Emotet Malware IoCs 2019/03/25

## Emotet Malware Document links/IOCs for 03/25/19 as of 03/26/19 02:30 EDT ##
*Notes and Credits now at the bottom* Follow us on twitter @cryptolaemus1 for more updates.

#### Epoch 1 Document/Downloader links seen for 03/25/19 ####
```

http://100.24.102.115/wp-admin/verif.accs.send.biz/
http://104.199.129.139/wp-content/verif.accounts.resourses.com/
http://104.237.5.148/wordpress/wp-content/secure.accounts.send.biz/
http://107.23.121.174/wp-content/verif.accs.send.net/
http://111.230.244.24/wp-admin/sec.accounts.send.biz/
http://119.28.21.47/wp-includes/verif.myaccount.resourses.biz/
http://128.199.233.166/lib/secure.accounts.resourses.biz/
http://131.111.48.73/wp-content/secure.accounts.send.com/
http://132.145.153.89/trust.accs.send.net/secure.accounts.resourses.biz/
http://138.68.175.115/wp-includes/trust.accounts.resourses.biz/
http://138.68.41.112/wp-includes/trust.accounts.docs.com/
http://159.65.47.211/wp-content/uploads/secure.myaccount.docs.com/
http://165.227.140.241/wp-snapshots/trust.myacc.docs.biz/
http://167.99.225.204/wp-includes/secure.myacc.send.com/
http://18.218.12.154/wwtgr4v/verif.accounts.resourses.net/
http://185.33.146.33/wordpress/secure.myaccount.send.net/
http://194.191.243.240/@eaDir/sec.myaccount.docs.com/
http://199.116.235.213/wordpress/trust.accounts.docs.com/
http://1xbetgiris.website/wp-admin/sec.myaccount.resourses.com/
http://203.114.116.37/@Recycle/sec.accs.docs.net/
http://34.235.37.166/wp-content/trust.accs.docs.com/
http://35.193.167.184/wp-admin/trust.accounts.docs.net/
http://35.240.3.207/7JzXexTmCI/verif.myacc.send.net/
http://40.87.92.185/wp-content/secure.myaccount.send.com/
http://46.101.119.204/txyj35t/secure.accounts.docs.net/
http://4stroy.by/wp-content/sec.accs.docs.com/
http://53amg.fr/wp-content-/secure.accounts.docs.biz/
http://54.234.26.113/wp-content/sec.myacc.docs.net/
http://a4shelp.etag.co.il/wp-admin/secure.myacc.send.net/
http://aepipm.cat/includes/sec.accounts.resourses.net/
http://ahimsango.org/wp-includes/sec.myaccount.send.com/
http://aleftal.com/wp-includes/verif.myaccount.send.biz/
http://aloiziomotos.com.br/wp-content/trust.accounts.resourses.com/
http://amaryaconsultancy.com/wps/sec.accounts.docs.net/
http://amthanhkaraoke.net/wp-content/secure.accounts.send.net/
http://amusic.cl/wp-admin/trust.myacc.resourses.com/
http://andiamoproducciones.cl/wp-includes/verif.myaccount.send.biz/
http://ankhop.xyz/wp-includes/sec.myacc.send.biz/
http://annual.fph.tu.ac.th/wp-content/uploads/trust.accounts.resourses.net/
http://artizaa.com/wp-content/verif.myaccount.resourses.biz/
http://atrip-world.com/wp-content/uploads/sec.myaccount.resourses.com/
http://avsiti.in/website/trust.accs.send.biz/
http://batdongsanq9.net/wp-content/trust.accounts.docs.com/
http://baurasia.3cs.website/baur_asia/verif.myaccount.docs.biz/
http://bedavapornoizle.xyz/wp-includes/verif.accounts.resourses.net/
http://bercikjakub.sk/znlgu9h/secure.accounts.docs.biz/
http://bermudaspirit.com/images/sec.myacc.docs.net/
http://beta.christineborgyoga.com/wp-admin/secure.myaccount.docs.net/
http://biztech.com.bd/irpw/secure.accounts.docs.net/
http://blckfrdcreative.com/wp-includes/verif.accs.docs.net/
http://blog.livedareevents.com/dpeib4q/secure.accs.send.net/
http://brightestwash.com/jd1q7bs/sec.myacc.docs.biz/
http://brightestwash.com/jd1q7bs/verif.accounts.resourses.net/
http://caferestaurantnador.com/wp-includes/trust.myacc.resourses.biz/
http://caliandraestetica.com.br/wp-includes/verif.accs.send.com/
http://canicosa.net/siteadmin/verif.accs.resourses.biz/
http://castlecare.us/cgi-bin/secure.accs.docs.net/
http://chainboy.com/7o1z5u-055wozm-cndaf/trust.myacc.resourses.net/
http://cheheljam.ir/wp-includes/trust.myaccount.send.com/
http://claudiogarcia.es/wp-content/sec.myaccount.send.com/
http://completerubbishremoval.net.au/bywioej/secure.myaccount.resourses.biz/
http://cybersol.net/Talina/verif.myacc.resourses.net/
http://danhba.dulichvietnam.com.vn/wp-content/verif.accs.send.net/
http://darthgoat.com/files/verif.myaccount.resourses.net/
http://databasetm.ru/ytpawk3j4/sec.accounts.docs.net/
http://datos.com.tw/logssite/verif.accounts.docs.biz/
http://diaocngaynay.vn/diaocngaynay/verif.accs.resourses.com/
http://discoverthat.com.au/wp-admin/sec.myacc.resourses.net/
http://downinthecountry.com/logsite/trust.myacc.docs.net/
http://dream-sequence.cc/mm.ms.com/trust.accounts.send.biz/
http://edtech.iae.edu.vn/wp-includes/sec.accounts.send.net/
http://egsa.at/Service-Report-2969/trust.myacc.docs.net/
http://emfsys.gr/img/secure.myacc.docs.biz/
http://eynordic.com/cgi-bin/sec.accounts.docs.com/
http://famaweb.ir/intro/trust.accs.resourses.net/
http://farlinger.com/0apq-733i8k-pgib/verif.myacc.send.net/
http://fishingcan.com/wp-admin/verif.myacc.resourses.biz/
http://flyingmutts.com/secure.myacc.resourses.com/
http://funmart.ml/wp-content/secure.myacc.docs.com/
http://ganzetec.com/m2013/files/temp/verif.accs.docs.com/
http://hbsnepal.com.np/wp-admin/secure.accs.resourses.biz/
http://healthandfitnesstraining.shop/test/sec.myacc.resourses.com/
http://horseshows.io/c2nkrlt/trust.myaccount.send.net/
http://kamir.es/controllers/sec.myaccount.resourses.com/
http://krafiatmada.my/cgi-bin/verif.accs.resourses.biz/
http://kueryo.ro/b/sec.myaccount.resourses.biz/
http://loweralabamagolf.com/wp-admin/trust.accs.send.com/
http://makson.co.in/Admin/sec.accounts.send.com/
http://mcbeth.com.au/nick.mcbeth.com.au/secure.accs.resourses.com/
http://mebli-stoly.com.ua/wp-admin/verif.accs.docs.com/
http://morimplants.co.il/dev/trust.myacc.send.net/
http://namellus.com/wp-admin/secure.myaccount.resourses.biz/
http://noithatmt5c.com/wp-admin/trust.accounts.resourses.biz/
http://oxyfi.in/mmcv/trust.myaccount.resourses.biz/
http://prodijital.com.tr/wp-admin/trust.accs.send.com/
http://sanafarm.vn/Bx/secure.accs.resourses.biz/
http://serendipityph.com/wp-admin/sec.myacc.resourses.com/
http://shahedrahman.com/Backup/secure.myacc.send.net/
http://shopinsta.in/shopinsta/verif.myacc.resourses.biz/
http://taringabaptist.org.au/wp/verif.accs.resourses.net/
http://test.ord.nuucloud.com/awstats-icon/trust.accs.docs.net/
http://theinitiative.com/initiative2/sec.myaccount.docs.net/
http://wcdr.pbas.es/pressthiso/sec.accounts.send.com/
http://wp.10zan.com/wp-content/trust.myaccount.send.com/
http://www.matyopekseg.hu/wp-content/uploads/sec.myaccount.docs.net/
https://4stroy.by/wp-content/sec.accs.docs.com/
https://acor.org.ma/old/wp-content/uploads/trust.accs.send.net/
https://aduanalibre.com/backoffice/node_modules/es6-iterator/test/#/verif.myaccount.send.net/
https://fatek.untad.ac.id/kaktus/verif.accounts.docs.com/
https://funmart.ml/wp-content/secure.myacc.docs.com/
https://horseshows.io/c2nkrlt/trust.myaccount.send.net/
https://kebulak.com/contact_us/secure.myacc.send.net/
https://loweralabamagolf.com/wp-admin/trust.accs.send.com/
https://mhsalum.isinqa.com/tjsml4o/secure.myacc.docs.net/
https://morimplants.co.il/dev/trust.myacc.send.net/
https://morimplants.co.il/dev/trust.myacc.send.net/./
https://noithatmt5c.com/wp-admin/trust.accounts.resourses.biz/
https://patryk-razny.pl/wp-includes/verif.accs.docs.biz/

