URLhaus Database

You are currently viewing the URLhaus database entry for http://planktonik.hu/menu/OCT/7tpa9wq/qeit-6009-969181103-789750jog-7pjlk10ao4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:272078
URL: http://planktonik.hu/menu/OCT/7tpa9wq/qeit-6009-969181103-789750jog-7pjlk10ao4/
URL Status:Offline
Host: planktonik.hu
Date added:2019-12-18 21:51:02 UTC
Last online:2019-12-30 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-12-18 21:52:02 UTC to abuse{at}szervernet[dot]hu)
Takedown time:11 days, 7 hours, 32 minutes Bad (down since 2019-12-30 05:24:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-20BAL_3469854535873.docdoc 085190935b08f49102610d5161e97892089f567965412b270f354cf088338edaVirustotal results 32.26% 
2019-12-20DOC_PO_12212019EX.docdoc 2c09ad1e9f2b04bad470d559fe566a0415f6899e722b32c124fc3aee45bd4381Virustotal results 32.79% 
2019-12-20BAL_NNQ_120119_DJN_122019.docdoc ff44d7e57d982446732789b554c9013020210e60a893de71d4d1406bf054e8a8Virustotal results 29.03% Heodo
2019-12-20INV_PO_12202019EX.docdoc 572a62274c754bdba9d275f4f613b632ebd558b826eabaf5182ac07de09ea80cVirustotal results 29.51% Heodo
2019-12-20INV_PAS_120119_YYO_122019.docdoc e8ac62a0e0e1eadff780cb1324a70ce03be311bb33d7c7bc69faddc1c7c2cb37Virustotal results 30.00% Heodo
2019-12-20ST_NNW_120119_IIL_122019.docdoc 0a7d86e3c517db64a8f0bed9fdf69f8660976d8be6a5ef697fbc6a57521b3f51Virustotal results 29.03% 
2019-12-20ASEM_2951359635689511994.docdoc 0ae687a3115bae6885a17ce6d8229d0237a4dde997b3869b15a0db34e12332f3Virustotal results 26.67% Heodo
2019-12-20U_263162207.docdoc 6fcafbb8d2f4e90853451e5aa49f2f79b3be844072b59cca9e9370035b832c90Virustotal results 27.87% Heodo
2019-12-20W_44640064.docdoc 8f62870ed7ba3a13c0f2552e3789de9221819090622393d8f689e7af17a42ebeVirustotal results 24.59% 
2019-12-20JM4087402194PH.docdoc b3a7213579f74c678d6fd8c9258ba534a06e009c01418ef2b4ceb40a2c85aed7Virustotal results 24.19% Heodo
2019-12-20DOC_7294225796441812690668.docdoc e4bba0d01cbf6f796e53cffedf881a3285eff0426d344221ae144ac4cea10679Virustotal results 26.23% Heodo
2019-12-20INV_43364999.docdoc 17cd2a4af3f45b3e45b10b4845fb6f7d07bd602e4d665d7a444a2e8505ad8817Virustotal results 25.81% 
2019-12-20BAL_EFN_120119_EWH_122019.docdoc d3fd6f753f0bcd2229739ebe8d3f3670c2aa78d467b59bd782cb167daa41601bVirustotal results 36.07% Heodo
2019-12-20GBI_VKK_120119_JXZ_122019.docdoc 955a1f6f73eaf4a839941cc66e1ea96d5e06a7d5a9d291806d1172154eaac64dVirustotal results 32.20% 
2019-12-20PAY_KVR_120119_YOR_122019.docdoc 9e4b17c8494ca6655aba67f946f92aedd8f8ee42ea7fd8fc952a5fe6e7d568edVirustotal results 31.15% Heodo
2019-12-20YELK_94020909856437.docdoc fecd749716a57e87ee47765a5c72b1a5c50fe8a8695a722aea8fa89537aeb30cVirustotal results 31.15% Heodo
