Daily Emotet IoCs and Notes for 09/17/19

All attachments as far as we have seen.

http://86passion.vn/wp-content/uploads/LLC/ztao4snc2zn3icihkub9cssxmmgg_s92vz8fi-83400702426/
http://aboyehia.com/cyj/662206737370605/jwt10s6ekq0tk0d9n7_fsyyu-9448666289950/
http://adinehac.ir/wp-content/f4ak64i8m_5lqmouh-39689247676/
http://airnetinfotech.com/wp-content/ZPOpEjlGQiZZdWq/
http://aivaelectric.com/dup-installer/DOC/rv201ul6ik_b6bvwp-89755135449551/
http://albertmarashistudio.com/3l9t/9KUQTPLJ1XT/ctzm3vgh0hyn9fid9t4i_17jau5-78860309413207/
http://alcam.ch/hochzeit/NGFxaEktFlrfCKu/
http://ametiseclinic.com/wp-admin/esp/IVSLxUtAVwFJPabFSwGayMAtvWhj/
http://arkamp.ir/wp-content/DOC/xmq5hba3qm27ojgozpzh6ou_01atxnvo9y-51238777864/
http://auraco.ca/enlightme.new/DHrXJZaEKCX/
http://ausfinex.com/wp-content/uploads/Document/tsGhqxxzvJcgcnsrBlbZkXxVNz/
http://avaagriculture.com/wp-content/uploads/esp/zksfry69cywyeva869_fcvujc2z6-68884639859/
http://aydin-transfer.biz.tr/wp-admin/css/Scan/wo8urpwi8ilbpu3huezp523x4ay_xb0bjymh-9572246251/
http://banglanews-24.com/wp-content/parts_service/vjeb6w3hw7g6xewibl73rab_3cw6j-72270923519546/
http://bestrip.telkomuniversity.ac.id/wp-admin/lm/duq8g5ilpabc_8tarvuenq-044872730/
http://besttasimacilik.com.tr/wp-content/uploads/34866325758700/eXcmhPRBCu/
http://blog.batalk.fun/wp-includes/20ysu87bbf47731u3fekfgdbwd3_dd3h1f-65441431/
http://blog.digialpha.net/Newspaper/Document/tPSKGPUfE/
http://blog.kobisi.com/wp-includes/Pages/lwhvRUfXazsPIfrpEZxSvMtgM/
http://blog.openthefar.com/wp-admin/lm/x2tr199ftc_3ofxttr4-2148646155932/
http://blog.skinncells.com/wp-admin/283379870662850/JscJJHqQiQJcsHnKqyUbotM/
http://chinapacific.co.nz/wp-includes/65300760429/pePzhQzJwkSF/
http://datasoft-sa.com/wp-content/kcdxzz1rd02o6sj6y_9xiho-41106884826/
http://deleogun.com/paclm/bziuafhvqldwwfaavqunupzofq/
http://democuk.tk/jackpanel/Scan/xFZeztmrOpccx/
http://dewibebaris.com/wp-includes/20896775313534041/6ah5jttgq71_resrzl-08883176/
http://dp4kb.magelangkota.go.id/wp-content/06p3718rkrxzs_g2kh6r8-21436938/
http://duckiesplumbing.com.au/wp-snapshots/DOC/SJhxgbYSjf/
http://dunlopillo.com.vn/wp-content/plugins/advanced-custom-fields-pro/sites/pxf2qxgnujru6o3tf3jmw_93k2o7vf-155676582816/
http://dyingtoachieve.com/t10p/rohl4eo515ei8b4ogccm21kj0o9skc_alqvilskl-743113193059697/
http://emmabeaulieu.com/networka/5s1io75wmblxuwrrw1z3q_797vc1lc3-93490304/
http://emranweb.net/maruf/paclm/y09uvotnanny4_u88r3drsz-96422594/
http://examsnap.io/wp-includes/699852196184872/zkgss3j746ghw_58xewllq-50487111/
http://globaltimesnigerianewsmag.com/wp-content/sites/vMZrAukwUKOexUrXnQxMctasohyUnM/
http://hawk-lines.com/backup/sites/sZYEsnWaux/
http://hisnherunisexsalon.co.in/wp-content/g4030ceag5vn54d_heguyxhq-030808811372/
http://homa-co.ir/kut/LLC/1bwbt9mta0ar3_ysnmnf-09800337319/
http://icerike.com/wp-includes/parts_service/7w8ngwta8987mdap79_uvrx99c2-389346762330400/
http://i-conglomerates.com/8lfx0jn/FILE/SbdnUMybkqDczUjFVe/
http://iewa.sk/wp-admin/parts_service/IlqQtXxoNtkdkiojakcdH/
http://iib123.com/wp-content/IdeltfyWjNcYSVqkuAiE/
http://indiantelevisiongroup.com/wp-content/uploads/paclm/zhIIZiNXiECnQxUUVJFwMxLj/
http://indoes.cloud/PCWkKia/sites/rkkWwzDfNXWPhDCUUYJbj/
http://intellmix.com/terml/zgzevexbn6xt9ovy5it_npxab-70479693822/
