URLhaus Database

You are currently viewing the URLhaus database entry for http://canna.menu/canna/rbwa-km5425-yqwuevl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:201018
URL: http://canna.menu/canna/rbwa-km5425-yqwuevl/
URL Status:Offline
Host: canna.menu
Date added:2019-05-23 22:54:04 UTC
Last online:2019-06-05 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-05-23 22:56:03 UTC to abuse{at}ovh[dot]net)
Takedown time:12 days, 9 hours, 9 minutes Bad (down since 2019-06-05 08:05:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-29Scan_8142839130DE_Mai_25_2019.docdoc 7eaaf8ce0632c9ad4fe9acb2b4a97da59085ee7ef6c842b13f7d35084b6b9036Virustotal results 67.80%Heodo
2019-05-25858218908195DE_Mai_25_2019.docdoc ceeb8557cb6cac7b9c92e95a2fe0a7a5244579229aa7db500e463cc87efd54dcVirustotal results 27.12% Heodo
2019-05-25Scan_80949229877DE_Mai_25_2019.docdoc fb1e33fd4cb51880e55971873c0e97091ac5c76cb4a39200daf615c3e44159abn/a 
2019-05-25Rechnung_67848769697DE_Mai_25_2019.docdoc 29424f1cd19d0f0cb50e113f86e05d490a7071e6494fdee88af2a118857cae0eVirustotal results 24.59% Heodo
2019-05-25Rechnung_616056568512DE_Mai_25_2019.docdoc 8d262e11a4d725c4e1282a2702fa6f6afe0dcdd86703fa51c3dec1ae9022c698Virustotal results 25.42% Heodo
2019-05-25Rechnungs_Details_8371278597DE_Mai_25_2019.docdoc 440b4d1d5d1443527fe29b5f142f81cdff8839dc09c2cc5cbe98c286a43759ceVirustotal results 25.00% 
2019-05-24Rechnung_1780064167DE_Mai_25_2019.docdoc f1f812bcdcd9f1770b40db0049199454ce8e3b4405a54763361bc3f2a4e3fb45Virustotal results 25.42% Heodo
2019-05-2443075500724DE_Mai_25_2019.docdoc 029ed07a45381598787146791bce6a8f20b2b500d19de4bb085e6598bb7b4dc7Virustotal results 25.42% Heodo
2019-05-246163107822DE_Mai_25_2019.docdoc 507edca22bca111d1f63b9b9e41a2fdd375ef30d42c3f87d82e940f25fc4f34bVirustotal results 25.00% Heodo
2019-05-24Scan_270078601133DE_Mai_25_2019.docdoc 8da7abfdf789b3c62c9fc92a804d33b560d602bb2a3504eef6ab9168bdfb307fVirustotal results 24.59% Heodo
2019-05-24Scan_724058387445DE_Mai_25_2019.docdoc 1e598d7a619361c5861a4f3e78d0c158daa23e869c771268e7de1f9ed0ae16e7Virustotal results 21.67% Heodo
2019-05-24Scan_730403623818DE_Mai_24_2019.docdoc 81162582172c76fb3360912ece70bacaf65037722689aaafa2da2ca48f76f001Virustotal results 22.03% Heodo
2019-05-2426870929988DE_Mai_24_2019.docdoc 8aa364c7794389dc2b488d2fd90d4d791a5ed2710559912912d3c84c50a468c1Virustotal results 21.31% Heodo
2019-05-24Scan_0821525071DE_Mai_24_2019.docdoc 8a0f94c4e0b04081a2f7fec8c6c001f903092a1110f07f46e1d2d1cdc77f2034Virustotal results 21.67% Heodo
2019-05-24Rechnung_60044765493DE_Mai_24_2019.docdoc 00ea2e24de5e4e9a987fa8b235fb538e49b85fa64eae3011ee9ff44476213b1aVirustotal results 30.00% 
2019-05-24681262397190DE_Mai_24_2019.docdoc 5f3f990b8bcf42bffdf525380f74f20bc95b54aa8c14295cfeb429d95b6795c2Virustotal results 26.67% Heodo
2019-05-24Rechnung_1187552579DE_Mai_24_2019.docdoc 4b9fcd4189fdcab7434f28b57e585c9fdf6877065be361ee2bc7af7d14ace897Virustotal results 23.33% Heodo
2019-05-24Rechnungs_Details_5541111929DE_Mai_24_2019.docdoc a81f21bbcf5cbb4edc802c52ee3668b1da9c82391bf39e54b284e4c973361173Virustotal results 22.95% Heodo
