URLhaus Database

You are currently viewing the URLhaus database entry for http://kianafrooz.com/trust.myaccount.send.com/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:122169
URL:http://kianafrooz.com/trust.myaccount.send.com/
URL Status:Offline
Host:kianafrooz.com
Date added:2019-02-12 02:32:08 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-12 10:44:03 UTC to noc{at}nrp-network[dot]com)
Takedown time:13 hours, 46 minutes Good
Tags:emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-13eINVOICE_02_13_1911388.docdoc3722e38dfc6445a03e843fad423a8f401c24465817c2c65c7150d459851f9e1en/a
2019-02-12eBILL_20190213694667.docdoc31269fda4663bc5f6bba68346a4d151ac496cede9f82b0efebc3337aeb4d459cVirustotal results 19 / 56 (33.93)
2019-02-12eform_021320199847516.docdoc6b90fbab01749462a83cc4dc452b96c77ca0b975acad0d81d8fee1720ca39d2bVirustotal results 18 / 56 (32.14)
2019-02-12eBILL_02_13_196107458.docdoce9676a11a36d147aac2c5781a8270b45eca2f2509b2c95b2b668d4d1077dce2fVirustotal results 17 / 54 (31.48)
2019-02-12eform_021320196927929.docdoce7fa0b77579a3dc649ebed6943d422820bb519ba316ba5261c07dadced0cd8c3Virustotal results 18 / 55 (32.73)
2019-02-12eBILL_02_13_19620747.docdocdd0ff448256f42d345e5c4c3fc6709f58edf50cef095a2aded59ed9524de4f45Virustotal results 18 / 56 (32.14)
2019-02-12eFILE_201902138136.docdoc48e06f2d44bdc24a9629f5fa8d3369973f2e1924e8e8279f6816424518972057Virustotal results 20 / 56 (35.71)Heodo
2019-02-12eBILL_201902134023.docdoc30d6db8fedcca6feeb2ab6f64a2c0778e0bc3bc47d55f902cb0c047bd66480e3Virustotal results 16 / 54 (29.63)
2019-02-12eBILL_02132019957945.docdoc8e416277ff178c7f4825946d3f57c35b7ec1a15598616b6d9f1fff8acfb64c86n/a
2019-02-12eFile_02_13_193928153.docdocbc4d532da6fa3b8bee4c159e9e96a03b3e9800e938033ed6820076fbaa05603bVirustotal results 17 / 57 (29.82)
2019-02-12eFORM_02_12_198811700.docdoc0dc73d739c5df89ad2ff7f54cd37b53a529d95b766e36ade366aa394d72b4025n/a
2019-02-12eBILL_02_12_1978937.docdoc0c969d5ad8febbf86af5152a0913bc56bab3951f51d15b60726e42d2e3e0bdf5Virustotal results 16 / 54 (29.63)
2019-02-12eform_02_12_1971436.docdoc5fcb69534f967d1724ceb8561472f07c1abd13cb98ea1c8d63009788c27170bfn/a
2019-02-12eform_02_12_190782.docdocac806d78d25581983f1200b8f3d89c233a76c9d87b03ae1d929ea89d0a72edc6Virustotal results 16 / 55 (29.09)
2019-02-12eBill_201902120342861.docdoc2b0e670389e4e92743752e217eb624f285d205bbbb69502201a291680164b8d6Virustotal results 15 / 54 (27.78)Heodo
2019-02-12eBill_02_12_194668.docdocd23c7abd3719769158d6a04f512bdae7273163e74c3e8e165a387842f3430353Virustotal results 15 / 55 (27.27)
2019-02-12eINVOICE_201902122159.docdoc2330590939e55a145dd194bd887164df0dfd62fe01b19b0191bd62e4f4fa8192Virustotal results 14 / 54 (25.93)
2019-02-12eFORM_201902122746304.docdoce5fa58292e2756ae00924b1e5df8a6550e0fd1f185613082e6113cc634bbf48fVirustotal results 14 / 56 (25.00)
2019-02-12eFORM_02_12_198322939.docdocffdf67f0ce47db4d500f197eaf291d2c1d3a9c7077c1c2c65150dac0b23e3db8Virustotal results 15 / 55 (27.27)Heodo
2019-02-12eFile_02_12_19482346.docdoce8e4e5623d3e377465e43a2c41e4dc55f8f42fd7b6d180d35e00e72934234edfVirustotal results 14 / 55 (25.45)
2019-02-12eFORM_02_12_195367958.docdoc9037ce04ef215a748b74614bac6b49ae8112396d666e508a973a06ade1be0ef7Virustotal results 16 / 56 (28.57)
2019-02-12eFile_201902121615635.docdoc0f317e4abf5a7fd99874352c192e1e35714c8150a547d648c261fe705a2aae1fVirustotal results 15 / 55 (27.27)
2019-02-12eform_0212201996454.docdoce8cccb94208d3670e38219b798a6d7a1124428a2bc014609c26d1232a16b21b8Virustotal results 15 / 55 (27.27)Heodo
2019-02-12eInvoice_2019021291745.docdoc4b8b2e718b08ec87e051d268895c1c2c97f0fd960cfa91a069c8b7d2f5dc24c3Virustotal results 16 / 51 (31.37)
2019-02-12eform_021220196491306.docdoccbe11c5f44d374df8f9f671b4668d23a0405da91a7b1215d30e288fc26c6dc07Virustotal results 14 / 56 (25.00)
2019-02-12eFILE_02_12_195149805.docdocd023efd7eb4b52a51534b2191c9953068b1fad7348cfe6320d0353b092195fb0n/a
2019-02-12eFORM_0212201976733.docdoca2dfbc8d9597e7e1eab934a350435c5b1c4d4a1ba1d4571d9db77be823dd7231Virustotal results 14 / 56 (25.00)
2019-02-12eINVOICE_02_12_1932103.docdoc8d4c196e67842e55c560f75097d0dee39e0e9cd4d86ab5d9770e794ac94c2b71Virustotal results 15 / 56 (26.79)Heodo
2019-02-12eBill_021220198604.docdoc62f7aedf583ad718d0230898e895ba7c3d85367981d000b0caed3c527fbf95abVirustotal results 16 / 56 (28.57)Heodo
2019-02-12eBILL_20190212339546.docdocaac4fb4af39506baf7344bc47cb69d019a23fc01ac9e94a64a4e02a7748ef867Virustotal results 12 / 40 (30.00)
2019-02-12eBill_2019021263833.docdoc5ef28cad0d97b33411fc3af948722f6b08624af3acc068fe8a407947bd8c3b02Virustotal results 13 / 55 (23.64)Heodo
2019-02-12eINVOICE_2019021214215.docdoc36eaab2c2a6c7993f6fe9dc820f4d3e7756abc8a863a043d6a8a76bb244808d4Virustotal results 15 / 58 (25.86)
2019-02-12eBILL_02_12_192041817.docdoc74c91cc572b3f52fb3668f9157d85f648dc098f519de630320846335220bbae5Virustotal results 15 / 57 (26.32)