URLhaus Database

You are currently viewing the URLhaus database entry for http://olsenelectric.com/2GDULZ/BIZ/US/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:44147
URL: http://olsenelectric.com/2GDULZ/BIZ/US/
URL Status:Offline
Host: olsenelectric.com
Date added:2018-08-17 20:53:42 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):No
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-18SWIFT #443LEIEYOLG.docdoc b27761b32ab8942b529d876e3b355d3991e30c4fd5bce14889f5ca1bf3b1ce10Virustotal results 30.00% Heodo
2018-08-18PAYMENT #4GMELYE.docdoc 0e3951537523d4da40702893fb2004840cd9c855ebec1f657e46e9e2d66383fbn/a Heodo
2018-08-18PAYMENT #2668DANQPXJ.docdoc 95abb9ecb1e12aa0394be7313ac0ca07cd62450152d462630900d39b6527b12dn/a Heodo
2018-08-18PAY #9267786NJT.docdoc a5fd8cb05ab36684f977cc5151f0fa125a30951e96ea1ee2edb5d4cf8c310a78Virustotal results 30.00% Heodo
2018-08-18SWIFT #1912539FB.docdoc e3eabb11ef2ce3a6dbb7826d3c38ee54ac0d3db70d849fdbd47786572459db53Virustotal results 37.29% Heodo
2018-08-18PAYMENT #24VKLWP.docdoc d466eb7d6035d5bcb92a7b8c6b71e2448eb1d85c7ba9e66de519499f8b11d32dn/a Heodo
2018-08-18SWIFT #15459XXSXJ.docdoc db78b33143934e4f5dfbe4104ecb388b92f490f97ae5616b5ac3097fb24e1082Virustotal results 26.67% Heodo
2018-08-18SEP #86655CBHRC.docdoc 5d16f44d3de9995ed89b911658aab0511dcd834244b4cff9825354d97324ec0cVirustotal results 25.00% Heodo
2018-08-18SWIFT #514RTJUKIQP.docdoc b9d3cb69e6d91ad91ba15ba9bb5cce0f43e29de98ae524a94612e829a5cc1822Virustotal results 28.33% Heodo
2018-08-18PAYMENT #295RVV.docdoc 27887246a409840588235756ceb841fb9b1c20078fab309a57438ca4e19b590eVirustotal results 25.00% Heodo
2018-08-18PAYMENT #1856Z.docdoc 5376c945be32cd52561d7bd333d149d8b17479da3ca3ca23f1afd164314faab8Virustotal results 27.59% Heodo
2018-08-18SWIFT #900945Y.docdoc 05ffd1ab139da8d53e13eedac3b6d5a2a50e7278fada4df5aee81f76e5028fedn/a Heodo
2018-08-17SWIFT #09570TOX.docdoc 6f5f0dd15c6de0b64cccfae94c453553aba1baab6845b2d6af9a0d76842c40d8Virustotal results 25.42% Heodo
2018-08-17PAYMENT #2W.docdoc 500b5b69e515d684d7dddc8d259df07ae3e002f080bdb8695d14f1959ddc359cn/a Heodo
2018-08-17PAYMENT #3ZBWHEAV.docdoc dc0f2a0c3bdf278cc25e0208130623ce987476b5566c4dc4a6ee66522a100e65Virustotal results 23.33% Heodo