http://izeres.ml/css/sites/ptoytsw5ey6u8qz8k61h9c064a4s5_zlsr2d-424736105/
http://joshgeneralremodeling.us/educarni.com/72izopqq_db5m8g-4856039954/
http://jumpman.com.tw/cgi-bin/INC/bl9ggmp9_5yguluyr6a-1949529841857/
http://kisharzoni.ir/ticket_pdf/esp/jxxp1ai5ump_4jl99a-12961913/
http://kkindonesia.com/public/dist/sites/v3osxbxl0_ro2xh9s4cx-5038487472490/
http://levarudevich.ru/wp-includes/esp/MPuqJHEqnnZpfY/
http://luizdroidbr.top/b9xuj/Pages/cNEFzhXjZzLsDODDdXBAhCmx/
http://mfstol.ru/includes/esp/RlswyAwqyArltTxbrUuL/
http://mobiextend.com/new_website/scan/yfquir5sn1saa4_cbgkyi7q-659756898154868/
http://mssewatrust.com/onlinetest/admin/ckeditor/paclm/6yxe3s2dwhgvdj966xfjt2a9w_hfl078o-7601697983699/
http://muaxuanmedia.com/wp-content/ZL2X40DCDPMFW/iiLdOqHhNrkDMTvCesTTANhNjAJMs/
http://nacindia.in/wp-content/lm/umdctpuxqnkpblcxcchuxqqiqttv/
http://natenstedt.nl/esp/MhWYUMBHiXeThth/
http://newsfootball.info/sitegntot/DOC/juhmk52nkcp8mwky4goh5ril_hw4be4y-2392172533/
http://novaworld-novaland.vn/wp-admin/sites/jlrmc2o7md_xfsezbbh1-42773995339368/
http://orderchina.com.vn/wp-content/oukgfgemfkusbmsnstiuqajk23_qe24lw-292586956108/
http://osim-heshbon.co.il/wp-content/INC/jvomtsl6xgzmv3ujubnv6an_l5yypu-6443077366234/
http://parisel.pl/wp/2r8y6ecjs_ac7vkdd-3199965000142/
http://parsafanco.com/wp-includes/LLC/JquDHKGxHWdCOZyCDnOFbqV/
http://pbcenter.home.pl/ML/lm/mdIRvmLUs/
http://pindnews.com/wp-admin/ztgjmtijm408j8g8p776z_snq3q7-469226487160/
http://planologia.com/mail/5at164hbdi7cl0073zhr22pihoi_j2txnlys-961788580607587/
http://profexsystem.com/dist/3WIR6TGGZDN5VDE/FkCKYFtVMfhUpViQapyJifvkVBKCWR/
http://projekthd.com/pub/Document/tvra18kib9ctbfq_34r3u76-7401196692872/
http://purplekushop.com/wp-admin/KZPMDF7RS4E68/v9ntwdgorregage3wwrm66v7c_i1yqqgs-797171856/
http://real-websolutions.nl/images/duEqOmSYcqBIWzgklfhFQsXqont/
http://rebel.ae/wp-content/uploads/sxqzxzxjlma/
http://reborn.arteviral.com/wp-includes/parts_service/l50qk4msol9x6kzj1kjn9y14_igw02r-8349571904534/
http://red.pe/templates/Pages/9yoehld3agzvjhndht_fx2nra4r-956924646978501/
http://revistadaybynight.com.br/sac/LLC/3ssg8guxzm44o77_03jrpr-07333269716821/
http://robertwatton.co.uk/wp-content/LLC/LIdkOlDRFsgnkiiLDfH/
http://rupertsherwood.com/Templates/esp/b207qn1fc3l1lugdtga23zf0o_b178b9ps-936935507/
http://safarigold.com/ebayimages/d6p04w1j7i2fvike7y6xv6_mbmyo-8099768843/
http://safarnavade.ir/wp-admin/LLC/WurQUKCLhrrBzzndHpdtzovqyzoJ/
http://sampling-group.com/local-cgi/471399676748287/WDeWkyucWTghbNkiG/
http://sanabeltours.com/wp-includes/LLC/yGAkXreIrffeapVojetvYuocW/
http://sandkamp.de/_derived/INC/QSoPCmEnuwtStTfqybT/
http://sanko1.co.jp/lp/zQXITvhfhikiRyxdMoWvRtpYTmM/
http://schaye.net/dzs6tqc3x9jg0ijc_twi3m1o-79432464/
http://schwaemmlein.de/dbcj_c8yt7-71421997/esp/kuPBMuomOhyeTvappQrXsiwdgoy/
http://sdorf.com.br/novo/sites/bryxrOHplfQBngBosSxX/
http://service4it.eu/cgi-bin/LLC/bfjvuxxvsncxb6f7e23w_cdd12i2qf-390858955/
http://sestili.it/DEVIL/DOC/APPOciSHyMPaGQtPqOSifHBBcBIWT/
http://simpledomes.com/wp-content/HhXUJQcvDbYFGBPUPeYZwEEQgzpI/
http://sirinadas.com/wp-includes/js/tinymce/plugins/link/Scan/GcplcjpHiOn/
http://slowlane.me/mjd37z39oeme7czhois9ggxyjifvc_1slhznvs-553375313/
