Daily Emotet IoCs and Notes for 11/20-23/18

http://1.bwtrans.z8.ru/EN_US/Messages/11_18/
http://2077707.ru/US/BF2018-COUPONS/
http://2d73.ru/En_us/Clients_transactions/11_18/
http://9.mmedium.z8.ru/US/BF2018/
http://9210660313.myjino.ru/En_us/Clients/112018/
http://9896194866.myjino.ru/US/Transactions/112018/
http://adi.loris.tv/doc.doc/
http://aliexpress-hot.ru/US/Clients_BF_Coupons/
http://andishwaran.ir/EN_US/BlackFriday2018/
http://artblessing.ru/EN_US/Clients_BlackFriday2018_Coupons/
http://auladebajavision.com/US/Black-Friday/
http://beginningspublishing.true.industries/EN_US/Clients_BlackFriday2018_Coupons/
http://bibikit.ru/US/Black-Friday/
http://blacktiemining.com/527YUBWHWJ/BIZ/Personal/
http://blog.doutorresolve.com.br/EN_US/BlackFriday2018/
http://cach.2d73.ru/EN_US/Documents/11_18/
http://chang.be/En_us/Coupons/
http://clock.noixun.com/EN_US/BlackFriday2018/
http://cookienotti.ru/En_us/Transaction_details/2018-11/
http://darklordshow.clubofathens.com/En_us/Clients_BlackFriday2018_Coupons/
http://db-service.nl/EN_US/ACH/112018/
http://denatella.ru/En_us/Clients_BF_Coupons/
http://djlilmic.com/En_us/BF2018-COUPONS/
http://drcarrico.com.br/US/BF2018-COUPONS/
http://event.suzukimoto.my/EN_US/BF2018-COUPONS/
http://e-video.billioncart.in/EN_US/Clients_BF_Coupons/
http://fairviewcemetery.org/EN_US/BF_Coupons/
http://fractaldreams.com/US/BF2018/
http://franchise-city.ru/En_us/Coupons/
http://fruteriascapellan.com/En_us/Clients_BF_Coupons/
http://ghealth.sk/EN_US/Information/11_18/
http://g-phone.gr/EN_US/Clients_BF_Coupons/
http://herbalparade.com/En_us/BlackFriday2018/
http://htmedia.myjino.ru/En_us/Information/11_18/
http://hydrotc.ru/US/Clients_BlackFriday2018_Coupons/
http://inauto-yar.ru/En_us/BF2018/
http://karmakorm.ru/En_us/Documents/112018/
http://klempegaarden.dk/US/Attachments/2018-11/
http://klimahavalandirma.com.tr/EN_US/Attachments/2018-11/
http://koboreen.com/EN_US/Transaction_details/2018-11/
http://konfigurator.netpistols.review/En_us/Clients_BlackFriday2018_Coupons/
http://kova.com.tw/En_us/Coupons/
http://krazy-tech.com/wp-content/US/Coupons/
http://likebussines.ru/EN_US/BF2018/
http://maximinilife.com/En_us/Information/11_18/
http://mdmexecutives.com/En_us/Coupons/
http://ministryoftransport.gov.gi/EN_US/BF_Coupons/
http://ministryoftransport.gov.gi/EN_US/Documents/112018/
http://netsupmali.com/En_us/Coupons/
http://nikbox.ru/EN_US/Clients_BF_Coupons/
http://nimsnowshera.edu.pk/EN_US/Transaction_details/112018/
http://nowley-rus.ru/administrator/cache/En_us/Black-Friday/
http://partner.targoapp.ru/En_us/Clients_information/11_18/
http://perfectionautomotivebexley.flywheelsites.com/US/BlackFriday2018/
http://playcam.ndmradiochile.cl/EN_US/Clients_BlackFriday2018_Coupons/
http://popixar.zaan.eu/US/BF2018-COUPONS/
http://ppghealthcare.com/En_us/BF_Coupons/
http://progeekt.online/EN_US/Coupons/
http://proiect.edumagazin.ro/EN_US/BlackFriday2018/
http://rajikase.com/En_us/BF2018-COUPONS/
http://ramedia-pro.ru/En_us/Black-Friday/
http://rlmoscow.ru/EN_US/BF2018/
http://rockmill.abcsolution.ru/EN_US/BF2018/
http://roma.margol.in/US/Clients_BF_Coupons/
http://rozdroza.com/En_us/Clients_Messages/11_18/
http://sana-kovel.com/wp-content/uploads/EN_US/Clients_BF_Coupons/
http://sbpupvcwindows.blazewebtech.com/US/Black-Friday/
http://serverbot.ru/En_us/Clients_BF_Coupons/
http://shangrilaspa.ca/EN_US/BlackFriday2018/
http://shawonhossain.com/US/BF2018/
http://shayariecoresort.com/US/Coupons/
http://shivangdesigning.com/En_us/BF2018-COUPONS/
http://shop-contact.ru/EN_US/Black-Friday/
http://shorthairstyle.club/US/Coupons/
http://sonnastudio.net/En_us/Coupons/
http://status.net.ru/EN_US/BlackFriday2018/
http://studio-jezykowe.pl/En_us/Coupons/
http://sweaterbambi.ru/EN_US/Clients_BlackFriday2018_Coupons/
http://taman-anapa.ru/En_us/Clients_BF_Coupons/
http://taxi-chi.com/EN_US/Clients_BF_Coupons/
http://telecom-cctv.com/EN_US/Coupons/
http://test.besta-s.com/wordpress/EN_US/BF2018/
http://thanhsarah.com/US/BlackFriday2018/
http://thegrandchemical.com/EN_US/Clients_BF_Coupons/
http://thetruepro.com/En_us/BlackFriday2018/
http://tof-haar.nl/EN_US/BF_Coupons/
http://travelcentreny.com/US/BlackFriday2018/
http://trazo24.com/EN_US/Clients_BlackFriday2018_Coupons/
http://tutora-z.com/En_us/Coupons/
http://underrootenergy.com/US/ACH/2018-11/
http://unionartgallery.ru/US/Transaction_details/11_18/
http://url2731.lailahotels.com/wf/click?upn=3DJGjSgA7ZmZO8YWujv1=Dphknda-2B3qDqzWhgG-2FRHrbUVukOtM-2BU8-2BiB74zbutkRFQX6cao5fFSdnJFOCWmqDSB9=g-3D-3D_UjuPhYoOZwrf-2FCVjdKJulwFO6AdqKTE9Si2HdnHBYZHhFLjbF4d5OL7rUINqLBJJY=6-2FlCwHyJXN9t0Grz2CYv946vTsuQZkUGgU899x395Hp7soWpokmlZG8o5cGWVbKPWoy1lpXhe=Ng4N-2FmwanmGOah-2Fev-2BEK5oyEMQhJDMqrK59RVpVXYLWjDUt1KZ3Epz9IKLw9oFSIIHglp=crH1y6dCeaP4sQCGpRU2BMiRNooA-3D/
http://vidmarketeers.com/US/Details/2018-11/
http://www.casadelacolinaurubamba.com/US/BF2018-COUPONS/
http://www.filterings.com/EN_US/Information/112018/
http://www.jamesoutland.net/US/Coupons/
http://www.project-831.co.uk/US/Black-Friday/
http://www.santikastore.com/EN_US/BF2018/
http://www.saxophonist.gr/US/Black-Friday/
http://www.spa-mikser.ru/En_us/Clients_BlackFriday2018_Coupons/
http://www.standart-uk.ru/En_us/Clients_Messages/2018-11/
http://www.tutora-z.com/EN_US/BlackFriday2018/
http://xn--b1agpzh0e.xn--80adxhks/EN_US/Clients/112018/
http://yumyumhostel.myjino.ru/EN_US/Information/11_18/

