| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| dridex-qbot-script-decoder | Sep 3rd, 2019 | Never | 4,100 | 0 | PowerShell | - |
| vbs-decode | Aug 29th, 2019 | Never | 3,889 | 0 | VBScript | - |
| Re_ FW_ Transfer Forms.eml | Jan 13th, 2020 | Never | 4,954 | 0 | None | - |
| requested items.eml | Jan 9th, 2020 | Never | 3,366 | 0 | None | - |
| This is the new variable..eml | Jan 8th, 2020 | Never | 4,428 | 0 | None | - |
| {RFQ}Engineering, Procurement, Construction for Samgori.eml | Jan 8th, 2020 | Never | 3,582 | 0 | None | - |
| pending delivery.eml | Jan 6th, 2020 | Never | 3,468 | 0 | None | - |
| [New Lead] MTSolicitors Property for buy out.eml | Jan 6th, 2020 | Never | 3,355 | 0 | None | - |
| #agenttesla-20190826-1 | Aug 26th, 2019 | Never | 4,460 | 0 | None | - |
| #trickbot IoC 20190708 | Jul 8th, 2019 | Never | 5,375 | 0 | None | - |
| #trickbot IoC 20190703 | Jul 3rd, 2019 | Never | 4,236 | 0 | None | - |
| #trickbot #ioc 20190702 | Jul 3rd, 2019 | Never | 4,205 | 0 | None | - |
| revenge-20190701 | Jul 1st, 2019 | Never | 3,614 | 0 | None | - |
| malware_dropper | Jun 28th, 2019 | Never | 3,424 | 0 | None | - |
| email_stealer | Jun 28th, 2019 | Never | 2,792 | 0 | None | - |
| #banload IoC 20190627 | Jun 27th, 2019 | Never | 4,785 | 0 | None | - |
| sload up to 20181102 | Jul 18th, 2018 | Never | 6,845 | 0 | None | - |
| #phorpiex #bitcoin 20190430 | Apr 30th, 2019 | Never | 4,291 | 0 | None | - |
| 20190222-EML01 | Feb 22nd, 2019 | Never | 3,168 | 0 | None | - |
| #nymaim URL to 20181128 | Oct 19th, 2018 | Never | 2,945 | 0 | None | - |
| adobe.html | Jan 10th, 2020 | Never | 3,239 | 0 | None | - |
| diamondfox_macro_tidy | Jan 8th, 2020 | Never | 3,725 | 0 | None | - |
| diamondfox_macro_raw | Jan 8th, 2020 | Never | 3,161 | 0 | None | - |
| brushaloader | Nov 26th, 2019 | Never | 11,324 | 2 | VBScript | - |
| MS Azure #phishing domains 2 | Nov 21st, 2019 | Never | 3,739 | 0 | None | - |
| OffRoad.jse | Nov 20th, 2019 | Never | 3,018 | 0 | JavaScript | - |
| #phoenix 01 | Nov 14th, 2019 | Never | 3,405 | 0 | None | - |
| xsl/js dropper - gozi | Nov 11th, 2019 | Never | 3,423 | 0 | JavaScript | - |
| 191101 LNK-VBS raw+decoded | Nov 1st, 2019 | Never | 3,138 | 0 | None | - |
| q67JXA0dJ1dt | Oct 29th, 2019 | Never | 3,128 | 0 | JavaScript | - |
| xls-mshta-bitly-blogspot-pastebin-191022 | Oct 22nd, 2019 | Never | 3,251 | 0 | None | - |
| js-dropper-001 | Oct 8th, 2019 | Never | 3,810 | 0 | JavaScript | - |
| #FTCODE | Oct 7th, 2019 | Never | 3,358 | 0 | PowerShell | - |
| MSAzure #phishing domains | Jul 31st, 2019 | Never | 88,813 | 0 | None | - |
| 20190328-wtf02 | Mar 28th, 2019 | Never | 2,690 | 0 | None | - |
| 20190328-wtf01 | Mar 28th, 2019 | Never | 3,288 | 0 | JavaScript | - |
| AS26496 at 23:15 2019-03-04 | Mar 4th, 2019 | Never | 5,722 | 0 | None | - |
| Current Emotet Epoch 2 C2 as of 2020-09-01 10:16 US/Eastern | Sep 1st, 2020 | Never | 2,914 | 0 | None | - |
| Emotet C2 Deltas from 2020/08/27 as of 11:20EDT or 15:20UTC | Aug 27th, 2020 | Never | 3,542 | 0 | None | - |
| Current Emotet Epoch 3 C2 as of 2020-08-27 15:18 UTC | Aug 27th, 2020 | Never | 3,126 | 0 | None | - |
| Current Emotet Epoch 2 C2 as of 2020-08-27 15:18 UTC | Aug 27th, 2020 | Never | 2,928 | 0 | None | - |
| Current Emotet Epoch 1 C2 as of 2020-08-27 15:20 UTC | Aug 27th, 2020 | Never | 2,818 | 0 | None | - |
| #Emotet C2 Deltas as of 2020/08/17 ~ 07:55EDT/11:55UTC+: | Aug 17th, 2020 | Never | 2,748 | 0 | None | - |
| 200129-jse | Jan 29th, 2020 | Never | 3,125 | 0 | JavaScript | - |
| #emotet C2 added 20191129 | Nov 29th, 2019 | Never | 4,048 | 0 | None | - |
