URLhaus Database

You are currently viewing the URLhaus database entry for http://gregemerson.com/Ff97492/swift/yf050s7vgoc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435986
URL: http://gregemerson.com/Ff97492/swift/yf050s7vgoc/
URL Status:Offline
Host: gregemerson.com
Date added:2020-08-18 18:07:04 UTC
Last online:2020-08-22 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-18 18:08:02 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:3 days, 12 hours, 52 minutes Bad (down since 2020-08-22 07:00:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-20UMZ71NXIZPKSSQ.docdoc 172af56801cf4f253a30974aeeddb1910408d1417b4d8bffbefe887436c3b633Virustotal results 27.12%Heodo
2020-08-20BAL_10447962.docdoc 4e3f5e02141d0a183dc24743800da2181464932972da05fe01cd2cde1772b60cVirustotal results 25.86%Heodo
2020-08-20INV_FL9004928832HY.docdoc 2c2e43bed567dfdcb8e47998142d228368293bfb77e444e994d7bca8e706bf8fVirustotal results 23.33%Heodo
2020-08-20XZG_080120_KGJ_082020.docdoc 0c03dc40a8db0afc9ae714106e0bf60601869368336a60842cde31c0a3c8b55dn/aHeodo
2020-08-20REP_BR6VSP7H4IQ5HMJ.docdoc 02beded3bf97160a812d8bd478ac0f798e12c3b82c464bb8429c8a5d78ae0c3cn/aHeodo
2020-08-20INV_462824132481418821985739.docdoc 370f13258c923be12a4ce1b761f231bb3cb640389f75c77b5a50180cf21b221aVirustotal results 23.33%Heodo
2020-08-20V_WK2788343920EO.docdoc 09060004713f96e81981a75df65688e9de776f96258e470bc2ca740cb09bfde3Virustotal results 23.33%Heodo
2020-08-20QRB_080120_INL_082020.docdoc 2704479bb70ab89f699b958bff80a648c4c3b03d3875afd7cf5d833fd625e037n/aHeodo
2020-08-20DOC_SLR_080120_BTF_082020.docdoc 7fb67aa831054759be82023e44384c4b66d597c530c373dce100d90456da55a4Virustotal results 23.73%Heodo
2020-08-20BAL_15675674.docdoc 3950245c4b02b5b36cad1f7785113bb4312d8afd9f6106882f29d16a80a6735bVirustotal results 24.14%Heodo
2020-08-20INV_ERE_080120_GUN_082020.docdoc 863fd1e52d219bbbf28aad47413c3fe73d56a35ebd143e0373795a33204741c4Virustotal results 24.14%Heodo
2020-08-20DOC_2161830111651225502967098.docdoc 66adaecff904f859044c0d2aacc5bf77afc7928a3827c0e75dda7e79c0c29601Virustotal results 22.03%Heodo
2020-08-20INV_OM0121818254XB.docdoc a30ae4e06e094175a4cd53d952012652d4ece4bf531c53e64fc7902d9ca35d72Virustotal results 23.33%Heodo
2020-08-20REP_72728755.docdoc 004df4af1179c95b943b776e868fe3f553dc136e2586a75fcbb13bf6c000f569Virustotal results 20.00%Heodo
2020-08-20LF_MMX_080120_IPZ_082020.docdoc 65bd1b927dcce32a7171cec9e1e26732660728495e44d5f85a73f898aa2186d6Virustotal results 20.34%Heodo
2020-08-20REP_78675764650755137444.docdoc c802eba2db804a04ab987a147c222f47fd3b4d1857357dee1b8654b785f0cb79Virustotal results 18.64%Heodo
