URLhaus Database

You are currently viewing the URLhaus database entry for http://amis.com.gr/css/bootstrap/secure.ENG.myaccount.doc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:192547
URL: http://amis.com.gr/css/bootstrap/secure.ENG.myaccount.doc/
URL Status:Offline
Host: amis.com.gr
Date added:2019-05-07 21:00:04 UTC
Last online:2019-06-06 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-05-07 21:02:02 UTC to abuse{at}tophost[dot]gr)
Takedown time:29 days, 16 hours, 12 minutes Bad (down since 2019-06-06 13:14:41 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-299-BMC-2019-35389.docdoc 00a7a24e8c3913b663b5afe730f39d0ffa55f58f9dcb3fc4f853612c73e4208cVirustotal results 70.00% 
2019-05-082-IQ-2019-73263.docdoc a11b7de80e066d3c06ecd25f055575ea500d8df54e97c707e6ed354cc7fe844cVirustotal results 30.51% Heodo
2019-05-086-LI-2019-S558639.docdoc 735d79ebe44a283b4c97f2678b0879451f8f44c210b212aa749d9d47196041e0Virustotal results 31.15% 
2019-05-088-KFM-2019-Y5013.docdoc fc46f39706794ddcda5e6bb10f617953bcd1e0265857e1393c53171303e92b9fVirustotal results 33.33% Heodo
2019-05-080-YU-2019-16649.docdoc 21a83c71b47586377e1b1e6785f61cf9a2bc4dfb8a65bdbbbe0e448ecd0030d9n/a Heodo
2019-05-086-WCX-2019-427.docdoc 1445c07e94df1aab9b8d29c8bdc0d2dacaf61c5af509c9fd4e77b252a4259f71n/a Heodo
2019-05-0885-YQN-2019-J093.docdoc f13b12b90d3f13577fb85c79d91b639adcfb07d1ac2216c74158f64a6e4659can/a 
2019-05-0869-GKC-2019-408.docdoc ea5d4c535f425371ab118f223fa14e9f54201700f1302e4b30fbe68f9c445b3fVirustotal results 46.67% Heodo
2019-05-0864-JGS-2019-X4374.docdoc df5fce2cf5a41b6cae0de341173a1c3f072734ab2686a54bcf0d9811a199f924Virustotal results 45.00% Heodo
2019-05-0862-IXS-2019-57917.docdoc 41289082e20c3e62e9f052b546c976a55040189acbb92e08c27bf88ad815807bVirustotal results 43.33% Heodo
2019-05-083-RA-2019-13909.docdoc 945d2d135ae3508e486be34ea2bea9305c48a699ae6447462ee1f251e4fd3b15Virustotal results 26.23% Heodo
2019-05-082-XI-2019-310.docdoc 6c74e8cd204af8dbbb5ceaf66e4a09d1b5d0ab931f0d10f8fa3e5d392505c355Virustotal results 40.98% Heodo
2019-05-079-GVW-2019-T924.docdoc c14d58c877a8a41518bd68122ff5d6de09132057e9d26550a491df6581532798Virustotal results 25.00% Heodo
2019-05-0794-UAR-2019-16323.docdoc 6359cfca4c3a4f6c657c285c6840af0bc66e00fcede8f7e2d3aa8e5bb96a24c4Virustotal results 34.43% Heodo
2019-05-073-IQB-2019-B86528.docdoc 07a44560da37fb475f59d60fcb3da3094ef2754f807a5cf136cc3fa2cc8ebc00Virustotal results 32.26% Heodo
2019-05-0762-WH-2019-8461.docdoc fdabc899b0c2bc25cb3b6ec69d5fa312aa2522202c2db571919fd227df45b278Virustotal results 31.15% 
2019-05-0764-QDU-2019-F358.docdoc 7abd6dfea23905d558c92b1278fe6689b1c916bd37855afcd1a3544b30d1c072Virustotal results 23.33% Heodo
2019-05-072-MB-2019-N792138.docdoc 2d7ced6f4a830f8bcde131572dc8b9169e4e575846ec7f6e9c9de6a3dbb2f185Virustotal results 22.81% Heodo