http://abby.opt7dev.com/wp-content/1540560AN/PAYMENT/US/
http://abeautifulyouskincare.com/0325692BYAAN/identity/US/
http://adap.davaocity.gov.ph/wp-content/3835GE/com/Commercial/
http://afan.xin/2XNE/ACH/Smallbusiness/
http://agrarszakkepzes.hu/hmHIwj8/de_DE/IhreSparkasse/
http://akiftur.com/4532CZDQOTRH/SEP/Commercial/
http://algous.margol.in/2076IHNBDWLQ/com/Smallbusiness/
http://almaz-plitka.ru/01WHRU/PAY/Commercial/
http://bellaechicc.com/864FBCZDQE/PAYROLL/Business/
http://beluy-veter.ru/ch3WwQ/biz/PrivateBanking/
http://birbillingbarot.com/465ZY/SEP/Commercial/
http://birbillingfly.com/4ZVVRL/PAYROLL/Smallbusiness/
http://blog.sefaireaider.com/882RSDHFOTP/identity/Personal/
http://cach.2d73.ru/04249ZE/SWIFT/US/
http://cg.getoptimize.it/1754897DJA/PAY/Smallbusiness/
http://c-on.dk/959458ZGSWCYJM/BIZ/Smallbusiness/
http://djwesz.nl/wp-admin/6865JKITDQ/WIRE/US/
http://djwesz.nl/wp-admin/PczHDll4m/de/Service-Center/
http://expertessaywriting.co.uk/98680UADA/biz/Commercial/
http://f96098rt.beget.tech/41LEXY/PAYMENT/Personal/
http://fakita.com/1213835CHLMLODT/PAYMENT/US/
http://filemanager.ovh.vpsme.ga/5YE/PAY/Smallbusiness/
http://foxford.margol.in/9OUREX/com/Commercial/
http://fulcrumpush.com/87609XNZZBN/PAY/Personal/
http://futuregarage.com.br/doc/En/Scan/
http://garrystutz.top/9FJE/SEP/Personal/
http://h3m.margol.in/575MRL/biz/Business/
http://himachaldream.com/31780WVIGQH/oamo/Commercial/
http://ifcingenieria.cl/3E/WIRE/Personal/
http://incrediblebirbilling.com/81211ILXG/PAY/Personal/
http://ksc-almaz.ru/8485638ZCWBOFSO/SEP/Personal/
http://loei.drr.go.th/wp-content/7155384HAWVC/identity/Business/
http://microjobengine.info/177258IBZNLGKE/ACH/Smallbusiness/
http://montegrappa.com.pa/201I/SWIFT/Commercial/
http://montegrappa.com.pa/FILE/En_us/716-46-038728-137-716-46-038728-124/
http://new.9875432.ru/3196IZ/biz/Smallbusiness/
http://old.simbez.ru/9848742RK/ACH/US/
http://potens.ru/1EOUQTEL/ACH/Business/
http://precellent.properties/67837QIFQRIXS/BIZ/Personal/
http://progettopersianas.com.br/isJg00qsZ/DE/Service-Center/
http://psce.org.pk/4GLAVVG/SWIFT/Business/
http://raidking.com/99931JSF/oamo/US/
http://rajpututthansangh.com/6149D/SWIFT/US/
http://robzandfitness.co.uk/wp-content/315JA/PAYROLL/Business/
http://rusjur.ru/98LASHS/SEP/Smallbusiness/
http://scafrica.org/89Z/com/Business/
http://sitrameditech.org.in/219716LKH/identity/Commercial/
http://speedycompare.site/docs/5MSAIPIBB/PAY/Business/
http://studentwelfaretrust.com/555TPIXU/WIRE/Personal/
http://surfmorerelogios.com.br/32624OADQMR/PAY/Business/
http://suryalife.in/0U/biz/Business/
http://talentokate.com/33WP/com/Smallbusiness/
http://tratraimangcauxiem.com/5NPMTV/biz/Smallbusiness/
http://ts-prod-assets.tripleseat.com.s3.amazonaws.com/assets/008/969/302/FILE97767.doc/
http://tszh.southtel.ru/modules/556OBMRC/biz/Personal/
http://tukkerteam.nl/53LCFNOIDM/PAYROLL/Business/
http://unionartgallery.ru/46585CA/PAYMENT/Commercial/
http://vegasports.in/46OPJOBX/SEP/US/
