenz.com                       16:36   15:31    only_available
E3 2020:01:30 13:48:00Z plussizeforall.com                    13:58   13:58    light_blue

E1 2020:01:30 19:28:00Z fundidoradealuminio.com               19:34   19:35    only_available
E2 2020:01:30 19:13:00Z begumazing.com                        19:22   19:23    only_available
E3 2020:01:30 19:37:00Z anivfx.kr                             19:46   19:48    open_office

E1 2020:01:30 22:17:00Z rolexclinic.com                       22:24   22:25    only_available
E2 2020:01:30 23:28:00Z alea.ir                               23:35   23:42    only_available
E3

E1
E2
E3



```
#### Link Regex Report ####
```
(These are experimental, use at your own risk.)

(01/29/20) Updated E2:

Goal is 75% or more capture rate with low false positives. Thanks to @pollo290987 for his help on these!

Karttoon's E1:

(?:http(s)?:\/\/)?(?:[^\x2F]+\/)+(((available|open|closed?|common|multifunctional|personale?|speciali?|privat(e|a)|test|additional|security|inter(ior|nal|ni)|individuale?|verifi(ed|able|cabile)|guarded|external|protected|disponibile|corporate|multifunzionale|contestee|aggiuntiva|chiusi|disponibile|sicurezza|custodito|aperto|comune|verificato)[_-]([a-zA-Z0-9]{3,16}[_-][a-zA-Z0-9]{4,15})\/)|(([a-zA-Z0-9]{2,16}[_-][a-zA-Z0-9]{4,16})[_-](resource|content|box|disk|sector|modul(e|o)|array|cloud|warehouse|forum|space|portale?|profil(e|o)|zon(e|a)|area|marketing|spazio|allineamento|module|disco|settore|sezione|risorsa)\/)|((available|open|closed?|common|multifunctional|personale?|speciali?|privat(e|a)|test|additional|security|inter(ior|nal|ni)|individuale?|verifi(ed|able|cabile)|guarded|external|protected|disponibile|corporate|multifunzionale|contestee|aggiuntiva|chiusi|disponibile|sicurezza|custodito|aperto|comune|verificato)[_-](resource|content|box|disk|sector|modul(e|o)|array|cloud|warehouse|forum|space|portale?|profil(e|o)|zon(e|a)|area|marketing|spazio|allineamento|module|disco|settore|sezione|risorsa)\/)|([a-zA-Z0-9]{4,14}[_-][a-zA-Z0-9]{5,16}[_-][a-zA-Z0-9]{3,13}[_-][a-zA-Z0-9]{2,16}\/)){2}([a-zA-Z0-9]{3,16}[_-][a-zA-Z0-9]{3,14}|[a-zA-Z0-9]{9})(\/)$

Updated E2 (1/29/20)
E2:
NEW: https?:\/\/.+?\/(addons|attachments|balance|browse|calendar|Document|Documentation|DOC|docs|esp|eTrac|FILE|INC|invoice|index_files|LLC|lm|network|parts_service|payment|OCT|Overview|Pages|paclm|public|public_html|report|Reporting|Scan|sites|statement|swift|system|test|uploads|vendor|wp-(admin|content|includes))\/([a-z0-9]{4,18}\/)?(([a-z0-9]{5,15})\-([0-9]{2,9})\-([a-zA-Z0-9]{8,20})\/)?(\"|\n)

OLD:
https?:\/\/.+?\/(addons|attachments|balance|browse|calendar|Document|Documentation|DOC|docs|esp|eTrac|FILE|INC|invoice|index_files|LLC|lm|network|parts_service|OCT|Overview|Pages|paclm|public|public_html|report|Reporting|Scan|sites|statement|swift|system|test|uploads|wp-(admin|content|includes))\/([a-zA-Z0-9]{4,18}\/){0,2}?(([a-zA-Z0-9]{1,12})\-([0-9]{3,10})\-([0-9]{2,10})\-([a-zA-Z0-9]{4,12})\-([a-zA-Z0-9]{4,12})\/)?(\"|\n)

E3:
https?:\/\/.+?\/([A-Za-z0-9\-\_]{2,13})\/(([0-9a-z]{2,7}\-[0-9a-z]{2,7}\-[0-9a-z]{2,7}\/){1,2})(\"|\n)
https?:\/\/.+?\/(_old|ABOUT|AdminPanel|backup|calendar|captchacache|cgi-bin|cloud|cpnl|css|engl?|fancybox|fonts|images|media|oauth|pub|Register|scripts|setup|test|tmp|tr|us|web|wp(scripts)?|wp-(admin|content|includes))\/([A-Za-z0-9\-]{2,7})\/(\"|\n)

