diff --git a/2019/2019.01.18.WIRTE_Group_attacking_the_Middle_East/README.md b/2019/2019.01.18.WIRTE_Group_attacking_the_Middle_East/README.md
new file mode 100644
index 0000000..9da0161
--- /dev/null
+++ b/2019/2019.01.18.WIRTE_Group_attacking_the_Middle_East/README.md
@@ -0,0 +1,14 @@
+| IOC                                                              | Tipo    |
+|:-----------------------------------------------------------------|:----:   |
+| 617bbc71e5f0a645cbb8eeb6d4a1ece96ba0860c8ab5deda6a795e6ad244607a | hash    |
+| 4f5d633604b8a3cceb7d582bab640d47e8a5898458c5c2f0e28adcdf01aabf33 | hash    |
+| 3d4a9466e9428ccb1cde05336f5366b29c7e5ae454ddaa4aa28c75c504c13d96 | hash    |
+| b906f3c19c19e1b20b2d0Obfb82b5453d5386d63b4db901ecade0f33dd38326a | hash    |
+| b4c20b56059a6c6762b4c99d04eb9177cb0a4707c58ef575817fb8b702f162aa | hash    |
+| 1910f5ddbOfc0438a3e2a553c97559557898e6310bf7e37b13c13013fd66ea75 | Hash    |
+| abd4bc87ed7cea9e0b430dddd698849ecf0f44b5b791410c748e58ffbf64dfba | hash    |
+| 7195a31fa1ae5fcf5a5a508a5785444d4862d6f07e3bb61fc9925fecfe101128 | hash    |
+| micorsoft.store                                                  | dominio |
+| office365-update.co                                              | dominio |
+| 149.28.14.103                                                    | ip      |
+| 185.86.79.243                                                    | ip      |
\ No newline at end of file
diff --git a/2019/2019.01.18.WIRTE_Group_attacking_the_Middle_East/[Lab52] WIRTE Group attacking the Middle East.pdf b/2019/2019.01.18.WIRTE_Group_attacking_the_Middle_East/[Lab52] WIRTE Group attacking the Middle East.pdf
new file mode 100644
index 0000000..dd47a7d
Binary files /dev/null and b/2019/2019.01.18.WIRTE_Group_attacking_the_Middle_East/[Lab52] WIRTE Group attacking the Middle East.pdf differ