| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| dridex-qbot-script-decoder | Sep 3rd, 2019 | Never | 4,099 | 0 | PowerShell | - |
| vbs-decode | Aug 29th, 2019 | Never | 3,888 | 0 | VBScript | - |
| Re_ FW_ Transfer Forms.eml | Jan 13th, 2020 | Never | 4,953 | 0 | None | - |
| requested items.eml | Jan 9th, 2020 | Never | 3,365 | 0 | None | - |
| This is the new variable..eml | Jan 8th, 2020 | Never | 4,428 | 0 | None | - |
| {RFQ}Engineering, Procurement, Construction for Samgori.eml | Jan 8th, 2020 | Never | 3,581 | 0 | None | - |
| pending delivery.eml | Jan 6th, 2020 | Never | 3,467 | 0 | None | - |
| [New Lead] MTSolicitors Property for buy out.eml | Jan 6th, 2020 | Never | 3,354 | 0 | None | - |
| #agenttesla-20190826-1 | Aug 26th, 2019 | Never | 4,459 | 0 | None | - |
| #trickbot IoC 20190708 | Jul 8th, 2019 | Never | 5,374 | 0 | None | - |
| #trickbot IoC 20190703 | Jul 3rd, 2019 | Never | 4,235 | 0 | None | - |
| #trickbot #ioc 20190702 | Jul 3rd, 2019 | Never | 4,205 | 0 | None | - |
| revenge-20190701 | Jul 1st, 2019 | Never | 3,613 | 0 | None | - |
| malware_dropper | Jun 28th, 2019 | Never | 3,422 | 0 | None | - |
| email_stealer | Jun 28th, 2019 | Never | 2,791 | 0 | None | - |
| #banload IoC 20190627 | Jun 27th, 2019 | Never | 4,784 | 0 | None | - |
| sload up to 20181102 | Jul 18th, 2018 | Never | 6,844 | 0 | None | - |
| #phorpiex #bitcoin 20190430 | Apr 30th, 2019 | Never | 4,290 | 0 | None | - |
| 20190222-EML01 | Feb 22nd, 2019 | Never | 3,167 | 0 | None | - |
| #nymaim URL to 20181128 | Oct 19th, 2018 | Never | 2,944 | 0 | None | - |
| adobe.html | Jan 10th, 2020 | Never | 3,238 | 0 | None | - |
| diamondfox_macro_tidy | Jan 8th, 2020 | Never | 3,724 | 0 | None | - |
| diamondfox_macro_raw | Jan 8th, 2020 | Never | 3,160 | 0 | None | - |
| brushaloader | Nov 26th, 2019 | Never | 11,323 | 2 | VBScript | - |
| MS Azure #phishing domains 2 | Nov 21st, 2019 | Never | 3,738 | 0 | None | - |
| OffRoad.jse | Nov 20th, 2019 | Never | 3,017 | 0 | JavaScript | - |
| #phoenix 01 | Nov 14th, 2019 | Never | 3,405 | 0 | None | - |
| xsl/js dropper - gozi | Nov 11th, 2019 | Never | 3,422 | 0 | JavaScript | - |
| 191101 LNK-VBS raw+decoded | Nov 1st, 2019 | Never | 3,137 | 0 | None | - |
| q67JXA0dJ1dt | Oct 29th, 2019 | Never | 3,127 | 0 | JavaScript | - |
| xls-mshta-bitly-blogspot-pastebin-191022 | Oct 22nd, 2019 | Never | 3,249 | 0 | None | - |
| js-dropper-001 | Oct 8th, 2019 | Never | 3,809 | 0 | JavaScript | - |
| #FTCODE | Oct 7th, 2019 | Never | 3,357 | 0 | PowerShell | - |
| MSAzure #phishing domains | Jul 31st, 2019 | Never | 88,810 | 0 | None | - |
| 20190328-wtf02 | Mar 28th, 2019 | Never | 2,689 | 0 | None | - |
| 20190328-wtf01 | Mar 28th, 2019 | Never | 3,287 | 0 | JavaScript | - |
| AS26496 at 23:15 2019-03-04 | Mar 4th, 2019 | Never | 5,721 | 0 | None | - |
| Current Emotet Epoch 2 C2 as of 2020-09-01 10:16 US/Eastern | Sep 1st, 2020 | Never | 2,913 | 0 | None | - |
| Emotet C2 Deltas from 2020/08/27 as of 11:20EDT or 15:20UTC | Aug 27th, 2020 | Never | 3,541 | 0 | None | - |
| Current Emotet Epoch 3 C2 as of 2020-08-27 15:18 UTC | Aug 27th, 2020 | Never | 3,125 | 0 | None | - |
| Current Emotet Epoch 2 C2 as of 2020-08-27 15:18 UTC | Aug 27th, 2020 | Never | 2,927 | 0 | None | - |
| Current Emotet Epoch 1 C2 as of 2020-08-27 15:20 UTC | Aug 27th, 2020 | Never | 2,817 | 0 | None | - |
| #Emotet C2 Deltas as of 2020/08/17 ~ 07:55EDT/11:55UTC+: | Aug 17th, 2020 | Never | 2,747 | 0 | None | - |
| 200129-jse | Jan 29th, 2020 | Never | 3,124 | 0 | JavaScript | - |
| #emotet C2 added 20191129 | Nov 29th, 2019 | Never | 4,047 | 0 | None | - |
