URLhaus Database

You are currently viewing the URLhaus database entry for http://nchs.net.au/De_de/VJFPODH9882475/Rechnungskorrektur/Zahlungserinnerung/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:98245
URL: http://nchs.net.au/De_de/VJFPODH9882475/Rechnungskorrektur/Zahlungserinnerung/
URL Status:Offline
Host: nchs.net.au
Date added:2018-12-20 11:46:37 UTC
Last online:2018-12-26 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-20 11:48:15 UTC to hostmaster{at}ozonline[dot]com[dot]au)
Takedown time:5 days, 22 hours, 20 minutes Bad (down since 2018-12-26 10:09:14 UTC)
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-20this-site-is-virus.docdoc c2e393ff568f4a87ce48011f10664138e569710f56ddc0462aa7f36bdad5ecadVirustotal results 1.69%
2018-12-202018_Dezember.docdoc 329494a7e736cae4357c67b7af90547c56028a5f47df6d90fb5b577f33e01cafVirustotal results 25.00% Heodo
2018-12-202018_Dezember_9020326008.docdoc ce04fba3f5fe9ce231b6ca7e96d1c9e290c60baf433d01c6b7a96d2134743bffVirustotal results 22.41% Heodo
2018-12-2020_Dezember_2018_4811724169.docdoc eb3611367b8b5c6346013c0f23c8d1bb4a7234391e5c72e6013a2586fe7873e0Virustotal results 25.00% Heodo
2018-12-2020_Dezember_2018_0618977469.docdoc 5e8f2518fe598022240d7a1c92176c86689a7fb1b05f557e43bcbe66a20abd8bn/a Heodo
2018-12-202018_Dezember.docdoc dd5d21a8451686dbb99d458ba82a867e5fb4ed8178e4d67db7a63c85b776d42dn/a Heodo
2018-12-2020_Dezember_2018.docdoc 39cf05ae23047c8e27e403e7d00f48501055782ae9207faac7bb72416be8dad8n/a Heodo
2018-12-2020_Dezember_2018_15_27_25_Uhr.docdoc a26f660ca616dc12f094261b02be1b4d70dff1fa2c1d15eb3f7b8b590e1b3754Virustotal results 25.42% Heodo
2018-12-202018_Dezember_5567947782.docdoc 74d5fd8d413e3c39eb60c51081255b3a39b97829ac65402e057e8e2ca0816680Virustotal results 24.59% Heodo
2018-12-202018_Dezember.docdoc 3784d9ca2ad2a8e9de322edddca0f153ceef2207337001383d276646b6f75136Virustotal results 25.86% Heodo
2018-12-202018_Dezember_14_11_51_Uhr.docdoc 8a117a8dfa6f66d1796bfa7b7cda9d433647b01430e60646799a7c31de64cbabVirustotal results 25.00% Heodo
2018-12-2020_Dezember_2018.docdoc a5fd98a875cadb20c281ce6fe36a8c84f9b286feb4583fe6ff35a52245bef6e9Virustotal results 25.00% Heodo
2018-12-202018_Dezember.docdoc 4cb8f0d8cd3349a25bc8fd6703b8d7d2092e2354dd71d04f6cce46033902f3f3Virustotal results 25.42% Heodo
2018-12-2020_Dezember_2018_13_29_12_Uhr.docdoc 4b980be36fd3227dde92fa9793da100159b14b7568158bb3cc172496a10bbc5cVirustotal results 26.32% Heodo
2018-12-2020_Dezember_2018_3745009983.docdoc 2d563b2b755324cad78b6093974105941cb8298187b7ecdb617725082fc18527Virustotal results 25.86% Heodo
2018-12-2020_Dezember_2018_12_46_26_Uhr.docdoc f56b2f1076360a1fc4dbdcd3ea194b601340f2018a4c24c516239860a7c64752n/a Heodo