Authenticate for API access | If you are experiencing issues with receiving data from abuse.ch platforms via API, please ensure your requests are authenticated.
➡️ Read here for more info

MalwareBazaar Database

This page shows some basic information the YARA rule ach_Heodo_doc_gen_2 including corresponding malware samples.

Database Entry


YARA Rule:ach_Heodo_doc_gen_2
Author:abuse.ch
Description:Detects Heodo (aka Emotet) DOC
Firstseen:2020-08-10 09:11:57 UTC
Lastseen:2023-01-28 19:23:54 UTC
Sightings:9'424

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter