URLhaus Database

You are currently viewing the URLhaus database entry for http://www.emmashop.sk/sitemap/INC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422516
URL: http://www.emmashop.sk/sitemap/INC/
URL Status:Offline
Host: www.emmashop.sk
Date added:2020-07-31 02:07:32 UTC
Last online:2020-07-31 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-31 02:08:04 UTC to CloudFlare Anti-Abuse API)
Takedown time:8 hours, 25 minutes Good (down since 2020-07-31 10:33:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31INV_95415267.docdoc 921fbeab5d9cd5e7b8a6e13ddff72271c9d0ec192dbfed4d4b8ce79db99858c8n/a Heodo
2020-07-31DOC_85101850.docdoc 522b63a0d190f96b3d7e635d7431958b68f94c8f95a44594318d0e382b17bad5Virustotal results 41.67%Heodo
2020-07-31OVA_070120_YUK_073120.docdoc 5e55aa28613770be2ebdf584ad12081c21c3029122a4d016325fe4c933a1fb68n/a Heodo
2020-07-31FILE_PO_07312020EX.docdoc 20265e7b88ee06f8d6c99269ac1bc743eb01af3e679b55558ab32d0e0177d22an/a Heodo
2020-07-31VJSB_RCERCMRCJZ.docdoc 9e7028d16ec6751019c80ff608d17691d7f07637b8155b56eea82c7815f151a8n/a Heodo
2020-07-31RJF11L7NMK1CI.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3n/aHeodo
2020-07-31DOC_751545590.docdoc 8caa9f65e0f889be60e96d670e1bccc90b18e929144a14c24e58819586f6c223Virustotal results 49.12% Heodo
2020-07-31BAL_RC1621963304IG.docdoc 0ab86823b70ea0debb9b67bf3947e1f5f751101476cf11859c2630521854ebddVirustotal results 49.18% Heodo
2020-07-31EG_YKJ0BM6C39WY5P.docdoc 69549e15d0480107f2a5ca43102978b553f7770cfa252455a1e34be53f8bb6f9Virustotal results 48.33% Heodo
2020-07-31IFY_070120_ILS_073120.docdoc ba5038cd1699fcd67a0053b79048fff5b473165426cecff97e8b2f0a60057522n/a Heodo
2020-07-31PO_07312020EX.docdoc c433371e8083d2992d2b56e8c6e0ec027e6096daea3729e250cd30c75ec68052n/a Heodo
2020-07-31L_PO_07312020EX.docdoc 4c7ecb99c3763636a148a4f3acc34885807261432a6d9a30a46f362d75b01578n/a Heodo
2020-07-3127497305.docdoc 73b99d9459f81c285125c3c511f5415e9385cd1ffcf920b60c5d368abd1807bcn/a Heodo