```
#### Epoch 2 Document/Downloader links seen for 03/25/19 ####
```

http://1lorawicz.pl/language/YUNBU-aQka_PHYeS-2b/
http://2013.kaunasphoto.com/wp-content/UPS-Ship-Notification/Mar-25-19-12-41-02/
http://247everydaysport.com/oslh4nf/7503396/MDVU-90981_hiKXLSYbN-fh/
http://912graphics.com/wp-includes/UPS-Quantum-View/Mar-25-19-02-29-01/
http://aapnnihotel.in/frubox.in/UPS-Quantum-View/Mar-25-19-02-33-02/
http://abc-group.ge/hrpqwl43ks/BVOog-8L5_IIHQb-Sr/
http://abc-group.ge/tmp/0ra5p-ms1a9h-haajrwevb/
http://abi.com.vn/BaoMat/m2t0v-v9q4c-gqkr/
http://acdswd.cn/hitokoto/50s0-hikeql-hefaybcv/
http://agara.edu.ge/components/62964839/PvayC-b1SFH_yyBbZJ-YjN/
http://agtrade.hu/images/077539773/vykdq-Cwsr_enHa-GOG/
http://aldurragroup.com/wp-includes/CVnH-Jdbd_hBxNiBR-er/
http://allsignsofohio.com/EN_US/akfo-g88_VGPf-sR/
http://allthegoodparts.com/wp-includes/nigf-gjbhef-hguuq/
http://alpinaemlak.com/wp-contents/bZKaL-UFYV_aqpOx-aP/
http://alpinaemlak.com/wp-contents/US_us/corporation/JnFI-KaU_aplHpOQ-oD/
http://antislash.fr/includes/facelift/cache/UPS-Quantum-View/Mar-25-19-02-37-04/
http://artexproductions.com/wp-content/plugins/really-simple-ssl/testssl/serverhttpxforwardedssl1/446173931903/kqjI-W8_bmdjsLKbB/
http://aussiescanners.com/forum/Tracking-Number-2UC52596142284290/Mar-25-19-02-41-01/
http://babycool.com.tr/wp-admin/MvqJl-JNZzN_QMn-LJ/
http://bahoma.com/bahoma.net/rZrhg-B9s7_iQPZX-SE/
http://bahomacom/bahoma.net/rZrhg-B9s7_iQPZX-SE/
http://barabooseniorhigh.com/En/MicI-RfwB_oVox-JH/
http://beeonline.cz/chameleondesign/qe3jq-zpw5q-crzveq/
http://beeonline.cz/chameleondesign/Tracking-Number-2T98656355807663/Mar-25-19-02-50-01/
http://biztechmgt.com/mailer/520895937972948/zwsb-t5Sj_rOYhA-7V/
http://blauwpurper.com/plesk-stat/UPS-Quantum-View/Mar-25-19-02-46-01/
http://booyamedia.com/img/zwvx-gww_Ui-I1A/
http://businessinsiderau.com/wp-includes/p93g-bi64p-ntxu/
http://bytesoftware.com.br/starter/tkv3n-7ndnw-uoqbgx/
http://bytesoftware.com.br/starter/UPS-Express-Domestic/Mar-25-19-02-55-05/
http://castor.cba.pl/wvvw/bqNa-VMcCg_uNdzVmAL-5E/
http://cbaia.com/app/cache/nz66x-93zi91-zduyxo/
http://cbaia.com/app/cache/UPS-US/Mar-25-19-02-20-02/
http://cddvd.kz/cgi-bin/155553809077423/dRRNh-jSV_pc-HJ/
http://cetaguaecuador.com/forms/JhiOE-VWL_H-wt/
http://cevdetozturk.com/css/company/7534046/ziNM-0PSIt_WM-JT/
http://chang.be/carole/mvuk-smnz2z-skoee/
http://chefmongiovi.com/wp/UPS-Ship-Notification/Mar-25-19-12-47-01/
http://ciga.ro/layouts/blbmxp-qcwlff-rnjpolp/
http://cigan.sk/fm/7722930614289/dRdrf-ODJ3_HmRqcXudn-LpN/
http://cityplus-tver.ru/plugins/BsyFY-wkeay_UWYRryq-rVd/
http://colbydix.com/mailer/340740490804/frIy-I7_QcGj-9P/
http://crearquitectos.es/templates/UPS.com/Mar-25-19-01-47-04/
http://cronicas.com.do/web1/UPS-View/Mar-25-19-01-51-02/
http://daemconcepcion.cl/blog/Copy_Invoice/ukIU-BNap_vboStiYy-iKq/
http://daemconcepcion.cl/blog/scan/Invoice_number/XuZk-MtUs_fPFmNU-Qia/
http://dandavner.com/blog/sYxkY-QjtJ_IUzBAVOC-T0/
http://dealsammler.de/wp-admin/En/file/Invoice_Notice/hpzd-3CqyS_XDHPNfjg-8e/
http://dealsammler.de/wp-admin/uTHq-Tw_TRRQxQWxe-ft/
http://dekorant.com.tr/images/eCOJ-Ch5r9_pYzLNoM-6ct/
http://demo.automationbootcamp.ro/cgi-bin/EN_en/New_invoice/jCDf-dAbhM_DZHd-f9/
http://diaocngaynay.vn/diaocngaynay/En/download/JQwue-sWy_nnY-yBS/
http://dinobacciotti.com.br/2eqt/vdm8-uyuyv-dfiwnrk/
http://dragonfang.com/russ/EONxO-YJ_O-Z2f/
http://drlaszlozopcsak.com/administrator/jTyL-gld_OSAgkrB-YBX/
http://dtk-ad.co.th/css/US/Invoice/ekwq-7N_AeGEpqySi-6T/
http://edandtrish.com/ares/kbFj-XhC_RKuxUqQN-T3i/
http://editorial.wijeya.lk/oldadmin/wp-content/85471201673/QRSa-0Z7_JFxKd-qq/
http://enpress-publisher.com/wp-admin/7oye-bsxj12-ehcmaa/