| #emotet C2 added 20191128 | Nov 28th, 2019 | Never | 6,032 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/31-2019/06/02 | Jun 2nd, 2019 | Never | 10,614 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/30 | May 30th, 2019 | Never | 4,142 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/29 | May 29th, 2019 | Never | 4,763 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/28 | May 28th, 2019 | Never | 4,749 | 0 | None | - |
| #emotet attachments names 27-28/05/2019 | May 28th, 2019 | Never | 2,844 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/27 | May 27th, 2019 | Never | 4,531 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/24-26 | May 27th, 2019 | Never | 4,696 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/23 | May 23rd, 2019 | Never | 4,059 | 0 | None | - |
| urlhaus-20190523-20:00UTC | May 23rd, 2019 | Never | 2,815 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/22 | May 22nd, 2019 | Never | 4,777 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/21 | May 21st, 2019 | Never | 4,414 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/20 | May 20th, 2019 | Never | 4,501 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/17 | May 19th, 2019 | Never | 4,693 | 0 | None | - |
| #emotet 20190516 | May 16th, 2019 | Never | 3,666 | 0 | None | - |
| #emotet 20190515 | May 15th, 2019 | Never | 3,329 | 0 | None | - |
| #emotet 20190513 | May 13th, 2019 | Never | 3,936 | 0 | None | - |
| #emotet 20190510 | May 10th, 2019 | Never | 3,893 | 0 | None | - |
| #emotet 20190509 | May 9th, 2019 | Never | 3,708 | 0 | None | - |
| #emotet 20190508 | May 8th, 2019 | Never | 3,939 | 0 | None | - |
| #emotet 20190507 | May 7th, 2019 | Never | 3,738 | 0 | None | - |
| #emotet 20190506 | May 6th, 2019 | Never | 3,643 | 0 | None | - |
| #emotet 20190503 | May 3rd, 2019 | Never | 3,414 | 0 | None | - |
| #emotet 20190502 | May 2nd, 2019 | Never | 3,302 | 0 | None | - |
| #emotet 20190501 | May 1st, 2019 | Never | 3,415 | 0 | None | - |
| #emotet 20190429 | Apr 29th, 2019 | Never | 4,221 | 0 | None | - |
| #emotet 20190426 | Apr 26th, 2019 | Never | 4,355 | 0 | None | - |
| #emotet 20190425 | Apr 25th, 2019 | Never | 4,098 | 0 | None | - |
| #emotet 20190424 | Apr 24th, 2019 | Never | 3,252 | 0 | None | - |
| #emotet 20190423 | Apr 23rd, 2019 | Never | 3,391 | 0 | None | - |
| #emotet 20190329 | Mar 29th, 2019 | Never | 3,771 | 0 | None | - |
| #emotet 20190327 | Mar 27th, 2019 | Never | 3,415 | 0 | None | - |
| #emotet 20190326 | Mar 26th, 2019 | Never | 4,123 | 0 | None | - |
| #emotet 201900325 | Mar 25th, 2019 | Never | 5,000 | 0 | None | - |
| #emotet 20190321 | Mar 21st, 2019 | Never | 3,335 | 0 | None | - |
| #emotet 20190320 | Mar 20th, 2019 | Never | 3,496 | 0 | None | - |
| #emotet exe_c2 20190319 | Mar 19th, 2019 | Never | 2,692 | 0 | None | - |
| #emotet 20190319 | Mar 19th, 2019 | Never | 3,381 | 0 | None | - |
| #emotet 20190318 | Mar 18th, 2019 | Never | 4,074 | 0 | None | - |
| #emotet 20190315 | Mar 15th, 2019 | Never | 3,245 | 0 | None | - |
| #emotet 20190314 | Mar 14th, 2019 | Never | 3,678 | 0 | None | - |
| #emotet 21081130 | Nov 30th, 2018 | Never | 3,666 | 0 | None | - |
| #emotet 20181129 | Nov 29th, 2018 | Never | 3,546 | 0 | None | - |
| #emotet 20181128 | Nov 28th, 2018 | Never | 3,886 | 0 | None | - |
| #emotet 20181127 | Nov 27th, 2018 | Never | 4,866 | 0 | None | - |
| #emotet 20181126 | Nov 26th, 2018 | Never | 3,052 | 0 | None | - |
| #emotet 20181123 | Nov 23rd, 2018 | Never | 3,424 | 0 | None | - |
| #emotet 20181122 | Nov 22nd, 2018 | Never | 3,528 | 0 | None | - |
| #emotet 20181121 | Nov 21st, 2018 | Never | 3,377 | 0 | None | - |
