URLhaus Database

You are currently viewing the URLhaus database entry for http://genf20pluscoupons.com/IVLPOY3374582/DE_de/RECHNUNG/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:98237
URL: http://genf20pluscoupons.com/IVLPOY3374582/DE_de/RECHNUNG/
URL Status:Offline
Host: genf20pluscoupons.com
Date added:2018-12-20 11:46:19 UTC
Last online:2019-01-02 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-20 11:48:16 UTC to abusencc{at}interserver[dot]net)
Takedown time:13 days, 9 hours, 10 minutes Bad (down since 2019-01-02 20:59:00 UTC)
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-20this-site-is-virus.docdoc c2e393ff568f4a87ce48011f10664138e569710f56ddc0462aa7f36bdad5ecadVirustotal results 1.79%
2018-12-2020_Dezember_2018.docdoc f403b2e655b34c03cd33f3302d98c38f2a755aca008c4c14c29211920829d26bn/a Heodo
2018-12-202018_Dezember_19_35_23_Uhr.docdoc 200e9f0ffaa1c07ee596212059e01280bbaccfa6c22d54414068c28d30a81160Virustotal results 26.67% Heodo
2018-12-2020_Dezember_2018.docdoc 92e39ac764a910ffc06acf41e43187003fcdc10d4076faa2640a4ac79e924cceVirustotal results 27.12% Heodo
2018-12-202018_Dezember.docdoc 03a85e11c44190d01ca2a7123195e82cfd67353d0763218abb349bd7024b6509n/a Heodo
2018-12-2020_Dezember_2018_5292807032.docdoc 56a37928d0549592fe5cb4b33066c442ef2b37ec15612d5777cde3f44ab7fa2eVirustotal results 26.67% Heodo
2018-12-202018_Dezember.docdoc d64cae7e0840e557ce0d4bd8f0b043ac1831d4c963dbffb4dbb494874296b91aVirustotal results 26.67% Heodo
2018-12-2020_Dezember_2018_2176372976.docdoc 85386588dc3f29e5f3bbde3ab9fc6cba826c293bbfce11b6c3f1a4403f9e2ae8n/a Heodo
2018-12-202018_Dezember_18_03_38_Uhr.docdoc 4395acd17c017d2fea93612e75e28ce1466b2e5f3528f532bcd75dba7d6ac787n/a Heodo
2018-12-202018_Dezember_0245921063.docdoc 622758f212cc724f8223469c85f5883ef21aea22e6ec4a59a2b6ef0fd70fea93n/a Heodo
2018-12-202018_Dezember.docdoc 329494a7e736cae4357c67b7af90547c56028a5f47df6d90fb5b577f33e01cafVirustotal results 25.00% Heodo
2018-12-202018_Dezember.docdoc ce04fba3f5fe9ce231b6ca7e96d1c9e290c60baf433d01c6b7a96d2134743bffVirustotal results 22.41% Heodo
2018-12-202018_Dezember_4633414463.docdoc eb3611367b8b5c6346013c0f23c8d1bb4a7234391e5c72e6013a2586fe7873e0Virustotal results 25.00% Heodo
2018-12-202018_Dezember.docdoc 5e8f2518fe598022240d7a1c92176c86689a7fb1b05f557e43bcbe66a20abd8bn/a Heodo
2018-12-2020_Dezember_2018.docdoc dd5d21a8451686dbb99d458ba82a867e5fb4ed8178e4d67db7a63c85b776d42dn/a Heodo
2018-12-2020_Dezember_2018_2704266440.docdoc 39cf05ae23047c8e27e403e7d00f48501055782ae9207faac7bb72416be8dad8n/a Heodo
2018-12-2020_Dezember_2018.docdoc a26f660ca616dc12f094261b02be1b4d70dff1fa2c1d15eb3f7b8b590e1b3754Virustotal results 25.42% Heodo
2018-12-202018_Dezember_14_56_45_Uhr.docdoc 74d5fd8d413e3c39eb60c51081255b3a39b97829ac65402e057e8e2ca0816680Virustotal results 24.59% Heodo
2018-12-2020_Dezember_2018_7909682507.docdoc 8a117a8dfa6f66d1796bfa7b7cda9d433647b01430e60646799a7c31de64cbabVirustotal results 25.00% Heodo
2018-12-2020_Dezember_2018_3674762318.docdoc a5fd98a875cadb20c281ce6fe36a8c84f9b286feb4583fe6ff35a52245bef6e9Virustotal results 25.00% Heodo
2018-12-202018_Dezember.docdoc 4cb8f0d8cd3349a25bc8fd6703b8d7d2092e2354dd71d04f6cce46033902f3f3Virustotal results 25.42% Heodo
2018-12-202018_Dezember_3482698140.docdoc 4b980be36fd3227dde92fa9793da100159b14b7568158bb3cc172496a10bbc5cVirustotal results 26.32% Heodo
2018-12-202018_Dezember.docdoc 2d563b2b755324cad78b6093974105941cb8298187b7ecdb617725082fc18527Virustotal results 25.86% Heodo
2018-12-2020_Dezember_2018_12_36_36_Uhr.docdoc 50bfc1fa82b892d663fe87bb2c1dc16c1d87cf443a5d458b42d2efba50edac0fVirustotal results 26.23% Heodo