URLhaus Database

You are currently viewing the URLhaus database entry for http://zvarga.com/wp-admin/verif.myacc.send.net/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:168768
URL: http://zvarga.com/wp-admin/verif.myacc.send.net/
URL Status:Offline
Host: zvarga.com
Date added:2019-03-29 22:32:03 UTC
Last online:2019-04-10 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-03-29 22:34:03 UTC to abuse{at}ezit[dot]hu)
Takedown time:11 days, 16 hours, 19 minutes Bad (down since 2019-04-10 14:53:36 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-30NEW_INVOICE_201903_X9_4-25_R776.docdoc e3b3b7e792e5fb1f55a41e6e4fcaa8b0879ef24316e88743acf6abbad07a40a1Virustotal results 42.62% Heodo
2019-03-30UNTITLED_FILE_R3_14-07_G5594.docdoc b66e74f4c8f27d8a59962aff50aeb6a9ae7a506de6d104f07a12f979b9ce87a2Virustotal results 39.66% Heodo
2019-03-30NEWFILE_032019_M9_26-45_P2355.docdoc 23909f2c0e9d3ecfcc04b0e570a6cfa68fa25fa695449c3b6b027671f1f3f506Virustotal results 41.67% Heodo
2019-03-30032019_A5_5-50_Z307.docdoc 80fe6b69eab7286a5140cb5c7031dd93c5639ec88e099cdf26d34f58a89e3a26Virustotal results 36.84% Heodo
2019-03-30last_invoice-V7_17-95_R395.docdoc 856b250c29e5d89558be3ac4c1e46e6213c3afa9779941ff91649fedb7395322n/a Heodo
2019-03-30UNTITLED_FILE_F2_96-02_Z211.docdoc 4ecb339849b1ef92965c56b255fe8d1cc2a207d921a353fd7251557bbe805c5an/a Heodo
2019-03-30INVOICE_DOC_032019_S5_83-75_U7408.docdoc a063cc23e5fc094b3c22dbe427eef18190da83c2c18bcee636d9efa3edc5b911n/a Heodo
2019-03-30eINVOICE_FILEU0_4-64_21160.docdoc 808384588ca8f55ca5414fd9a491c1dafb7e3975078a7a141d0b38e85d720cc7n/a Heodo
2019-03-30last_invoice-03_2019_T2_91-67_Q3013.docdoc 60803b31c98ca053f7819729d8d04c2c8006df066e8be09523f1086ac6967482Virustotal results 36.07% Heodo
2019-03-30INVOICE_DOC_N6_17-34_B696.docdoc 31c2b129dfca68d79eebd9c0d7272fdf063ca2757bfeec761ff2a408b04a95f9n/a Heodo
2019-03-30inv_num-201903_F8_85-13_73499.docdoc 88896e5a88059a96a426a2a4b5678f0a1bc4a765914c887e1294111e21a7de88Virustotal results 22.41% Heodo
2019-03-30O7_14-49_98288.docdoc 36ccf2b5667356bc4c18b3ff7a500b51fc335ef742d7ade59c5483335f0658aaVirustotal results 25.00% Heodo
2019-03-30NEW_INVOICE_03_2019_S9_95-61_P5861.docdoc 6f7a5da7560741d00e22ce436b6c7f726656b4e297331475eebcdae9c25797dcn/a Heodo
2019-03-30INVOICE_DOC_J2_0-58_8182.docdoc c02682fb70ec27e4fb94f9a7a3e454c8a54422ab494026453ce30adff8d93544Virustotal results 22.81% Heodo
2019-03-30NEWFILE_03_2019_D9_7-57_V560.docdoc db59029206dd5a1e079f0081973cc359c59c5cc342d5467c79988b5d300f19dfVirustotal results 23.21% Heodo
2019-03-30eINVOICE_FILEQ8_4-79_K058.docdoc eb74c77ef976026acb9ebdf5060cf8872d8bc33e6405acffb629c69a965fbf7bn/a Heodo
2019-03-29NEWFILE_C3_33-17_P9646.docdoc 3d43f587467751711c642dc8618e846e9feb8b2a109cb3e2b06391b6ae435d97Virustotal results 22.95% Heodo
2019-03-29S5_0-11_S7840.docdoc 6b3d67b747e39ed6351fe318149a60af1cdb45c613898be0302262038418c404Virustotal results 22.81% Heodo
2019-03-29OPEN_INVOICE_V5_4-77_69448.docdoc 313ceba4e223469e9dd1abb11dc28ddac64dcf12119508990f787af380a6ba9eVirustotal results 22.41% Heodo
2019-03-29O9_59-81_U7081.docdoc 4224f254d24af2be096ac5facd06654fbc003e78a566150541f95a5a7fabd48cVirustotal results 20.69% Heodo