Also keep in mind, your filter needs to look inside PDF files to find the URI to test against these above. Otherwise
this does not help.

```
#### Loader Report ####
```
Payloads and C2 report has been combined into this section and it is now known as the Loader Report.
_____________
Warning from @lazyactivist192
EXE naming convention changed 2020/01/20 as of 22:40UTC+. The new names will be 2 of any of the following list of words:
duck,mfidl,targets,ptr,khmer,purge,metrics,acc,inet,msra,symbol,driver,sidebar,restore,msg,volume,cards,shext,query,roam,etw,mexico,basic,url,createa,blb,pal,cors,send,devices,radio,bid,format,thrd,taskmgr,timeout,vmd,ctl,bta,shlp,avi,exce,dbt,pfx,rtp,edge,mult,clr,wmistr,ellipse,vol,cyan,ses,guid,wce,wmp,dvb,elem,channel,space,digital,pdeft,violet,thunk
______________


@lazyactivist192 noted today that Emotet E2 botnet started using PECompact to pack the loader around 16:15 until about 20:00
for the small EXEs ~ 70KB. Magic key on these was

C2 Deltas:
E1 now 127 combos, was 127 for a net nil
E2 now 127 combos, was 127 for a net nil
E3 now 127 combos, was 127 for a net nil

---
notes
---

E1 - j 70.184.112.55, 70.184.112.55, 104.236.161.64
Range          Size    Compiled           CAPE   hash
22:55 -        463kb   20200129_214249    11861  ab3ed1bf2bd4353736fe0bea1d9c8978d80bba2657c4e1373b43a4ba3d8d2e4c
06:25 -        442kb   20200129_223440    11874  f919c1f476ffd8c8e2753ddc4014a19bfd5a465ac22118da9e488ec49023e60f
11:30 -        371kb   20200130_093323    11903  bcf4516f092c687128cb220272d2702e213f6da6d1bbc3cdcb07aa7cd3e75b71
16:15 -        253kb   20200130_154147    11919  d6bb96fa44233e2140881b2e3de95c8d44751a5ce6d82eb547a5101ce4cb07d6 <= C2 change
20:00 -        300kb   20200130_193235    11946  d90ff5ae5c9e7670fc5baa3342f83e64e00eee2814ed47707dc98fd90d6db43d <= C2 change
23:50 -        347kb   20200130_212710    11951  2ffa4c73ba1718a49abc40c7bf2ecaf80e5bea4dd7c64ad16ac9d18d23ae1183


16:15
Dropped:
172.104.169.32:8080
177.103.159.44:80
31.16.195.72:80
77.55.211.77:8080
72.29.55.174:80
94.200.126.42:80
190.17.44.48:80
188.218.104.226:80
186.15.83.52:8080
125.99.61.162:7080
149.62.173.247:8080
99.252.27.6:80
175.139.209.3:8080

Added:
144.139.56.105:80
185.86.148.222:8080
181.30.61.163:80
201.213.100.141:8080
192.241.146.84:8080
86.42.166.147:80
58.162.218.151:80
186.138.186.74:443
2.42.173.240:80
186.15.52.123:80
175.114.178.83:443
110.170.65.146:80
151.237.36.220:80


20:00
Dropped:
144.139.91.187:80
74.50.51.115:7080
144.139.56.105:80
139.47.135.215:80
37.120.185.153:443
203.45.161.179:443
58.162.218.151:80
217.199.160.224:8080
188.216.24.204:80
190.6.193.152:8080
50.28.51.143:8080
212.71.237.140:8080

Added:
31.16.195.72:80
77.55.211.77:8080
94.200.126.42:80
99.252.27.6:80
188.218.104.226:80
186.15.83.52:8080
125.99.61.162:7080
177.103.159.44:80
172.104.169.32:8080
72.29.55.174:80
175.139.209.3:8080
190.17.44.48:80

---
E2 - b 70.127.155.33, 162.241.92.219, 162.241.92.219
Range          Size    Compiled           CAPE   hash
23:00 -        462kb   20200129_214003    11862  1f723157cd390762b795fcfab6c1ee7660f8ded4e88c3309354d9319160a3d8e
06:25 -        439kb   20200129_223140    11876  3a823a18b53cef17cf4daa463db072bffc3dd1391b3fd2ca2c17b7317d7b356b
11:30 -        370kb   20200130_093130    11904  2e242f8ff29abcd1704b8eee104a8547ccffacc6ca1554eb285a31ec5cf91125
16:15 -        70kb    20200130_155541    11920  7342395cef7eb4f31184cb712f7084db5bffbabe43372442aa2cbd683cc98067 <= C2 change
20:00 -        299kb   20200130_193114    11938  384c1ff5e243b161ad00f91ffa8f81906001005d34671b8e18d3add81105a523 <= C2 change
23:50 -        346kb   20200130_212501    11948  ff23508071ede9d02bde45a9719441a6bec1e9989583d37977c0bf244e9f05dc


