| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| Agent Tesla IOC's | Jan 17th, 2018 | Never | 3,082 | 0 | None | - |
| Carved hashes | Jan 16th, 2018 | Never | 586 | 0 | None | - |
| Globeimposter links Jan 11 | Jan 11th, 2018 | Never | 348 | 0 | None | - |
| Hancitor Jan 10 | Jan 10th, 2018 | Never | 824 | 0 | None | - |
| Emotet links Jan 10 | Jan 10th, 2018 | Never | 568 | 0 | None | - |
| Emotet links Jan 9 | Jan 9th, 2018 | Never | 840 | 0 | None | - |
| Emotet links Jan 8 | Jan 8th, 2018 | Never | 470 | 0 | None | - |
| Emotet sharepoint | Jan 5th, 2018 | Never | 484 | 0 | None | - |
| Emotet links Jan 5 | Jan 5th, 2018 | Never | 380 | 0 | None | - |
| Emotet links Jan 4 | Jan 4th, 2018 | Never | 436 | 0 | None | - |
| Emotet links Jan 3 | Jan 3rd, 2018 | Never | 980 | 0 | None | - |
| Dec 2017 Campaigns | Jan 2nd, 2018 | Never | 600 | 0 | None | - |
| Powershell | Jan 2nd, 2018 | Never | 459 | 0 | None | - |
| Emotet links Jan 2 | Jan 2nd, 2018 | Never | 1,623 | 0 | None | - |
| FUD powershell | Jan 2nd, 2018 | Never | 560 | 0 | None | - |
| From recon to bruteforce | Dec 29th, 2017 | Never | 504 | 0 | None | - |
| Gootkit links | Dec 27th, 2017 | Never | 495 | 0 | None | - |
| Dreamsmasher | Dec 24th, 2017 | Never | 390 | 0 | None | - |
| Hancitor Dec 21 | Dec 21st, 2017 | Never | 885 | 0 | None | - |
| SASL brute Dec 20-25 | Dec 20th, 2017 | Never | 364 | 0 | None | - |
| Emotet links Dec 20 | Dec 20th, 2017 | Never | 362 | 0 | None | - |
| Hancitor Dec 20 | Dec 20th, 2017 | Never | 533 | 0 | None | - |
| Hancitor Dec 19 | Dec 19th, 2017 | Never | 650 | 0 | None | - |
| Emotet links Dec 19 | Dec 19th, 2017 | Never | 338 | 0 | None | - |
| Trickbot config Dec 18 | Dec 18th, 2017 | Never | 372 | 0 | None | - |
| Hancitor Dec 18 | Dec 18th, 2017 | Never | 623 | 0 | None | - |
| Emotet links Dec 18 | Dec 18th, 2017 | Never | 302 | 0 | None | - |
| Emotet links Dec 15 | Dec 15th, 2017 | Never | 667 | 0 | None | - |
| Decompiled | Dec 14th, 2017 | Never | 3,436 | 0 | None | - |
| Emotet links Dec 14 | Dec 14th, 2017 | Never | 618 | 0 | None | - |
| Hancitor Dec 13 | Dec 13th, 2017 | Never | 673 | 0 | None | - |
| Emotet links Dec 13 | Dec 13th, 2017 | Never | 433 | 0 | None | - |
| Emotet links Dec 12 | Dec 12th, 2017 | Never | 344 | 0 | None | - |
| Trickbot config Dec 12 | Dec 12th, 2017 | Never | 356 | 0 | None | - |
| Hancitor Dec 11 | Dec 11th, 2017 | Never | 851 | 0 | None | - |
| Emotet links Dec 11 | Dec 11th, 2017 | Never | 405 | 0 | None | - |
| Viking.GN c2 | Dec 9th, 2017 | Never | 336 | 0 | None | - |
| Emotet links Dec 8 | Dec 8th, 2017 | Never | 400 | 0 | None | - |
| Hancitor Dec 8 | Dec 8th, 2017 | Never | 438 | 0 | None | - |
| Powershell empire | Dec 8th, 2017 | Never | 341 | 0 | None | - |
| Hancitor Dec 7 | Dec 7th, 2017 | Never | 638 | 0 | None | - |
| Hancitor Dec 6 | Dec 6th, 2017 | Never | 555 | 0 | None | - |
| Emotet links Dec 6 | Dec 6th, 2017 | Never | 355 | 0 | None | - |
| Client32.ini | Dec 5th, 2017 | Never | 301 | 0 | None | - |
| Hancitor Dec 5 | Dec 5th, 2017 | Never | 586 | 0 | None | - |
| Globe Dec 5 | Dec 5th, 2017 | Never | 328 | 0 | None | - |
| Hancitor Nov 4/5 | Dec 5th, 2017 | Never | 374 | 0 | None | - |
| Emotet links Dec 4 | Dec 4th, 2017 | Never | 306 | 0 | None | - |
| Globeimposter links Dec 4 | Dec 4th, 2017 | Never | 367 | 0 | None | - |
| Dec 2 SASL Brute force | Dec 2nd, 2017 | Never | 373 | 0 | None | - |
| Nov 2017 Campaigns | Dec 1st, 2017 | Never | 443 | 0 | None | - |
| Globe Dec 1 | Dec 1st, 2017 | Never | 275 | 0 | None | - |
| Additional pandabanker links | Nov 30th, 2017 | Never | 759 | 0 | None | - |
| Hancitor Nov 29 | Nov 29th, 2017 | Never | 1,143 | 0 | None | - |
| certificate of registration.doc | Nov 28th, 2017 | Never | 367 | 0 | None | - |
| SASL brute | Nov 28th, 2017 | Never | 492 | 0 | None | - |
| Bad again.ps1 | Nov 27th, 2017 | Never | 373 | 0 | None | - |
| WindowsUpdaterLog | Nov 21st, 2017 | Never | 327 | 0 | None | - |
| Hancitor Nov 21 | Nov 21st, 2017 | Never | 357 | 0 | None | - |
| Client32.ini | Nov 21st, 2017 | Never | 222 | 0 | None | - |
| Trickbot config Nov 20 | Nov 20th, 2017 | Never | 387 | 0 | None | - |
| Emotet links Nov 20 | Nov 20th, 2017 | Never | 476 | 0 | None | - |
