URLhaus Database

You are currently viewing the URLhaus database entry for http://ownitconsignment.com/files/FILE/30967149915/oksbd/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:446306
URL: http://ownitconsignment.com/files/FILE/30967149915/oksbd/
URL Status:Offline
Host: ownitconsignment.com
Date added:2020-08-28 22:21:09 UTC
Last online:2020-09-23 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-28 22:22:03 UTC to abuse{at}a2hosting[dot]com)
Takedown time:25 days, 19 hours, 16 minutes Bad (down since 2020-09-23 17:38:20 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-292607986.docdoc 5df4f10d255d1733e9450ecf67d166c73f6f29bb36efe88d6093a31d31ce0ad4Virustotal results 45.45%Heodo
2020-08-29Electronic form.docdoc 2bcee5d67355354cad001f5e478e664d8295781ee500ccbcd9e2b60084757c74Virustotal results 37.93%Heodo
2020-08-29QXA-080120 BJZF-082920.docdoc 7a2ea6bf67afad967a724ca65954848493d2b3d60c68a583219c0d8acff06db4Virustotal results 32.76%Heodo
2020-08-29Inv_15072.docdoc 8c3d2e0fd7d2cc86088185bf1acaf32d2d7e43124beba918f38856179ade8097Virustotal results 31.03%Heodo
2020-08-2800744082.docdoc 76b27ec8a97aaff0fcb904c903f9813d51120eab33ba6c8e2624e900e8863b94Virustotal results 29.31%Heodo
2020-08-28QCU-080120 DVZR-082920.docdoc d39436c50b9667b5827c801070c34c0747f3ec1a8cb14b0602a317fe47c4331aVirustotal results 28.81%Heodo
2020-08-28019254445.docdoc 3dd8598be29765ae8825921f3df19b48f978ccc5d17dd3a3516c1c2740dbd5dcn/aHeodo
2020-08-28PO# 08292020.docdoc af205422f14b639b4df94286a2e75e65fd7522ea8c0ec60d23af74f197e9a02dVirustotal results 30.00%Heodo
2020-08-28INV #07364 FOR PO #70601808.docdoc 4937752287939165aa36395a854f950276118f93f72c6c8d297b05987b4f2417Virustotal results 28.07%Heodo