2020-08-20DOC_81235328.docdoc 568471d2d31e15f9b46076ae0167cdda7da49957b7cb120d330a0e450bc2c7f3Virustotal results 20.00%Heodo
2020-08-20FILE_39332124.docdoc cc9254149ac0a5f25e859e00fd4ae509b05a23e42d49708d4c0a15e4628b1c66Virustotal results 20.69%Heodo
2020-08-20YY2991065002BV.docdoc 0efd74cc9a3e2043ccf2d1aed8696b82a65a9c96293fe1ca3c6958f41c818543n/aHeodo
2020-08-20BAL_NT5E38TC02J.docdoc 6e647b837da2262825372b4fb5ccf78f780e467cdcc593c348153bd1619dbf86Virustotal results 44.26%Heodo
2020-08-20145921346.docdoc bbfbe727d8a5b53456c3b234d64899d7789a885517c719fb9c26c890e009318aVirustotal results 41.67%Heodo
2020-08-20REP_06505349547092696437.docdoc 69c2a1bce768da5d21eed415b83bc479973e4e65421f547162c172f4ec9c1953Virustotal results 38.33%Heodo
2020-08-20H_48070658215124966.docdoc 77dc94d7a2eb1a8f1f2875ee18a8115333a3c2ab0f0455d8cd46b952f93809b8Virustotal results 40.68%Heodo
2020-08-20INV_JVPM3PZHN4ENO.docdoc a184a094e50174dc9dc8c5c22ac016c02f3605fd19c733c49ad1ebf02c493f65Virustotal results 40.00%Heodo
2020-08-20BAL_76993141.docdoc 6caf84cf6a6cadcdf4aa5f45a9f87b63c16cdf6486f53279c0ce48676edfc142Virustotal results 41.67%Heodo
2020-08-20W_72526060.docdoc f4bdec707792203de37f57aaa05aee2ce49012f69866816d8275ceed21df1daen/aHeodo
2020-08-20DHC_7134207203869608.docdoc b26d580deb9ff666c0dc35f4cc7c9d88038fe0f3c8bf48c4aacd56dfc05c4cabVirustotal results 40.68%Heodo
2020-08-20FILE_18151708.docdoc 29524d934f54a27deecaedd3e58de8a4490eddc04ac913bcb37c3ca1354c5b06n/aHeodo
2020-08-20BAL_64626678.docdoc 580ae2c3801f24f8be8cc24b136f1d795787ace030c75c837410f5d827ca02e5n/aHeodo
2020-08-20DOC_JV8462757109YH.docdoc eeb0a1417b5106cfb471ec4c6404b1acaeee3e4acfd04ae2748adee4ed69812dVirustotal results 37.29%Heodo
2020-08-20INV_68086209.docdoc 275e276c98e61d33c2852f27d543c9cda4212aa16383e36b2e3651a28070a8fcn/aHeodo
2020-08-20REP_68700545.docdoc fc18c0da152741b364aec9b87761a496b8353418136db33e02d4debd00aced5dVirustotal results 38.33%Heodo
2020-08-20SF7685058971US.docdoc 5debb0401a79585a656197d49e148048a7c7db909c234ae80dd84798e89663cfn/aHeodo
2020-08-20REP_89794392.docdoc b32f302c129728edd895136f299f0e68031f9554b42be4fd2dd35f80a9b2a750Virustotal results 38.98%Heodo
2020-08-20WK_GP5219855550VF.docdoc be8b2b9dcb90fbaed4e7bc6186fd5dbad93c77fd80cee44717c88ac07641368an/aHeodo
2020-08-20Q_179283913735564256173286.docdoc 55331316e54ab36eb7336aa61737b9a5305f6088e61159bb9c270c859847f363Virustotal results 38.33%Heodo
2020-08-20G_PO_08202020EX.docdoc f49f483de9c2f5fc441b529eaa889631aa5a272206dfdca519993427403f65e9n/aHeodo
2020-08-19OO8334118873XN.docdoc a75897a4101123281bbe047444001acc874171e15cc5a6047baa32d5100d4237Virustotal results 35.00%Heodo
2020-08-19REP_47745046.docdoc 36a290d9df91c6881e6f23de7e03e02206ef7ca2d8aac9d585308806b6e2b965n/aHeodo
