URLhaus Database

You are currently viewing the URLhaus database entry for http://ehebauer.de/Modellbeispiele/FILE/twqBmAopVORc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:204383
URL: http://ehebauer.de/Modellbeispiele/FILE/twqBmAopVORc/
URL Status:Offline
Host: ehebauer.de
Date added:2019-05-30 23:26:02 UTC
Last online:2019-06-11 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-05-30 23:28:03 UTC to abuse{at}strato[dot]de)
Takedown time:11 days, 14 hours, 44 minutes Bad (down since 2019-06-11 14:12:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-06-01SCAN_8747134664US_Jun_01_2019.docdoc ef62880b29c9e9403633bfe2c0572d75e5d9ee3fa4fb698697dceb9efc99ec3dVirustotal results 49.18%Heodo
2019-06-01DOC_353380504498US_Jun_01_2019.docdoc 7c4cc9d295547a0cef91a556f42d21a5e87964fb2272c8a33fca00016e71ec4cVirustotal results 48.33% Heodo
2019-06-01Document_042468735595US_Jun_01_2019.docdoc a389d68fbf4adbcc66623c13e90b243c9793e9392be363ad8d01e427081f4115Virustotal results 47.54% Heodo
2019-06-01SCAN_214592416810US_Jun_01_2019.docdoc 51b855cbe57d74b049f542899bba538e6a47f83b9d6e15e8e5f38cc758664f8bn/a 
2019-06-01DOC_6083545256US_Jun_01_2019.docdoc 545a4700f14d2cfd7f03499246dbb2738f5555f92ed45538f5301622f220c985n/a Heodo
2019-06-01DOC_69279384266US_Jun_01_2019.docdoc e5cd9fb3599e112d7f690ec64cc87eaca100d75fc46123812fb4a690ad71be55Virustotal results 48.39% 
2019-06-01Document_331240773605US_Jun_01_2019.docdoc 84a66f8e7292ede26e286442de89b8a1fed1521c29552f9b8b1bc17da0d26e5fVirustotal results 48.28% Heodo
2019-06-01LLC_17812864193US_Jun_01_2019.docdoc 78f1f6d72541c029a695ff06e0b00368d8c2e76e40a24f220ae805149d55daebVirustotal results 49.15% Heodo
2019-06-01SCAN_5916257622US_Jun_01_2019.docdoc 6db3364c302d5c19db16a08c2bc81b3d4c2950d667272c12dcbd6827654aeabfVirustotal results 48.39% Heodo
2019-06-01LLC_0743107038US_Jun_01_2019.docdoc d777840280b22871584a1f1a9fb73dac5b7b335ed3089c35c638e0ad6984eb5bn/a 
2019-05-31Document_18534734556US_Jun_01_2019.docdoc 71bfba9498217d205555c3c7f0896f3930029f0ebc78a09e0ceb48cbbe8b2899Virustotal results 44.83% Heodo
2019-05-31FILE_60028831081US_Jun_01_2019.docdoc f8e39ecf6d736e3e321da3e786e095c108564c0ada8a0916f70e04bc642e60d5n/a Heodo
2019-05-31DOC_281199998145US_Jun_01_2019.docdoc 625f2ec3f9c827fd166ff8442aae091ef899a4282e8b1102eadc87bb2baa9096Virustotal results 44.26% Heodo
2019-05-31INC_732458019538US_Jun_01_2019.docdoc f61a7749ba4a209db07cd10c799a6563aac71bcdc4535f1d6777cc685b6e1d6dVirustotal results 45.61% 
2019-05-31DOC_19093930748US_Jun_01_2019.docdoc 7894381b0ab455b3f831f689607a32a015b1a244cb633a040c887eb3976258b8Virustotal results 46.55% 
2019-05-31INC_96960889218US_May_31_2019.docdoc 14e39469bea5e529217ebf13911d4c03eeba3657b224d187be857903cd4a6018Virustotal results 46.55% Heodo
2019-05-31LLC_270722420695US_May_31_2019.docdoc d9514b4f75ab539d1ca84ff57a6795c47df2a145ef78dfee482497f28a7653a7n/a Heodo
2019-05-31SCAN_6952458548US_May_31_2019.docdoc a53484da9e213b8f9a1506bc4356647f57082f7eddc755737785e30ba2b09eacn/a Heodo