http://solivagantfoodie.com/wp-content/sites/b9oksxovgi3ezlssy6zmi_nlih9-9400724385/
http://sonnyelectric.com/ssfm/ty60l5pgisaa_vkgnzq-648414481325695/
http://sozialstationen-stuttgart.de/Aktuell/paclm/dQYsvpRrMOcnmKkxWTpJgRUeIIjr/
http://spiritofbeauty.de/AGBs/DOC/vfh24cc39oo_utqej-98578577745/
http://spitbraaihire.co.za/Scan/DOC/sull3k2no2mgdewgvid63m8dxb2d_35jp7g-70388299/
http://starbolt.eu/wp-includes/Document/jsVezfvZvLhxveUKPnucTLcElhifk/
http://stayfitphysio.ca/wp-content/FILE/cjcGNbjWiBAsCE/
http://strongvietnam.vn/wp-content/njiwbhjxzs4v4043ks_mtvm53a6s7-418887838/
http://studiospa.com.pl/images/DOC/SXiJSWbkZSQBEgIF/
http://suisuncitystorage.com/sitemaps/paclm/2uevn7w8kmgo1ptlv_hybuz-38522455806/
http://sunchipaint.com.vn/wp-admin/Document/dawb84xl_piuu2as-9919296896/
http://sunnypalour.com/wp-admin/parts_service/kpu2zkks9qj0g2k52_47cq8zyvf-14443767084954/
http://tatildomaini.com/admin/wLMpOuMgwShJXsdz/
http://thanhcongsteel.com/mrbsy/parts_service/niUrcANz/
http://thecommunicator.icu/wp-admin/Document/VbzQBQZVHJnxTJ/
http://tiaragroup.es/wp-content/Pages/wwjwne3wvgfj7a4lzojcp_t3yaorwjgd-71381927/
http://toggwyler.ch/css/INC/kGgbjIgbhvvhEFfbZJmvvuWvk/
http://tootco.ir/wp-admin/esp/wh9ij8dj_gyyl825m-12393197934992/
http://treeclap.com/wp-content/vhnebnqecwf84rd0h_f0npmt2-4989243016831/
http://trulykomal.com/trulykomal.com/76502345306739016/HzQDdtdgnxnADtwpmU/
http://tys-yokohama.co.jp/FCKeditor/9525092916798083/t4dudkr9ty2whnr_xq2buif1-35425791/
http://unitypestcontrolandservices.com/wp-admin/175m68h1y33pjjgz87_8wme2ufyby-569836327/
http://unlimit517.co.jp/Taku-tokusenkabe/0807523448/OOZlqukGqjbBZcQRADfbjikhN/
http://urbaniak.waw.pl/Telekom/parts_service/DotwoNQJaGLoRJUPggEeBkTYVYHz/
http://v7gfx.de/20160310duerr0109/LLC/qrBbknnseecObTwT/
http://vaner.com.sg/oV4c/DOC/TnNeCqcAazSDRechLcktfNwEts/
http://vantuwer.sakura.ne.jp/cgi-bin/lm/jOFICYiHnSDRQPxwluoooxFkS/
http://vls-online.de/ab2ffb56648fc08f89197ae37a33a579/DOC/rl7y32tuyiawvbgl_qbkm4-56444485336532/
http://winebiddingthailand.com/img/QBQUlUaWQYJkwfLrUEvTgn/
http://woellhaf-it.de/administrator/1r5qcze348s9znsxa6_2plk6k7o6n-7462539924/
http://www.alertaempresarial.com.br/wp-content/INC/njbgFuxPaoCihCLZuwKHthzVEwidug/
http://www.banglanews-24.com/wp-content/parts_service/vjeb6w3hw7g6xewibl73rab_3cw6j-72270923519546/
http://www.baristaxpress.co.nz/wp-admin/parts_service/SLXONVbshdioBRykWtIMopeFblxLyO/
http://www.cgi.org.ar/web/paclm/ZfzNFnuhdj/
http://www.greenedus.com/wp-admin/INC/xt8k0pmlpur1m6et0k1rxu2uhpvq_kyod1h3ilt-856462386/
http://www.haosanwang.com.tw/wp-admin/parts_service/WnrlrAIEtMJoStdWcCGmuCAwr/
http://www.horizonfunerals.com.au/wp-content/OGVvojNyMCBfoUBITKPzp/
http://www.iloveat.fr/wp-admin/3415296335261/jVxNIOKriaB/
http://www.lamaggiora.it/wp-admin/EthefHjblbolQqV/
http://www.mobiextend.com/new_website/scan/yfquir5sn1saa4_cbgkyi7q-659756898154868/
http://www.nacindia.in/wp-content/lm/UmDCtPUxQNkPBLcxCCHuXqqIqTtv/
http://www.rebel.ae/wp-content/uploads/SXqzXzXJlMA/
http://www.vodavoda.com/dev/DOC/eoWqyCweSNojSA/
http://xn--80abghbpe9aidnhd0a3ntb.xn--p1ai/wp-content/0487311637/IlNhofgPohXe/
http://xn--9y2b19kb1eutan3r1zggxaw2wfxc.net/wp-includes/LLC/tn45s6fnyxcm2pv5d_n900n9khyr-70129461110/
http://xwai.com/images/4ETIITPGOP39Q8B/kwdHAJErSALBnjMv/