http://villacitronella.com/6475HMFHOTFE/identity/Business/
http://vistoegarantito.it/089QVU/SWIFT/Smallbusiness/
http://woock.ru/wm4vTOUkkNHerqCJ8mdX/SEP/IhreSparkasse/
http://www.4fans.store/rA44j4nkQFNadEyw/de/Service-Center/
http://www.andreidizain.ru/2MSTLTQZR/PAY/Business/
http://www.andreidizain.ru/g45yUq/SEPA/200-Jahre/
http://www.aquastor.ru/7941G/WIRE/US/
http://www.arm-land-uae.com/ZQqbklr9hp/SEPA/Privatkunden/
http://www.artblessing.ru/6YB/WIRE/Commercial/
http://www.balerinka56.ru/MadUGGwotBV4o/SEPA/200-Jahre/
http://www.beluy-veter.ru/5105297ERF/SWIFT/US/
http://www.beluy-veter.ru/ch3WwQ/biz/PrivateBanking/
http://www.cleaninggrad.com/vWOFoiPf64r8gyB5n50/de_DE/IhreSparkasse/
http://www.daripunza.az/DhUWlhhXoAOh2g2qA/SEP/Firmenkunden/
http://www.dbravo.pro/bOdXNjUoB/SEP/IhreSparkasse/
http://www.fakita.com/1213835CHLMLODT/PAYMENT/US/
http://www.fryktis.ru/nIbkwsvMByYwoxJJai8/de_DE/Firmenkunden/
http://www.gfpspace.ch/98305CPE/ACH/Commercial/
http://www.global.pro.vn/6QGQTF/SWIFT/Smallbusiness/
http://www.lift43.ru/5OVOyN3y/SEP/IhreSparkasse/
http://www.ludylegal.ru/617RNAAEEQ/identity/Commercial/
http://www.nowley-rus.ru/administrator/cache/13943BSUXTCBF/com/US/
http://www.onicorp.ru/uyhBhJA40uQ38S/SEP/Service-Center/
http://www.onlyapteka.ru/fwi8Bs4hhAPgz7yxfEoM/de/IhreSparkasse/
http://www.optocen.ru/562840QUP/identity/Personal/
http://www.pinnaclestudio.ru/9U8KCXik/SEP/IhreSparkasse/
http://www.potens.ru/07272JFDXW/SEP/Commercial/
http://www.realaprent.com/92HHRFB/identity/Commercial/
http://www.remont-trenazherov.com/30736JSFQE/SWIFT/Commercial/
http://www.ruseal.su/wp-content/themes/twentyseventeen/assets/js/23635UCN/WIRE/Personal/
http://www.shop-contact.ru/84AZMJUHOM/biz/US/
http://www.softovok.ru/0383TWQMHOQ/BIZ/Business/
http://www.sptrans.net/764227ZDUZ/PAY/Business/
http://www.standart-uk.ru/2697677BYARZQV/oamo/US/
http://www.test.arkaim-stroy.ru/8436ZL/com/Personal/
http://www.test.pr-dev.ru/8896BRW/WIRE/Personal/
http://www.test.stylevesti.ru/077406J/PAYROLL/Business/
http://www.topdesign777.ru/952N/SEP/Business/
http://www.udc1.ru/29BZDARXXG/PAY/Personal/
http://www.vetsaga.com/5UPC/PAY/Business/
http://www.video-manikyur.ru/2FUOWJEXH/ACH/US/
http://www.visapick.ru/59619FWV/BIZ/Personal/
http://www.wayofsport.ru/22121JLQG/PAY/US/
http://www.weinews.ru/6200853UYZSY/PAYROLL/Business/
http://www.wind7.ru/0293188TOJNED/oamo/Smallbusiness/
http://www.xn--36-6kcljc9bejjt2a.xn--p1ai/559489DZ/PAYROLL/Personal/
http://www.xn--80aaaaarj3amkmcle7a8b0c.xn--p1ai/8805768QLF/PAYMENT/Smallbusiness/
http://www.xn--80acgthip.xn--p1ai/489PHWNZ/SEP/Commercial/
http://www.youtourvip.ru/2660402G/identity/US/
http://www.zona-13.ru/3908629HA/com/Commercial/
http://xn--80aacosifc0adbrfcui8o1b.su/076JYZMVO/SEP/Smallbusiness/
http://xn----8sbiwoeceeebvggp3r.xn--p1ai/8094WFGSSU/PAYMENT/US/
http://xn----8sbiwoeceeebvggp3r.xn--p1ai/VXQST4Gk/SEP/Firmenkunden/
http://znaki48.myjino.ru/8813499VDCHRZJ/SWIFT/Commercial/

