diff --git a/dreamjob/iocs b/dreamjob/iocs
new file mode 100644
index 0000000..5d717d5
--- /dev/null
+++ b/dreamjob/iocs
@@ -0,0 +1,22 @@
+BURNBOOK variants
+7b4cb382b364389c3bd1f4736411de17ceb213a7792733ae5dd90c8b01b4191f
+ec5d14ca011ba8c12f4d51b0d463cf51051feaf1655c7f709dce3ffa625dfcf6
+083d4a4ef6267c9a0ab57f1e5a2ed45ff67a0b4db83bbd43563458a223781120
+
+MISTPEN variants
+e3e0a87e18de05c4abb95fc21f22d6c9c367eb207dbbf2dd092673656caf7661
+f5873ecd60390e7b86db5ddaf158ed201b386be26ad80af8a7da3576446520b8
+aefc12b500b58fbc09ebbf34fe64b34cb32a27513478f4769447280ad23af4d2
+0fdd97a597380498f6b2d491f8f50da8f903def4ea6e624b89757456c287f92d
+
+wordpad.dll.mui
+4eeec453e42c2898e2e9870bbee273834aeb8cdde8c826c036f9a7d0b568a25d
+
+cseabrahamlincoln-my[.]sharepoint[.]com
+aerm-my.sharepoint[.]com
+alex2moe-my[.]sharepoint[.]com/
+diakoffice-my[.]sharepoint[.]com
+isiswauitmedu-my.sharepoint[.]com
+https[:]//tours-albatros[.]es/wp-content/plugins/soliloquy-lite/includes/global/skin[.]php
+https[:]//kutahyasmmmo[.]org/wp-content/mu-plugins/natro/external_plugins/easy-wp-smtp/easy-wp-smtp-menu[.]php
+https[:]//coralsunmarine[.]com/wp-content/themes/flatsome/inc/functions/function-hand[.]php