2019-12-19PAY_ZPTLBX8J.docdoc db9c24d60e35b197741ade1553584eb831f3ac5cd6515bbd62dc5a8b76ff192cVirustotal results 29.03% 
2019-12-1935965411.docdoc c7bfcf3bfc977d6c1d531a4130b95272b14fa81257fb70cab743b8437a731647Virustotal results 29.03% Heodo
2019-12-19XG_PO_12192019EX.docdoc 131d652fd46bc9e3ef1023e39dab359648e5e41d6901507538bb697ddc1a8b6fVirustotal results 29.51% 
2019-12-19DOC_4998418280.docdoc 418448a9e03c300d29a1442db6c5a6b38b0458ea72f09e6cbce326f32b95b84dVirustotal results 31.15% Heodo
2019-12-19SW_F6BEGWE3.docdoc fe2df8c2f00264ad3e9114ed7ea45812d76bebdb5d780a5970aa559975a7ae4cVirustotal results 26.23% Heodo
2019-12-19PAY_53446005.docdoc 7cb2aa92217f3090d559ea14541ffee7c4c4234cb1f7626ae797310c978928d1Virustotal results 25.81% 
2019-12-19BAL_LF5891087151VR.docdoc cdeba1be6ff661149500bbcb2f45ac5db0c0af310c302a1bbf4439e1aea7bfaaVirustotal results 27.87% Heodo
2019-12-19FILE_HF4EIMNR6.docdoc 7c220378cb3994b0fc701621095ef8de8bce2fd46a87910fb0e228ed8e095d39Virustotal results 25.86% Heodo
2019-12-19MCS_6344611623.docdoc 856db418ae86d091dbe54c6f710d19e8ea0da98981bb21d959bf50db97393154Virustotal results 28.57% Heodo
2019-12-19DOC_04098458.docdoc 38c90f95a0def3067b003f8dcd801289e896767661545df059f46f1ee9f89db7n/a Heodo
2019-12-19REP_996403476785320.docdoc cb85f97a43fcc49c76da83312f8d2eeb134f4802d0f52420856fb219d76c9dc3Virustotal results 21.67% Heodo
2019-12-19ST_YYP_120119_ELS_121919.docdoc 67634aaa92e92615da7b898e7e9f4bdf41645a54d1e8dde020318a971e9b0d3cVirustotal results 23.33% 
2019-12-19SW_68808330.docdoc 71f19dcc7fd3480cc2540137e1495b376eba753530886e1651bf8cbc12033153Virustotal results 22.95% Heodo
2019-12-19REP_RI7593529131IO.docdoc 7981a8b70c52922e3baad42da8c6722868f06da153e6a5c7576bcd1c57b1d697Virustotal results 22.95% Heodo
2019-12-19RP_PO_12192019EX.docdoc 22461874b83b6287baadcf227b2e495c257af92469d2ac02f98270dbc3fca8e1Virustotal results 21.31% 
2019-12-19DOC_PO_12192019EX.docdoc dc19d868cbfccec6608b904b7220dd1384fe24e6137be714af752d6c5c86725fVirustotal results 31.15% Heodo
2019-12-19PAY_46315090.docdoc ec2cbbdaa442e182f9375cf3860d8ec64897319a62aca277d9f3c2cc5005d888Virustotal results 31.15% 
2019-12-19ST_37584803.docdoc eece617e68c6bd59cba0abfe3a92b1bd28f333ded755fdeecdf32aa5d9369d44Virustotal results 30.51% Heodo
2019-12-19DOC_ELX_120119_LIS_121919.docdoc 43cf36bece6360c16a5c550fa8a8d5a8bc1520b790e42c2c3b00b5fdb357bbe8n/a Heodo
2019-12-196252982777414143.docdoc 89a22bd587f2bc9df2709648106e06157480b6fb980ae4e779da1fc76038fa08Virustotal results 24.59% 
2019-12-18PAY_56343532.docdoc 2f37a55acc32e7d59e31d6c98effdc3171e447d51f5aceea59451fe493461b9eVirustotal results 25.81% Heodo
2019-12-1825457398.docdoc ea63e95c999057e2d83b06ec04252ece731ad5f7ebeac0d85482b7288df40e54Virustotal results 26.23%