Creation Time	2018-11-23 20:00:00
SHA256:
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http://lifewithdogmovie.com/0K3jRwA
http://mimhoff.com/FvfyvHFBzf
http://tourdezsokolat.hu/zuyhGc7sq8
http://salon-gabriela.pl/HeF32DnjQl
http://uutiset.helppokoti.fi/86YAZjQ

Creation Time	2018-11-23 16:12:00
SHA256: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http://www.atlantictoursrd.com/dWUYS8Xoq
http://school3.webhawksittesting.com/co1AKGnY
http://darklordshow.com/2CctEHS
http://www.shop-contact.online/j1KUrsHmZ
http://alafolievietnam.com/WnJJVUs


Creation Time	2018-11-23 12:12:00
SHA256:
ff4481480b5702f90812c6ea3cd4191a55987d4f6edf5f6365397b8970924c32
a1ac488ad0275be531977bd5bcc090c8c4aa14d929cf2f89e215781838aa34a8
132cad3475e88883963afb53c6eb9267fb247e7c8ddd95c7a4932124d375947a
131084da10651652a1615250f63fb8bb1f6af0283acf2891399cc78e9653159b
0df360194446e31cf677f5af5d368f34d6752c8145b4ca2b4abfc3d8b7201abf
d161f65bc8c6be39aad3d150700fffe60c912d4fc14844a647e93352cb8432b0
e4b27887f7b232e34dcd3c767993941b8160c577f97b55c845a80c117ad05870
2eb989cd13512fb9eb434f5ecd2a81fe1431f559603281ae26829232cf92a51e
d48d6efa8a221afc69083341dd82f40f1f055d9714e4f93d6ffd4817b73930b6
bcdd61ef9c40ed6ced94b4e8ec2f9f7ee4a3116049d3486530ae127f129a72e0

http://taxngain.com/Ra6CbuE
http://ampersandindia.com/oADHazuw
http://nesstrike.com.ve/P3Fwqt6aN
http://www.ivicatechnology.co.zw/wp-admin/0O1Gx7RzG
http://agrarszakkepzes.hu/xIqOmhkx

Creation Time	2018-11-23 06:56:00
SHA256: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http://www.bellaechicc.com/RZmFsaGIKM
http://bo2.co.id/X8rCrhlVQ
http://dobi.nl/CUVCh0I
http://www.stroim-dom45.ru/NcQuHX9Q
http://smmv.ru/kiAJn9wD


Creation Time	2018-11-22 18:08:00
SHA256:
f6efa5bc3f5ce77994e4ba1b732aa7755a8662ad859af1d6bb090e639afe8330
0de158bba75a5c528583dce3a9f24f2aac037926428583186efd11f87f18ec7e

http://eissaalfahim.com/kU6VV8MuP
http://myhealthbeta.com/G9HRTKdl2
http://klimahavalandirma.com.tr/HnYYr6K
http://mindspeak.co/urBsC2H3s
http://ulukantasarim.com/7VXFx3ZT4


Creation Time	2018-11-22 12:52:00
SHA256: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http://artpowerlist.com/lr8RkOxMe
http://ulukantasarim.com/7VXFx3ZT4	
http://pornbeam.com/HyIVetFd
http://kemahasiswaan.unair.ac.id/CCDTLG18u
http://fepestalozzies.com.br/ESNi33k
	
Creation Time	2018-11-22 07:59:00	
SHA256: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http://volathailand.com/RvC2xxVB
http://ezpullonline.com/mcVOXdeHQ	
http://hellodocumentary.com/hellosouthamerica.com/6QP3PcZbH	
http://mgc.org.au/0aql92n8Wg
http://cosmoservicios.cl/kEUHfPKhg4

Creation Time	2018-11-21 20:54:00
SHA256:
1204daa071f5dc71fd340c6c2d909bbeac7322ffa9800e77ad84e295e0b0df4c
3adbea056f2732b6f7dccaf66b12965c6b5c12be4420167db82f323607381de0

http://pibuilding.com/818adl76
http://www.emrsesp.com/wp-ontent/1oDyu9fr3Z
http://bemnyc.com/dRqCZbI
http://inaczasie.pl/KSZyFNC
http://bridgeventuresllc.com/dX686Jo

Creation Time	2018-11-21 13:25:00
SHA256: 
6d23478ae5f25e89bf8bdb15bee16256dd21509048c5fe0fb33fc163b217f2ab

http://clock.noixun.com/9bBl88KkQJ
http://loei.drr.go.th/wp-content/rrQwQyT
http://solodevelopment.ge/mgWzKAl4
http://chstarkeco.com/VzKuhE0o
http://djlilmic.com/nUDwS3Weo