http://epixeiroconsulting.biz/test/Tracking-Number-5RG29112716169382/Mar-25-19-02-21-01/
http://espacerezo.fr/wp-content/languages/DCts-8Q_eonHEMYy-9Qr/
http://eziyuan.net/404/590115084912/xfXt-AWbK_Xufk-ENH/
http://eziyuan.net/404/syi5t9c-gs4alw-wdxxy/
http://f2concept.com/App_Data/En_us/doc/Invoice_number/iWzK-Dv7xL_dPWlBJ-5co/
http://favoritbt.t-online.hu/logon/t34aj9f-nynfij6-ruwrwu/
http://fbufz.xyz/US/corporation/New_invoice/8240326981647/mmOzZ-Zk_LKrqCtT-m5L/
http://fetva.imambuharivakfi.org/wp-admin/En_us/file/Invoice/TUOky-5G9_WlKgLVOf-wI/
http://finniss.net/temp_dc5bcf9d42ded3370fd9c92a7bf0d715/tbYPc-Rhcb2_VEZQW-dD/
http://fitnesstrener-jozef.eu/0vta8ll/jqnD-1XFqq_ZtCA-Muy/
http://gccpharr.org/assets/palw-n7z3ec-rdfis/
http://gdv.stomp.digital/wp-content/baNo-T153V_hGCsye-Rq/
http://geoclimachillers.com/wp-includes/9e1a-2guide-eojv/
http://geoclimachillers.com/wp-includes/Copy_Invoice/bqfkV-H4Nw_PMaVaIlVX-Ay/
http://geoclimachillers.com/wp-includes/UPS-Ship-Notification/Mar-25-19-12-00-02/
http://gilsanbus.com/wp-content/languages/En_us/info/Invoice_Notice/KgCg-PdYaP_ZYh-AX/
http://gisec.com.mx/expertos/info/Copy_Invoice/Awel-Jqr_V-FD/
http://gotoayurveda.com/App_Data/UPS-Express-Domestic/Mar-25-19-12-54-05/
http://grupoweb.cl/wp-admin/UPS-Quantum-View/Mar-25-19-12-00-02/
http://haru1ban.net/files/7tuz-ii3di-ofrrbki/
http://holon.co.il/wp-content/doc/New_invoice/GAwNO-Df_kkYPva-Cw/
http://horseshows.io/c2nkrlt/gv1cf-k5tp3s-ktndifn/
http://hotel-krishnainternational.com/wp-admin/wqz67-zmwhb-kdsctt/
http://ilimler.net/wp-includes/EN_en/info/NvdRa-lld5_glWmM-eN/
http://ilimler.net/wp-includes/lunh-svvld-wycr/
http://impro.in/components/download/Invoice_number/EtCfN-gMTw_KBOvzXM-wCL/
http://impro.in/components/En_us/company/Invoice_number/AoEu-Qt9Ul_tgb-o4/
http://inclusao.enap.gov.br/wp-content/uploads/33_DK/
http://inovatips.com/9yorcan/EN_en/doc/Copy_Invoice/aXbu-In7v_rGlf-85/
http://junkmover.ca/wp-includes/FLdJ-Cm_NnVo-FT/
http://junkmover.ca/wp-includes/US_us/llc/Invoice_Notice/FjPZV-TBJ2_Qkyswl-yW/
http://kakatiyaangels.com/wp-includes/QVdvs-0hK_Nd-zcG/
http://kan.kan2.go.th/css/l0wp-e0qbn-iiuib/
http://kan.kan2.go.th/css/Tracking-Number-4XAQ28066098889070/Mar-25-19-02-05-02/
http://kannada.awgp.org/wp-content/uploads/download/Invoice_number/108875903/dtAZ-O3D_E-Rt/
http://kannada.awgp.org/wp-content/uploads/gva6-789j6-vabtovc/
http://kianse.ir/svsvbk/ZMGeH-REg_nbkJvAX-R4H/
http://ksoncrossfit.com/rylawpc/Invoice_number/QXVeT-hm5FK_fi-qn/
http://kursiuklinika.lt/language/UPS-US/Mar-25-19-02-27-01/
http://larissapharma.com/fobn/US/Copy_Invoice/656709416066/BKXuh-YPw_zq-Pn/
http://lastmilecdn.net/wp-includes/EN_en/scan/Inv/TudDb-pwsb2_bPOLqtZ-Bd/
http://lastmilecdn.net/wp-includes/NJZm-8cS7_jzs-MqF/
http://mangaml.com/jdownloader/scripts/pyload_stop/doc/Copy_Invoice/MhlO-FcAmf_VWxqQwDej-Ryg/
http://mwfurniture.vn/wp-content/download/Inv/Iccpf-da_XVWYnPD-4Fs/
http://myphamcenliathuduc.com/ne6rcmq/5873675/HzkY-KY1Tk_iuEMGns-bZ/
http://myphamcenliathuduc.com/ne6rcmq/inIYL-iyo_AJTfRJn-nr/
http://nalumon.rpu.ac.th/wp-content/uploads/voPW-2RXfX_UiAPhcW-Pu4/
http://nammuzey.uz/includes/UPS-View/Mar-25-19-02-09-04/
http://naqaae.com/db/work/config/ckHue-Ut9Yz_eKuk-5M2/
http://netlink.com/wp-content/plugins/all-in-one-wp-migration/storage/doc/Copy_Invoice/469302181479406/FHoLy-13a_ZIEFBA-gXE/
http://nsc.spb.ru/plugins/34y3-mmdb1-ulfbtlq/
http://nsc.spb.ru/plugins/QfeXD-NI_TcV-v3/
http://octoplustech.com/wp/US_us/57449522331016/jAfG-SR_uQ-XW/
http://oltelectrics.com/wp-content/jFHGe-1wxO4_gOiVP-3a4/
http://onecommunityrising.com/wp-content/file/New_invoice/CBcgX-GhZeT_EggmRsJgB-rz/
http://opark.in/wp-includes/9cuo-90nwi5-vjzragcfh/
http://osvisa.com/wp-includes/LNfJ-v14Y_VllqK-hX/
