URLhaus Database

You are currently viewing the URLhaus database entry for http://www.needrelax.ru/ZyNJL-DY0Pu_dLhK-vTp/ACH/PaymentInfo/US/Open-Past-Due-Orders/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:104124
URL: http://www.needrelax.ru/ZyNJL-DY0Pu_dLhK-vTp/ACH/PaymentInfo/US/Open-Past-Due-Orders/
URL Status:Offline
Host: www.needrelax.ru
Date added:2019-01-16 12:20:31 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Status unknown
AdGuard :Not blocked
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-01-16 12:22:22 UTC to abuse{at}reg[dot]ru)
Takedown time:22 hours, 56 minutes Good (down since 2019-01-17 11:18:24 UTC)
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-01-17PAY883045341556610810.docdoc d22a0418df5b3f9426caa353e24c005d7746b4713ceee32cbbb886041a60d195Virustotal results 22.81%Heodo
2019-01-17PAY2014132772053418727.docdoc b9ab4e7c43dac00ea2c9a9ba1edb5a0bdc88051f5c338219013fae013e703cecVirustotal results 21.05%Heodo
2019-01-17US267990721.docdoc 8c27ab6286b9b097166a1717df3186f92ef8c1037e2c2c89b8e7834482109d4bVirustotal results 17.24%Heodo
2019-01-17US34756695832027540897.docdoc 91b9982b4dca79753b777f715dc8ddc5ff4e8a239b6bc9696ac08a11797165faVirustotal results 18.97%Heodo
2019-01-173092565191322.docdoc 41add585179248d024e692e5f320abbf18309d3e28871d0530d29a4db8f4ba69Virustotal results 19.30%Heodo
2019-01-1797426035599417799.docdoc 34db885f2f34af721ab4e883ed9a6e88189b826bcbdbfc33317047925bf837a5Virustotal results 19.30%Heodo
2019-01-17PAY1179162945.docdoc f206e303c4362a8c1323028dcec49e88e0ff0f92b1f55d5b426a62c1c0a137e0n/aHeodo
2019-01-17ATT89354525006857.docdoc 7e4852c4cf7201cf46af76adc3297244bdc76f8bda1e335289b8968fe0816088n/aHeodo
2019-01-17793884239981.docdoc 705956af8decec2d5d00a608f47f8c0b465e3efb822ebf30506eaca3677c0583n/aHeodo
2019-01-170382941069.docdoc 02b7b41ed6ac77f1c2738385bcb72c0ab6e4b1cd502575fea7fd753db725b065n/aHeodo
2019-01-17862038368495.docdoc eda5d75634496c6c55489422d32d0bc3c7ac367ccdcbf34467da8d95bfffb1d9n/aHeodo
2019-01-17PAY697760087270.docdoc 2f742774f4a17e593854bbd608780edcce7cbd943ed01b10cd1728f90f526945Virustotal results 17.24%Heodo
2019-01-17US712851441322.docdoc 4769752d4529fb52228b01b130d8f56e5f2cbd18db9b5a5e3d03856ff58bc3a5Virustotal results 26.67%Heodo
2019-01-17PAY99873144184133669.docdoc 5aea4f670711c2c08df3cea6f7076d75eec7fb3c2c12a0e6e71e18e6ac21b042Virustotal results 25.42%Heodo
2019-01-17ATT8549191427.docdoc af11300d5b2c379e374e85bfd77ad15c96442f200af2125cd5d79b681e22cb54n/aHeodo
2019-01-17US51744192178.docdoc 967d8dddad0f7e2b2fb84bfb4c49534fae714bfbfc75616b7756f5a67be5e3b3n/aHeodo
2019-01-17US1661653302050567355.docdoc 08d2f41450b5c87d2194cf2f5e663de31020640b1903616fd9f23911c40e5872n/aHeodo
2019-01-17PAY23867503275.docdoc 350d310084f14f6e88a8acb6adbcbd248b89e77c200a03b45db2276ae59fdebcn/aHeodo
2019-01-17US235148692019.docdoc ebdf5f0225e32c80eb88cf53652a0d92fa855b612fa8044e586d304fc8010bc7n/aHeodo
2019-01-17ATT8261078818.docdoc f703b68a03a30b32bff6dbef96665f960871d69ea6c0b9a9fc2f43dde061cbf7n/aHeodo
2019-01-17PAY53660825306271.docdoc ca805254ac49b9c4f36fd9c13ea6f053614c7f7c5227d40e2e7d5ca529873297n/aHeodo
2019-01-17ATT45565039224.docdoc 7463cfdd3562d9f950c1ff9c7d60f5a1cd87be03b16b7ea120d4a945b1bf147dVirustotal results 22.03%Heodo
2019-01-17ATT51805028152083792.docdoc 9e029e7e84abd91bc4045b2e94be71a178b07a91a8ac0745f1b3d520816ca256Virustotal results 21.31%Heodo
2019-01-17ATT4976521252677132068.docdoc 30afdd7bb8e1599ed650397fee21197abb47a871fa4c5dbe58c2ba977ff1cc3cVirustotal results 22.03%Heodo
2019-01-17PAY25439503968062068785.docdoc 141b85270a591157af1369b2729034eb5cec87445b3fb604ac5df6118ad77a2bVirustotal results 24.14%Heodo
2019-01-17US352855913327033.docdoc 5263d5b52ab1270adb432db5bdab2adf613c65c07adc8c71d505f737cd6d61e6Virustotal results 22.41%Heodo
