URLhaus Database

You are currently viewing the URLhaus database entry for https://amethystcourt.co.nz/cgi-bin/925j22NcpqU1V8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:704283
URL: https://amethystcourt.co.nz/cgi-bin/925j22NcpqU1V8/
URL Status:Offline
Host: amethystcourt.co.nz
Date added:2020-10-16 22:15:13 UTC
Last online:2020-11-25 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 22:16:10 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:1 month, 9 days, 6 hours, 42 minutes Bad (down since 2020-11-25 04:58:48 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-1766610OLH-20201017-36675.docdoc 294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092Virustotal results 55.00%Heodo
2020-10-17FILE-2020_10_17-061588.docdoc fd4a45974318a540bf249d7aa768f6d4ec1bb268bb05e5028935db34aff711f4n/aHeodo
2020-10-1745424_20201017.docdoc 0f4e937ecf4435c0d84956b70e83ca82c0cd15fe9184709e7616c8cc60512590n/aHeodo
2020-10-17202YZ-2020_10_17-NK157.docdoc c8e0ee6566b5536ea46f25964313ce3c6d88ef6329133772236f4afe57bdacd4n/aHeodo
2020-10-17doc-2020_10_17-HD5324.docdoc 2a71d0ad9193b9a5ec07c7040baf6aee1049bde63cdd81fdf346e9f295b95760n/aHeodo
2020-10-17ARC 20201017 0297754.docdoc 90e7a0a9f215c30d103034801a89e4b61554c48bff10a98df0d09257cfc716cen/aHeodo
2020-10-17file.docdoc 8b3323767793829332133050855ac69ea1a0cd1b5a51441f1baf16d09f47e663Virustotal results 53.33%Heodo
2020-10-17inf-9485.docdoc 4885a6fe3e6e3cf17f4b9c157b848115b2b51fc4b8e3e478650c6d8401062476Virustotal results 51.61%Heodo
2020-10-17INF 2020_10_17 MIS389.docdoc a2694945dbd5fc7e3bc4801eea70491938e4e9426b60bd80625312d3f3a7962eVirustotal results 53.23%Heodo
2020-10-17dat_2020_10_17_8257.docdoc 115b344de8011d635adae59417a4dab2f992101ce81619ffe1b1b0423d9df79an/aHeodo
2020-10-1707514313-0480020.docdoc 4d8d65bde63051b5066a4f7aa37942fbd309a54311e5b0903febd4d1277be363Virustotal results 51.61%Heodo
2020-10-17Dat 20201017 OX21617.docdoc c64264c7336d7e9f516999fa287be55be63b634b63f5ebbf1bab24e38ada5e8en/aHeodo
2020-10-17Inf_2020_10_17_971890.docdoc b5ea62943f3b8f07f8fc66e4e35a1d4d12022eae32ee901b016f48bf66fec06fVirustotal results 51.61%Heodo
2020-10-16mes 20201017.docdoc a9d9b8357ff803bd36d7bd0c12c770487fe774ccd22e81318606bad0f6ddaf90Virustotal results 52.46%Heodo
2020-10-16file-20201017-605.docdoc 113ad60c6cf207f078325f4bd37200b9fdb820ddc2bfeac79a49a347aae1308aVirustotal results 51.61%Heodo
2020-10-16Untitled-265.docdoc 38a7276166183fb51e2c60c91165d139295de90105097cb4e24b077d3fa5d56fVirustotal results 51.61%Heodo
2020-10-16File_2020_10_17_7284782.docdoc c5480c5bcd7c9b06e744ebfca49ef98e45da1200c5e3762d6b47d9825189f3eaVirustotal results 51.61%Heodo
2020-10-16list-801253.docdoc 5c58c91ffdffd84690c6746f6afc2eaeacd03df2e4a83c6e662755624113cf5bVirustotal results 51.61%Heodo