2020-08-19FILE_11892448.docdoc ee0c184cdb3791d36a47a1d945aab42379266c4cc4ea6cd88c316ace9deb8826Virustotal results 28.33%Heodo
2020-08-19A_XO2906567699RL.docdoc 7ad5ea1233a7caa4360448569e2745679d1b0e3864b7f716284e3a7384c31462Virustotal results 26.67%Heodo
2020-08-19BLI0U5NR.docdoc 10087ace9c6e5ec4fb09fa039f6ce0c9029cfd40b4f8203f16898992b3f01a63Virustotal results 16.67%Heodo
2020-08-19BAL_73372288980674.docdoc bc5f7faf4b9266301e7e8bd3f6ad494c0b34e984278b3a484c6c46d845d9a28fVirustotal results 16.67%Heodo
2020-08-19INV_FS9978927923LP.docdoc 1a17af806d615019154f0985010aad3789bd90bdb40970f78cd0cda2bd722896n/aHeodo
2020-08-19INV_L01IUHE5RWI.docdoc 080538677c76d09277a58f1dc9be3e5df254a92d12fddc11326c1f896cd93a98Virustotal results 17.24%Heodo
2020-08-19FILE_PO_08192020EX.docdoc 031a67c034a76b31c3fa139f4bbe570bc3a74c61c3b901164fb60733db2db9a1Virustotal results 14.29%Heodo
2020-08-190390042874804993581.docdoc 7feab4f1f35adcc7433afdbf4448e5b79996fbe150dfe6e0f708a6c13ce86f7bVirustotal results 23.33%Heodo
2020-08-19FILE_81952486.docdoc 7f3f68fc29feddc0494e2e4853b7454b5d0cceeabe5e0bcd13029c5ec301e9c6n/aHeodo
2020-08-19POUJ_6NQ7LHZJUJY.docdoc 86480c7538f4288ee85b3d2de9e26e9d24cf22c6a2902bf81013a5826ff2afeeVirustotal results 23.33%Heodo
2020-08-19FILE_WST_080120_QUP_081920.docdoc 529390562b286d3c2cfdfec7f930327818909b300cf64609a2d6d8bb3e5d47ebn/aHeodo
2020-08-195330045532.docdoc 90499b6cd235fd63115a4d18f0989f842252935038f4cadec17f85a2081b1cfdn/aHeodo
2020-08-19ZUA_080120_XCI_081920.docdoc 863115404bb5f48e7f22e292813820254117f2cac7a97b266e8a8fd6359557ddn/aHeodo
2020-08-1959626186.docdoc 0d9522e1c5d18866b466aa9d28546adc56ea56f6d821fdda5ab77b1285b9e0d8Virustotal results 23.33%Heodo
2020-08-19JEX_GN0284152522GM.docdoc ed6f742fc6e103f092e9fd9301bf4ec786e88abca3ec1593661c4083f398616dn/aHeodo
2020-08-19FILE_71951712.docdoc 76b5b8d527359fb1183fc7e4e4eb0dc5369aa0126843b1ec8d04f73c658e0b15n/aHeodo
2020-08-19DOC_9458168794967206.docdoc 6e24d40dd2ab39e102c07369124f050fc0b0f2c103fc5acd2fcf280d8048b1bbVirustotal results 18.64%Heodo
2020-08-19DOC_K4NKOWB.docdoc 77834d629af8b45f85ec232e03fab3cf97e78e448b23fe48bc93ad6a391f3c90n/aHeodo
2020-08-19REP_76137786.docdoc a47b7f6d9af6602b2dac196cb0faf5414e8a3d7f94604f937e2e66f19fd17b61n/aHeodo
2020-08-19N_468341673646.docdoc 40430817aac77bdfe251ec9275bd54f3f38e091508e5381af53292469132db78n/aHeodo
2020-08-1991714831.docdoc d3cea7588b6e664da8ef52bfb856e6fdc6e0df460f961066491aed88f4e29a03n/aHeodo
2020-08-19BAL_BL3762501849EX.docdoc 8fa3388c004c72bc132d2ae9af6e47729f3e30ec0337e69115fbf3b2d2b4260cn/aHeodo
2020-08-19INV_ZL11FFFYQOA.docdoc 5a216285239e2f997444c5eb15fd484fcfbb8a3d23acfea4b5d587768ba66063n/aHeodo
