URLhaus Database

You are currently viewing the URLhaus database entry for http://www.genaudas.at/FILE/949739621/nJG/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:735591
URL: http://www.genaudas.at/FILE/949739621/nJG/
URL Status:Offline
Host: www.genaudas.at
Date added:2020-10-22 16:48:04 UTC
Last online:2020-10-23 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 16:50:17 UTC to abuse{at}variomedia[dot]de)
Takedown time:14 hours, 47 minutes Good (down since 2020-10-23 07:38:12 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22PO# 10232020.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-2266276.docdoc eedc1f3d57d4274cbfc97e09ca0975f97fff204e89fe92574f9e3964a569c9d7n/a Heodo
2020-10-22form.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70n/a Heodo
2020-10-22Electronic form.docdoc 9becf1ac7aade032f8c2f1f3c42d2525ac67ca430d309bf1b76e131cd2e57d3eVirustotal results 38.71% Heodo
2020-10-22Form - Oct 22, 2020.docdoc 6e126e02b7f4c06d354c623ac04174c9b81ca1ccb03c83f5de29b5722526983dVirustotal results 37.70% Heodo
2020-10-22Inv. 3120351486.docdoc ee5fa6da862f50e1ac9babeca493ba621ca3bc57ab73fb88480bc716457e36f0n/a Heodo
2020-10-22form.docdoc 3735f679e476203802d9f194df12715cf31c7784072d4140c6630dea9184ce26Virustotal results 37.10% Heodo
2020-10-22Payment.docdoc 8ce84cc08c61ef8da560dab9863109bab6dac208bdb030c9d513aa71dc7b3492Virustotal results 40.68% Heodo
2020-10-22Invoice.docdoc 12a9d00947e3f08cb67e3d1a197fd116e29836a17845009e590d283eb80e960en/a Heodo
2020-10-22Invoice #624216.docdoc d078837cdc9042641925b36475f87954994b19f05d89c10b4ab4a1ea28a806efn/a Heodo
2020-10-22Invoice 0086617.docdoc 9b918b3a0a118f50d3c8d4be4526b1fd8ec10563810c7dbb5088495e471f6b26Virustotal results 32.26% Heodo
2020-10-22Invoice #800514782.docdoc 749e0e405f25ff952f9ac9f879f50fcaac51258237b698562dc85c891bf323a8n/a Heodo
2020-10-22Payment.docdoc 01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5Virustotal results 49.06% Heodo
2020-10-22Payment status.docdoc 401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864Virustotal results 48.21% Heodo
2020-10-22Invoice #274695.docdoc bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8eVirustotal results 49.09% Heodo