URLhaus Database

You are currently viewing the URLhaus database entry for http://manatour.cl/Zahlungserinnerung/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:20667
URL: http://manatour.cl/Zahlungserinnerung/
URL Status:Offline
Host: manatour.cl
Date added:2018-06-18 23:48:04 UTC
Last online:2018-12-02 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-08-17 09:35:15 UTC to netadmin{at}grupogtd[dot]com,soportetecnico{at}grupogtd[dot]com,abuse{at}grupogtd[dot]com)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-06-19rechnung-HX-00074/55.docdoc f0e56c2957e35958ecf4da7fadf186142254f19420ef09233586e22b6f3778ebVirustotal results 25.42% Heodo
2018-06-19rech-XA-05380-5.docdoc bd54d27e266b24e7ee3d54acb02c4477431557606af97a9c3778680b856f6e30Virustotal results 26.67% Heodo
2018-06-19RECH-FHZ-02026/9.docdoc 8a0da9badc7151b6eea935d13c686536658fe4bb8edd1f0dfdc2153333fc963dVirustotal results 25.00% Heodo
2018-06-19rech-CRT-00-39839.docdoc ddf1b696c616a1ce888d44ed8b32ada572d378faddd4821b94460ee9637ba536Virustotal results 25.00% Heodo
2018-06-19rechnung-YZ-0170241-89.docdoc e8e72baea9374522d4189c4992b88104fc7e406ad1ab3cfac5d14bb2060fda07n/a Heodo
2018-06-19rechnung-UF-075-797614.docdoc 732e9f9ab8eb80cf59058a324b1ec3fe5438f3dc06d15da9d047fd31f8f46a72n/a Heodo
2018-06-19rechnung-UF-084-5872.docdoc 585775342c624646dd15cbfc3c5c1bd9691a7f1f1204c82f99e899f32d81600cn/a Heodo
2018-06-19rechnung-QDU-03233905-2.docdoc 5abf6221fc4b9d999ee118f84d02ac66bf923f20beefa50a5fd7c521c508a5d2Virustotal results 26.67% Heodo
2018-06-19rechnung-PHL-08310-67.docdoc a44b1cd3da8d8e5c5faa47a315ada0a798bb7fcfc9467adc005af47b962f26c7n/a Heodo
2018-06-19rechnung-ST-0319348-7.docdoc 4f15e309dc2df53df4cc03d0eba4588d2fde10078f4dcdb3ce2f3924f95964d4Virustotal results 46.67% Heodo
2018-06-19rechnung-UHZ-04063475/73.docdoc de00b45332a9eab8d8280078dc1cee3e327149f7d8d7646aca40fb4a1c82bb0bn/a Heodo
2018-06-19Rech-MJ-08/1594.docdoc 1d37a9858dc66da8bbaf148b5a70572ed3dc17439f6fe4c868a2ceadf9402a72n/a Heodo
2018-06-19rechnung-DVK-0111707-39.docdoc 7b06cc13ebfe530d8bbefe76b4bc8fa512f7f52dc63f114463f09cfba494ac6fn/a Heodo
2018-06-19Rechnung-KSF-0878755-9.docdoc a5e5e88268b6edb1fa13cee068f6ecf8b5fb31ada12e9afebb5c2549812c1ef7Virustotal results 37.29% Heodo
2018-06-19rechnung-PU-069-8279.docdoc 831cddd0a5afab7339d9000049c991d57768959d65a893e344d2c3180f15d7adn/a Heodo
2018-06-19rechnung-RC-061/58627.docdoc 154a8f02df08f96cd8e57cc8d8e89656f9494b6ab8176ef3635bc99bc96f7d3dVirustotal results 35.59% Heodo
2018-06-18RECH-MHL-077495-25.docdoc 422e2c3cef849047e02f54c63fa5c70322503ae1a2830816af91e943ed20c014Virustotal results 26.67% Heodo