| #emotet C2 added 20191128 | Nov 28th, 2019 | Never | 6,033 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/31-2019/06/02 | Jun 2nd, 2019 | Never | 10,615 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/30 | May 30th, 2019 | Never | 4,143 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/29 | May 29th, 2019 | Never | 4,764 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/28 | May 28th, 2019 | Never | 4,750 | 0 | None | - |
| #emotet attachments names 27-28/05/2019 | May 28th, 2019 | Never | 2,845 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/27 | May 27th, 2019 | Never | 4,532 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/24-26 | May 27th, 2019 | Never | 4,697 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/23 | May 23rd, 2019 | Never | 4,061 | 0 | None | - |
| urlhaus-20190523-20:00UTC | May 23rd, 2019 | Never | 2,815 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/22 | May 22nd, 2019 | Never | 4,778 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/21 | May 21st, 2019 | Never | 4,415 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/20 | May 20th, 2019 | Never | 4,502 | 0 | None | - |
| #Emotet Malware IoCs 2019/05/17 | May 19th, 2019 | Never | 4,694 | 0 | None | - |
| #emotet 20190516 | May 16th, 2019 | Never | 3,668 | 0 | None | - |
| #emotet 20190515 | May 15th, 2019 | Never | 3,330 | 0 | None | - |
| #emotet 20190513 | May 13th, 2019 | Never | 3,937 | 0 | None | - |
| #emotet 20190510 | May 10th, 2019 | Never | 3,894 | 0 | None | - |
| #emotet 20190509 | May 9th, 2019 | Never | 3,709 | 0 | None | - |
| #emotet 20190508 | May 8th, 2019 | Never | 3,940 | 0 | None | - |
| #emotet 20190507 | May 7th, 2019 | Never | 3,739 | 0 | None | - |
| #emotet 20190506 | May 6th, 2019 | Never | 3,644 | 0 | None | - |
| #emotet 20190503 | May 3rd, 2019 | Never | 3,415 | 0 | None | - |
| #emotet 20190502 | May 2nd, 2019 | Never | 3,303 | 0 | None | - |
| #emotet 20190501 | May 1st, 2019 | Never | 3,417 | 0 | None | - |
| #emotet 20190429 | Apr 29th, 2019 | Never | 4,222 | 0 | None | - |
| #emotet 20190426 | Apr 26th, 2019 | Never | 4,356 | 0 | None | - |
| #emotet 20190425 | Apr 25th, 2019 | Never | 4,099 | 0 | None | - |
| #emotet 20190424 | Apr 24th, 2019 | Never | 3,253 | 0 | None | - |
| #emotet 20190423 | Apr 23rd, 2019 | Never | 3,392 | 0 | None | - |
| #emotet 20190329 | Mar 29th, 2019 | Never | 3,772 | 0 | None | - |
| #emotet 20190327 | Mar 27th, 2019 | Never | 3,416 | 0 | None | - |
| #emotet 20190326 | Mar 26th, 2019 | Never | 4,124 | 0 | None | - |
| #emotet 201900325 | Mar 25th, 2019 | Never | 5,001 | 0 | None | - |
| #emotet 20190321 | Mar 21st, 2019 | Never | 3,335 | 0 | None | - |
| #emotet 20190320 | Mar 20th, 2019 | Never | 3,497 | 0 | None | - |
| #emotet exe_c2 20190319 | Mar 19th, 2019 | Never | 2,693 | 0 | None | - |
| #emotet 20190319 | Mar 19th, 2019 | Never | 3,382 | 0 | None | - |
| #emotet 20190318 | Mar 18th, 2019 | Never | 4,075 | 0 | None | - |
| #emotet 20190315 | Mar 15th, 2019 | Never | 3,246 | 0 | None | - |
| #emotet 20190314 | Mar 14th, 2019 | Never | 3,679 | 0 | None | - |
| #emotet 21081130 | Nov 30th, 2018 | Never | 3,667 | 0 | None | - |
| #emotet 20181129 | Nov 29th, 2018 | Never | 3,547 | 0 | None | - |
| #emotet 20181128 | Nov 28th, 2018 | Never | 3,887 | 0 | None | - |
| #emotet 20181127 | Nov 27th, 2018 | Never | 4,866 | 0 | None | - |
| #emotet 20181126 | Nov 26th, 2018 | Never | 3,052 | 0 | None | - |
| #emotet 20181123 | Nov 23rd, 2018 | Never | 3,425 | 0 | None | - |
| #emotet 20181122 | Nov 22nd, 2018 | Never | 3,530 | 0 | None | - |
| #emotet 20181121 | Nov 21st, 2018 | Never | 3,377 | 0 | None | - |
