URLhaus Database

You are currently viewing the URLhaus database entry for http://gedeonhause.com/wp-content/FILE/hak5itg/0vi66081828152566192052vos2dbyvnff8unaf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:436329
URL: http://gedeonhause.com/wp-content/FILE/hak5itg/0vi66081828152566192052vos2dbyvnff8unaf/
URL Status:Offline
Host: gedeonhause.com
Date added:2020-08-19 06:20:13 UTC
Last online:2020-08-19 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-19 06:22:03 UTC to network{at}abuse[dot]team)
Takedown time:7 hours, 1 minutes Good (down since 2020-08-19 13:23:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19DOC_BOF_080120_HBP_081920.docdoc ddc5000139723887bfc62c11f989af0e0fdf375b0ba4557f5abc5805e1228203Virustotal results 16.95%Heodo
2020-08-19T_OM9505407767EV.docdoc 25155c0bdbb328c6e4d68df35320b627b978d287c658085bc03617601fff804bVirustotal results 16.67%Heodo
2020-08-19L_3TKYSRMAYQ509V.docdoc 5ee8314065d14a3a3a5b81dcc72ecdcf770103b6d6fbd433eb4a6f41a9dfed1dVirustotal results 17.86%Heodo
2020-08-191VRGFD7U.docdoc 6c565f07002b82c287ed1f4c316b8ed204766e4fbd223250f1c2cc1f110b7bdbn/aHeodo
2020-08-19ZZXH_PO_08192020EX.docdoc d5b8f7aec352f5d8ac2d69df3092351a5eb917efa88b9e676fb8fad5ab66d38bVirustotal results 18.64%Heodo
2020-08-19FILE_468196721065118.docdoc dac9381a81d9d239f2a341b839cdcd469921f650f74da24535abe92d78951118Virustotal results 43.86%Heodo
2020-08-19UL4627976179ZQ.docdoc a1b39bb8e04288328a8785f48219abb0b12a2a6330e2192973405a2bf6682644Virustotal results 46.67%Heodo
2020-08-19INV_6938554321321.docdoc 9be9c52a2ed346fcab910d6e22a065f7f1ddbb851e589a1c18e4b0577afe0e5bVirustotal results 45.76%Heodo
2020-08-19PO_08192020EX.docdoc 9300711f5a35bc33dab0314d010f858ea9385b9b41b60e8db605a367ee901d57Virustotal results 48.21%Heodo
2020-08-19FILE_GLJ_080120_OTG_081920.docdoc eb3a3bdc721850d6e51b7c255e5237b5d1657ccf823f9965b2ab012da716b66eVirustotal results 46.67%Heodo