URLhaus Database

You are currently viewing the URLhaus database entry for http://maryngunjiri.co.ke/Telekom/Rechnungen/012019/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:122423
URL: http://maryngunjiri.co.ke/Telekom/Rechnungen/012019/
URL Status:Offline
Host: maryngunjiri.co.ke
Date added:2019-02-12 11:58:59 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Status unknown
AdGuard :Not blocked
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-12 12:00:14 UTC to abuse{at}hetzner[dot]de)
Takedown time:3 hours, 48 minutes Good (down since 2019-02-12 15:49:03 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-12JAN2019rechnung.docdoc e8cccb94208d3670e38219b798a6d7a1124428a2bc014609c26d1232a16b21b8Virustotal results 27.27%Heodo
2019-02-12rechnung.docdoc 4b8b2e718b08ec87e051d268895c1c2c97f0fd960cfa91a069c8b7d2f5dc24c3Virustotal results 31.37%
2019-02-12JAN2019_rechnung.docdoc cbe11c5f44d374df8f9f671b4668d23a0405da91a7b1215d30e288fc26c6dc07Virustotal results 25.00%Heodo
2019-02-12rechnung_01_2019.docdoc a2dfbc8d9597e7e1eab934a350435c5b1c4d4a1ba1d4571d9db77be823dd7231Virustotal results 25.00%
2019-02-12rechnung.docdoc 8beec0df1710604330dccbe373a36caab18e68f67f2cdbe892392e6fdb1341b1Virustotal results 27.27%Heodo
2019-02-122019JAN_rechnung.docdoc 3440a1a84cd06de89e87040a67b01df861985be6d3a77f9795ce1807710a8431Virustotal results 28.57%Heodo
2019-02-12rechnung.docdoc a8229ad9e1fc18a7b1b9e0757c3bb6e4cf590d639e822b7d8396053927cdb7c2Virustotal results 25.86%Heodo