http://osvisacom/wp-includes/LNfJ-v14Y_VllqK-hX/
http://overnightfilmfestival.com/9uyruon/Tracking-Number-5HYD08736409791871/Mar-25-19-03-02-07/
http://pandeglangkec.pandeglangkab.go.id/images/175477844001/dmZYz-hS_OXfSTdwxj-Gm/
http://papaya.ne.jp/tools/UPS.com/Mar-25-19-12-31-01/
http://papaya.ne.jp/tools/US/Invoice_number/QzHjQ-vdkX_M-9A/
http://parbio.es/wp-content/gjLux-rP_vTQZ-vp/
http://past.com.tr/wp-admin/document/Invoice_Notice/bDMIn-Rz_BOSvqBBQe-b5/
http://pathwaymbs.com/wp-includes/lZQY-L0b_iYzcCva-Z2M/
http://pearlywhites.co.in/cgi-bin/UPS-US/Mar-25-19-02-58-07/
http://photos.morningsunedu.org/cgi-bin/US/llc/726111242866/ycbI-RX_mtgy-RH/
http://phpsolutions.nl/cgi-bin/VlqJ-PyP_vGuNPnul-9B/
http://pierwszajazda.com.pl/modules/UtwG-NasN_E-AOv/
http://pkb.net.my/images/UPS-US/Mar-25-19-02-00-03/
http://popart-a-la-papp.ro/wp-content/EN_en/file/Inv/THUjC-eEGQ9_mjAIjNhQ-HI/
http://portalfreightforwarder.com.my/hzjvbhz/KBrmf-1MnUc_lvd-Ka/
http://ppusvjetlost.com.ba/xd6re7a/scan/Copy_Invoice/LwOe-nfO_YyT-yn/
http://pratikal.com.my/4f6g1hw/file/Copy_Invoice/sDQwi-6D6_HsZL-wk/
http://profilegeomatics.ca/rvsincludefile/UPS-Ship-Notification/Mar-25-19-12-25-05/
http://projectwatch.ie/mychat/scan/0608446/nmDxe-CuQ3_AGYZ-AE/
http://psponto.com.br/css/En/mzyG-Pjf_jEKuQsA-bwI/
http://qlstandard.com.mx/docs/UPS-Quantum-View/Mar-25-19-12-51-02/
http://qualityansweringservice.com/icon/6pdb4-xhsyg-ttclzjitc/
http://qualityansweringservice.com/icon/En/llc/Inv/vMgpd-4lP9_Gn-XHO/
http://ra-design-bad.de/blogs/xt40-hll4x-oiyvco/
http://red.pe/api/DONM-8ySl_OsLWg-Yh/
http://restauracja-finezja.com.pl/cgi-bin/EN_en/document/Copy_Invoice/GLMO-BT_UKTXWJy-fic/
http://restaurantequeleche.com/wp-includes/UPS-Ship-Notification/Mar-25-19-02-13-02/
http://reward.uta.edu.ec/vpayxz3/En/New_invoice/SpbpU-Z7NFf_Du-Gb/
http://roxhospedagem.com.br/chatonline2/UPS.com/Mar-25-19-12-36-02/
http://roxhospedagem.com.br/chatonline2/UPScom/Mar-25-19-12-36-02/
http://sag.ceo/wp-content/CBzM-IN2_DAeqx-Rf/
http://san-lian.com/wp-admin/En_us/Invoice_Notice/rhqdC-Awl_MqB-s5/
http://saranaberjaya.co.id/wp-includes/07984833/VaKB-ewcxM_ilTgMv-kaI/
http://setka-magaz.com/wp-content/Invoice_number/WEuC-Vl_IczROTqE-o9L/
http://shagua.name/fonts/Tracking-Number-9Q95302492986708/Mar-25-19-12-37-01/
http://shophaimy.online/wp-content/En/document/JUJA-g2Q_Lw-eYX/
http://siamnatural.com/tmp/LeqBn-fzZ_hGKXZ-2m5/
http://simplyresponsive.com/samples/2832726/kcuJg-CI0_Frwc-jaP/
http://sirocomena.com/mhjisei3p/Invoice_number/oCAwF-kz8_shv-P7u/
http://skanecostad.se/wp-admin/En/download/0106001144/kNdy-Ho_oOed-tT/
http://songlinhtran.vn/OosCQKy7/UPS.com/Mar-25-19-12-16-01/
http://storiesdesired.com/stories/UPS/Mar-25-19-01-11-02/
http://sudmc.org/wp-content/UPS-Ship-Notification/Mar-25-19-01-35-02/
http://tacticsco.com/Dev3/8064256544/xpML-Hcc_iCt-ZS6/
http://tacticsco.com/Dev3/En_us/New_invoice/CqpLD-Gp_sMyKQQ-RKM/
http://taynguyen.dulichvietnam.com.vn/wp-includes/Requests/Cookie/sudden.conf/US_us/OLJOA-Ov_sqJttWlN-3F/
http://the1sissycuckold.com/mincpke/GTKIw-4TF_KrVreBtvs-XF0/
http://theshowzone.com/dzXTs-oS3jd_aAKpXSCGI-Mo/UPS-Express-Domestic/Mar-25-19-01-12-02/
http://titaniumtv.club/wp-content/tBfQB-QLH_dw-sUJ/
http://tlslbrands.com/wp-content/agrmS-uRlCP_EOhMQwh-TZ/
http://trangbatdongsanhanoi.com/wp-admin/jab5-5fd4t-azil/
http://uzbek.travel/components/iw0p-i2fz03-hojkhmcm/
http://uzbek.travel/components/UPS-Quantum-View/Mar-25-19-01-57-01/
http://valfin.es/wp-admin/agxG-9urFg_hX-jvm/
http://vandekonijnen.be/aspnet_client/UPS-View/Mar-25-19-01-16-02/
http://vicentinos.com.br/wp-content/UPS/Mar-25-19-01-20-07/
http://vicentinos.com.br/wp-content/vaeao-wdl5w-pomqkvtfy/
http://visionmaker.pt/cgi-bin/En/scan/Copy_Invoice/BMluK-yFUOr_AQmND-5kD/