2020-08-19INV_69985923.docdoc ee7fba4103591bdb24625094a6325f7d1bc7371f7e5a4c119cdcfe56a88ec967n/aHeodo
2020-08-19CRD_080120_OUM_081920.docdoc 1b110485a730140a1499cfb4e0313b280748117cd1f41699438e6e103af73ea7n/aHeodo
2020-08-19DOC_SZC_080120_IEB_081920.docdoc c3f0d0d594a74f097907231612a0cd0da8c75160a2ae1064a3744ecdea407986Virustotal results 15.00%Heodo
2020-08-19DOC_04096384.docdoc c6c4ba6bead64d98f91dca8dbc28c67ee9be3a3c5b9de2e50dd98c7c11349cb0n/aHeodo
2020-08-19Q5VICALDKPH.docdoc 66998f1cd1f1a729d50a2c747f4005519af186667f7d7e9b84a3e7567508976bn/aHeodo
2020-08-19INV_H7FOF4BMJO.docdoc a7f7da45bf54c26cc2fce4e3c3a639209f7701cad6339b69b3980224423d2d7bVirustotal results 16.67%Heodo
2020-08-19P_49620569.docdoc 2b7a49352e724f27cd732cdceeb85765bee1e1b37a8f0e554eadb1d7388e6831n/aHeodo
2020-08-19REP_70535049.docdoc 74c71e841348fffe1f1a1bddbd7db99dcefdb48c019b49fd480dd8975a482cf3n/aHeodo
2020-08-19NPK_080120_OZT_081920.docdoc a870134516045438396843914d05ac0216cddc2cf87cd1d9b40e275ae4f572afn/aHeodo
2020-08-19P_44565358.docdoc 1cebaf9cbe29d2c61ad56dca8d497607287435c75f9585dd3288fb0a7e0c73ebVirustotal results 18.97%Heodo
2020-08-19REP_PO_08192020EX.docdoc e6897b31f6e77a3182753226f0781709a200bf67633cd45568c33c4e78b9456bVirustotal results 20.00%Heodo
2020-08-1953674449.docdoc a89f4a0e07aed6f0db5226aa6c45eca8e232db1686eaaf99f163acf0eb849c37n/aHeodo
2020-08-19REP_5338953441044293058844069.docdoc 05897a743fd2fe3d791b9560b3a3a0d5fa3f4ca8c2dc6f1a490aaf4a7f4f5636Virustotal results 18.33%Heodo
2020-08-19SH9UJVA2YIEVE714.docdoc bb8f4400df61e199e8f1c8bf7bc8f4409d7ad9eae9af6cc6ce8ae32bcb99be8bVirustotal results 18.64%Heodo
2020-08-19BAL_LF2763577434PY.docdoc a3cdf0d9417faf332e124ab24792ff79fdd1dcd6f24bfb381b70d9b735e6cf18n/aHeodo
2020-08-19UTX_OMO_080120_OHY_081920.docdoc e7b5571f8fcba096c1240aec4d940d600588432e00c3f22504711fc6b240f8bfn/aHeodo
2020-08-199475302342204045.docdoc cbcffeaf57dc69c22c4c1f6eaa6b2102c764aa8b0080b466aa95969f3c0283e1Virustotal results 18.64%Heodo
2020-08-19PJU_29638492.docdoc 8a1e1fab3fba900930b3f32533b358523802c467157f7234c695ba163bc0fba0n/aHeodo
2020-08-19REP_U73GN6F.docdoc 556452d5bf4f0308f1e921d0f3fa843ac8aeb067be026bf45b0c7273a1379c3an/aHeodo
2020-08-19DOC_XN4176867367LP.docdoc 9be9c52a2ed346fcab910d6e22a065f7f1ddbb851e589a1c18e4b0577afe0e5bVirustotal results 45.76%Heodo
2020-08-19REP_02492332.docdoc 9300711f5a35bc33dab0314d010f858ea9385b9b41b60e8db605a367ee901d57Virustotal results 48.21%Heodo
2020-08-19SH5307374485DK.docdoc eb3a3bdc721850d6e51b7c255e5237b5d1657ccf823f9965b2ab012da716b66eVirustotal results 46.67%Heodo
2020-08-19PO_08192020EX.docdoc 9f7d78ffd5db86fd09de12a598cee46f2a1fa635d4b808708df8edcc7a9d8002Virustotal results 47.46%Heodo
