URLhaus Database

You are currently viewing the URLhaus database entry for http://shop.69slam.sk/Available-invoices/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:19147
URL: http://shop.69slam.sk/Available-invoices/
URL Status:Offline
Host: shop.69slam.sk
Date added:2018-06-14 15:32:02 UTC
Last online:2018-09-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-06-14 15:35:26 UTC to 109[dot]74[dot]156[dot]2{at}abuse[dot]vnet[dot]sk)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-06-15paid-invoice-07607/88.docdoc 86ed28e677575a7f498aaeb8ef98613c896a9dd025e540f4f6d8e9afc6a8c51aVirustotal results 25.00% Heodo
2018-06-15invoice-receipt-078/6078.docdoc 6af0c86fe6cf4b5e4ca4e40a4e74032fb3017571d8cf7689def1ab4af43f6ad2Virustotal results 29.31% Heodo
2018-06-15paid-invoice-029B564/8.docdoc 494ed6795102145bb0d82edd7467ae43eec9cb866cc26878cf2e68367d48b297Virustotal results 30.51% Heodo
2018-06-15Invoice-form-June-04/771.docdoc 6e83e5eec3c6c85071068844fb419736d72fc24d253313b2ae18248ed271096dn/a Heodo
2018-06-15invoice-026/9579.docdoc 43f13a4500f50c70879eb8980e5ab8b88b0f260a8d54cc0a50c5a0e1030e2c7fn/a Heodo
2018-06-15invoice-06S0677/0.docdoc aa9038300087911a186409ce3abefdfce308e3645d9794c59861094eab364359n/a Heodo
2018-06-15past-due-invoice-03/7808.docdoc cf69d2240b29b3498add780c4b5fac80d2ab6406d7bdd52a96efc7c1c320e2a0Virustotal results 26.67% Heodo
2018-06-15Invoice-attached-02/4105.docdoc a1301a43ee2b76ecf90dab116deb7005c8076fe93d680ee32866968ddb897fc9Virustotal results 27.12% Heodo
2018-06-15available-invoice-June-03T653/0.docdoc 99eb9b4335f56b359172ab4d6bda77bc60905477205bf32648ac290a8d77d9dcVirustotal results 26.67% Heodo
2018-06-15for-check-15062018-019592/55.docdoc db868a6913b54ea21852010c85147fd9068bd17000f590b211425474002bf545Virustotal results 27.12% Heodo
2018-06-14Invoice-06-95036.docdoc 197b0cf95e1117a10f34b86f4b48926389f661586e0dd9ea223dadf97c742b7bVirustotal results 26.67% Heodo
2018-06-14INV-document-094/0659.docdoc fcf9ff60b9563f23d40d5f6ebe4b2e8756e3f82d014576986e0191cb38d0eb17Virustotal results 25.42% Heodo
2018-06-14new-Invoice-June-05770/3.docdoc b20cb16393b3369de8915bc83fa05100b1d4e70c70c59984ba9689cd20e9aa97Virustotal results 28.81% Heodo
2018-06-14INV-document-009/1400.docdoc 499095f2ad0eb11da692654c7992c62e8a69ee02fa6cfac5631fe42dbe5781dcn/a Heodo