http://vivavolei.cbv.com.br/templates/Tracking-Number-9OFM57140660104556/Mar-25-19-01-43-04/
http://vrfantasy.gallery/wp-admin/m0br4-dhj2z-yusjws/
http://wajeehshafiq.com/wp-admin/859185101/KgsK-i9MAG_UlaBjiI-JGX/
http://walkinaluuki.pl/beta/gwl5i-atpdh-qilvnqjj/
http://warah.com.ar/2PS/bdhj-OU_aVjYIY-lQ6/
http://warmingmission.com/wp-includes/50o8-9m05h-ebdrn/
http://wcdr.pbas.es/pressthiso/0jo6m-mjdmqr-tgccsd/
http://webtvset.com/Connections/UPS-US/Mar-25-19-01-04-02/
http://workforcesolutions.org.uk/wp/UPS-Express-Domestic/Mar-25-19-12-58-07/
http://www.cevdetozturk.com/css/company/7534046/ziNM-0PSIt_WM-JT/
http://www.daemconcepcion.cl/blog/Copy_Invoice/ukIU-BNap_vboStiYy-iKq/
http://www.daemconcepcion.cl/blog/scan/Invoice_number/XuZk-MtUs_fPFmNU-Qia/
http://www.favoritbt.t-online.hu/logon/t34aj9f-nynfij6-ruwrwu/
http://www.hk026.com/2zsjmbk/file/QoSl-D6vG_rpSlf-s1H/
http://www.hurrican.sk/img/En_us/scan/Invoice_Notice/6440517/TZEq-DmS_bQ-6jz/
http://www.ibustan.com/wp-content/En/download/New_invoice/991966022/PSbV-fFgEt_G-0vh/
http://www.xseel.com/wp-admin/En_us/xerox/QxcK-4UA_vWn-0v/
http://xn--12co8a6cdw9dmf.xyz/wp-includes/26r2-yr01fu-sbrhrdp/
http://xn--80ajoksa8ap9b.xn--p1ai/administrator/3752402637136/QYOvF-kX_dhKYedAE-Cdq/
http://xseel.com/wp-admin/En_us/xerox/QxcK-4UA_vWn-0v/
http://yelarsan.es/wp-content/uploads/xgoS-Byha_NYOBuyc-aX/
http://yos.inonu.edu.tr/wp-content/uploads/7900042179/eQanQ-syH_uSOo-I1/
https://abi.com.vn/BaoMat/m2t0v-v9q4c-gqkr/
https://acdswd.cn/hitokoto/50s0-hikeql-hefaybcv/
https://avtovokzalykz/wp-content/3331756666854/TfRXq-YXmF_zzKBZa-BQ/
https://ewoij.xyz/cPaB-oTotY_dfuC-lL/
https://ewoij.xyz/UPS/Mar-25-19-12-07-01/
https://fbufz.xyz/US/corporation/New_invoice/8240326981647/mmOzZ-Zk_LKrqCtT-m5L/
https://gilsanbus.com/wp-content/languages/En_us/info/Invoice_Notice/KgCg-PdYaP_ZYh-AX/
https://gilsanbus.com/wp-content/languages/lgeel-1bLPm_hJHCELYo-aly/
https://horseshows.io/c2nkrlt/gv1cf-k5tp3s-ktndifn/
https://ilimler.net/wp-includes/EN_en/info/NvdRa-lld5_glWmM-eN/
https://inclusao.enap.gov.br/wp-content/uploads/corporation/New_invoice/22758867047/slVF-pLP_kO-scd/
https://inovatips.com/9yorcan/EN_en/doc/Copy_Invoice/aXbu-In7v_rGlf-85/
https://inovatips.com/9yorcan/UPS-Express-Domestic/Mar-25-19-12-12-01/
https://kebulak.com/contact_us/llc/Invoice_Notice/80212597953/TnoAs-smA_A-UTR/
https://ksoncrossfit.com/rylawpc/Invoice_number/QXVeT-hm5FK_fi-qn/
https://ksoncrossfit.com/rylawpc/TpDs-eZU5_KOZpdI-U09/
https://modps11.lib.kmutt.ac.th/wp-includes/3414212/bnxh-i6x_FjbYjN-I7z/
https://mywordes.com/wp-includes/23996991188/zhAR-lnf_sglg-5b/
https://nhanhoamotor.vn/2018/08/UPS-US/Mar-25-19-01-30-01/
https://northmkt.xyz/mlfp2yd/UPS.com/Mar-25-19-01-39-03/
https://parkhillthanhcong.vn/wp-includes/UPS-Ship-Notification/Mar-25-19-01-25-02/
https://patinvietnam.vn/wp-includes/wrOs-kD_KhqVVekH-MKt/
https://portalsete.com.br/wp-admin/dPUDq-1qiw1_vdlGZ-Rdo/
https://qualityansweringservice.com/icon/204401398950002/GTcdq-u08FF_YCWn-MD/
https://qualityansweringservice.com/icon/6pdb4-xhsyg-ttclzjitc/
https://qualityansweringservice.com/icon/En/llc/Inv/vMgpd-4lP9_Gn-XHO/
https://ra-design-bad.de/blogs/xt40-hll4x-oiyvco/
https://smartjusticeaz.org/wp-content/iqoZe-vV_JiRY-iO/
https://smartjusticeaz.org/wp-content/xerox/Invoice/42628542/scWEA-tv_zqQJMkr-eU/
https://taynguyen.dulichvietnam.com.vn/wp-includes/Requests/Cookie/sudden.conf/hoKQa-rgs_ced-dX/
https://trangbatdongsanhanoi.com/wp-admin/jab5-5fd4t-azil/
https://walkinaluuki.pl/beta/gwl5i-atpdh-qilvnqjj/
https://www.hk026.com/2zsjmbk/file/QoSl-D6vG_rpSlf-s1H/
https://www.udhaiyamdhall.com/images/Invoice_Notice/GaPbd-8EQo_BIV-hK/
https://wzydw.com/wp-content/uploads/UPS/Mar-25-19-12-20-07/


