URLhaus Database

You are currently viewing the URLhaus database entry for http://egomall.net/249ZMFZVA/BIZ/Smallbusiness which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:75612
URL: http://egomall.net/249ZMFZVA/BIZ/Smallbusiness
URL Status:Offline
Host: egomall.net
Date added:2018-11-07 07:44:06 UTC
Last online:2018-11-19 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-11-07 11:12:01 UTC to ipas{at}cnnic[dot]cn)
Takedown time:11 days, 20 hours, 3 minutes Bad (down since 2018-11-19 07:15:35 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-11-08SWIFT #962249TGL.docdoc e75b2858a88962cfb7818a6908ad01a9682b0074e5f996cede0f59c8a83a3908Virustotal results 28.81% Heodo
2018-11-08PAYMENT #2BTNMRT.docdoc bce51db10983cf29038a23bd49dc6721bab5547a95967b287a481a93e5159b92n/a Heodo
2018-11-08PAY #816IMYVUVLB.docdoc 750977f7a6f6642f593ff5a1bdcfca3efad389a2e9c9eab2aa84cb710ff3fb08Virustotal results 22.03% Heodo
2018-11-08PAYMENT #8CN.docdoc 2bfe239def043a1d53ad539cd2e37754d429ea2f629ec31537d4581279b20513Virustotal results 24.14% Heodo
2018-11-08PAY #2WM.docdoc 53b85c79b1013869f61d0ae8cc2b5d5c4b597206438ca1b5d2798ca56ec2a4faVirustotal results 29.31% Heodo
2018-11-07BIZ #4026172P.docdoc 4a2c9082c452d68532bc11d6bb1d684483dc56453f24f7c18b0378bae9a82790Virustotal results 32.76% Heodo
2018-11-07PAY #6730568WETDM.docdoc 3aee44976014e4229bf068c4f63d4564f8c9d42652b840d0fb76320793ce590aVirustotal results 25.42% Heodo
2018-11-07BIZ #50083ZVPTZM.docdoc 62cb96a1dc38ea7cd8c1738f267ca4ccb0de5253abe722a9b51a247aff9762f8Virustotal results 24.14% Heodo
2018-11-07BIZ #5108V.docdoc 20161a2e35fefc0c81961057bca43b75f206f3839acdd725a7c526ec42444384Virustotal results 20.34% Heodo
2018-11-07PAYMENT #2020ZIMOH.docdoc 8d74c083778f9511c01916d183301686ac09a7011bbfa8f744a5816dc244340aVirustotal results 18.64% Heodo