#emotet 20180914 - 16:00 BST

----------PDF-HASH----------

<null


----------DOC-HASH----------

unchecked
<null>

EXE set 1
DFC5235971C689D895CF7B019A70305D0A267096DB5642E58C96A266DC6BA80B


----------DOC-URL----------

<null>


----------EXE-URL----------

EXE set 1 (epoch 1)
http://covitourperu.com/xRiaqmz2
http://bankreadyplans.com/wp-admin/Sx8sOI4zO
http://btesh.net/dgwH59i
http://shksh1.uz/xppdtGbEg
http://guomanhotels.todaycouponcode.com/7Ez10CL

DOC - https://app.any.run/tasks/9f5ba4bb-ca15-499d-a6d3-ddfa53d0fffe
EXE - https://app.any.run/tasks/743ab0d6-bd45-470b-b390-8322ba006e20

C2
http://108.53.148.199:20/
http://87.114.250.38:7080/
http://96.245.253.186/
http://69.70.248.98:8443/
http://96.23.80.242:50000/
http://220.253.68.95:8080/
http://133.242.208.183:8080/
http://190.189.12.16:8080/
http://201.244.125.210:53/
http://49.212.135.76:443/
http://96.242.246.128/
http://139.162.237.94:7080/
http://70.184.148.77:20/
http://72.50.72.164:22/
http://200.105.149.226/
http://37.120.175.15/
http://189.151.46.3/
http://104.236.24.85:8080/
http://181.123.205.219/
http://210.2.86.94:8080/
http://217.13.106.203:4143/
http://139.59.242.76:8080/
http://178.63.118.195:8080/
http://71.45.208.246:8080/
http://198.199.185.25:443/
http://203.198.129.4:8080/
http://98.229.127.243:8090/



----------SENDER----------

[email protected]


----------SUBJECT----------

**** Invoice 380  09.14.2018