https://%D0%B1%D0%B8%D0%BE%D1%8D%D0%BD%D0%B5%D1%80%D0%B3%D0%BE%D1%82%D0%B5%D1%80%D0%B0%D0%BF%D0%B8%D1%8F.%D1%80%D1%84/wp-content/0487311637/IlNhofgPohXe/
https://86passion.vn/wp-content/uploads/LLC/ztao4snc2zn3icihkub9cssxmmgg_s92vz8fi-83400702426/
https://aboyehia.com/cyj/662206737370605/jwt10s6ekq0tk0d9n7_fsyyu-9448666289950/
https://agungwaluyaproperty.com/wp-admin/LLC/kzOjkitXtNwatPvqyTMWdLFqOkDgK/
https://aisect.org/wp-content/PKclPmdnZOe/
https://albertmarashistudio.com/3l9t/9KUQTPLJ1XT/ctzm3vgh0hyn9fid9t4i_17jau5-78860309413207/
https://alkemyteam.com/flotta/mexilbPEotobcsdKISUZlkY/
https://ametiseclinic.com/wp-admin/esp/IVSLxUtAVwFJPabFSwGayMAtvWhj/
https://animex.global/econ/FILE/fratCWAAAtdeoqSmLnaHrpdvlG/
https://aprinciple.pro/wp-admin/Document/ociufvd1qk65wdyz6b5jz3_e48wa55lpj-079163891625/
https://axelinco-fitclub.com/ibo/7383735070465/6vgwwiyvj1v36wwjxi_usdaxdu-9396013305/
https://aydin-transfer.biz.tr/wp-admin/css/Scan/wo8urpwi8ilbpu3huezp523x4ay_xb0bjymh-9572246251/
https://azure-team.com/wp-admin/Scan/jg3cb56figl4f0gd4oplmbtgm_b3a1bh-87659379/
https://bikepointtenerife.com/wp-inclade/sites/608k6k4ecumuct85mgxbdvavkayr_8rcfty-4948052308914/
https://blnautoclub.ro/wp-admin/LLC/yPHOKncKuBeunjIjOOqSFnOYv/
https://blog.batalk.fun/wp-includes/20ysu87bbf47731u3fekfgdbwd3_dd3h1f-65441431/
https://blog.haseemajaz.com/wp-includes/Scan/47q87hzfz9qho7ugop314rtmicja3f_el6i1f1yh-6722041024/
https://blog.kobisi.com/wp-includes/Pages/lwhvRUfXazsPIfrpEZxSvMtgM/
https://blog.lasoy.net/wp-admin/5475486806/CZvGOwXgtYb/
https://blogdautu.vn/wp-content/Document/EvNdEdJuQYCOLokPHnakcR/
https://boom-center.com/wp-includes/Scan/vyxo0f4s20rj6j_z6eim9chah-94152706088/
https://c-ade.com/econ/FILE/fratCWAAAtdeoqSmLnaHrpdvlG/
https://careervsjob.com/wp-content/Document/ybQdCEBsqLJaLcZjqMbWVpeeY/
https://cokhitangiabao.vn/wp-admin/INC/nlryogpp3tctfhgkh_7np1y-803976716/
https://datvensaigon.com/wp-content/themes/esp/v7p8sbu89r2auspkprmysrlqlgd_sque80cmlp-15301913/
https://deleogun.com/paclm/bZIuaFhVQlDwWFAAVqunuPzofQ/
https://dewibebaris.com/wp-includes/20896775313534041/6ah5jttgq71_resrzl-08883176/
https://dialogchelm.pl/old/QqvDHgKeSjoGqclsVYtmUxk/
https://dyingtoachieve.com/t10p/rohl4eo515ei8b4ogccm21kj0o9skc_alqvilskl-743113193059697/
https://emranweb.net/maruf/paclm/y09uvotnanny4_u88r3drsz-96422594/
https://enticapilates.co.uk/cgi-bin/lm/WdMaTHzZfixNcwJWn/
https://etechnepal.com/wp-includes/gusDmcauLNxzTeiI/
https://ethecal.com/wp-admin/sites/pyl6j5aah_eottjcf-539345791934398/
https://globaltimesnigerianewsmag.com/wp-content/sites/vMZrAukwUKOexUrXnQxMctasohyUnM/
https://hanifbaba.com/wp-admin/paclm/nfs60uw2moylv2n_h16zet-801019008940/
https://hierba-buena.com/wp-includes/lm/jcqkURzGltFWRKWnveaFILgebvRF/
https://hippbeta.000webhostapp.com/wp-includes/2a3o32vc_0vgiahna-2842418253/
https://hisnherunisexsalon.co.in/wp-content/g4030ceag5vn54d_heguyxhq-030808811372/
https://indoes.cloud/PCWkKia/sites/rkkWwzDfNXWPhDCUUYJbj/
https://jackalopesoftware.com/iodlm/I5JSH9TB2HA/grkhBmpgQh/
https://jobstudycf.000webhostapp.com/wp-admin/DOC/RheYeykRzUU/
https://joshgeneralremodeling.us/educarni.com/72izopqq_db5m8g-4856039954/
https://kolbecompany.com/pykm/Document/gXnBJXFVkGzxirvmIcONoELHHdrnb/
https://kursusdigitalmarketingmalang.com/wp-admin/esp/UTrSPWYHBOHTcOQwIo/
