URLhaus Database

You are currently viewing the URLhaus database entry for http://yojersey.ru/system/IZKIOFKMSBPKGY/yf6kmi02brk6/hoavfy9-730660-75415-fma989n5x-lcgxmy/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:268367
URL: http://yojersey.ru/system/IZKIOFKMSBPKGY/yf6kmi02brk6/hoavfy9-730660-75415-fma989n5x-lcgxmy/
URL Status:Offline
Host: yojersey.ru
Date added:2019-12-13 16:20:03 UTC
Last online:2019-12-30 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-12-13 16:22:03 UTC to abuse{at}ht-systems[dot]ru)
Takedown time:16 days, 14 hours, 18 minutes Bad (down since 2019-12-30 06:40:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-14S_HHT_120119_LCX_121419.docdoc b2b546978e67f0508a9d9f19d4b359d30fc69e07a5251bd0a4ded52c24581faeVirustotal results 32.79% Heodo
2019-12-14YGYSNZ7NLB4K4Y.docdoc edf46a3c5e5b9fce1515b85f8422f9446b208826820c6dbd95a2865e3b961bc9Virustotal results 31.15% Heodo
2019-12-14FILE_STPQYC21QUSSY.docdoc 7d7711be4c0a6b37c778a7b60fa904511f0891166d88dc4ae6ec48367d3a5f61Virustotal results 31.67% Heodo
2019-12-14DOC_CVQ_120119_XXP_121419.docdoc 9512f1e1abe3815938c6adcde6f24756f5598bbb66c3e60be4d0e32ee80a52c2Virustotal results 31.15% Heodo
2019-12-14BOX_67318343.docdoc 7e1c5673c56ecdac1d8680eda112c2fa815373a9431c240ceee34803b37c5941Virustotal results 32.20% Heodo
2019-12-142731940154729653371717861.docdoc fcba535746c8fa21eb1f9c498f35e9df3c1afe9251f6f8657ef2bdcc3d3f972eVirustotal results 31.67% Heodo
2019-12-1422596422.docdoc 02f800e5fccbe66d6563a9c6ff9c5246849a724263676a653e91e98de3c48e0eVirustotal results 30.51% Heodo
2019-12-14REP_LYE_120119_GCR_121419.docdoc 64913743d7d40515014026b2aaa18cd5e65d537d17b47f4e1048fcb6de2ae157Virustotal results 32.20% Heodo
2019-12-13PO_ 12142019EX.docdoc 49f902036fefd2f5b1c5c0835f950c0e8d923ba235b799a8841f00663958f2a5Virustotal results 31.15% 
2019-12-1373360174.docdoc 0760211996fc0cc9fa393e5f30f10051c9fc773288027167e6131ce26e12aa5eVirustotal results 31.15% Heodo
2019-12-13JBI_120119_GZF_121319.docdoc bb14b2b318d9fa3adcc85909296d1b516d2e60b73b4c3347cfcf2bbb2448aaf4n/a Heodo
2019-12-13PTO_120119_WVL_121319.docdoc a5609fd7ceaf1a37082aa9daa1062c06900e55018662eb97fc66035dd0536575Virustotal results 26.67% Heodo
2019-12-13REP_YAS_120119_FYV_121319.docdoc 848735c57e1a6435289594c80b894ae30009e92a9735261b256d15baf27b4cabVirustotal results 26.23% Heodo
2019-12-13MIG_S3TONX553Q4.docdoc 4090bd6b9ac46debfaa07d39aafadf206ef0eb8241013ffd6100b79ae610b143Virustotal results 26.23%