| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| dridex-qbot-script-decoder | Sep 3rd, 2019 | Never | 3,717 | 0 | PowerShell | - |
| vbs-decode | Aug 29th, 2019 | Never | 3,468 | 0 | VBScript | - |
| Re_ FW_ Transfer Forms.eml | Jan 13th, 2020 | Never | 4,397 | 0 | None | - |
| requested items.eml | Jan 9th, 2020 | Never | 2,853 | 0 | None | - |
| This is the new variable..eml | Jan 8th, 2020 | Never | 4,028 | 0 | None | - |
| {RFQ}Engineering, Procurement, Construction for Samgori.eml | Jan 8th, 2020 | Never | 3,171 | 0 | None | - |
| pending delivery.eml | Jan 6th, 2020 | Never | 2,916 | 0 | None | - |
| [New Lead] MTSolicitors Property for buy out.eml | Jan 6th, 2020 | Never | 2,834 | 0 | None | - |
| #agenttesla-20190826-1 | Aug 26th, 2019 | Never | 3,845 | 0 | None | - |
| #trickbot IoC 20190708 | Jul 8th, 2019 | Never | 4,838 | 0 | None | - |
| #trickbot IoC 20190703 | Jul 3rd, 2019 | Never | 3,721 | 0 | None | - |
| #trickbot #ioc 20190702 | Jul 3rd, 2019 | Never | 3,591 | 0 | None | - |
| revenge-20190701 | Jul 1st, 2019 | Never | 3,153 | 0 | None | - |
| malware_dropper | Jun 28th, 2019 | Never | 2,803 | 0 | None | - |
| email_stealer | Jun 28th, 2019 | Never | 2,434 | 0 | None | - |
| #banload IoC 20190627 | Jun 27th, 2019 | Never | 4,282 | 0 | None | - |
| sload up to 20181102 | Jul 18th, 2018 | Never | 6,130 | 0 | None | - |
| #phorpiex #bitcoin 20190430 | Apr 30th, 2019 | Never | 3,809 | 0 | None | - |
| 20190222-EML01 | Feb 22nd, 2019 | Never | 2,493 | 0 | None | - |
| #nymaim URL to 20181128 | Oct 19th, 2018 | Never | 2,494 | 0 | None | - |
| adobe.html | Jan 10th, 2020 | Never | 2,879 | 0 | None | - |
| diamondfox_macro_tidy | Jan 8th, 2020 | Never | 3,125 | 0 | None | - |
| diamondfox_macro_raw | Jan 8th, 2020 | Never | 2,788 | 0 | None | - |
| brushaloader | Nov 26th, 2019 | Never | 7,564 | 2 | VBScript | - |
| MS Azure #phishing domains 2 | Nov 21st, 2019 | Never | 3,393 | 0 | None | - |
| OffRoad.jse | Nov 20th, 2019 | Never | 2,619 | 0 | JavaScript | - |
| #phoenix 01 | Nov 14th, 2019 | Never | 3,016 | 0 | None | - |
| xsl/js dropper - gozi | Nov 11th, 2019 | Never | 2,770 | 0 | JavaScript | - |
| 191101 LNK-VBS raw+decoded | Nov 1st, 2019 | Never | 2,765 | 0 | None | - |
| q67JXA0dJ1dt | Oct 29th, 2019 | Never | 2,784 | 0 | JavaScript | - |
| xls-mshta-bitly-blogspot-pastebin-191022 | Oct 22nd, 2019 | Never | 2,922 | 0 | None | - |
| js-dropper-001 | Oct 8th, 2019 | Never | 3,158 | 0 | JavaScript | - |
| #FTCODE | Oct 7th, 2019 | Never | 3,018 | 0 | PowerShell | - |
| MSAzure #phishing domains | Jul 31st, 2019 | Never | 83,516 | 0 | None | - |
| 20190328-wtf02 | Mar 28th, 2019 | Never | 2,311 | 0 | None | - |
| 20190328-wtf01 | Mar 28th, 2019 | Never | 2,639 | 0 | JavaScript | - |
| AS26496 at 23:15 2019-03-04 | Mar 4th, 2019 | Never | 5,082 | 0 | None | - |
| Current Emotet Epoch 2 C2 as of 2020-09-01 10:16 US/Eastern | Sep 1st, 2020 | Never | 2,478 | 0 | None | - |
| Emotet C2 Deltas from 2020/08/27 as of 11:20EDT or 15:20UTC | Aug 27th, 2020 | Never | 3,210 | 0 | None | - |
| Current Emotet Epoch 3 C2 as of 2020-08-27 15:18 UTC | Aug 27th, 2020 | Never | 2,621 | 0 | None | - |
| Current Emotet Epoch 2 C2 as of 2020-08-27 15:18 UTC | Aug 27th, 2020 | Never | 2,486 | 0 | None | - |
| Current Emotet Epoch 1 C2 as of 2020-08-27 15:20 UTC | Aug 27th, 2020 | Never | 2,460 | 0 | None | - |
| #Emotet C2 Deltas as of 2020/08/17 ~ 07:55EDT/11:55UTC+: | Aug 17th, 2020 | Never | 2,386 | 0 | None | - |
| 200129-jse | Jan 29th, 2020 | Never | 2,492 | 0 | JavaScript | - |
| #emotet C2 added 20191129 | Nov 29th, 2019 | Never | 3,663 | 0 | None | - |