https://life-consulting.org/wp-includes/parts_service/jLJcFQtSkyLQUazganvdML/
https://luizdroidbr.top/b9xuj/Pages/cNEFzhXjZzLsDODDdXBAhCmx/
https://nanopas.in/wp-content/INC/2k2zdwm720p1tq8m652o22_sk0bco-8475906625/
https://newabidgoods.com/ed/0686436428354/k9yovxqhzhnm2pbaf016m3n8fsei_7vd4i-7792870162071/
https://orderchina.com.vn/wp-content/oukgfgemfkusbmsnstiuqajk23_qe24lw-292586956108/
https://ortambu.net/wp-admin/Pages/BiWZLDNsknPMHNoJ/
https://ostriwin.com/structure_66/INC/btvz96m1ty5wlzjxa86ucvy99_fdzgywo9-7728438180/
https://outletmayorista.cl/tvr/parts_service/LVhytGbjazvlKWvHedv/
https://pklgroup.pl/meta/uTMPayYYZdGnjoSOVDrSHtBdtKMEUi/
https://purplekushop.com/wp-admin/KZPMDF7RS4E68/v9ntwdgorregage3wwrm66v7c_i1yqqgs-797171856/
https://richhouse.com.vn/wp-admin/Document/s1ymuoqg0pp29qdpsocrmz6_7i73obj84b-0263170068612/
https://sachoob.com/wp-snapshots/INC/bfCYCyWu/
https://sazehatv.com/wp-content/FILE/59fj6jgc1po68asuh82_ybmekenm7-32992556/
https://schultecattlequip.com/cgi-bin/Document/QZhIEfqBdvRpYeiUzja/
https://seedopk.org/seedooo/yVUQmyXgBOgbpPb/
https://shopiamproject.com/wp-admin/esp/batxgo75l5fruvq2qi5_x1skbhw-025665802533905/
https://shu.cneee.net/shufastudio/Scan/vv8xo9h9n2dp5af62kx_xdoeip5n-07937890306369/
https://souzaeletronicos.com.br/wordpress/paclm/ouoMXGfiTOX/
https://sp2secenter.com/jangkurang.pajak/sites/vYFxZvuldxCyVpovARmxGWI/
https://standstrongbuilders.co.nz/wp-includes/LLC/m97dxxr0vkk22dkleal_w2cry8b03-234555588746/
https://starbolt.eu/wp-includes/Document/jsVezfvZvLhxveUKPnucTLcElhifk/
https://suisuncitystorage.com/sitemaps/paclm/2uevn7w8kmgo1ptlv_hybuz-38522455806/
https://sunnypalour.com/wp-admin/parts_service/kpu2zkks9qj0g2k52_47cq8zyvf-14443767084954/
https://tatildomaini.com/admin/wLMpOuMgwShJXsdz/
https://techcitybd.xyz/wp-admin/TIIP4483PXYAT0/8svcv2d8v1_ryyehqeg-9659195498/
https://thecommunicator.icu/wp-admin/Document/VbzQBQZVHJnxTJ/
https://thousandideaz.com/wp-admin/IPRQbXMJRUxtMXLFDiUpTMYId/
https://vip.muabannhanh.com/wp-admin/FILE/mkg7rmymjr_ibrls0nrj-411618777016/
https://webuycellular-radio-rf-testers.com/wp-admin/FILE/nbjjiNZCJnfE/
https://whatansu.lt/wp-admin/parts_service/RNQvuAxOM/
https://winebiddingthailand.com/img/QBQUlUaWQYJkwfLrUEvTgn/
https://www.aydin-transfer.biz.tr/wp-admin/css/Scan/wo8urpwi8ilbpu3huezp523x4ay_xb0bjymh-9572246251/
https://www.baristaxpress.co.nz/wp-admin/parts_service/SLXONVbshdioBRykWtIMopeFblxLyO/
https://www.dunlopillo.com.vn/wp-content/plugins/advanced-custom-fields-pro/sites/pxf2qxgnujru6o3tf3jmw_93k2o7vf-155676582816/
https://www.entrevisionarysolutions.com/wp-content/Document/0rufhbbzfmfdmo_o8p8c9q7he-09889590497/
https://www.horizonfunerals.com.au/wp-content/OGVvojNyMCBfoUBITKPzp/
https://www.icerike.com/wp-includes/parts_service/7w8ngwta8987mdap79_uvrx99c2-389346762330400/
https://www.mobiextend.com/New_website/Scan/yfquir5sn1saa4_cbgkyi7q-659756898154868/
https://www.sahabatsablon.com/wellsfargo_secure/paclm/BPyNrngbuOLnIIlFuwjCYjdZZMaWiN/
https://www.studiovista.fr/pedidos/XOKuNypDaKDts/
https://www.traveljembersurabaya.online/wp-admin/lm/VUsTmcNAtYxkNJnwDz/
https://xn--80abghbpe9aidnhd0a3ntb.xn--p1ai/wp-content/0487311637/IlNhofgPohXe/
https://yay.toys/i5146c/Pages/zgcBCTiVODrqwAPxYQoMBEb/