```
#### Epoch 1 Payloads by Document SHA256 - All Times UTC ####
```

Creation Time	2019-03-25 21:38:00	(DOC Based - ENG - 365 Blue Box)
SHA256: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https://www.udhaiyamdhall.com/images/XGr4Y/
http://35.189.240.78/wp-includes/AFus/
http://178.128.25.132/00akhwu/wS/
http://lifestylescape.com/7njtmlx/Ew/
http://property-in-vietnam.com/cgi-bin/PlSl/

Creation Time	2019-03-25 19:44:40 (From ZIP - JS Based - Fake Error *from E2!)

ecbe54b64df9eb98804a8d6c241261c7726dfc375abf44d1703191076ea5056d

https://etprimewomenawards.com/apply2/uploads/W_A/
http://muacangua.com/wp-admin/O_N/
http://dqbdesign.com/wp-admin/cU_Sa/
http://bloodybits.com/edwinjefferson.com/ie_xO/
http://instituthypnos.com/maps1316/Ki_D/

Creation Time	2019-03-25 16:17:00	(From ZIP - DOC Based - ENG - 365 Blue Box)
SHA256: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http://mireiatorrent.com/wp-includes/uSVt/
http://multiesfera.com/wp-content/OC/
https://ilimler.net/wp-includes/UD/
http://wardesign.com/catalog/XR99b/
http://mangaml.com/jdownloader/scripts/pyload_stop/fc/

Creation Time	2019-03-25 16:17:00 (DOC Based - ENG - 365 Blue Box)
SHA256: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https://ilimler.net/wp-includes/UD/
http://mireiatorrent.com/wp-includes/uSVt/
http://multiesfera.com/wp-content/OC/
http://wardesign.com/catalog/XR99b/
http://mangaml.com/jdownloader/scripts/pyload_stop/fc/

Creation Time	2019-03-25 07:45:00	(DOC Based - ENG - 365 Blue Box)
SHA256:
7a0c7c1be15116ff6ea979f5e82c24550f2d3c8039c760acb606c68250ca1d20
befc87fde621bd83f164643e8e88ac20c2690302016b5da97d80db904bcc4b9f
185f9b2fd4c4176e897a98088083c609fc4bd294602ad2553181b8de5b23e145
a6964034d6354496d878b0c918bc8491b946510172b7fef60c4c8515ebc24e85
ba912400b06066d705227710a179e02ecc8ff5810d7e04ff0a243546c79f22ee
f16ece88f1ae92798d237db861307a3e8c09a44a40d2746dbc85b8e33fdb175d
589cee7a3dcf5e547f1bcb0ba66e8ec505450a4fa64ea56d43dac1f543c29448
d5914fbb54ab83ab50c811195a00c4d066cc2a66f2ac2561b19cbb688269da00
a25e28c6d29319238c73053a80c0af9824553b64cfd179600c6f453934ac9f75
3c5d96160e745ca745fd3d5c351d3921bf7edff8d098be59193c98510a95a152
63a10fc16362dfb42c1b2f24c20b2e9f6b09782f7ad22b655d723815e5518c56
d08517a987b79d55c2fa1cf176d1a1106b2a325b2315e374c0f24a8192a4e156
7ddfcf2cad928346d52679a5f4df7a32ce863b2af91bd81be985e370f07f83f3
9ba0684a3b561a882efdcaa0890b322475cf2175af13171a6798be2913c7b175
5407d72d3d39f1484ab1637d52147b988ffe5bc2f8a1b88eeafae4bc64acb411
4087807dd6ed7fdc58c8309b33a7372f8adb6717dad8e08b8018a7a4007a02eb
b81eecfc1eb07c8616bf151107a5585fa88f8f704a8407ef92873a00867ea7d3
407e087f3b1d4e7b8e93f5b458a8e3d8565a55724ed4b3c31f3afeee81f7201a

http://toolbeltonline.com/wp-content/uploads/JZsFf/
http://firstmnd.com/wp/wp-content/598i/
https://vrfantasy.gallery/wp-admin/ujHQ/
https://codbility.com/fonts/Jcd0i/
http://artecautomaten.com/wp-content/7sf9/


Creation Time	2019-03-22 18:08:00	(DOC Based - ENG - 365 Blue Box)
SHA256:
6ff77f28f96520609121a2dea2931bd0b8612471277d01833af3a0811d2e7d47
446481f322c6fa31d4626aa76e0781b92d368b61b683d9004bc7565ee4af5ed3
a128b8c960f96cb051f69fbd41e0b890799f01eee49bd7a76dd964883dafe45d
c795a567d6ade6b6725b1a6868d2dcf68929c3508baabdb9dc7d8a684b2dbc47
955819dac450e03742bfe494bff424d156355a9e7630361498c16ed52d69bb88
21b2b7e92c8f7e405062af2ecca54753fb6fe4f93000d262cd1bae4f89c81310
9a6d8774a8b3642c967f5a0eab478e1395438adacca56322fc2236929231542e
c67553f35ab372521cfe9a12dabb885229fbed6b1fec2831f0dcfc1c72588970
42a2612b0d54652cab53c717a8e6b7452df3c4f3737a805f40ec25e05db38f77
9eb6636ab173eb2ef9b6cfadbeb9dec79227b465e5d48d1c4c990eea449628d6
1a1036c657758f1401ac109691f92d0d1b100d7aca1366e67fed042e485d54e6
2f4acd07ee727586c63e796a94ab64e33f82bf12488d81b70bbdb5fa46772212
a688566181802c7719686995445b912cc2fbb9a601a449fddf60917a522dcd87
830ac4f52e37951a334a590c4ab9bf2a44d3cfed42f2a0f199e7ad95d2f77780
bdebdae5fd38d4214fd6a21a7958261690c4f5dcd9d615a9361bc0836ed2ad5c
36e35f6977ac23d7f2e27aee6b84d9668ad9af0eb39f5173c201a0f0c0139761
f9529f127813bdd7aa0a0e87adfa7af0bed03e9b8c0159d9f110a2d1e3cb3d8e
1b50b1567032a1247d2e5d50d7d85815f8709654eee8688d97d988a339140fcd
2fcab8e52e1c52a8078a1835175e31fc95eadaf23830f582b9e3067c9697627b
2febdbaa811bb063e2d793f102886bd23430760504b09809001b299b8b652f3b
e618eec84ceb286bdd9ab7da260d8a7be33333db07076b5df7a8d3fdd056bb6d
288d1a562127a19c4e9350ba8cd2bb1277ca45959096fa24f5d24cfba61ed317
304f91aaf3e16820f75f0db4ae9a6b6a7819e51da8d9bac651e6a9bb129db294
1578131c038370aee4746c655e9a5c48742d93446b0b8393b711c33dfc3fc037
b76fed1913a8af6d4b3fd4bc2a9fbc74d9f27e8dce3e20975455661694a4cbd3
ce11e02c0e0fa010ce2208522334b5fcf6b1e8594f04c14a3ca77783cd194000
17455ae622e61caa0eef0a1ebe66534269b9f2e58c5844f96e2b32b7afe87800
9e9b0acb163351a93afba4afc7d48347051e8282b0e804b2886798c91c0e28bf
45151cb8f18eeb6d35134f6b36480224be4f20a07c0091f9ae143c2e3d93bb18
2e5886c67041af290c242b457ba4a00f754d1324cec05753980402e7edd1ce4e
971ebf3ffe21812e6cf0a2a90928c89a4aa68ff29f5679e81e7384683b5b4a5c
2a859e1269db3c31dc37db4513fffb836c3356b055582e6bc81611ba1ed5acb2
f951d9f6ef0523f3d6877379ca56db20690770c14222c5e0aab38aed2727e597
f432ed0e6b575dc4717254fbf3d952e125bf0ba3f5fd6508011226546ea8a786
8c921e547a84cad868d1cfbaceb01f9525828952e0225997a5835bc4ab534ac9
e2820ec79d18ee4845fd9bd79ac08f23c0dc0a350be815c980dfebbf36b54fe9
956b4c5b9f3490d05301da9a799690d7249d5fdffb55ec5aa84dd107f77e5b6f
3c8c2f5f55e50ae8ccd29177cab280df616484147a179948c8ed8a805c3eb9b4
5e0ab523d4ef9f8d74729a6d16e928135523d79e6516734ee3676fab51a6bbf1
94175f6404af2c6de995aa6f8f37bdb2faeafe5f952297b6f13c3052cefcb618
cc1548cb2be7da8fb0867181dcbb821bef162493511b078b1a52388d315e4013
6eacdaead54fe8220f850947bc6fe62cc1bc816553e350770ad41403cd32487a

http://www.bilgiegitimonline.com/wp-admin/mXWp/
https://www.yanjiaozhan.com/wp-includes/ug7/
http://barabooseniorhigh.com/En/JHS/
http://www.majoristanbul.com/cgi-bin/1OF/
http://bloodybits.com/edwinjefferson.com/jx7/