2019-05-24Dokument_79984686869DE_Mai_24_2019.docdoc 08a71f81b1366785734f4c1db8bd5f92ec36f62445cb5a25afa6c0dcf5ed210fVirustotal results 21.05% 
2019-05-24Scan_8621636372DE_Mai_24_2019.docdoc 5f0b5c2570391d35f88623adb5a580b80d44eaf4e41f82956e060baa5a39d73dn/a Heodo
2019-05-2474050763148DE_Mai_24_2019.docdoc 22ae1496b7b0789890e98ad38da787dba9f7aa91bccb2cc39cb931fb102425aaVirustotal results 21.67% 
2019-05-2449182326296DE_Mai_24_2019.docdoc 67b3b5b4a5a0388f90b641710391c1d2a01a45b552ee7862418618bc12109043Virustotal results 20.00% Heodo
2019-05-24Scan_965948158129DE_Mai_24_2019.docdoc 6cf30c19b4b4b6b860f5f238ab5e4784ad470107ea400d93b1a3d7bba9c6b138n/a Heodo
2019-05-243052150380DE_Mai_24_2019.docdoc 55c4c3f89a961e9ba055e47b5875b7a945b97aee146f522c9a9f299dd989137dVirustotal results 20.00% 
2019-05-24Rech_92467511091DE_Mai_24_2019.docdoc 32fbe8b5ba34d19c1be8b639490376bf5baad31f95f0fe2adbcaa79310a57347Virustotal results 18.33% 
2019-05-24Rechnungs_Details_503511509548DE_Mai_24_2019.docdoc 6a03484fe6907d08ef6a79e07c8ba2bc1786e6d09e58433b18f7247713bfe9e8n/a Heodo
2019-05-244097980738DE_Mai_24_2019.docdoc 211df751fd87340eea09845904a838f194633ac0190df93c098b2fde1958c3ban/a Heodo
2019-05-24Rechnung_38604047105DE_Mai_24_2019.docdoc 4cccd050234aa4a04cf4400b4b0fdcb22ede36bc42dbf830c0a03853dce5fd48n/a Heodo
2019-05-24Scan_39138763912DE_Mai_24_2019.docdoc 1eead5084aee8b05f6170014ab370b78a4ed5bc891e6c9409c69a151dc82249bVirustotal results 28.81% Heodo
2019-05-24Dokument_7867302715DE_Mai_24_2019.docdoc 41aea7ecbe2ffb931889169b5df96e12db742d0100f7bc6b303e047788b987b7Virustotal results 30.00% Heodo
2019-05-24Scan_854195487448DE_Mai_24_2019.docdoc ad57bc0908d3125bca96de85a9770ca2842d71712c3157f11896924be1c0a0aeVirustotal results 30.51% Heodo
2019-05-24Dokument_7982544672DE_Mai_24_2019.docdoc aee90ee70deeea6bb482251ae99f9792cbbbae1c610256dd8102eb8c395c23beVirustotal results 25.86% Heodo
2019-05-2455598771377DE_Mai_24_2019.docdoc 89884e076365258d91c00d696ab507d081e02f83ffc1dcd7a47e0f30f162bcf8n/a Heodo
2019-05-24Rech_346034894642DE_Mai_24_2019.docdoc cb34d1fbc90409881da6b21f4a17c180bd3cd810b1e8796dddf9da0a38a5d099Virustotal results 28.33% Heodo
2019-05-24Rechnung_9927951430DE_Mai_24_2019.docdoc ab85d5c0b085b9c847c3bbcf32f5aedb96afdb1cbf88b00afda74846f1113ad1n/a Heodo
2019-05-2456791919000DE_Mai_24_2019.docdoc 5db74e43b8d281c631464832214e4aee7570008a74e6e32530387690521a414en/a Heodo
2019-05-24082522019374DE_Mai_24_2019.docdoc 45ee87070c8898d0d2fb3d96c510ec733d06e7912f608722fb241b9d7e61d10bVirustotal results 28.33% Heodo
2019-05-2373529944712DE_Mai_24_2019.docdoc a0949ee3caa2c2972e977489141b19b96e6e4a4dd21c4698426eb228313faa93Virustotal results 32.79% 
2019-05-23Rechnungs_Details_9903720110DE_Mai_24_2019.docdoc 5fe2b89bfcde3ff1c271102a1325ad4ee8d12901e3b2282376e024824a955e29Virustotal results 30.51% Heodo
2019-05-23Rech_964435861075DE_Mai_24_2019.docdoc a4f4432f0a725fd200c73b7e570e8cb8fd7560d2c7612f8d5b7cf70c6c6ec955Virustotal results 28.81% Heodo