URLhaus Database

You are currently viewing the URLhaus database entry for http://techmakers.com.au/generationman/g/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:761575
URL: http://techmakers.com.au/generationman/g/
URL Status:Offline
Host: techmakers.com.au
Date added:2020-10-28 16:16:14 UTC
Last online:2020-10-28 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 16:18:11 UTC to abuse{at}ovh[dot]net)
Takedown time:5 hours, 19 minutes Good (down since 2020-10-28 21:37:36 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28inf_45835099.docdoc ff451db73672e713a3b5a30084d42b5d09a39ca3651cbb1b3c15ce4b18234592n/aHeodo
2020-10-28Dat_VR8655905783DM.docdoc 6e663577a7ba709bc7fb008addc85b8177361cb8fe92f3c79ab88bcecd10783an/aHeodo
2020-10-28DOC_QK6129312428AE.docdoc fc6ba0089f3355775a62f986bcdebe3bf7d58d1934d524e952f9279bb82cce68n/aHeodo
2020-10-28Mes_JQA_100120_SIE_102820.docdoc b371296f8fbf9abe8b4b7ea3534ea790f2931a49ece8ad2437ddd22e1d03625an/aHeodo
2020-10-28INF_JZ083QR.docdoc f25bd084ce8d81cd2533601965f19c49105798af5fa7465757626b6cd057dd61n/aHeodo
2020-10-2889876040.docdoc eae43aeb02650178d0fd02ed1c824f36d89c2a2950399621c4a7c29ecb8d7e73Virustotal results 19.05%Heodo
2020-10-28dat_PO_10282020EX.docdoc 74bb58aee05391c699fefedb79da019fc9e7b0d6d81d068d0ce1d192cc9e4556n/aHeodo
2020-10-28785244462.docdoc 290d99668c637b392210c43c77b9672357db0df908a2cee8c6c84399c0f3dc55n/aHeodo
2020-10-28Doc_PO_10282020EX.docdoc 3bd7bff850a4570a7bb97f9e98579d7a02f229ccbec50ec955257f9963ca0b5cVirustotal results 17.74%Heodo
2020-10-28FILE_Y8920B80C8EM4.docdoc b1bc33186fb8cfcd82b5c2472804eb7ef43ae164d2879c71d0c38ddc5f9ecf61Virustotal results 17.46%Heodo
2020-10-28LIST_SJK_100120_BDY_102820.docdoc b764a906f404eacb88f0ea963d1c2a00402af7f29a340c7aa95b911892be6b30Virustotal results 17.46%Heodo
2020-10-28UNTITLED_G61I3EEM.docdoc a1d186d5fb1e72178aeec7001aa59b78764e0c5405470905e737baf9cec89c26Virustotal results 17.74%Heodo
2020-10-28FILE_PO_10282020EX.docdoc a3f1465cf2e8a92e8d9f932ab8d561cd6a02e5f832b42bfa856a5cac7fb96566Virustotal results 16.67%Heodo
2020-10-28arc_6808315184644705869.docdoc aa825d666a2394dad05c014830cd132ecdbabfe1dcfd7e7eba18ed43bda6de33n/aHeodo
2020-10-28ARC_004309459330325496.docdoc 5fcda50da77323acc30f1b703c2504b8b3ac07997068672294ea312703ef0ea2n/aHeodo