<none>

Creation Time	2019:09:17 10:49:00 (Attachment Only - Docx based - Accept the license agreement)
SHA256:

http://fitchciapara.com/wp-admin/rau3e7/
https://www.internetshoppy.com/wp-includes/971426/
https://blog.medkad.com/wp-admin/e9684/
http://www.sirijayareddypsychologist.com/roawk/0kwsol940/
http://komatireddy.net/wp-content/911968/


Creation Time	2019:09:17 06:17:00 (Attachment Only - Docx based - Accept the license agreement)
SHA256:

https://gpmandiri.com/wp-includes/5u9493/
http://ketabnema.com/sitemap/uenjlbm4074/
https://www.njb-gmbh.com/wp-admin/o2p1fm4237/
https://brkhukuk.com/wp-admin/1xk1qcm0404/
https://interpathlaboratories.com/wp-admin/bn67564/


Creation Time	2019-09-16 19:07:00	(Docx based with embedded JSE  - Accept the license agreement)
SHA256:

https://indieconnectads.com/gcx5ln/5f8704/
https://ragulars.com/CmJb/ziv4/
http://ilyalisi.com/wp-admin/zdq0487/
http://limkon.com/wp-admin/lr41v586/
http://www.behlenjoiner.com/y3sb/e71h7936/
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Creation Time	2019:09:17 10:36:00	(Docx based - Accept the license agreement)
SHA256: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https://www.59055.cn/wp-content/f7c18_onqapey8-49048/
https://www.xinlou.info/wp-content/zomusjj_rgsps3-791960/
https://larissalinhares.com.br/wp-admin/ttzTQwatYY/
https://toptarotist.nl/cgi-bin/r1y59l_283xx-97329804/
http://www.robotechcity.com/wp-content/nyCCqximrj/


Creation Time	2019:09:17 06:08:00	(Docx based - Accept the license agreement)
SHA256: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http://maceju.com/blog/wp-content/uploads/ke35rmm8a_lks5g8-82/
https://maymaychihai.com/wp-admin/MgBWkjXP/
http://jannahqu.org/wp-content/c72aexcrys_zuuy0kvr6r-8372/
http://szmoldparts.com/wp-admin/nHqceUHmJ/
http://nomadztruck.com/wp-content/uploads/SfwpziJD/

Creation Time	2019-09-16 20:53:00	(Docx based - Accept the license agreement)
SHA256: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https://www.dentalsearchsolutions.com/wp-admin/AjCJSljig/
https://keqiang.pro/loading/bod5dh_xwsv6or-811/
https://playasrivieramaya.com/wp-admin/VVGGRvJF/
http://alldc.pw/wp-includes/widgets/cpw5gj9g_ikzzx3-381928/
http://dywanypers.pl/wp-admin/RUYqcQcEy/
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Creation Time	2019:09:17 11:04:00 (Attachment Only - Docx based - Accept the license agreement)
SHA256:

http://makanaliabadian.ir/wp-content/ILxeWZiMh/
http://ekerisiltihaliyikama.com/wp-includes/jchLZLZU/
http://nsfund.mn/wdlpadgc/lazgf30-04pq578az-8982426640/
http://shejipxw.com/wp-content/azFBYGxY/
https://www.ekonkarserai.com/be/0xid6p7jzb-fahpb-4344/


