URLhaus Database

You are currently viewing the URLhaus database entry for http://urielheldcremations.co.za/gkuzmjm/INC/cdxab0y5_duqaj-553943998306/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:190227
URL: http://urielheldcremations.co.za/gkuzmjm/INC/cdxab0y5_duqaj-553943998306/
URL Status:Offline
Host: urielheldcremations.co.za
Date added:2019-05-03 12:21:07 UTC
Last online:2019-05-06 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-03 12:22:06 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:2 days, 19 hours, 15 minutes Poor (down since 2019-05-06 07:37:40 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-04Document_808397849054US_May_04_2019.docdoc 9547c3f40f790fab370c5620245c7736282c4931b82100c519746d8f3b072bd8Virustotal results 33.33% Heodo
2019-05-04INC_24785454658US_May_04_2019.docdoc df4a1ac757ed8c6c3ed5d16d933c168b3f0093088545af5fb4abc3787e802dd1n/a Heodo
2019-05-04Document_3755499200US_May_04_2019.docdoc e46ab44563f129dfaae10e440d99832bcc0058052c2f8452d4e22f76a86619f9Virustotal results 33.33% Heodo
2019-05-04FILE_81374522836US_May_04_2019.docdoc d58c1fce018c99965fb2c06ef7c4c3e92be7290f9338741e652b99394eaf8d19n/a Heodo
2019-05-04LLC_613152075142US_May_04_2019.docdoc 16dda94b6ed509e6779ee8358929dfe12a3ee370f7e08d616d50dc4f8b3b1b95Virustotal results 33.33% Heodo
2019-05-04INC_6286060002US_May_04_2019.docdoc 5354f08d420e5f3b9e57955862ebe8414beccf3871d49e4283ad1a37a5757f8dn/a Heodo
2019-05-04LLC_21783733407US_May_04_2019.docdoc 321e1dfdb20d4f1a378472a4b3055a9c98804173e5e0c362039c3a118ab8e24bVirustotal results 32.79% Heodo
2019-05-04Document_94691283781US_May_04_2019.docdoc 4892a2e03debcdba92a46545c49d13db8419286aeeb49776bf91e59ed04b7293Virustotal results 33.33% 
2019-05-04LLC_885359581376US_May_04_2019.docdoc e0de872319d3b08cb7322884af7dac8f10632fec564862c9c6364ff2c01a07bdn/a Heodo
2019-05-04INC_0381042685US_May_04_2019.docdoc accfa4d42e2e8e492befa7c7e3ca9f268199e896ea641ddd8f0cd11b7f4710e4Virustotal results 32.79% 
2019-05-03FILE_176826140307US_May_04_2019.docdoc d94ff5aadd33871bf10b2316e3d14e19520506724771f95749210248b7931effVirustotal results 32.08% 
2019-05-03SCAN_145293617526US_May_04_2019.docdoc ce0dd149d783089c8567d59c766017c31a84863a4bed4db476786851cf827943Virustotal results 33.33% Heodo
2019-05-03Document_60048522166US_May_04_2019.docdoc ee59a77366fe8ef478b14b5d71fa3037bf7179d849c2b797cb3b43d3a65ef8adVirustotal results 33.33% Heodo
2019-05-03SCAN_2686181182US_May_04_2019.docdoc eeec0046cd334722d51b9db31e8c18d1d6ace4246c790bbbc311d553c2f3ddd4Virustotal results 33.90%Heodo
2019-05-03FILE_645408240166US_May_03_2019.docdoc 9f00e70566d4c513207f676149a70437674345f52f057b83af8553fb8b7ece4aVirustotal results 26.67% Heodo
2019-05-03INC_376872367940US_May_03_2019.docdoc 0731dac1d684fd9c6150d9d0c20e52073cdf8b9a8a2afbe06578f553c315bc86n/a Heodo
2019-05-03FILE_92140494585US_May_03_2019.docdoc 89f70f1ea8bb56015eb8427c1900918320be4468fdd858cd59c410ff5f6fc1f2Virustotal results 28.33% Heodo
2019-05-03Document_503210557370US_May_03_2019.docdoc eced86aad030e270ce2f4eef6d81c98fa138029ec5bc30f90d9466120bc53cdcVirustotal results 26.67% Heodo
2019-05-03SCAN_009038261200US_May_03_2019.docdoc 47ff1922c8bf5e9e4944d5d3703858836ae1acbb1387c2cf3280abfe1eb20632Virustotal results 28.33% Heodo
2019-05-03FILE_64513562206US_May_03_2019.docdoc 47d5b493497550fbfa7b76608e82b40b7432ec6fd0efd5b162d1901a189133f9Virustotal results 29.51% Heodo
2019-05-03INC_753289844531US_May_03_2019.docdoc 6acdb5b39fdd7d5976ee9480efb4121c18ad2eac2c99672e44f9b1ce729d0a5eVirustotal results 24.56% Heodo
2019-05-03SCAN_3270465087US_May_03_2019.docdoc 79b6f593af071528bec7bdf1e1dc916bb1fb622dee27050b56b399c55c654cf0Virustotal results 29.51% Heodo
2019-05-03SCAN_34321569313US_May_03_2019.docdoc 678b5fc437b1cd3e051dbc63130bdc93a77c4abc03ad2a337b7713648aa9ce78Virustotal results 30.00% Heodo
2019-05-03SCAN_539524525119US_May_03_2019.docdoc a723fc056dd820f611a481ae88519860de02e23eef0faabd54b111bc28411449Virustotal results 27.87% Heodo
2019-05-03LLC_500164690995US_May_03_2019.docdoc 6c03ef96d9933ed865c770135fa52fddc780e30d5cddff4c4caff56561b2387dVirustotal results 29.51% Heodo
2019-05-03Document_40287564040US_May_03_2019.docdoc c210dbd9324b5c7aac98391d73e4dba9b552ed32a7463c91f5ee2b2a0132ec4bn/a Heodo
2019-05-03INC_747200320905US_May_03_2019.docdoc 405e58903f88ee4859fc1ffd4d8449d2a8cb49ea316b6a7e98c6a0ca46239f24Virustotal results 31.15% Heodo