```
#### SHA256s for Epoch 1 Payload EXEs seen on 03/22-25/19 ####
```
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```
#### Epoch 2 Payloads by Document SHA256 - All Times UTC ####
```

Creation Time	2019-03-25 21:43:18	(From ZIP - JS Based - Fake Error)
fa24322fb07a7df35f0be3c5f4e72f0b9456ce73f2049ec9ffc0b97dce5a4fbe

http://ap.dahrabuildcon.com/cgi-bin/cQ_9/
http://www.form8.sadek-webdesigner.com/wp-content/h_W6/
http://www.91fhb.com/mhjisei3p/P_Ip/
http://ticket2go.by/wp-content/oh_DU/
http://shoparsi.com/cgi-bin/RH_Gm/

Creation Time	2019-03-25 19:44:40	(From ZIP - JS Based - Fake Error)
ecbe54b64df9eb98804a8d6c241261c7726dfc375abf44d1703191076ea5056d

https://etprimewomenawards.com/apply2/uploads/W_A/
http://muacangua.com/wp-admin/O_N/
http://dqbdesign.com/wp-admin/cU_Sa/
http://bloodybits.com/edwinjefferson.com/ie_xO/
http://instituthypnos.com/maps1316/Ki_D/

Creation Time	2019-03-25 17:54:29	(From ZIP - JS Based - Fake Error)
SHA256:
14824f98efb6f362b06c82ae562f3e6ec0302275849ba923ab1143db41354779

https://etprimewomenawards.com/apply2/uploads/W_A/
http://muacangua.com/wp-admin/O_N/
http://dqbdesign.com/wp-admin/cU_Sa/
http://bloodybits.com/edwinjefferson.com/ie_xO/
http://instituthypnos.com/maps1316/Ki_D/

Creation Time	2019-03-25 16:29:00	(From ZIP - DOC Based - ENG - 365 Blue Box)
SHA256:
73c2fe5f7b5c9ed255dd0a4c219d1081624926a21a7f56eb0b617a049d1d878a
cca1cd820b1657b82553bb497da6833d54b28b4a6954172e12016c38f626ad4c
21e11119dcc5f4588e52d529df9ec67da09dffd2013e8e6c9117be000a42d153

https://etprimewomenawards.com/apply2/uploads/W_A/
http://muacangua.com/wp-admin/O_N/
http://dqbdesign.com/wp-admin/cU_Sa/
http://bloodybits.com/edwinjefferson.com/ie_xO/
http://instituthypnos.com/maps1316/Ki_D/

Creation Time	2019-03-25 08:20:00 (DOC Based - ENG - 365 Blue Box)
SHA256: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http://ayodhyatrade.com/ww4w/66_r/
https://inclusao.enap.gov.br/wp-content/uploads/33_DK/
http://pufferfiz.net/spikyfishgames/XJ_hX/
https://center1.co.il/wp-content/0p_Iy/
http://webzine.jejuhub.org/wp-content/uploads/GI_Xz/

Creation Time	2019-03-22 18:01:00	(DOC Based - ENG - 365 Blue Box)
SHA256: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http://mercalzado.com/ib9j3yx/T_K/
http://www.camereco.com/wp-content/languages/yW_c/
http://kianse.ir/svsvbk/bz_QS/
http://dqbdesign.com/wp-admin/ee_YO/
http://ongbrotar.cl/wp-includes/M_z/

```
#### SHA256s for Epoch 2 Payload EXEs seen on 03/22-25/19 ####
```
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```
#### Epoch 1 C2s ####
```

109.104.79.48:8080
109.73.52.242:8080
115.75.36.220:443
138.68.139.199:443
139.59.19.157:80
144.76.117.247:8080
159.65.76.245:443
162.104.1.255:443
165.227.213.173:8080
173.248.147.186:80
174.109.4.153:8090
181.16.4.180:80
181.228.211.100:443
181.56.165.97:53
181.61.221.146:80
185.86.148.222:8080
186.138.205.189:80
186.3.188.74:80
186.5.100.92:443
189.208.239.98:443
189.250.145.98:443
190.117.206.153:443
190.121.143.147:20
190.146.86.180:443
190.15.198.47:80
190.185.241.151:443
190.210.3.93:443
192.155.90.90:7080
192.163.199.254:8080
200.116.26.234:80
200.125.190.126:8080
204.138.46.166:7080
208.180.246.147:80
209.159.244.240:443
210.2.86.72:8080
219.94.254.93:8080
23.254.203.51:8080
24.137.254.148:80
5.9.128.163:8080
51.255.50.164:8080
66.209.69.165:443
69.163.33.82:8080
70.28.3.120:7080
71.11.157.249:80
71.43.73.58:443
72.47.248.48:8080
82.73.220.225:80
89.211.193.18:80
91.205.215.57:7080
92.48.118.27:8080


```
#### Spam/Stealer C2s ####
```

198.58.114.91:4143
213.136.86.219:7080
91.205.215.10:7080

```
#### Current Epoch 1 RSA Public Key ####
```

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAL9KRKWqcld40xbUZ6hRh+fPNkgJe7K+ 0y1rR0UFqc2SBmnyoR/2Ctd+8MRvU8zri2eNVkVBxCUH1Cthf3AEgRqY2kGva8gJ Wcqls3j7RztZzqFoL+wM9DNnz/OWuiyPAQIDAQAB

```
#### Epoch 2 C2s ####
```

108.188.116.179:80
133.242.156.30:7080
138.201.140.110:8080
147.135.210.39:8080
167.114.210.191:8080
173.255.196.209:8080
173.255.250.241:443
178.62.37.188:443
185.94.252.3:443
186.113.255.229:22
186.4.234.27:443
186.71.61.94:80
187.136.144.197:7080
187.189.195.208:8443
187.192.60.158:143
188.48.145.96:8090
189.155.152.129:8443
189.159.143.134:443
189.223.101.74:50000
189.225.88.42:995
189.236.193.173:20
189.250.182.236:7080
189.252.15.206:443
190.211.207.11:443
190.48.129.88:80
190.97.219.241:80
200.113.185.229:8080
201.220.152.101:80
201.236.95.82:80
201.239.154.191:443
203.143.86.111:8080
208.78.100.202:8080
212.122.71.196:995
217.13.106.160:7080
45.123.3.54:443
45.33.49.124:443
47.180.177.96:80
47.202.17.6:80
5.230.147.179:8080
50.31.0.160:8080
62.75.187.192:8080
63.77.201.245:443
64.13.225.150:8080
67.205.149.117:443
69.198.17.7:8080
70.57.82.196:80
72.214.54.39:80
78.186.5.109:443
83.222.124.62:8080
85.104.59.244:20
86.42.253.213:993
87.106.139.101:8080
87.106.210.123:80
94.76.200.114:8080


```
#### Epoch 2 - Spam/Stealer C2s ####
```

104.131.58.132:8080
185.94.252.12:443
5.196.133.206:443

```
#### Current Epoch 2 RSA Public Key ####
```

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAMPLgcO0RQdJg/LTgiku57nH4KcLwHCx S0lbynOUhHhKjTnmENrMA2idUbK6hI0JRZtii9oJSlb3e5NZiCK+Qr/NB2u7ZNRc hG87aibm0ndS9xKDRXcmWwaQkF0PFuOHpwIDAQAB

```
#### Credits and Notes Section ####
```
Updated 7/13/18
WARNING - Some links may have been taken down shortly after I reported them to URLHaus.ch because they rock and report everything to ISPs as it
is confirmed to be malware. Additionally, this list MAY include doc DL URLS from previous days, see the previous days here to get the full picture:
https://pastebin.com/u/jroosen

NOTE: The doc DL URLS are in alphabetical order now. The community lists below may contain content I do not have in my list.
I am providing them for your benefit in case you want to parse them to be sure.

