URLhaus Database

You are currently viewing the URLhaus database entry for http://flatbottle.com.ua/@eaDir/LLC/Xyw1mKTSV25/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:188197
URL: http://flatbottle.com.ua/@eaDir/LLC/Xyw1mKTSV25/
URL Status:Offline
Host: flatbottle.com.ua
Date added:2019-04-30 19:27:10 UTC
Last online:2019-09-10 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-04-30 19:28:08 UTC to abuse{at}ip[dot]datagroup[dot]ua)
Takedown time:4 months, 13 days, 0 hours, 39 minutes Bad (down since 2019-09-10 20:07:22 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-02LLC_095662400299US_May_02_2019.docdoc 9412268f1f2c0eb9a06cc682d774e05495a3b4e468749c77e157a5a354c2c8d8Virustotal results 38.33% Heodo
2019-05-02Document_2143650684US_May_02_2019.docdoc d658d1c903a310720f251727c6671496fd6e83e4993c4646ec6bd48b2e3d6207Virustotal results 35.00% Heodo
2019-05-02SCAN_130041812936US_May_02_2019.docdoc 0a0052896d023efd6db21fdb504e996474df83abcfe4ffb55b55bfd894125505Virustotal results 34.43% Heodo
2019-05-02DOC_26166549883US_May_02_2019.docdoc 0b7bd2da70c954088c58dbc28b9470dbb262ba21c13648eafd0a15b4814cf9d2Virustotal results 34.43% Heodo
2019-05-02LLC_40872775830US_May_02_2019.docdoc 11f45c2f0d6d243306cbd6c70c01f1efb2050836b14f4d669b7a471511ade739Virustotal results 26.67% Heodo
2019-05-02DOC_6245373352US_May_02_2019.docdoc 29d5a0eb1f8b938839724b100c9d78b140e82567e8addd0d15bf06f98e61de90Virustotal results 27.42% Heodo
2019-05-02LLC_821922743127US_May_02_2019.docdoc 692814008db3acff680edd583633e98789c8458f795753f459410f89869d59cfVirustotal results 27.12% Heodo
2019-05-02INC_87796850665US_May_02_2019.docdoc 676593b3137422bae95a34c1bc6e6c4966e8a1895feb948faa1c8edddef80e2cVirustotal results 27.12% Heodo
2019-05-02INC_0159778728US_May_02_2019.docdoc 456c3edf43e0677174dad7da916faec9c2534520655a62ad5be950b123060daeVirustotal results 27.87% 
2019-05-02FILE_1529513596US_May_02_2019.docdoc b1dced28edb0f204dfeddacb104281bf43b041d6dfb17f063aed46e5b5437998Virustotal results 33.33% Heodo
2019-05-02SCAN_0774231050US_May_02_2019.docdoc c00f51900f0ea1f2b2f180fce863a775f22285c5e714f71db05511ebbff40bffVirustotal results 31.15% Heodo
2019-05-02DOC_13964621389US_May_02_2019.docdoc b0ac55a9a3533916702fcb365a321abaf4990b73459a2fd1a32a3378cda957edVirustotal results 32.26% Heodo
2019-05-02DOC_7353842430US_May_02_2019.docdoc fea2192a0625af323042fe1f31e647d6a4be939d0ad615b8eae445e1d29bfd8cVirustotal results 31.67% Heodo
2019-05-02LLC_313773180017US_May_02_2019.docdoc 195a1fb436c1c7497259f18d4332423f886a38242d824dfc498ee40625ab82c5Virustotal results 30.00% 
2019-05-02INC_981976666494US_May_02_2019.docdoc 7f1c516c36a737bf48d2ec5556e1e3232d47994d94c10675f7c00ba10b04aa00Virustotal results 30.00% Heodo
2019-05-02INC_736962420762US_May_02_2019.docdoc 17f4ae8fba484e7fb87c16216ece4622556d70db4d807d8b0a4ac207eba7d015Virustotal results 35.00% Heodo
