🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://www.educationcharter.net/5ev0qf/liu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:267363
URL: http://www.educationcharter.net/5ev0qf/liu/
URL Status:Offline
Host: www.educationcharter.net
Date added:2019-12-12 00:13:04 UTC
Last online:2019-12-17 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002163216 created on 2019-12-12 00:14:04 UTC)
Takedown time:5 days, 15 hours, 55 minutes Bad (down since 2019-12-17 16:09:47 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-14INVOICE-ZU890_819.docdoc b264a6c430b13811bbdc45413d47f89296578102b61b26ddeb9b9eea19f9415dVirustotal results 29.51% Heodo
2019-12-13INVOICE-UFV702_59044.docdoc 8081abf38787fd23b0f029062cfe70b25699d8636c6f52f0fdcc896a458ad488Virustotal results 28.81% Heodo
2019-12-13invoice L94_305.docdoc fedf654bfb521c3e3e34f0f01bc4bb1a25fcc2acedc3e1c24e17f4dcb556321eVirustotal results 30.00% Heodo
2019-12-13Invoice-A74_9915.docdoc bb0fbf123d37afcc48598e4a7b93499b8512d287c2b0452a131937e5c254e256Virustotal results 29.51% 
2019-12-13Invoice-GDV05_34656.docdoc bd8f4a7c38cf2cf0a79cec737195bdf29d7984e32a134c0f9bbe52b2c529e342Virustotal results 30.00% 
2019-12-13Invoice-OOA196_346.docdoc 2d2ec8e952188e5c7127f89b2e55a751bdeca3b479dac304f8bd8206a4c5f160Virustotal results 29.51% Heodo
2019-12-13Invoice GH070_42.docdoc dbb364e4577a66d4f381e4af2498d6372d376b268133c958207fcd3f351951bdVirustotal results 31.15% Heodo
2019-12-13Invoice-O39_312.docdoc 6239c95dcef738652bc1942b326fddd6579d81f3a96c99a0b00a23e2fda37d12Virustotal results 28.33% 
2019-12-13Inv-P71_54166.docdoc b50023f98a7ec3c2232233d43091a89d3d1e43e349145be8b0a8e65281c1cebeVirustotal results 28.33% 
2019-12-13INVOICE_NF077_271.docdoc 1d9d018983c19aba80412aef9e7c2d0f7e71c28ae8770d785819ef49fb467c5aVirustotal results 26.23% Heodo
2019-12-13invoice ZR79_39.docdoc 4c1191f848daa5cff6296caa832ee8351af57dd49ba989dd402c37f750ee38f1Virustotal results 26.67% Heodo
2019-12-13invoice-YM985_821.docdoc fbe0ec1ec4b33074fcb351e2f371bfc8c7b194c8f7a2fd9b4f70944117a4d034Virustotal results 24.56% Heodo
2019-12-13invoice-Z47_96.docdoc 07eb1f103c1fce37edabd5f8e89d0b23230c1e4726aaf7efb8359b790da97a1eVirustotal results 24.59% 
2019-12-13invoice-B104_4790.docdoc 7eef3e40c5fe9e85bad4b2299a8ba6c37727189761a0ff114307b5b50952b508Virustotal results 41.67% 
2019-12-13Inv HF23_167.docdoc d02455d33f1a231cf204e23ca81e1eee1c5c7d8f81de6369e094c0f268c615a5Virustotal results 34.43% 
2019-12-13Inv DF120_3776.docdoc 87f88bb51d20859fd5387394d7f03c3f031758e0454684adb3cf7a037f9c2ff8Virustotal results 35.59% Heodo
2019-12-13Inv XFT40_48.docdoc 0ea2d08799a6cce3f7c1d94ffb1657ea77c93da5a55dfe8c34a6c6e43082cd3cn/a Heodo
2019-12-13Inv-D97_478.docdoc 16a152d62c22e97695d546db457c563ee707a1720e2484aefca89c4ea444f756Virustotal results 34.43% 
2019-12-12Invoice_OZ782_70787.docdoc 4e6ecdecd5d7cefb2a5ae9eb200dd55c82bdf5f1a34628177e18ed12ce96cbe6n/a Heodo
2019-12-12Inv PNE275_86350.docdoc a27d79e14ffa588f3db875b2c26abd7bb7e72a23430881494349f507ffa4ab04Virustotal results 34.43% 
2019-12-12invoice-NL224_018.docdoc 5ab572b3e3a96baf28b4a1ac9473f4f864814fe34b6ad9c0f659503ce3c5d99dVirustotal results 35.59% 
2019-12-12invoice-D372_63.docdoc 68c93898b108b7aa57c65a1e99d5063c76cec402e828d5618720a0ca1b79fb09n/a Heodo
2019-12-12invoice-MST719_44365.docdoc f59f977d3187101bfbfe78bc48663ed97e0764674f803e9ad5af7607661ac4e5Virustotal results 33.33% Heodo
2019-12-12Invoice_NB63_354.docdoc 4b5e6ccc14d9a7b31c23401e1ab258567b0f202f5605f170399a3adddb9f646fn/a 
2019-12-12Inv-ZAK766_23.docdoc 8766efc88b7e69bd335ce0607a459ebef87acad1fb3941526085853212b56ca7n/a Heodo
2019-12-12INVOICE-M32_50.docdoc d3d7ffb7e75aa5c7de4cbaa219d82f1218cf931d368a484aab30d9a68c413484n/a Heodo
2019-12-12Invoice N95_917.docdoc 5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0Virustotal results 30.51% Heodo
2019-12-12Invoice-V21_182.docdoc 8ec626cb5d05c16b41312eb6967a5b541891ecbd185bd088415fff9689af2973n/a 
2019-12-12INVOICE BR061_9069.docdoc b235bf9aeaa3cd3418f2f1f3769f99b65e465915cd872b5860d833e456668c8cn/a 
2019-12-12invoice-OX646_78401.docdoc 94510d6c56c6fa6cbe0d4b8db07087b3a841aae400176f97d419ad2bd3bcb85an/a 
2019-12-12Invoice FJ792_439.docdoc c765ecf47cc4ba7c01f89d2a7349570cd9ffe689498c807227fadcc78f291da2Virustotal results 40.98% Heodo
2019-12-12Inv-I68_31990.docdoc 699dfaa6f502bc577250c8307983c757cec5bc1a0f672621e92cb60b1a07ef02n/a