URLhaus Database

You are currently viewing the URLhaus database entry for https://coolwinks.app/calendar/pmMmx-qKJ6QdPHqTrWZ65_MvRQWVRXl-sC5/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:178076
URL:https://coolwinks.app/calendar/pmMmx-qKJ6QdPHqTrWZ65_MvRQWVRXl-sC5/
URL Status:Offline
Host:coolwinks.app
Date added:2019-04-15 20:19:10 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@zbetcheckin
Abuse complaint sent (?): Yes (2019-04-15 20:20:03 UTC to abuse{at}unifiedlayer[dot]com)
Takedown time:15 hours, 33 minutes Good
Tags:doc emotet heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-04-16125121307254_Apr_16_2019.docdocbdf2f945cfaa821212c3034f5f0f004f8a4c3e26896d4431bb6ee0503e320edfVirustotal results 15 / 58 (25.86)Heodo
2019-04-16582635276998_Apr_16_2019.docdocc40f3f595365f71600c24ebe5c2fd245bb7584364c4b2f3f294e1dfe675891bcVirustotal results 16 / 58 (27.59)Heodo
2019-04-169231226703_Apr_16_2019.docdoc0c42ff307f9831e057e019051253081abc1001fd290feb13f5467ce2c4ad435aVirustotal results 15 / 57 (26.32)Heodo
2019-04-167465910397_Apr_16_2019.docdoc1073385d94089c725063ce1a488c157293e6aa8cd6574597042ad5d5f9f6004cn/aHeodo
2019-04-1648917768218_Apr_16_2019.docdoccf34076fe15384682ff04d5a15a94d36af4ff3dee94d651c33c4b4c60731ed88Virustotal results 15 / 56 (26.79)Heodo
2019-04-169293386905_Apr_16_2019.jsjse328f1a48cce3e9220c38d847ccea9f81b6135d120bd76b224c4be21405f700eVirustotal results 4 / 55 (7.27)Heodo
2019-04-158676726703_Apr_16_2019.docdoc8cd4e36661364ce87f1ab5d766e5dc204b3087c58acb95765dbfeafcf5f43534Virustotal results 27 / 61 (44.26)Heodo
2019-04-1521825386974_Apr_16_2019.docdocda956cc8f7e31477de3ad6df05f775b0ed58912dcf2f4c427d629e39d4f77394Virustotal results 19 / 58 (32.76)Heodo
2019-04-158066484843_Apr_16_2019.docdoc7a90e8befaf91ce86dc82bf17531ac6f5ea555d3038a4d1df0618977ec6e1b47Virustotal results 19 / 60 (31.67)Heodo
2019-04-153563718568_Apr_15_2019.docdocf8def05c21bfefe7089645b558a8275aac14deab1359003dcf4abdad48613efaVirustotal results 17 / 57 (29.82)Heodo
2019-04-15811537150257_Apr_15_2019.docdoc70d4b462c94fb97f5ce63a8e2b5f50b6d08bb45821dd7ee81eb50ef137c94a8aVirustotal results 18 / 58 (31.03)Heodo