Creation Time	2018-11-21 13:11:00
SHA256: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http://www.format-ekb.ru/QyBvDdPnAb
http://www.leylison.ru/iHzkOB4
http://www.kupigadget.store/yY4q5KvV0s
http://www.businessintelect.ru/4cTnyVgl
http://www.bibikit.ru/45e8JX2


Creation Time	2018-11-21 09:26:00
SHA256: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http://restu.net/QsVZvAT4Ay
http://e-video.billioncart.in/18mZSjz
http://kavara.in/AIQsipYo
http://inspirefit.net/yfivm09
http://egyptgattours.com/AeM1cf2P


Creation Time	2018-11-21 06:42:00
SHA256:
3eb783e3648c2c3987350832185d2992904a5e4b2ccd95479218c7cd844ef4f1
dff1a63945f604d1a6a3c2abca47730150fe377b214963dc0b0a482612cb469a
22a372adb66a8d45025422ed952d1f68b0a00c93b561b341e105fb28a4d86c81
a14871d7f2f534f235fdeeaf10c5176b13e23e47c6bd292eb7749fa13115ed6a
d96494ca1c4cb8cb287e94b7b5de61f0f88ce9a8155b4da413ce32d75180aba2
4fc620e13440b85bc32604c12eaeea1f38bac18d52aa8f29cb37ef5d0f6bbbe5
db4ce9253c319253a9462b15b21155355b200344dee447b74e959408f77b5585
8365c672c81f2336abdb85d5482ae15a3e9b568d68068fba58f0be3312d4d7d7
a9937c93404627e00bd938233c2e49e8b1ea4a2de9168eb89d6bc8996a433bd4
81e27b769d65d3292518051ee312d7d13ed96989f98d241283d4da3688af60e0
da9c757013adb8f6741b52a2aa76e75d275bb75b57fb5be7b31c7906b1305f06
fc4bc4b1ca36956c197902a069562d087dff468e3dfa9ed5a778dc910a0dfbe7
cc3989c210b264088aafca8c9d0efd31477d179b950c8a795c8ef8817c59f067

http://www.u0039435.cp.regruhosting.ru/rk0iaIrR
http://www.jtbplumbing.co.uk/Bh0wOAE2cz
http://www.eco-spurghi.it/R9vGH7mzXA
http://www.happinessmag.ru/BvS2RtB
http://www.bellaechicc.com/XKT3Hf1M

Creation Time	2018-11-20 20:37:00
XMLDOC
SHA256:
5976681f69b3ef4ffe3725aff76cb41e18e93bf5cc492bf162972683e326e51e
34ddc02e825ffcaca072ae6e76647d2f61900643327e4ed361b3a9eb9f921bd1
52cd6fd44f17ec296d32c6ef108dcdb50fad797a93f20b342dea03f92241d293
cd5249df628197d60ada7c24428ed6e2cea97397725acfb8fcf3a015afb081ec
f7e28870bdfa0906ee62d2eb0a8abdefc97474f238abfc1483d19d19681f2189
2e96288987041a9629f46eb20725b1ffa6f372f6832c07300cbd13cdb8247961
ba242ddceaad0a8f997b33f8bcee6eaeb5d86809e8e98f220fec2c67912acddf
a8cde9546e3b5d6786eadd96e3a6e0841429c04703787058c392b2a6a954f487	
173956c77a76d934c96dab89af514c63bd9e75d2212251c4341c8145e268a786	
0c69f1c4500bfe6ed8ca9c287777433efd9f495abece079f7d01751ffd9063af
b72b4f958e523bb6212fe7cd0923a74d912ae4d343ba9e31d8afea2cd15a4f84
1e411ff623237a70c6aedca11a634bbd354e45dcf67d1381e2fe57823b441dd6
924220e4ecc091e83f57934c001c06ae17131dfa776129b3a70e9d71ccbc9561

http://anora71.uz/aH3i9EM
http://egyptmotours.com/EfRRkqPucD
http://friskyeliquid.com/xspcYyA63
http://m3produtora.com/QOlBVnrL40
http://litsey4.ru/V5XLXxDubY

Creation Time	2018-11-20 17:15:00
XMLDOC
SHA256:

ba4bb4696559dee8fa5f9b65601647006c1ff23a539864f1c33f7f893fd6b916
0ac1ece4aa4aa98f1120d16e0a0a9fb9f0eca060f6138989e5936801a1a63959
7326d000d66fff91245245aaa2962f053524a2cd9231f301fd6f3ef642bd122c
4a786acc02bef34be2015984080e1242f23419ffec448a62fc3f979a2ca3b5a5
3832806ef3078abae83bbc52767f5e6a467e54f229f1bcb480f022840c223404
f753ffc4940863e2e1cd10be00799721b3688f9953bb2ff3062729ae2a06fc32

http://debt-conflict.ru/bDxaonHha
http://lovelysmiley.com/wp-content/uploads/9wdGFeB0N
http://aurokids.ru/gAupBCfcmR
http://adap.davaocity.gov.ph/wp-content/x96yIAJqRk
http://microjobengine.info/vunRmWn