Creation Time	2019:09:17 06:25:00 (Attachment Only - Docx based - Accept the license agreement)
SHA256:

http://easy-service.org/wp-admin/1sgykag18f-cxaj4g00-2900947687/
https://ngomavibe.co.ke/wp-content/grYIdjIGP/
http://jannatkhah.ir/wp-admin/7yjjvfz-tifxzx0q-915509309/
https://alcaido.com/7d2dem/4a9-ab57k-3488062954/
http://7dot.cn/wp-includes/5zfz7-ga1r8fg-0657/
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109.104.79.48:8080
109.169.86.13:8080
123.168.4.66:22
125.99.61.162:7080
138.68.106.4:7080
143.0.245.169:8080
149.62.173.247:8080
151.80.142.33:80
159.203.204.126:8080
159.65.241.220:8080
170.247.122.37:8080
178.79.163.131:8080
179.62.18.56:443
181.188.149.134:80
181.36.42.205:443
181.39.134.122:80
181.48.174.242:80
183.82.97.25:80
183.87.87.73:80
185.86.148.222:8080
186.83.133.253:8080
187.144.227.2:7080
187.155.233.46:443
187.188.166.192:80
187.242.204.142:80
190.1.37.125:443
190.117.206.153:443
190.19.42.131:80
190.230.60.129:80
196.6.112.70:443
200.21.90.6:8080
200.57.102.71:8443
200.58.171.51:80
200.80.198.34:80
201.219.183.243:443
203.25.159.3:8080
213.120.104.180:50000
217.113.27.158:443
217.199.175.216:8080
23.92.22.225:7080
37.59.1.74:8080
43.229.62.186:8080
46.21.105.59:8080
46.249.204.99:8080
46.29.183.211:8080
5.77.13.70:80
62.210.142.58:8080
62.75.143.100:7080
69.163.33.82:8080
72.47.248.48:8080
77.122.183.203:8080
77.245.101.134:8080
79.143.182.254:8080
80.85.87.122:8080
81.169.140.14:443
83.29.180.97:8080
86.42.166.147:80
88.250.223.190:8080
89.188.124.145:443
90.69.208.50:7080
91.205.215.57:7080
91.83.93.124:7080

	
104.236.185.25:8080
31.31.78.203:8080
45.55.82.2:8080

66.228.32.31:443
198.50.170.27:8080
216.98.148.157:8080

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAOzoTryw1r9RxRJPFKalO4+q7JaDZWSB KZlEc22H6ITuE06tvJspue42TF1yk8xN+1bqW++QeV6Clm1uRswA/qoao/6p4eN0 h4zIO8PEaJ0C/9EO4cx9yfRLlVpjdEkP0QIDAQAB

104.131.11.150:8080
104.236.246.93:8080
117.197.124.36:443
125.99.106.226:80
136.243.177.26:8080
138.201.140.110:8080
142.44.162.209:8080
144.139.247.220:80
149.202.153.252:8080
152.169.236.172:80
159.65.25.128:8080
162.243.125.212:8080
169.239.182.217:8080
173.212.203.26:8080
175.100.138.82:22
177.246.193.139:20
178.62.37.188:443
178.79.161.166:443
179.12.170.88:8080
179.32.19.219:22
182.176.106.43:995
182.176.132.213:8090
182.76.6.2:8080
185.94.252.13:443
186.4.172.5:443
186.4.172.5:8080
188.166.253.46:8080
189.209.217.49:80
190.145.67.134:8090
190.186.203.55:80
198.199.88.162:8080
201.212.57.109:80
201.250.11.236:50000
206.189.98.125:8080
211.63.71.72:8080
212.71.234.16:8080
217.160.182.191:8080
222.214.218.192:8080
31.12.67.62:7080
31.172.240.91:8080
37.157.194.134:443
37.208.39.59:7080
41.220.119.246:80
45.123.3.54:443
45.33.49.124:443
46.105.131.87:80
47.41.213.2:22
62.75.187.192:8080
64.13.225.150:8080
75.127.14.170:8080
78.24.219.147:8080
85.104.59.244:20
86.98.25.30:53
87.106.136.232:8080
87.106.139.101:8080
87.230.19.21:8080
88.156.97.210:80
91.205.215.66:8080
91.83.93.103:7080
92.222.125.16:7080
92.222.216.44:8080
92.51.129.249:4143
94.205.247.10:80
95.128.43.213:8080

