URLhaus Database

You are currently viewing the URLhaus database entry for http://beirut-online.net/portal/service/vertrauen/04-2019/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:183440
URL: http://beirut-online.net/portal/service/vertrauen/04-2019/
URL Status:Offline
Host: beirut-online.net
Date added:2019-04-23 23:11:06 UTC
Last online:2019-04-27 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-23 23:12:01 UTC to abuse{at}host1plus[dot]com)
Takedown time:3 days, 18 hours, 39 minutes Bad (down since 2019-04-27 17:51:54 UTC)
Tags:emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-24ZB_63606312_24042019.jsjs b7fd23feb71f19a87e0130334f8dcbc28479db18fbd6ba0a89e9a64dc525c919Virustotal results 12.07% Heodo
2019-04-24RK_308924_24042019.jsjs fefeae81b80a964d3c5ea9071faa2c207766e7b929a15049a4aa2087e56684daVirustotal results 7.14% 
2019-04-24GH-513492074-24042019.jsjs f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0fVirustotal results 10.71% Heodo
2019-04-24X_7608949_24042019.docdoc 9232b0e010c1cedde8ff734bec0c473c1a5ba9d0836be731d58f64114d485a97n/a Heodo
2019-04-24NV_113306_24042019.docdoc 23988dc5258042cfb2919c1647fc977789aab07461db0b244fe5efbde82885e0n/a Heodo
2019-04-24ZV_70579091_24042019.docdoc 15b76f000b9a6bdc9237b8b67e2c3e63b5bf72a09b746bdc531de99c14362fd1Virustotal results 24.14% Heodo
2019-04-24Y_827555452_24042019.docdoc c73c9d8340438ecfcad1f82d3b1a2726858de091df6946cf3c62990d8dbfc469n/a 
2019-04-24B_587814226_24042019.docdoc bfc6f5780109d9395f042d83bf54f5bd0b45a0f4a511181e0f0b7f65e6768442Virustotal results 24.56% 
2019-04-24U-42186419-24042019.docdoc 5d7e5147091fb427b5b8859e9ce0a6ed4c30f753dae6ee3ccbf102e8fa1a4160Virustotal results 24.56% Heodo
2019-04-24CY_95007528_24042019.docdoc 9e7dd8e9ea5a6f360878a30d733c3ad5e2ed98c6f833b4e3af59254b9ce0d628Virustotal results 41.82% Heodo
2019-04-24DW_881384129_24042019.docdoc d88cabf4878cbd547f99e3340a2572dcd994eed060e585e8dfbb410d1470a5b9Virustotal results 40.00% Heodo
2019-04-23GL_61056988_24042019.docdoc 0139354581b4e0e3ef4c47f37f8c206dab1b1b127be0f918cd2d6c0508410cb9Virustotal results 35.59% Heodo
2019-04-23N_750654902_24042019.docdoc bcede356fe3a1fe4011c02e414df56c3064e979549b01b2d7a3284452ccf9bb4Virustotal results 42.11% Heodo