Creation Time	2018-11-20 12:17:00
XMLDOC
SHA256:
a1adb3477d8c39cada1d52a53835c5589a3c8e41bc55a2d46249b54ae994925f
6f5dc83834fcbee5216068a597c76205101b75fb55a83a41dc48396b7e1fa9fa
966a810ec0aee74087cd2235303e4d48027f125e0332d3c227934d2228cad78e
e8e14e0cb9cfd313076b99cd5752fabe01be09188eca3d2bf25f6180a5ffd241
56cba3a545ab3b6c423ad34705d18b86210b81e5fd0064c8c2fadb0b47e91ac0
dac89428b5e33ec3212eacbb2bfd0580c798575cae44f48fd11719209980bd42
befac67d63adbb4d25384298c29ee1a3a86b50be97656b753a5d62293b9e03f4
93f3f83a5b3b35d8a678a7344cd2f639ea2ef5c20f6f7d01100afa33abff1255
604e3a3ce5b684ebcf71a0b00920f41b1015a5370c4b5b0b92e519244dfcca49
e2165efd39118b15ea787b1a7f4e2f66b17fa034fb2bd529b5f2a6090eb6864d
5ad873a4a42d70a8d201954652482d0aa32fda09adb4d7bf12f3174fdd29c091
d6c630e6281747a1a3815e05221055ee300bfa6f788881d0e7af713d197bee44

http://dctamc.com/9DGBT6zPX
http://snb.pinkjacketclients.com/wp-content/uploads/v0JmCi0
http://smmv.ru/RfLKANkpo
http://tidevalet.com/cfDeOfgj
http://c-t.com.au/3Jk2mm4

Creation Time	2018-11-19 17:21:00
XMLDOC
SHA256:
2fb01d93fbff78008f597084e792a0c3d0a675e7d6d5cbe952dd2eb796be9b35
a2ca0688682318db6036a696e1c3a1b6d5a058a951458885105e2cf2cd96e6fd
15df0b4f9a51fff1753c0240e8e5c47c78ad68a017a5870b96c4949314e5700b
4ed27b4710e7912a199f52bfa043b0f2ffe77644228e2e6e347422ec664321be
2d480c9e74417a12a6e407c0ca9a15361544a62328f1bfec3fca5e8a5701cff4
ed642de0c3636ede6a55294dd38d44a91ca69b07f9ce5d11cfbcf5f84b32aa2f
	
http://raidking.com/a0pbDSCu
http://madisonda.com/zofBoIdrX1
http://boxofgiggles.com/JDKBKAac8m
http://carminewarren.com/D7kEg2A3a
http://chefshots.com/21dJDQqroG
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Creation Time	2018-11-23 16:07:00
SHA256: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http://remajaminangbatam.org/QxMrgAM3
http://romodin.com/9dyHIxA
http://cnudst.progresstn.com/9Nf8JiB1
http://eddietravel.marigoldcatba.com/wp-content/plugins/NP
http://montrosecounselingcenter.org/lHw



Creation Time	2018-11-23 10:23:00
SHA256:
0842492265ff119471f0caa69725591341898fde26bf968bbd5471470154cd3b
5d4af8e033d5aadba853c0c16d63b672c521a93d5c595c8efde012e3a3a24424
d6d9ab81998c72aabc275c2a8b90d3c3a9af2f36d83c1d3a80815ddf3731d8fb

http://mahimamedia.com/YxdW87t
http://mandujano.net/NWJ6
http://www.creativeagency.biz/Sa0BVm
http://www.brgsabz.com/sq
http://biogas-bulgaria.efarmbg.com/fiDaiHg


Creation Time	2018-11-23 05:41:00
SHA256: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http://www.vladimirfilin.com/VzBE7R
http://sinonc.cn/uz6
http://nimsnowshera.edu.pk/D
http://forestbooks.cn/wp-admin/sFfyqdF
http://eskrimadecampo.ru/UVAwk

Creation Time	2018-11-21 05:48:00
SHA256:
4ee52cf68b648338d5510ca5951b0ce7e783fcf41f5a5896479cde600f7ff7b7
17056846d61976ce117689ec5044e90879ec0d283931a68222366f44e85571e1
315a6ceb3302cd863729f2d029c64418bf17b004c0a890e2083fb9411407f90d
fb9564df34353f91e34405e1ec21182cd7c8d62111971f0f9b0d5be33d4d6999
06730ea35db4fb3a0f09157be9f68f045d4d37f313778d9524b52265e8968197
d0537a3facfa9044f859a98a8fef9cd07b03bc4c25a61728d0abbfe540c659ae
77b8f49461e96ff53071e8118a67e6f9789679adc06d1a4efae2e3012c42b2bb
eb685732ef55b5841c63a4726a6a26812490a5ffc8ac6fc65960376432334e79
bdfee5734169b10718a40c47fe11db4852486ab88e74636dbc2623a3182c5b1d
6b42472ffaf51923ee5aece8d0710b04ef8a460606acc63707c356bc715cac87
63522fb26ee45b197efac75ef303c8f57c2069bcfaee7a9c637869b9a95696f1
4c3c0b3643c05d03be88bb798fbf55231c444be058ca6e605524f9da7d2cf572
6231eb7d52f1b8f23fd8372ad0573df03bd096ec3d13785690e62f7ef1967d4e
db99c150f4a6bd526d467be1fb4ef2dcfd0b9ad0fa0c7793412c9886706ed000
bb2453ae3acaca969c6759d91fa3877a1ef61518c54aab96122359763e65f7a6
7652d490bcb29a4a9f865ad60597330d72c1f5928c87ca7c56ec32a4d2b5494b
e4f97b0b83df2c3c4a37c5b5fe1cbc6980851517566688f8a03ca539d776c925
745761d3c72bd18e7a93d63e67533b4fb8afde593a64018f622d69e0aa48054d
c85ab833371c26a97d2e4c288d0899fb20d1c836bf4d01ffd3538f76d5301859
9ce9ce1e98bbe0039ee75ea57c984a3734b3e12932cda2ef27608cc83bf315d6
29f8ac1783b6b8f829e39c7840e0592037e603d4176caf2e5be574a444bdb5ef
920d4d9ce6bfbfacdea3e46a123a110c052584b5123fe9a22cb1ac6cf6b81008
c6ff61c740af9ab1977bba70d02fa62c807fc4a886ad93a48121c42dd35b4fbe
63a94da011071b34c4cabde951ff4c4031f61a71296f18cbb2fb685eb93f01df
3d792dcee1336473133178ed7126c1d21bda2b84d087721fb148f74a23e88e2c
d9aeace1693c007d77d5b316adbeaa7c4a4df24870cc7dda4eed4ac267145b18
fc59f3ababd455d474854e5274ed9b972913a2f345aac3ce69fc608fc7e9c31e
0e95112412e7752af048ee97dff45cd23a49341b58d5b168805f0a2dc06ec933
700aefc50bb34ffe4459c661e8a2010409feff01ddca43ada05abe598894305a