185.187.198.4:8080
198.58.114.91:8080
91.205.215.10:7080
	

46.105.131.69:443
176.31.200.130:8080
104.131.58.132:8080

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhALk+KlHgOKXm9eDkWu2yN9lanjwOm6W2 PV0tgr4msNVby2pOJ6S1MZQnQwxl7y6WWzT4kveAQhLmW8JB2M2PDOxZOgVMJH2C AtkVW1p/P9jNJWVvjK9SmrbLdIeiKNtRfQIDAQAB

139.59.242.76:8080
149.202.153.251:8080
159.69.211.211:7080
176.58.93.123:8080
181.230.126.152:8090
190.10.194.42:8080
190.104.64.197:443
190.13.146.47:443
190.171.105.158:7080
190.55.39.215:80
190.55.86.138:8443
190.92.103.7:80
192.241.175.184:8080
200.82.147.93:7080
201.113.23.175:443
203.150.19.63:443
216.154.222.52:7080
5.9.128.163:8080
69.164.216.124:8080
93.78.205.196:443

41.185.29.128:8080
94.177.253.126:80
	

178.32.255.133:443
198.46.150.196:7080

MHwwDQYJKoZIhvcNAQEBBQADawAwaAJhAM426uN11n2LZDk/JiS93WIWG7fGCQmP 4h5yIJUxJwrjwtGVexCelD2WKrDw9sa/xKwmQKk3b2fUhwnHXjoSpR7pLaDo7pEc iJB5y6hjbPyrSfL3Fxu74M2SAS0Arj3uAQIDAQAB

WARNING - Some links may have been taken down shortly after I reported them to URLHaus.abuse.ch because they rock and report everything to ISPs as it
is confirmed to be malware. Additionally, this list MAY include doc DL URLS from previous days, see the previous days here to get the full picture:
https://pastebin.com/u/jroosen
 
NOTE: The doc DL URLS are in alphabetical order now. The community lists below may contain content I do not have in my list.
I am providing them for your benefit in case you want to parse them to be sure.

(09/17/19)
With the find of Epoch 3 today that split from Epoch 1, this section will be rewritten to reflect these changes shortly.

(sorry if we miss anybody, make sure to send it to @cryptolaemus1 in your tweet and we will try to include it!)

Combination work of the Cryptolaemus Team - https://paste.cryptolaemus.com/about/ and/or specifically the following:

Doc DL URLs - @devnullnoop, @p5yb34m, @malware_traffic, @dms1899, @Paladin3161

C2 info/RSA Keys - @devnullnoop, @MalwareTechBlog, @lazyactivist192, @VK_Intel, @Paladin3161

Payloads - @devnullnoop, @MalwareTechBlog, @lazyactivist192, @p5yb34m, @malware_traffic, @Paladin3161

Spam Templates - 

Special thanks to @devnullnoop, @2sec4u, @unixronin, @pollo290987, @ps66uk for creating scripts/servers/infrastructure and 
helping out with this!

Very special thanks to @capesandbox, @bigmacjpg and @decalage2 of the ViperMonkey Project https://github.com/decalage2/ViperMonkey , 
@digitalocean, @mploessel, @anyrun_app, @MalwareTechBlog, @unixronin, @hurricanelabs, @KryptosLogic, @abuse_ch/urlhaus.abuse.ch, 
@urlscanio, @BlackLotusLabs, @TrendMicro and @Virustotal for providing services/software no charge to this cause!

Today's update is brought to you by @ps66uk and @Jroosen. We decided to tag team because I had some dayjob stuff. Most of this 
work was done by @ps66uk late into his night. Thank you to him!!

The big news today was the E3 split from E1.
https://pastebin.com/C6JHr9FT

I wanted to make this a more robust report but unfortunately I lost connectivity
to my ISP and cellular doesn't cut it. Therefore today is going to be sparse until I can do more tomorrow. 

General News: 

More confirmations of Emotet being really back and some big names blogging about it.
Some interesting things to note:
https://twitter.com/bigmacjpg/status/1174077583522193408?s=20 - @bigmacjpg
https://isc.sans.edu/diary/rss/25330 - @malware_traffic's blog for ISC
https://blog.talosintelligence.com/2019/09/emotet-is-back-after-summer-break.html - @TalosSecurity


Email Template Report:

I am still not getting anything that is Emotet related but I did get some reply chain qbot messages which was strange.

Still seeing a lot of reply templates out there and E1 and presumably E3 were both doing attachment only. E2
still is doing links.

Link Regex Report:
 
Tommorow

Payloads Report:

Tomorrow


C2 Report: 

Tomorrow



Closing:

Seems link everything including my dayjob and my ISP are trying to distract me from posting these but fortunately because of the 
other members on the team, enough was done to get this out to you tonight. We hope to update you more as we can!

TT

E1
https://capesandbox.com/analysis/93/


E2
https://capesandbox.com/analysis/96/


E3
https://capesandbox.com/analysis/94/