🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://best-fences.ru/css/4ey-6v7y0-5856/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:264280
URL: http://best-fences.ru/css/4ey-6v7y0-5856/
URL Status:Offline
Host: best-fences.ru
Date added:2019-12-06 17:23:05 UTC
Last online:2019-12-12 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-12-06 17:24:14 UTC to abuse{at}ht-systems[dot]ru)
Takedown time:6 days, 3 hours, 4 minutes Bad (down since 2019-12-12 20:28:37 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-07invoice CMD96_52.docdoc e4d7d49e9ef80bc034115f9c6bf145e8970266cb42641ec07f3bdeac913f83f6Virustotal results 29.51% 
2019-12-07invoice-TI209_53.docdoc 36b56761155a658be8b664a44703886900f1a007a9f3c284cc47dff851442e7bVirustotal results 31.15% Heodo
2019-12-07Invoice ZAC04_15.docdoc d647d1e25676f5988634d5871f393f92082227370a36a693840987c1533f848fVirustotal results 29.03% Heodo
2019-12-07invoice-GOZ74_5711.docdoc 81289cbff004394f08cd5ba840b2ae6066ffd3ea942fe359ad34db6d8a07ae7cVirustotal results 29.03% 
2019-12-07Inv UJT50_65.docdoc 313b489b12ace9896c695a26e88f891345bf80e196b11b2f0599cb4fcd7a7641Virustotal results 29.51% Heodo
2019-12-07INVOICE_ZKQ10_40139.docdoc 819273b637aa3d7db7f8e436d37513443d2eb96b7d449bf11cdd3f1fc221d2b6Virustotal results 33.87% Heodo
2019-12-07Invoice-M86_150.docdoc 8471a084463f8d26e4f71f35779531a67392927292cf8cbd51cdcc65d574ca00Virustotal results 29.03% Heodo
2019-12-07INVOICE-CY237_96.docdoc 8a34c30566de585e38b1d24df4adab7f62b294658336dd5237ac461823b73b0fVirustotal results 29.03% Heodo
2019-12-06invoice-R18_79219.docdoc 226212dbac1f28997daec7140b4d94a2d6f1a7da674d918f18ddac39d3f46fa9n/a Heodo
2019-12-06invoice_FVB134_16510.docdoc bd66ce5877dd63401f1a4cad09598c1d73206bf04f3f1d6bbab1be6f28f79fa6Virustotal results 29.51% Heodo
2019-12-06Inv-G21_0052.docdoc 66c74d2e2e889852dd1cf7cc1e8d7cc155f3f4ba38baa3bb00f1d47d21489ff5Virustotal results 30.00% Heodo
2019-12-06Invoice-X50_70.docdoc 82b9b97f8e5ca40acff72f74380716ce160f5880b21e072e7658825d23bf2f79Virustotal results 34.43% Heodo
2019-12-06invoice_OA69_0301.docdoc 1b88229e6342a2ab51cdd2390020fe3ff11cd053980f8fe23209c11c0b66c4e1Virustotal results 29.51% Heodo
2019-12-06invoice-ZTD629_55.docdoc 598de7761e897baab2643528db06f86c5f79368f1e01bd52ed52ec3003767b9fVirustotal results 29.51% Heodo