URLhaus Database

You are currently viewing the URLhaus database entry for https://hkwineguild.com/dbeq8kwX4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:10706
URL: https://hkwineguild.com/dbeq8kwX4/
URL Status:Offline
Host: hkwineguild.com
Date added:2018-05-17 15:17:37 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?): Yes (2018-06-11 10:35:55 UTC to abuse{at}siteground[dot]com)
Tags:emotet link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-05-18INV5437912238.docdoc bbc89df919a5ee942cdf94a95b76f04a35d013a846777f1c12e18363a5900d38Virustotal results 16.95% 
2018-05-18INV0355778452200392595.docdoc c1e22159e9a2405afeb3e05a91ef39f2940a0dff016970650a40c08330c5274an/a 
2018-05-18INV37972864628874.docdoc 50745686633d60c13056ec6423ca12f2c42a96ceb10807ff7f2070ad8ec3e284Virustotal results 20.00% 
2018-05-17INV096141528687327.docdoc a73efb9bf60bd3a65c5877b6adf0856c1a2594c55964b8072a6a0c91d605befbVirustotal results 18.64% 
2018-05-17INV5190382443.docdoc 4da1d72ad9f293fec0b4928239f9e0b817e94e8ba94a0dfac4a7a6087f5d37aaVirustotal results 20.34%