URLhaus Database

You are currently viewing the URLhaus database entry for http://ingridkaslik.com/pdf/En_us/Jul2018/Please-pull-invoice-802187/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:33655
URL: http://ingridkaslik.com/pdf/En_us/Jul2018/Please-pull-invoice-802187/
URL Status:Offline
Host: ingridkaslik.com
Date added:2018-07-17 17:45:53 UTC
Last online:2018-09-12 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: JayTHL
Abuse complaint sent (?): Yes (2018-07-17 17:52:10 UTC to abuse{at}cldr[dot]eu)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-18MMD87835_2018_07_19.docdoc e592c0b66d0752a1c113ea2e39c1020865e782002b116a8a4b071a1d6d0a6b75Virustotal results 21.67% Heodo
2018-07-18FTD11040_2018_07_19.docdoc d0604ede6620297daf5578adb6a157a7b4601cb1adbd34ee6402b8e9cac59ee5Virustotal results 22.03% Heodo
2018-07-18WPP690944_2018_07_18.docdoc 8bfdf6fe5f6a3aab367939407088cab9cdc7215d1220770b5a857fe832d2ea02Virustotal results 22.41% Heodo
2018-07-18ULQ07142508_2018_07_18.docdoc 0d09a78452b89385311a4432563aff7fd8c0910f67db68b94241450efe656364Virustotal results 21.67% Heodo
2018-07-18UQW232099837_2018_07_18.docdoc 098e56ab42579e72ac535690fa00c17025c41b16df1d6b6f60586d148e267fd6Virustotal results 22.03% Heodo
2018-07-18UOL9119750509_2018_07_18.docdoc 7252fab54411ec4f171588d071dc345d93d5ef03e0ed837fa99252b02a69f67an/a Heodo
2018-07-18inv-DZ-1723236.docdoc 8ba52c5d4eaead29b22a1f3c381392e71707899ead87acf18dbaec190610d230n/a Heodo
2018-07-18inv-045-VM-9997409/8.docdoc e7db2087ef7f0f80640c7f62a493da43eadb8db5f5af90ef1cb55e68a465696aVirustotal results 46.67% Heodo
2018-07-17INVOICE-EOS-5361400.docdoc e49851a85e17e21159a43fbbd1bdc1183a95202a86bd328769e2049a9dd9a886Virustotal results 24.56% Heodo