2020-08-19FILE_13821699.docdoc 6ad811a3072f008affd2450407d0a37d9d45166d41c8fedc1d1e0ae2b61c77e9Virustotal results 46.67%Heodo
2020-08-19DOC_80861495.docdoc 2efc148d28ccc7f78e2f598072e171cb43bd6703a0be1abc612c36f1420ec1d0Virustotal results 46.55%Heodo
2020-08-1984814046.docdoc ade0c61c5a90ff1c6aa1b54b0f5d9e29382b98feb206f3b170724aa6e34cb389Virustotal results 46.67%Heodo
2020-08-19D_PO_08192020EX.docdoc 77da6b15c6aba0dd430e50f7372588fa39691b2cdd9f90f3d71a36445b59f30cVirustotal results 44.07%Heodo
2020-08-19B_24241331.docdoc 5b39d05fd1a75574a20fce09addb52c62b766bb08f8812b8d692936918ba780dVirustotal results 46.67%Heodo
2020-08-19DOC_PGK_080120_RCL_081920.docdoc 13ecb0280410d83e2d67d9f049fe85af186a0c9959c316c90f3ec327a9ab244dVirustotal results 46.67%Heodo
2020-08-1952024835.docdoc 28e4449bf2803e0d685599cbfbd23a03ac3f9a69b25f6a2669de4ce252de4073Virustotal results 48.21%Heodo
2020-08-19FILE_XZ3042968584NE.docdoc 189ef09b3af0c487e840219d1b144a8022ff6940de058c276ecd313ad2771c0aVirustotal results 46.67%Heodo
2020-08-19BAL_RN7358536713GM.docdoc 94fe6d0cc1723a60d8965c606027ad0283a60c1f4677cf33c8cb85fd202bbc60Virustotal results 47.46%Heodo
2020-08-19VF9590596439QO.docdoc bb7514867d581af837a3d30b735e4c0e010220c3b2bee800c0217cb4e7275e3cVirustotal results 46.67%Heodo
2020-08-18INV_IWK_080120_INN_081920.docdoc 6e7bc5b464486368fc64b81be80628536390d77832adc42ae658a9ec6642f2b4Virustotal results 45.90%Heodo
2020-08-18FILE_LPH_080120_OKI_081920.docdoc 6c9d3d58e28a1e8bbf0d1c77a0bbb7f6c71a55ac204041c9f1f8e372b19df91eVirustotal results 45.76%Heodo
2020-08-18A_2GB70HTHGPF3.docdoc b3c49f6fc4bccfb7209cc9da0e7092c623b21c438cf4ba36d18d3473015ca2aan/aHeodo
2020-08-18INV_VCIRJ5UDRXZT1.docdoc 471800c07ff4f9683a7c7608227076df2dc2f4c484156617e374e766466333a8Virustotal results 37.93%Heodo
2020-08-18R_OYX_080120_HUQ_081920.docdoc 6cbbdaa0e24876ae422d284449759d09a5bba350158e7e489ae806620bebb00bVirustotal results 38.98%Heodo
2020-08-1887659972.docdoc 7457d0d48a6875b4b70d817d7542bdd94e000e4293907a48b014189b5e7bada5n/aHeodo
2020-08-18DOC_78031968.docdoc 1ab945db51701046ee561291c84c12844c96cad17d38c044915bc3657803b75en/aHeodo
2020-08-1852370654.docdoc ba7333c62eaf38c72ba462b0189a0a07f8e6e6ac98bbb7c516ac21648b72ad51Virustotal results 40.00%Heodo
2020-08-18BAL_93469521.docdoc 62794a5ebcf750a653cae525d04e012ab0edbf36a92f7b4e5c956afaf84db63dn/aHeodo
2020-08-18NWYC_PO_08182020EX.docdoc 455f2ce2d5b18bbce7c1ff8a8eec0e143f98fe0c1e0a4d289aee56f5f8e33e4bn/aHeodo
2020-08-18GU5606959703WY.docdoc f45ccfc4466e72a58efeed6e958e69cad972e72a91e9480e22d005ce049e2044n/aHeodo
2020-08-18R_66041058234798.docdoc 055e64fce776d0d0d34f406eaab2a32e5d9cc0b28b8b559a01d30ace63067004n/aHeodo