16:15
Dropped: 18
65.184.222.119:80
95.213.236.64:8080
152.168.248.128:443
211.192.153.224:80
101.187.134.207:8080
125.207.127.86:80
183.102.238.69:465
47.6.15.79:443
46.105.131.87:80
74.130.83.133:80
105.247.123.133:8080
178.153.176.124:80
98.30.113.161:80
104.131.44.150:8080
178.20.74.212:80
178.237.139.83:8080
64.40.250.5:80
206.81.10.215:8080

Added: 18
162.241.92.219:8080
62.75.187.192:8080
70.180.35.211:80
174.83.116.77:80
5.32.55.214:80
5.196.74.210:8080
75.114.235.105:80
24.94.237.248:80
87.230.19.21:8080
149.202.153.252:8080
31.172.240.91:8080
120.150.246.241:80
88.249.120.205:80
173.16.62.227:80
108.190.109.107:80
120.151.135.224:80
189.212.199.126:443
76.86.17.1:80


20:00
Dropped: 15
105.27.155.182:80
70.180.35.211:80
115.65.111.148:443
100.6.23.40:80
217.160.19.232:8080
47.6.15.79:80
108.6.140.26:80
23.92.16.164:8080
110.44.113.2:80
37.139.21.175:8080
50.116.86.205:8080
62.75.141.82:80
201.184.105.242:443
179.13.185.19:80
85.105.205.77:8080

Added: 15
206.81.10.215:8080
152.168.248.128:443
105.247.123.133:8080
46.105.131.87:80
104.131.44.150:8080
98.30.113.161:80
47.6.15.79:443
125.207.127.86:80
65.184.222.119:80
178.20.74.212:80
74.130.83.133:80
211.192.153.224:80
101.187.134.207:8080
178.237.139.83:8080
178.153.176.124:80

---
E3 - f 186.10.98.177, 186.10.98.177, 68.183.18.169
Range          Size    Compiled           CAPE   hash
23:00 -        467kb   20200129_214308    11863  53c82cd4e8add425dd3b78a796665dde87c6771ddf2eb3ea09f652ca243d6d49
06:30 -        445kb   20200129_223458    11875  e8f809f69a173ed00b2573fda1acdaa9492c65789155294ef10dee8769016fd3
11:30 -        376kb   20200130_093335    11902  2c90c43ecb434df7e16379523f75be9ef8bad6bae95c1305f311848b4a81bf87
16:20 -        254kb   20200130_154045    11922  bee4e7dc453fa138a51f744a70da55e9f94a9023ad51ebd90de1952891e12007 <= C2 change
20:00 -        302kb   20200130_193256    11935  576c07107aff159101869c0e79020fbc443628a34e90aac462046b9fd957e6da <= C2 change
23:50 -        348kb   20200130_212728    11949  3836f5c73a623827c493ed4f5aa290e90fb2cf59c38be58017c92509b94addf1


16:20
Dropped:
37.46.129.215:8080
200.82.88.254:80
112.186.195.176:80
162.144.46.90:8080
149.202.153.251:8080
158.69.167.246:8080
125.209.114.180:443
217.12.70.226:80
89.215.225.15:80
95.216.207.86:7080
176.58.93.123:80
144.139.91.187:80
69.30.205.162:7080

Added:
142.93.87.198:8080
46.32.229.152:8080
82.165.15.188:8080
60.130.173.117:80
211.229.116.130:80
110.142.161.90:80
88.247.53.159:443
190.63.7.166:8080
212.129.14.27:8080
98.15.140.226:80
50.63.13.135:8080
177.103.240.93:80
70.45.30.28:80


20:00
Dropped:
154.70.158.97:80
85.96.49.152:80
153.183.25.24:80
211.229.116.130:80
51.77.113.97:8080
122.176.116.57:443
1.221.254.82:80
41.185.29.128:8080
154.73.137.131:80
181.39.96.86:443
220.247.70.174:80
153.137.36.142:80
50.63.13.135:8080

Added:
162.144.46.90:8080
217.12.70.226:80
186.223.86.136:443
89.215.225.15:80
37.46.129.215:8080
95.216.207.86:7080
41.215.79.182:80
144.139.91.187:80
200.82.88.254:80
125.209.114.180:443
149.202.153.251:8080
112.186.195.176:80
176.58.93.123:80


```
#### Closing ####
```

Ivan had a rough Thursday it seemed to but still managed to get out some decent levels of malspam with some admins receiving heavy malspam.
It goes to show you that even when Ivan and Yuri and drunk not trying very hard, they can still cause a lot of problems. This is why Emotet
is such a problem and why you need to ingest these IoCs and protect yourself. Be vigiliant and be safe!

See you on Sunday for the weekend report!

```
#### Sandbox ####

```

E1
https://capesandbox.com/analysis/11951/

E2
https://capesandbox.com/analysis/11948/

E3
https://capesandbox.com/analysis/11949/

```