http://californiadailyindependent.com/WaH1Jc7
http://sorayasobreidad.com/2LP
http://ozgunirade.com/31qYC
http://ledbest.ru/wp3A4ya
http://rems.tech/BZ1jAeBQ





aa9e35959df0ac8ff9dade82cb182c1874cb9dde3417d291edeab5919fa87cfd

http://bizi-ss.com/Sx
http://www.pleaseyoursoul.com/dKRGkCq
http://efbirbilgisayar.com/46
http://madisonda.com/a


Creation Time 	2018-11-20 12:10:00
SHA256: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://astramedvil.ru/DDTlD
http://eissaalfahim.com/Kk4G
http://ccv.com.uy/pot
http://myhealthbeta.com/Ug5OuOoN
http://translampung.com/AEk


Creation Time 	2018-11-19 19:07:00
XMLDOC
SHA256:

d7c08bec13b8979c93e616ca8df77a05949f078a301a7c21262966d6f82e558b
a7c95fcd2da53fd88ced59433678e3e7693b96acd8465b3caa8671a7ef734a0c
f6de34555a7876ee0ffc633c80f69c9570ed6a54091ec73337b6e82f1b318489
655c96dd7124f7753b1e8883b09bad52579ea80ec3501fb3fbd03898af648220
6fc89e2eb682164b84388feb55df28cc50d8e687fd9a16422543823a25df9479
12834e9dd32a265282b1c81b2dbadf729da386c5097d1615b49c0df423478041
7b5540a249fba413bd79bf3a38a1c89a9ca0c42cd4174362b03b682dac02631a
30517521843f607d8e32d21138eaf2f573195e331c6bfe774483d5ddd5d8d68c
d1185545330753574ad44e41257f1af7288b3d2a046b20f687947a71134ada9a
a7b4498557d3fdbc932b30a28f76c636bc13b0a018b4af9bceff6e3685063822
1231fa7dba90002601f0b354bf3f260cc1be7100e1814145c5c1733cb24dbc66
fdfff9b94fec660dfbca1760a57c2d24a3f919732ad511a8ab825c1e06b2d09f
cea456847df639b63c3321efe53cca4476e0b4c104286cae3004661bfa341cdb
3489c6338c3d47fa15ee66d3f8261902b1f5854919aa8f7dd9abe4100c7de3ad
ca80577adc758630a38e7d8f46a3e9b3ebb2ad325c3125d609c7c664928791b8
0657c890948cfd44536dd73e68762e627df031b6e9dda04b1957e0f3aa2d2902

http://polyblow.com.br/8EPM4dA
http://insumex.com.mx/Xsjzfd
http://astro-icsa.ru/suDm
http://localbusinesspromotion.co.uk/59her
http://ezpullonline.com/I5LPXtPU
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(Port is 80 unless noted)

100.35.142.37
104.136.151.73
105.224.170.204
120.150.97.145:8080
122.165.134.72:443
133.242.208.183:8080
144.76.117.247:8080
159.65.76.245:443
165.227.213.173:8080
173.61.130.241
186.103.149.146:8080
190.210.251.29
190.85.165.34:443
192.155.90.90:7080
198.199.185.25:443
200.42.206.134:8080
200.54.111.170
201.120.89.60:8443
210.2.86.72:8080
210.2.86.94:8080
217.36.215.11:8090
219.94.254.93:8080
23.254.203.51:8080
23.94.123.231:443
47.32.209.86
49.212.135.76:443
5.9.128.163:8080
61.107.76.47:8080
64.168.51.18
69.198.17.20:8080
72.225.197.185
72.48.172.106
74.56.138.57:443
86.150.40.102:50000

Pending

(Port is 80 unless noted)