2019-01-16PAY70885195824.docdoc 7af0310a3b108e72739535916ef251b916f3cdf56478e460d230f28f6edf59bdVirustotal results 22.03%Heodo
2019-01-16ATT453563252741.docdoc c36d7096ef6b23ad823450baf8544a5a1337363b370ca54c971ff69c2f0629c4Virustotal results 21.67%Heodo
2019-01-16US101832070.docdoc 0be992cf0ec92ada0f3428723f9bf54697d9a70484f040a77eac7f4b692d2e9dVirustotal results 20.69%Heodo
2019-01-16PAY88908138532.docdoc 312f54b6b90612eadcd9e6786b3f773ab42181cab474245f05cc5289fb654353Virustotal results 21.67%Heodo
2019-01-16US525852070701581.docdoc 2726b6cc1bc68f26375b54c619658e1f20accb8573d4952e878baeb05fd24d04Virustotal results 20.00%Heodo
2019-01-16ATT92818063029052381873.docdoc d890f2319d290366dc67d7ae02bca217ca67c99962de05a0f3f6fef9e51d4b4bVirustotal results 20.69%Heodo
2019-01-16PAY9821258347173.docdoc e1e2f66cee0e652e0decfbe57562ec0b7956306a0663a6da0562acb1e8c9ee69Virustotal results 20.69%Heodo
2019-01-16ATT604835952633481.docdoc 326bf3bbc582b97e7beac70fac7ef9af383fb7c8f4c8bd4067ce4bc931f40dd6Virustotal results 18.64%Heodo
2019-01-16ATT290946532412293.docdoc 33868d985d0751c5b2850beca90f23502600245203cb8ff210ea08b52dfa87e1Virustotal results 20.34%Heodo
2019-01-16ATT1279442219526775342.docdoc fa59df0ed78b6bb35a62c62cf8a6b2047830349133f7c3feb2a359c7640d1b1fVirustotal results 20.34%Heodo
2019-01-16ATT64068846714873.docdoc aa45e32651af4fbe9065dc15e2567c44cc8f531270f8dcb201a5df7a4b21f03an/aHeodo
2019-01-16ATT584985863.docdoc aa058e92abb942b1d8cb4cf0673e9f6cb944a2254869993409bdaecc08a085c8n/aHeodo
2019-01-16PAY9993515910.docdoc 144ed374a219a0aca02308a22b1e5a7deeb1b50b941f20f62df14a154c917339Virustotal results 27.12%Heodo
2019-01-16US14905481043832409870.docdoc 01410e94e39c764aa99b933ac899a04eba0a77b25ecd1345f99253f37e9dabfaVirustotal results 23.73%Heodo
2019-01-1680010116034.docdoc bd5d297c6e80ab3112e2f036fa94f69b78b12ffe846e1241641b5cae1b817225Virustotal results 23.73%Heodo
2019-01-16604817934361304.docdoc 0c77c98412d30765b2d8c8bdd38f503927770c0a08b45cbf812b1a2cc1240b28Virustotal results 23.73%Heodo
2019-01-16PAY985357979.docdoc 0de7aec904c9368df76e8115a8b381d99f6fd482717c2fa52b26a5ba5c630694Virustotal results 24.14%Heodo
2019-01-16PAY57964135252021.docdoc 8264951fece26c1068d84de8b18ea3adef89a93e476d02d46a31b8739baacd94n/aHeodo
2019-01-16PAY690375156516.docdoc 8a3af6bff6a0a4ca4f906b3695e470fb18a0da7989a96c02204ba500c0c1a2c1n/aHeodo
2019-01-16US0789477517392093.docdoc 22221150a875fd5e24ee0a554b2cdead6543e35b6899641a3f21425c632b0201Virustotal results 25.00%
2019-01-16PAY24741707903.docdoc 1b648318e9ce3b8d8cd0e334446100c5972f74af736d093f0fe3b62597708b5cVirustotal results 25.42%Heodo
2019-01-16ATT67966183690.docdoc e7c1d077cbd3dd185b7e7ecd6ed2f0195b2ea098e571c78ba60da5cff90c897bVirustotal results 21.31%
2019-01-16ATT4727355802468056275.docdoc 90113ff1e4b8bb81a5f9eab309f7fa4eb349ccf741a13ed040787e3399d6eec4Virustotal results 21.67%Heodo
2019-01-162853975913802067276.docdoc eb6f43d211af30b46724e72e2c9ad9b363f3c9e012ce5fc389c997ec16c5b122Virustotal results 23.33%Heodo
2019-01-16ATT70842750100167.docdoc 8eae2ed2491c609398b61e288147d6071fd51ab08ab785c6fe770f83dc0152b4Virustotal results 21.67%Heodo
2019-01-16US54712875979323720095.docdoc 74b9305b76f521916b8c989d7e650c8f5a5bd9bd93700ec6f8de7e3093e34b20Virustotal results 21.67%Heodo
2019-01-16PAY3534179902938.docdoc d889f9026c11807d7c5eb44b27475d33b7960398bf2abf7acba35b381de99380Virustotal results 22.41%Heodo
2019-01-16US21375231698571782447.docdoc fc3047318d92da05133c410c2b7847da7e9beed33d7d294265d90f50eca8bc3fVirustotal results 19.67%Heodo
2019-01-16ATT54114198486159212.docdoc dd23bb0569b6a1f3960229b92aafd0100f13d1ca949a5d8cd961e94397f698a0Virustotal results 21.05%Heodo
2019-01-16ATT6228708261916.docdoc 703bb961a600f69e6084b19ae9a88663539667160d6caebe2e96c0a03f4affd8Virustotal results 18.97%Heodo