URLhaus Database

You are currently viewing the URLhaus database entry for http://urbaniak.waw.pl/Telekom/parts_service/DotwoNQJaGLoRJUPggEeBkTYVYHz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:232511
URL: http://urbaniak.waw.pl/Telekom/parts_service/DotwoNQJaGLoRJUPggEeBkTYVYHz/
URL Status:Offline
Host: urbaniak.waw.pl
Date added:2019-09-17 17:17:46 UTC
Last online:2019-11-06 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-09-17 17:18:17 UTC to abuse{at}kylos[dot]pl)
Takedown time:1 month, 19 days, 21 hours, 2 minutes Bad (down since 2019-11-06 14:20:58 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-09-20BL_36S89O1BKJ1S9Y_PZH_09192019.docdoc 9d5b7b91926883f68db46fc8b525e8ac6238edb841cc04d4c9a08e9bd6c6e509Virustotal results 33.90% Heodo
2019-09-19LLC_L8ZS7OHPG850P.docdoc b18854ada8859b1d237a0479a62f95180023f91a97868318f580bd2d85a15efen/a Heodo
2019-09-19RE_283215136332.docdoc d551e8abe087de961c70694a751c39ebef48c4868d0435f266e2b81f418a0f62Virustotal results 23.73% Heodo
2019-09-19WM_BR3RBEE5ENZ.docdoc 777cebe53a886256738fcbf461e8a640086e10f808daa7cba78d134ee91f2882n/a 
2019-09-19SCAN_19109537404450_09192019.docdoc 831385b22855d1d331f37bb9d7edbfcd008cebdd1fb51b63b993103950141ff9Virustotal results 22.41% Heodo
2019-09-19DOC_P53AVZLXBU8XK_E_09192019.docdoc ba4e42326a7367bf670328ed636beb1ccf1cf508755975f11f941994a955405en/a Heodo
2019-09-19SCAN_20456568735088728_G_09192019.docdoc 7072c9e45facf56b99407af7b5bd125273dd64ad7315cd186e57afb1a70c2500Virustotal results 23.73% Heodo
2019-09-19ENTEYHG2U639G63_G.docdoc 60af3a70b94843c82bf30f09807e168c273bf16f283a5b62b66f004ded127342Virustotal results 24.56% Heodo
2019-09-19INC_14059991684071614_09192019.docdoc 685f523c5ca36a045d1167e57e8167bc928aec13ebf64da2eb5c391d2a770264Virustotal results 27.12% Heodo
2019-09-17DOC_3427552124_09172019.rtfdocx 9fe890f4a1393ef301e24b02ab3c173f230ad7a982808ce6daf130c861422208Virustotal results 32.26% 
2019-09-17FT_116TN7NZAXPK.rtfdocx 1a6a015dc1f9f6613a6985242037198cb3449d74694e0f759d4787e866d723b1Virustotal results 32.79% 
2019-09-17770729941567152.rtfdocx f7c74161c5207c1c29bfb9d7819c198492383af0e50dbe2bdb9d92bfc8416228Virustotal results 33.33% 
2019-09-17RE_166537695987.rtfdocx 3b219e22b7710e28261412a4f30eb0cf2275a574ebbfcdcf60be33017033a7faVirustotal results 32.79% 
2019-09-17FT_60045428006_GH.rtfdocx ccfc24bc3390c2031f73cd4238009315b5a171ccdedb436ff89cbc4881ab7016Virustotal results 29.51% 
2019-09-17132672886405327_IQ.rtfdocx 92e7008a245ee8368d3f1874b37435c7fa3a785347c8eff53c122c1f122a195cVirustotal results 30.00%