```
#### What is Epoch 1 and Epoch 2? ####
```

What is Epoch 1 and Epoch 2? (updated 03/07/2019)

I have been tracking Epoch 1 and Epoch 2 since May of 2018. I called them Epoch 1 and Epoch 2 because they followed a different timescale of
payload updates and history. In short, Epoch 1 and 2 are two botnets with distinct C2 infrastructures with separate RSA keys for communications.
Epoch 1 is currently the larger of the two botnets(MAR 2019) and I think it is the main push of Emotet currently. Epoch 1 WAS a smaller more
rapidly changing version of Emotet at one point in the last half of 2018. Now Epoch 2 seems to be the smaller of the two since this time period.
This seems to change back and forth over a 6 month period. Despite having unique unshared C2 infrastructures, these two botnets have been seen
to move bots from one to the other and show similar behaviors seemingly controlled by a single entity/group. E.g. going on breaks at the same
time period.
Here are some observations I have noted since I have been watching these botnets:

- Checking a document download site from Epoch 1 will deliver a document that is different than what is being delivered at the same time on an
Epoch 2 document download site. Specifically, Maldocs on Epoch 1 will have a different document creation times and payload quintets than those
being delivered in maldocs on Epoch 2 at any one time.
- Document hashes change very 10 minutes on both Epochs while distribution/spamming are active.
- Document download and payload URLs tend to become orphaned as templates are changed out and they age. By 72 hours most are no longer updating.
- On Monday's of every week a new set of document download sites and usually templates to accompany them are generated early on
Monday morning/Sunday night.
- Both Epoch's may share a host for binaries or documents but NEVER the same directory. Eg. Epoch 1 may have an EXE in directory host.tld/A and
Epoch 2 may have a document hosted on host.tld/B.
- The RSA keys will change every few months so for C2 communications on each Epoch/Botnet.
- Binaries for Epoch 1 payload sites are different than the binaries for Epoch 2 payload sites.
*- Binaries used to change hashes every 15 minutes to 2 hours but now (3/6/19) are changing every 5 minutes on distro.
- Each binary has a hard coded list of C2 sites unique to the Epoch it was derived from.
- C2s are never shared between Epochs/Botnets.
- Both Epoch 1 and 2 seem to go into "break" periods at the same time for several weeks. During this time binaries are updated every 2-4 hours
via C2 to stay ahead of AV defs.
- Spamming activity seems to cease on each botnet at around 00:00UTC each day. It usually starts back up around 07:00-08:00UTC each day.
- Spamming usually does not occur on weekends and the Emotet team seems to take weekends off.
- The easiest way to tell what botnet a sample is from, is to find the payload and then check the C2s/RSA Key. HINT - CAPE Sandbox makes this
easy now, use it! Thanks to Kevin @CapeSandbox and @pollo290987!
- Changes in behavior are often deployed to one botnet and then to the other as if the first was a test. This has been observed for obfuscation,
spam template, word template, document type and even payload.

If I think of anything else to add or if anyone else has any suggestions, I will add them here.

```
#### Community Lists ####
```

https://pastebin.com/CK59BinM - @ps66uk
https://otx.alienvault.com/pulse/5c9920a71ad90075cd441320/ - @RedBear14679277
https://pastebin.com/ZbkdDDuS - @Jan0fficial E1
https://pastebin.com/puKNwHSr - @Jan0fficial E2

```
#### Credits ####
```
(OC from @JRoosen and/or combination work of the following)

Doc DL URLs - @James_inthe_box, @unixronin, @abuse_ch, @JayTHL @dms1899, @avman1995, @pancak3lullz, @pollo290987, @malware_traffic,
@0xtadavie, @Bitterman59, @devnullnoop, @Bauldini, @baberpervez2, @executemalware, @leunammejii, @jcarndt, @gorimpthon, @Racco42,
@papa_anniekey, @Jan0fficial, @shotgunner101, @HerbieZimmerman, @Outkast_TI, @ps66uk

C2 info/RSA Keys - @unixronin, @CapeSandbox, @sysopfb, @pollo290987, @MalwareTechBlog, @ps66uk, @JayTHL, @malware_traffic, @0xtadavie,
@devnullnoop, @gorimpthon, @Racco42, @Jan0fficial

Payloads - @bigmacjpg, @decalage2, @James_inthe_box, @MalwareTechBlog, @ps66uk, @dms1899, @avman1995, @unixronin, @pancak3lullz,
@pollo290987, @malware_traffic, @JayTHL, @Bitterman59, @devnullnoop, @executemalware, @Bauldini, @jcarndt, @gorimpthon, @Racco42,
@papa_anniekey, @Jan0fficial, @OguzhanTopgul, @HerbieZimmerman

Spam Templates - @0xtadavie, @SaurabhSha15, @devnullnoop, @raashidbhatt

Special thanks to @devnullnoop, @2sec4u, @unixronin, @pollo290987, @ps66uk for creating scripts/servers/infrastructure and
helping out with this!

Very special thanks to @capesandbox, @bigmacjpg and @decalage2 of the ViperMonkey Project https://github.com/decalage2/ViperMonkey ,
@digitalocean, @mploessel, @anyrun_app, @MalwareTechBlog, @unixronin, @hurricanelabs, @KryptosLogic, @abuse_ch/urlhaus.abuse.ch,
@urlscanio and @Virustotal for providing services/software no charge to this cause!

```
#### Daily Log ####
```

Today was rather crazy. Shortly after starting up this morning, E2 started to point to .zip files instead of the normal maldocs that
we are used to be at the end of the links. The .zip files contained the maldocs on E2 for a bit but then switched over to containing
.js files inside. This behavior was also duplicated on E1 shortly after around nd then later E1, but we also saw
.zips containing .js files later. There was even a small time we only saw .js files again only.

Brad at @malware_traffic saw this also and posted on it here:
https://twitter.com/malware_traffic/status/1110186313293225986

Then around 19:45 it looked like Vladimir screwed up on E1. He took the E2 .zip with the current .js file inside from E2 and put it
on E1 directly. This was odd as they usually do not cross the botnets this way but maybe it was for a quick test once they were done
experimenting E2 was clearly being used as a test case today.

I received around 105 malspams and the majority were .doc attachments from E1 with some URLs in the afternoon. I did start to see
.PDF attachments later in the day on E2. E2 is still hosting .zip files that contain .js files inside.

Each of the ZIP files on both epochs were really cycling hashes at the same moment in time. 10 different sites would give you 10
different hashes at a point in time. Then all 10 of those hashes would change in 5 minutes. This effectively created a huge pool of
noise with the hashes for .zip files and I wont bother to put them in here but I have them if someone wants them.

What matters is each one of the .zip files would the same .js file or .doc inside for several hours. Given this the files area easy to
block at the perimeter.

I never saw any .zips attached to malspams directly but if you did let me know.

I guess this was the big change they had brewing last week. Not only have we gone from .xml/.docx/.doc/.js but now we also have .zip
files to deal with on the distro end. Sounds like someone is really trying to avoid detection here. Unfortunately for them, .zip or
.js in a .zip is a lot of clicks and a lot better detected out there.

EXE Rehash is still going nuts and we are seeing new hashes every 5 minutes.

C2s did NOT change for E1 but stayed at 50 combos in total. - recorded above
C2s did change for E2 and stayed at 54 combos in total. - recorded above (lots of replacements and new IPs)

Happy Monday. Lets see if we are going to step it up tomorrow and have Ivan pop out of the email and hit enter to install it on your
keyboard for you.

```
#### Sandbox 03/25/19 ####
(all with fakenet and MITM unless spam/secondary infection)
```

Epoch 1 C2 run on 2019-03-26 at 05:00 UTC - https://cape.contextis.com/analysis/54598/

```

```

Epoch 2 C2 run on 2019-03-26 at 05:00 UTC - https://cape.contextis.com/analysis/54596/
```