104.169.46.207
115.71.233.127:443
12.197.97.250
139.162.151.141:8080
140.207.113.106:443
153.122.38.158:443
179.108.106.157
181.49.247.206
182.180.95.163:443
184.59.116.243:8443
185.20.104.238:8080
186.176.165.231:443
190.146.222.35
190.8.246.18
192.173.191.126
192.208.165.34
198.74.58.47:443
200.188.143.154
201.227.216.3:8090
203.122.20.90:443
211.115.111.19:443
217.13.106.160:7080
222.214.218.192:4143
24.190.11.79:7080
24.227.158.234
27.4.100.100:443
45.123.3.54:443
45.47.32.181:443
46.163.76.187:8080
5.230.147.179:8080
5.35.242.34:7080
67.205.149.117:443
67.216.131.134
69.198.17.7:8080
74.91.77.104:990
78.189.140.249:443
80.102.228.132:8090
81.7.10.106:7080
83.136.245.190:8080
83.222.124.62:8080
84.200.106.120:8080
85.105.203.77:443
88.235.54.71:8090
91.126.37.22:7080
95.141.175.240:443
97.93.244.9
98.119.120.11
98.142.208.27:443
98.23.19.218:8080
98.23.69.69:8090

pending

Updated 7/13/18
WARNING - Some links may have been taken down shortly after I reported them to URLHaus.ch because they rock and report everything to ISPs as it is confirmed to be malware. Additionally, this list MAY include doc DL URLS from previous days, see the previous days here to get the full picture: https://pastebin.com/u/jroosen
 
NOTE: The doc DL URLS are in alphabetical order now. The community lists below may contain content I do not have in my list. I am providing them for your benefit in case you want to parse them to be sure.
 
UPDATED (08/31/18): Epoch 1 is back! For several days in a row it has been on the scene!

What is Epoch 1 and Epoch 2?
Epoch 1 and 2 are two distinct chains of payloads that I have been tracking for a couple weeks now. Epoch 2 is currently the larger group of hosts and I think it is the main push of Emotet. Epoch 2 WAS a smaller more rapidly changing version of Emotet that tended to change the hash of the document every 45-60 minutes sometimes has new payloads that fast also. Epoch 1 seems to change payloads every 3-6 hours now and hashes change sometimes as fast as 1 hour. Epoch 1 may now be the development chain but I am not 100% sure what they are up to. Checking either epoch host at a point in time will deliver a document that has payloads that are different than the other epoch. That means epoch 1 may have payloads of a,b,c,d,e and epoch 2 will then have z,y,x,w,v. Sites sometimes move from one epoch to the other but I have never seen the same exact directory go from one epoch to the other. It always a new directory for the change in epoch as far as I have seen.

https://pastebin.com/SrkgJiwj - @James_inthe_box
https://pastebin.com/09wCVXHR - @James_inthe_box
https://pastebin.com/hzT4Sf6Y - @James_inthe_box/@fewatoms
https://pastebin.com/mvMnEbAz - @James_inthe_box
https://pastebin.com/keyCL53H - @pollo290987
https://pastebin.com/6GECSdWw - @pollo290987
https://pastebin.com/8jMBfcEq - @pollo290987
https://pastebin.com/VhG8ZaxC - @ps66uk
https://pastebin.com/9hNMg6QD - @ps66uk
https://pastebin.com/0TxFiAkw - @ps66uk
https://pastebin.com/L1vXTu4d - @executemalware
https://pastebin.com/qpMZA9U0 - @executemalware
https://pastebin.com/LGfdnSwH - @executemalware
https://pastebin.com/urCmJLV1 - @executemalware

https://github.com/saurabhsha/Emotet/tree/master/templates - @SaurabhSha15 Epoch 1 Spam Templates

(OC and combination work)
Doc DL URLs - @James_inthe_box, @unixronin, @abuse_ch, @dms1899, @avman1995, @pancak3lullz, @pollo290987, @malware_traffic, @0xtadavie, @Bitterman59, @devnullnoop, @Bauldini
C2 info - @unixronin, @MalwareTechBlog, @ps66uk, @Techhelplistcom, @pollo290987, @malware_traffic, @0xtadavie, @devnullnoop 
Payloads - @James_inthe_box, @MalwareTechBlog, @ps66uk, @dms1899, @avman1995, @unixronin, @pancak3lullz, @pollo290987, @malware_traffic, @Bitterman59, @devnullnoop, @executemalware, @Bauldini
Spam Templates - @0xtadavie, @SaurabhSha15, @devnullnoop 

Special thanks to @2sec4u, @unixronin, @pollo290987/@ps66uk for creating scripts/servers/infrastructure and helping out with all of this!

Very special thanks to @anyrun_app, @MalwareTechBlog, @unixronin, @hurricanelabs, @KryptosLogic, @abuse_ch/urlhaus.abuse.ch and @Virustotal!

As noted today @ps66uk found that Epoch 1 was focusing on sending Black Friday Coupons. It seemed like Epoch 2 was just focused on banking/invoices to me. Busy holiday time. More notes on Monday. I am seeing some oddities that need more inspection. For now it is what it is and there is a gap in some of the coverage. :)

Epoch 1 C2 run at 13:54 11/23/18 https://app.any.run/tasks/16eb231f-9d30-4b10-bae8-5804b9e34d82

Epoch 2 C2 run at 14:54 11/23/18 https://app.any.run/tasks/60ef9444-5c51-40d1-8181-3510894cbced