URLhaus Database

You are currently viewing the URLhaus database entry for http://52.15.227.66/DE_de/MGDEZR5274786/Scan/FORM/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:133354
URL: http://52.15.227.66/DE_de/MGDEZR5274786/Scan/FORM/
URL Status:Offline
Host: 52.15.227.66
Date added:2019-02-18 14:20:16 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-18 14:22:10 UTC to abuse{at}amazonaws[dot]com)
Takedown time:8 hours, 26 minutes Good (down since 2019-02-18 22:48:56 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-1825958338104.docdoc 8522b822e93f7750895192ecc2744c9d57cbaa2092a49995c2436e20a4becf82n/aHeodo
2019-02-18N6352038095970239-19.docdoc fd9c717c8349d58257717d05a764b81b81de8c6d475267a1659b065d74bc8e57n/aHeodo
2019-02-18CS93519437504736186.docdoc 2cc2fbcac3c4262c49e3ad49903d4e9ebc5fbaaf9a2ad65ff53f808380b70a12n/aHeodo
2019-02-1887010658881112678.docdoc 0f25037f951fd8f0f1c2f4b94ec84d3aa8daa3f7d5774056136769ecb800dc6eVirustotal results 32.08%
2019-02-1836479890355314757_022019.docdoc 915328625c1a42adeb1bd8c6305d4b93a2a3f652fc635f31f21555aa5d003a17n/aHeodo
2019-02-18LPEO3054380630964-19.docdoc 94d5bfa9a461d2a11cc9e56b38febd9c3073cf66098db078fa000995754d09f5Virustotal results 29.63%Heodo
2019-02-18YP0777955363084-19.docdoc 069185a0da074e0ece155c5cda364e5092b2573131fdc2c95002b18c44937a1dn/aHeodo
2019-02-1856698093487669301.docdoc 51f8683c6eed0994818e4c409a4208c0885edcb4815e85f7a0804d14de46cb88Virustotal results 27.78%
2019-02-180881523932194.docdoc 2ee653e0f34bbcf45c9ffa11d530ee6428d284183f0ba10d8f70f1cb370e0d5en/aHeodo
2019-02-18Z52497931638-19.docdoc e6c61d411dabfb3a2abd81ea36cd40138c8c48a18b832580ac6d5d60c2366a82Virustotal results 29.63%Heodo
2019-02-18AAWV139662408104928.docdoc a27a49dcf93b29865290b7e3301bec0cd3210158dc8f1521c6ab7c370c1b7e5aVirustotal results 14.04%
2019-02-18OTPD59854312030_022019.docdoc 923895d1e2d057846792929ae2ff2e9925b91b2c908693347308e8423c48e642Virustotal results 16.67%Heodo
2019-02-18W47794711121196.docdoc 4be4a46ef25e71de87371345da22d043385a72a479adf2ed56326cd69b2d500dVirustotal results 20.75%Heodo
2019-02-18GG05504582395336_022019.docdoc b047d63eaabc2cf33fd6bf7a49d0139297f187031731e53e08211e097e512ee1Virustotal results 13.21%Heodo
2019-02-18GGUI354596500407.docdoc a8828feed177a0befa7ece8b0117a4353ecbcedeabb956b64d440c3722e1b314Virustotal results 15.09%
2019-02-18XOYW54773923437813.docdoc c312058ec1d7c3f314a94b6e0afac2f384460cbb76a78c573ce94ae87aeda5f1Virustotal results 17.24%Heodo
2019-02-184789456332_022019.docdoc fe38b34fcf9a39f3f5e382c53148a210c63f45d5185f6f353390f9d21bb12d8bVirustotal results 13.56%Heodo
2019-02-18FPU04225395166-19.docdoc 10c67c350aeaaec9a1de095dfb31aac0fc72afab36f9e8390005a5ba4748d2b1Virustotal results 14.04%Heodo