2019-05-31DOC_3814787688US_May_31_2019.docdoc 8f4852fa2c68ac025463fc858447d51fdcb2d4d7bc4d1ea7987563baf0ca3febVirustotal results 29.51% Heodo
2019-05-31DOC_836913496298US_May_31_2019.docdoc e5009799562414d49629a271b53611e9e72d6886a79f293f417d75822de62318Virustotal results 26.67% Heodo
2019-05-31SCAN_95914316454US_May_31_2019.docdoc 003b9130a3631b38d8bf7eed6c2c9f12bb73de439faf75ad3e2098157427f003Virustotal results 27.12% Heodo
2019-05-31SCAN_1284907842US_May_31_2019.docdoc a45823ba084d0d78d09d4326a97572fb65035c88e1db0c5ee841f2843c28d7f2Virustotal results 24.59% Heodo
2019-05-31FILE_32176344454US_May_31_2019.docdoc 132b80a7e447dfd6893270baa35d4a97fdccf1bf7306fe94f81233d1ea15bc9bVirustotal results 21.67% Heodo
2019-05-31SCAN_0019648677US_May_31_2019.docdoc b1a76d5bd22e884a6992fed64848e840fe9603c35473ca3ba16a7ba71a2336a4Virustotal results 23.33% Heodo
2019-05-31INC_26916003929US_May_31_2019.docdoc 00232fb3d2b94981e6b799420b8cf5010a078f370ef34d9bfa0476a6426bca39Virustotal results 30.00% Heodo
2019-05-31FILE_61864077597US_May_31_2019.docdoc 7e8dd2fa267e6b9a56a7ae76e223e438d952c15f34fcc840616668bc6c34358cVirustotal results 36.67% Heodo
2019-05-31INC_974655889705US_May_31_2019.docdoc 2742424afed9491f159edd49169c32dfc2b2f5c2a540bf83c58cc882929f2b3eVirustotal results 37.29% 
2019-05-31INC_86449562526US_May_31_2019.docdoc c438665a42f5535f079f5cc9dd504fc0b0b3ee0388608daec1e9c118edb8da7bVirustotal results 31.67% 
2019-05-31DOC_94008333484US_May_31_2019.docdoc 8e2c8cfb11035d6ba9d0e8ddf02d1acfaf0dff72080892eb51ca7f199d30dc02Virustotal results 35.00% Heodo
2019-05-31INC_60127708205US_May_31_2019.docdoc ad20956b5f9639b1ec95cd3c06cb2d5727f9bc6e8079e411d2513b6b5cf671caVirustotal results 36.67% 
2019-05-31DOC_452511951550US_May_31_2019.docdoc 58c47c1e48d2560fe96dc03eeaec4ef61cc4b057eabc323ff140d505ec9b2358Virustotal results 28.33% Heodo
2019-05-31INC_05254692008US_May_31_2019.docdoc b8ffba5933a7f1ab10640674515407df874291c9b965091706b22960b3dadaaeVirustotal results 36.21% Heodo
2019-05-31DOC_67257269892US_May_31_2019.docdoc 96e2d1631b87443d845db9feb1cf3afe3bfa55759427a709cc4889a20c4dfb29Virustotal results 35.00% Heodo
2019-05-31FILE_819518414513US_May_31_2019.docdoc fd069522510ea62adff60131da1c05ab3f96f3a55626d8e55366139d50604bb3Virustotal results 34.43% Heodo
2019-05-31LLC_13942483183US_May_31_2019.docdoc 065c4bd9f352f3dde47629101839b08d1264027623d68fda03005789cab0861cVirustotal results 33.33% Heodo
2019-05-31DOC_8187399970US_May_31_2019.docdoc 29eb2b33a3946a4eab375465b5a171c702dd3036b53c734637f5f0c705762739Virustotal results 28.81% Heodo
2019-05-31SCAN_366440170820US_May_31_2019.docdoc 227630e9d008468991642c6ef2c19087123fbb58d094bed05c727c92cb5dad61n/a Heodo
2019-05-31FILE_406616698533US_May_31_2019.docdoc 9fffd9f534100b5348a4ff4ddf6b4da08e29b57344393753149036f7255db790n/a Heodo
2019-05-30DOC_982342626093US_May_31_2019.docdoc 054ee9e61a0a65c326881f839be8824859306d1d97e1d3229f8fa7eb195c730bVirustotal results 28.33% Heodo
2019-05-30LLC_84418362593US_May_31_2019.docdoc 389d64e2c9ffd7120f74693d76f488b8c146bba535d8d4e3e848a028d2968050Virustotal results 28.81% Heodo