URLhaus Database

You are currently viewing the URLhaus database entry for https://mamelina.com/wp-content/eTrac/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:434656
URL: https://mamelina.com/wp-content/eTrac/
URL Status:Offline
Host: mamelina.com
Date added:2020-08-17 13:51:05 UTC
Last online:2020-08-17 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-17 13:52:02 UTC to abuse{at}upress[dot]io)
Takedown time:4 hours, 10 minutes Good (down since 2020-08-17 18:02:23 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-17BNN_37370647.docdoc 5d4046aedad795f57476452a5ecde53fa5d12cbc005ba7c8cf91bd438b25d250Virustotal results 25.42%Heodo
2020-08-17REP_3JPJ23D3OWK.docdoc 095bb889a019ecf676de31a52ae472b04486e8ce2dcc1db0f9698dd27d4fb8fdn/aHeodo
2020-08-17ACGF_MFC_080120_BBR_081720.docdoc 6d8658726b4fb0e9ef7e2c4da945df3eb19d81048f5b0d4445be37f1e6cc8ad2n/aHeodo
2020-08-17DOC_50744486364195251626343.docdoc be85dc6e1ccbe1a1c0f6d504a7893e15d4139c39f4754e8c90a503ae4dfeeea5Virustotal results 27.87%Heodo
2020-08-17INV_59001268.docdoc 23b702194ab1ce70a597bd240a60d6d14593f7b799ea86a9321b4ce236989afen/aHeodo
2020-08-17YG3998245539HH.docdoc 78c4b4583572ca3e3146e10afae58ad1483adb1f91f4c998a64c1ce59f85c16bn/aHeodo
2020-08-17OS3278809036VM.docdoc 056530cd4782d99039a1c59a00634e347c97aba91712f28efa2f99016e36255dn/aHeodo