URLhaus Database

You are currently viewing the URLhaus database entry for http://adamello-presanella.ru/newsletter/EN_en/Important-Please-Read which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:54967
URL: http://adamello-presanella.ru/newsletter/EN_en/Important-Please-Read
URL Status:Offline
Host: adamello-presanella.ru
Date added:2018-09-11 14:17:51 UTC
Last online:2018-09-12 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-09-11 14:18:46 UTC to abuse{at}rtcomm[dot]ru)
Takedown time:1 day, 0 hours, 47 minutes Poor (down since 2018-09-12 15:06:44 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-12Statement as at 12.09.2018.docdoc 4bed35a9bb290c3f8cc8fe5f9e07c2564df7d05339c4e014d9f841596a8ab589n/a Heodo
2018-09-12Invoice as at 12/09/2018.docdoc eeb70ff1aa4477c325260f569e35fb22cb0cf1fa2da11d1508db12f4f84987b8Virustotal results 21.31% Heodo
2018-09-12Customer No 787612.docdoc d4482c6be7b3208e3668f55f40b2207dfe7acd33c26f93e7100757827eafe66fVirustotal results 21.31% Heodo
2018-09-12Statement as at 12.09.2018.docdoc b916b14fde0e06e50cacca99605db7008f90b01ad4203b396abf717cc3fbeaefVirustotal results 28.30% Heodo
2018-09-12New invoice 056DS906564.docdoc 0d05e6c0df71189a5a6399281af155418a24fb20d7cb857799795db44f73eba1Virustotal results 27.87% Heodo
2018-09-12Accounts - Invoice.docdoc a4447d6d2ac0b8948372c72077fe25133ddac2a70ea0e63519fbd2cb2f7f0fd5Virustotal results 27.87% Heodo
2018-09-12Invoice as at 12/09/2018.docdoc 0953c77f94f2b2a224fcbb9e4e32fc7bac365417a78a8d7827b9dbe438145cefVirustotal results 28.33% Heodo
2018-09-12Inv. no. 62L50817.docdoc 750de3c0ac403809e9278478546150617ed5df8b852cc22c5600ab9094fb3451Virustotal results 36.07% Heodo
2018-09-11Invoice as at 12/09/2018.docdoc db960c5df69ed5957af827b49783a74fb6cb13ef84107cd0a594f70cafa4f7dfn/a Heodo
2018-09-11Customer No 4220479.docdoc 5586e5cc630f53effe5a62b0dd54a67a55f1a70503c175cfc65b8431abfb44a3Virustotal results 33.33% Heodo
2018-09-11Invoice Confirmation TV76957.docdoc 97386dc0f1e12dd77272154eedeea6057876513296307a3956b00d079eaef348Virustotal results 29.51% Heodo
2018-09-11Billing Invoice - Job # 7231245.docdoc 3374d863e7f6de3611ff4aadaecacdc54784571f27631b87f7fdd9e9f8b39237Virustotal results 26.23% Heodo
2018-09-11Invoice as at 11/09/2018.docdoc 20dc9bef3d5831a71cc98aebcd3b84ae259a5a9b882a7fb7ae41567777eb1cb3Virustotal results 29.51% Heodo