2019-05-02Document_7957163930US_May_02_2019.docdoc 8849cbdb89ef44865f23e8745eee176d529ca564c20c66da99aa5c04db555ec3Virustotal results 35.00% Heodo
2019-05-02FILE_701198983903US_May_02_2019.docdoc e39ace0837155e85d59f5059bfe202ba3de02a88c848a6067c9965cadb79c5aeVirustotal results 36.67% Heodo
2019-05-02INC_520424784060US_May_02_2019.docdoc 4208aa9b2a8e40195be3444efc9bc9cd2accf732b249c921025207feb62a0970Virustotal results 34.43% 
2019-05-01SCAN_708163295610US_May_02_2019.docdoc 07ad82ee6f552024b89e9569759078672295762694af017f35f64bb7284b93c3Virustotal results 35.00% Heodo
2019-05-01LLC_47928520030US_May_02_2019.docdoc 438757f58f956c0bf3c4d88c3270f25c6bef6cc6c7599d01e2050871e1c7ccedVirustotal results 32.79% Heodo
2019-05-01SCAN_77867019629US_May_02_2019.docdoc 1f4a46bf19d090bee1282d5920e1ce502620c0a50cb4d5165d735d5b52e4a79eVirustotal results 33.33% Heodo
2019-05-01DOC_780836393903US_May_02_2019.docdoc f28f62f33ff6ea0d8d9708e54142e83603afe0bcdcf1206bca2f2dfa00e05b0cn/aHeodo
2019-05-01SCAN_3989513807US_May_01_2019.docdoc 811f6ec9cc7105d1b81e5352a0b9f90df420a293afc43ba91507952e7cb49f72Virustotal results 33.33% Heodo
2019-05-01DOC_67972391156US_May_01_2019.docdoc f9aa8059e3a7418a2e686036ca8198cde4ba026f1d0b05ba2a32774825fb71a8Virustotal results 32.79% 
2019-05-01DOC_5142431829US_May_01_2019.docdoc 3b338a2b75997eba6f9666aaea6f422da3e38754657f4be7f7e0e9967c479a63Virustotal results 31.15% 
2019-05-01Document_1904534034US_May_01_2019.docdoc 9c51bcdb82373007744c0dd18a11c06decaa000f48880f23f1bf9a335e5af053Virustotal results 29.51% Heodo
2019-05-01FILE_562770794962US_May_01_2019.docdoc dc49d2d7421719050d62368d665c84629bb08d6874ade0bb8940f133b619d9aeVirustotal results 31.67% Heodo
2019-05-01INC_0881375450US_May_01_2019.docdoc 2ade167cc02b318750feb789c0476581e4f2e0864c3a51fd65bd74c25534a74eVirustotal results 33.33% Heodo
2019-05-01INC_65173039104US_May_01_2019.docdoc 1a6641086b78035d6c9ba38c7199aac02d37dafbadf96059a81b6f4c35e49f84Virustotal results 26.67% Heodo
2019-05-01INC_076094747908US_May_01_2019.docdoc 68e686c3f2b87d3169766ffe4bba021a8acd7648ca38c6c75be829a864558ecbVirustotal results 26.23% 
2019-05-01LLC_0484756134US_May_01_2019.docdoc 49b5e70a242f984eadee49435aac4371ca3cb65b02b2f6fbcbfcbfbd9d985782Virustotal results 26.67% 
2019-05-01FILE_236012453092US_May_01_2019.zipzip a70e3544dabf9bc89a8ee1b5d824aeb6fa08cdcac0715b03ae43dd4d846cfc2en/a 
2019-05-01FILE_700064134277US_May_01_2019.zipzip 0d39186acfed804174b4d1b5153c65dd5caadb3ae83598c8894cf329b7db506dn/a 
2019-05-01LLC_26150777219US_May_01_2019.zipzip 6b1e7e15ec286bee251eed69e32d95687740244213c42d7ae82ffe7ac872c327n/a 
2019-05-01SCAN_6609948921US_May_01_2019.zipzip 5083cd37b75da875e52c5b056fab6c97f104b8771fd603a94403fc9d1f83493dn/a 
2019-05-01LLC_0509511501US_May_01_2019.zipzip 8ee230e61da245bd4e4b334581ced8c35f79232abf59334273421dc7b9de5ba5n/a 
