URLhaus Database

You are currently viewing the URLhaus database entry for http://agencjat3.pl/js/DOC/lb50ws7waqfjobvsqr3_8fxenla-34348440916/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:205235
URL: http://agencjat3.pl/js/DOC/lb50ws7waqfjobvsqr3_8fxenla-34348440916/
URL Status:Offline
Host: agencjat3.pl
Date added:2019-05-31 22:56:02 UTC
Last online:2020-02-03 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-31 22:58:03 UTC to abuse{at}etop[dot]pl)
Takedown time:8 months, 7 days, 23 hours, 57 minutes Bad (down since 2020-02-03 22:55:40 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-25DOC_21271922792US_Jun_03_2019.docdoc 6adac5ec79d569ee185a018ed9feb4bbaa9fe5f9c0673350e8f391848d547447n/a 
2019-11-20DOC_21271922792US_Jun_03_2019.docdoc 49ef2e410e26bb1f2248d6fb47d351eced0da5b49950e8deda4411923c1cb927n/a Heodo
2019-06-01Document_29508278964US_Jun_01_2019.docdoc ef62880b29c9e9403633bfe2c0572d75e5d9ee3fa4fb698697dceb9efc99ec3dVirustotal results 49.18%Heodo
2019-06-01SCAN_28300858996US_Jun_01_2019.docdoc 570a32b3a97f12b17246e9940817c9c72ee63ac383f6983e342e09f79debb17eVirustotal results 49.18% Heodo
2019-06-01LLC_135645601884US_Jun_01_2019.docdoc bf032ea596d973c8333c4a7d4e7338cdb4276e3d2e8ae5046b8bfbac20941c92Virustotal results 50.00% Heodo
2019-06-01DOC_9026704223US_Jun_01_2019.docdoc be08e4e434bf6ffb686cc050d2d014fbc47fdfa0ba3abbd8f33b0aa11ab2d23dVirustotal results 44.44% Heodo
2019-06-01INC_183645150752US_Jun_01_2019.docdoc f5f4295f963a3f3ac6e0dc5f1b965821609ca045e1ee63c8687225310155887bVirustotal results 45.45% Heodo
2019-06-01FILE_97285463070US_Jun_01_2019.docdoc f787bedcfbb4d4f2ac2507770741ea1ac63ea94e2ea432d464e3bbd23465798an/a Heodo
2019-06-01SCAN_100649059521US_Jun_01_2019.docdoc 84a66f8e7292ede26e286442de89b8a1fed1521c29552f9b8b1bc17da0d26e5fVirustotal results 48.28% Heodo
2019-06-01Document_21337297527US_Jun_01_2019.docdoc 78f1f6d72541c029a695ff06e0b00368d8c2e76e40a24f220ae805149d55daebVirustotal results 49.15% Heodo
2019-06-01LLC_091871420415US_Jun_01_2019.docdoc bffe54938b6af06cb9d5792d99ed694370b373ca0aba791a5ba9b1028fbfbc92Virustotal results 47.37% Heodo
2019-06-01INC_789704006111US_Jun_01_2019.docdoc 49682d6275f2860d0b97b984d63ccecf1268c44ab9a147ddf95662472cd9a538Virustotal results 46.77% Heodo
2019-05-31FILE_960726618775US_Jun_01_2019.docdoc 71bfba9498217d205555c3c7f0896f3930029f0ebc78a09e0ceb48cbbe8b2899Virustotal results 44.83% Heodo
2019-05-31LLC_2127473307US_Jun_01_2019.docdoc 37536de72bbacb0c928f4bdeb56d7278578198a1e11ed6fab35106ed0307a3bfVirustotal results 45.00% Heodo
2019-05-31LLC_647002583215US_Jun_01_2019.docdoc c34b23605de1ddc73e16b1ebed1aae5679564d931092e68914a27c2f0d6368dbVirustotal results 32.69%