URLhaus Database

You are currently viewing the URLhaus database entry for http://adizventuresgh.com/Telekom/Transaktion/012019/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:122408
URL: http://adizventuresgh.com/Telekom/Transaktion/012019/
URL Status:Offline
Host: adizventuresgh.com
Date added:2019-02-12 11:57:55 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Status unknown
AdGuard :Not blocked
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-12 11:58:18 UTC to abuse{at}servercentral[dot]com)
Takedown time:8 hours, 35 minutes Good (down since 2019-02-12 20:33:20 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-122019_01_rechnung.docdoc bc4d532da6fa3b8bee4c159e9e96a03b3e9800e938033ed6820076fbaa05603bVirustotal results 29.82%
2019-02-12rechnung.docdoc 0c969d5ad8febbf86af5152a0913bc56bab3951f51d15b60726e42d2e3e0bdf5Virustotal results 29.63%Heodo
2019-02-12JAN2019_rechnung.docdoc 5fcb69534f967d1724ceb8561472f07c1abd13cb98ea1c8d63009788c27170bfn/aHeodo
2019-02-12JAN2019rechnung.docdoc 6e133fba8492978c68d2157f4eabc23643a0eef9d8dd2aa2a26e60d3ebf847efVirustotal results 29.09%
2019-02-122019_01rechnung.docdoc 558f43491473de9a3b553cb99ecbc26f670d768f637291d3873029862f1bf79cVirustotal results 27.27%Heodo
2019-02-122019_01rechnung.docdoc d23c7abd3719769158d6a04f512bdae7273163e74c3e8e165a387842f3430353Virustotal results 27.27%Heodo
2019-02-12JAN2019_rechnung.docdoc 01a5f6ecb789da2ffa5311b070f2daf717a22cb5e6334a43fb9aeec39d69b55cVirustotal results 25.45%
2019-02-12JAN2019_rechnung.docdoc e5fa58292e2756ae00924b1e5df8a6550e0fd1f185613082e6113cc634bbf48fVirustotal results 25.00%Heodo
2019-02-122019_01rechnung.docdoc ffdf67f0ce47db4d500f197eaf291d2c1d3a9c7077c1c2c65150dac0b23e3db8Virustotal results 27.27%Heodo
2019-02-122019JAN_rechnung.docdoc e8e4e5623d3e377465e43a2c41e4dc55f8f42fd7b6d180d35e00e72934234edfVirustotal results 25.45%Heodo
2019-02-122019JAN_rechnung.docdoc 9037ce04ef215a748b74614bac6b49ae8112396d666e508a973a06ade1be0ef7Virustotal results 28.57%Heodo
2019-02-12JAN2019_rechnung.docdoc 3b4c9ba7c1a39a107b6bbd84bfd1d7b91fb6b564c90698c78a646b1c682d5441Virustotal results 24.07%Heodo
2019-02-12rechnung_01_2019.docdoc 0f317e4abf5a7fd99874352c192e1e35714c8150a547d648c261fe705a2aae1fVirustotal results 27.27%Heodo
2019-02-12JAN2019rechnung.docdoc e8cccb94208d3670e38219b798a6d7a1124428a2bc014609c26d1232a16b21b8Virustotal results 27.27%Heodo
2019-02-12JAN2019rechnung.docdoc 4b8b2e718b08ec87e051d268895c1c2c97f0fd960cfa91a069c8b7d2f5dc24c3Virustotal results 31.37%
2019-02-122019_01rechnung.docdoc 10b21a4e9c2b68e82bad16cc714b0299959fde08793c94cf82bc77056d105676Virustotal results 26.79%Heodo
2019-02-122019_01_rechnung.docdoc cbe11c5f44d374df8f9f671b4668d23a0405da91a7b1215d30e288fc26c6dc07Virustotal results 25.93%Heodo
2019-02-122019_01_rechnung.docdoc 8d4c196e67842e55c560f75097d0dee39e0e9cd4d86ab5d9770e794ac94c2b71Virustotal results 26.79%Heodo
2019-02-122019JAN_rechnung.docdoc 62f7aedf583ad718d0230898e895ba7c3d85367981d000b0caed3c527fbf95abVirustotal results 28.57%Heodo
2019-02-122019_01_rechnung.docdoc 50064c2b9346c1733dcfee5c8e27d9b62d2b17e1fe2d31f6e6b07635166aba85n/a
2019-02-122019_01rechnung.docdoc 3440a1a84cd06de89e87040a67b01df861985be6d3a77f9795ce1807710a8431Virustotal results 28.57%Heodo
2019-02-12rechnung.docdoc a8229ad9e1fc18a7b1b9e0757c3bb6e4cf590d639e822b7d8396053927cdb7c2Virustotal results 25.86%Heodo