2019-05-01SCAN_19861827525US_May_01_2019.zipzip 210a9b9e62121ed7d8426ed84086c0dc9d060b07fc2e7c1c3e7052c31284d29dn/a 
2019-05-01Document_05390394103US_May_01_2019.zipzip 3a27609a3e46bb5aa187c56dce21e3fee64c66939b71e58102b99a15bd6b58feVirustotal results 16.39% 
2019-05-01LLC_508408394180US_May_01_2019.zipzip b8a4216e9f834dd81c6718bbcb1da7987c4f354dd5438b1bf2adebec0dd14326n/a 
2019-05-01FILE_5026524521US_May_01_2019.zipzip c5d571a428d54a086139756ca3aab9540a9fb19d7b311725a0ef44f7bc0df97bn/a 
2019-05-01SCAN_954047059089US_May_01_2019.zipzip 7da3421beb7aff68a5e3b69af4e9633f5e0bcb2409efade09242094b409f8b08n/a 
2019-05-01INC_1872607267US_May_01_2019.zipzip e0f5d522b149f8845975b3cd5fb2f58886b7b4c0be782f6e2936b9226d3d5a87n/a 
2019-05-01LLC_4718586027US_May_01_2019.zipzip a4bf50094ad360b7aadcffb1b190766e204acb75ad37514fecb92644927ed94fn/a 
2019-05-01Document_12122556377US_May_01_2019.zipzip e6d9d8a7aeb5431411b5378dd4de1ee2c056e4aff2ca9404d336b859663afc89n/a 
2019-05-01LLC_93840814917US_May_01_2019.zipzip a96bc7f0c86d8d19a130b44f7f5337e0686f720756cd270d54252a3f9ee75bdcn/a 
2019-05-01SCAN_0518049488US_May_01_2019.zipzip 2aed1e25daff7ac97bee4057c4b0c81015f89bb4c6efad4dec0827f3f4a5e1afn/a 
2019-05-01FILE_5411062194US_May_01_2019.zipzip cc9aa988219ed0ce4737d008636a6ca1db06f47cb48ca2d34b87063ff2a3de33n/a 
2019-05-01DOC_41895197546US_May_01_2019.zipzip 6928cd8788afb6af9dd5cb3a2ebc9eb124729771eae55945438ee2b09d60bc79n/a 
2019-05-01DOC_933487582709US_May_01_2019.zipzip 811bd39c919bd6ccef23787bd811dc095141f6402ab0fff1f3e0166d38795089n/a 
2019-05-01Document_01236450630US_May_01_2019.zipzip 7a51f21b4faa1c472ab678a10d5bb0d7c85f98c2235bcba3662bd23cf666d1a7n/a 
2019-05-01INC_5989820066US_May_01_2019.zipzip ccb9a065595e102c5ed39a043089d2bb78ea9700ec3451080dff775d10969b44n/a 
2019-05-01DOC_7439032406US_May_01_2019.zipzip cbf61d6ceaef43d60ddd56f6850b1e763ac28191bc34843ec931d5a1c480dfe4n/a 
2019-04-30FILE_2735563653US_May_01_2019.zipzip c1904f20781f284e4e0890889732620075786f37d8a6e23eb97f32d1bdb111den/a 
2019-04-30LLC_45325609541US_May_01_2019.zipzip 5f6ada471da8718ff87e5bfa01b07acd43ba177e29b04a0abc9f82c16ded891an/a 
2019-04-30Document_96241322478US_May_01_2019.zipzip 1c212619d068164d257f464a646f2dddda44adfed9c20f3fb09eb4a86415fdd9Virustotal results 16.39% 
2019-04-30SCAN_8228697717US_May_01_2019.zipzip cf60bf49985c03690005eafcea878e4bd616fd283a0f3db3d6aad2ce8bec0dd4Virustotal results 16.67% 
2019-04-30INC_72838689365US_May_01_2019.zipzip f438813456322bb32da96d55f726570f52043b946c2db1dca1e00ac725e5e26cn/a 
2019-04-30FILE_359914553008US_Apr_30_2019.zipzip 3c83d839fac5f55a9205fa08146a89a6d234b2c9bd4481682eb49719ea320d22n/a 
2019-04-30FILE_9852068024US_Apr_30_2019.zipzip ff1827434408e4a1a34246635b69913a95dc3390fffc9d233fad5558943b1dcbn/a 
2019-04-30FILE_539565765111US_Apr_30_2019.zipzip b54852e8b58e77e1a0d17555ea4278eec3d7552f4eba1f009372762c4bec6e8bn/a