| #emotet C2 added 20191128 | Nov 28th, 2019 | Never | 5,536 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/31-2019/06/02 | Jun 2nd, 2019 | Never | 10,214 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/30 | May 30th, 2019 | Never | 3,727 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/29 | May 29th, 2019 | Never | 4,374 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/28 | May 28th, 2019 | Never | 4,309 | 0 | None | - |
| #emotet attachments names 27-28/05/2019 | May 28th, 2019 | Never | 2,455 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/27 | May 27th, 2019 | Never | 4,161 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/24-26 | May 27th, 2019 | Never | 4,047 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/23 | May 23rd, 2019 | Never | 3,415 | 0 | None | - |
| urlhaus-20190523-20:00UTC | May 23rd, 2019 | Never | 2,442 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/22 | May 22nd, 2019 | Never | 4,418 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/21 | May 21st, 2019 | Never | 3,826 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/20 | May 20th, 2019 | Never | 4,049 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/17 | May 19th, 2019 | Never | 4,323 | 0 | None | - |
| #emotet 20190516 | May 16th, 2019 | Never | 3,102 | 0 | None | - |
| #emotet 20190515 | May 15th, 2019 | Never | 2,861 | 0 | None | - |
| #emotet 20190513 | May 13th, 2019 | Never | 3,514 | 0 | None | - |
| #emotet 20190510 | May 10th, 2019 | Never | 3,329 | 0 | None | - |
| #emotet 20190509 | May 9th, 2019 | Never | 3,033 | 0 | None | - |
| #emotet 20190508 | May 8th, 2019 | Never | 3,588 | 0 | None | - |
| #emotet 20190507 | May 7th, 2019 | Never | 3,254 | 0 | None | - |
| #emotet 20190506 | May 6th, 2019 | Never | 2,972 | 0 | None | - |
| #emotet 20190503 | May 3rd, 2019 | Never | 3,075 | 0 | None | - |
| #emotet 20190502 | May 2nd, 2019 | Never | 2,874 | 0 | None | - |
| #emotet 20190501 | May 1st, 2019 | Never | 3,073 | 0 | None | - |
| #emotet 20190429 | Apr 29th, 2019 | Never | 3,876 | 0 | None | - |
| #emotet 20190426 | Apr 26th, 2019 | Never | 3,889 | 0 | None | - |
| #emotet 20190425 | Apr 25th, 2019 | Never | 3,478 | 0 | None | - |
| #emotet 20190424 | Apr 24th, 2019 | Never | 2,839 | 0 | None | - |
| #emotet 20190423 | Apr 23rd, 2019 | Never | 2,983 | 0 | None | - |
| #emotet 20190329 | Mar 29th, 2019 | Never | 3,218 | 0 | None | - |
| #emotet 20190327 | Mar 27th, 2019 | Never | 3,071 | 0 | None | - |
| #emotet 20190326 | Mar 26th, 2019 | Never | 3,652 | 0 | None | - |
| #emotet 201900325 | Mar 25th, 2019 | Never | 4,430 | 0 | None | - |
| #emotet 20190321 | Mar 21st, 2019 | Never | 2,990 | 0 | None | - |
| #emotet 20190320 | Mar 20th, 2019 | Never | 3,119 | 0 | None | - |
| #emotet exe_c2 20190319 | Mar 19th, 2019 | Never | 2,298 | 0 | None | - |
| #emotet 20190319 | Mar 19th, 2019 | Never | 3,004 | 0 | None | - |
| #emotet 20190318 | Mar 18th, 2019 | Never | 3,455 | 0 | None | - |
| #emotet 20190315 | Mar 15th, 2019 | Never | 2,841 | 0 | None | - |
| #emotet 20190314 | Mar 14th, 2019 | Never | 3,081 | 0 | None | - |
| #emotet 21081130 | Nov 30th, 2018 | Never | 3,280 | 0 | None | - |
| #emotet 20181129 | Nov 29th, 2018 | Never | 2,965 | 0 | None | - |
| #emotet 20181128 | Nov 28th, 2018 | Never | 3,472 | 0 | None | - |
| #emotet 20181127 | Nov 27th, 2018 | Never | 4,301 | 0 | None | - |
| #emotet 20181126 | Nov 26th, 2018 | Never | 2,700 | 0 | None | - |
| #emotet 20181123 | Nov 23rd, 2018 | Never | 3,089 | 0 | None | - |
| #emotet 20181122 | Nov 22nd, 2018 | Never | 2,915 | 0 | None | - |
| #emotet 20181121 | Nov 21st, 2018 | Never | 2,996 | 0 | None | - |
