URLhaus Database

You are currently viewing the URLhaus database entry for http://zeniaxsolution.com/a5bc0d28dba0d6b56ad1f1461a4d329e/Reporting/dyvjd-696219808-4042970-bn8w-pxacu9e9e1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:289614
URL: http://zeniaxsolution.com/a5bc0d28dba0d6b56ad1f1461a4d329e/Reporting/dyvjd-696219808-4042970-bn8w-pxacu9e9e1/
URL Status:Offline
Host: zeniaxsolution.com
Date added:2020-01-16 02:08:04 UTC
Last online:2020-01-20 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-16 02:10:03 UTC to support{at}excellmedia[dot]net)
Takedown time:4 days, 5 hours, 2 minutes Bad (down since 2020-01-20 07:12:52 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-18PO_01182020EX.docdoc 21212c8efd5a592c2867b459ed1ed41866493f810a82442662cc8cfd9201684fVirustotal results 20.97% Heodo
2020-01-18RP_YE8607726167NE.docdoc 910cf54e7950d880c8bc459c76df3dfa906226ac6eaa41adc218c83a0bf03078Virustotal results 19.35% Heodo
2020-01-18INV_LSK_010120_QRV_011820.docdoc ede3ac30592399a03038a8419d753fc0de62d948e07c73cf9b860d219465f7caVirustotal results 18.33% Heodo
2020-01-18I_PO_01182020EX.docdoc d74eceb575bd923a2830c611d8cb087cb1c02fb5a4650236b6f67ab80b1609f8Virustotal results 18.03% 
2020-01-17FILE_AY3516356748OM.docdoc de952748c6ec69af07599737adcc6f274bd8c73dc723cb218c14b290d2ed6600Virustotal results 22.22% Heodo
2020-01-17PO_01182020EX.docdoc 46f74c587cb41897183c0c87a120cf0118af9b0ad394ee9a900561fbdab422e1Virustotal results 18.64% Heodo
2020-01-17SW_660WRE4UGHOII.docdoc 7de2404e9638e8fab7b324d2df37fdce114f9de3bd3d24d923bba09efde0853eVirustotal results 19.67% Heodo
2020-01-17REP_05173596.docdoc 563fc587ce7a3bd7fc02431b95e5a69d0259aa470a9163b46137e4b6b78963a5Virustotal results 19.67% Heodo
2020-01-17PAY_PO_01172020EX.docdoc 33f4cbd0ccf4285e9aec6f29fb7d3765bce1f527649c7cc8bb4f81f50757a70eVirustotal results 20.00%Heodo
2020-01-1707321346.docdoc 88067e56e4765755590fc617a21d46e45f6ebadcaa14ed8377715c43c4ecd3abVirustotal results 23.73% Heodo
2020-01-17INV_WX0873834446QN.docdoc 7bb5fdc2f055e22227b6471aa23ea22c95fa0235bc96bb40893513d1fc6e6d76Virustotal results 18.03% Heodo
2020-01-17PAY_KFZ_010120_TKY_011720.docdoc 709515b23e5b747439017795a65815ee0b37983e8a39520cc541e85472a7095dVirustotal results 21.31% 
2020-01-17DOC_OW4453195584ML.docdoc 76910c73a167eeb913b7ccd98861df47a7a02a53f6506659e041d92cc8633f7cVirustotal results 22.58% 
2020-01-17SW_34394460946.docdoc a13b037457db0cfd6982e62e3f76dd834a9ae2ab29af1bbd7b72023221c47e69Virustotal results 23.33% Heodo
2020-01-1719710648.docdoc 4c599d62c5811475285b14bbfa88fdec394d420b82d93c20e51a4630adac0828Virustotal results 19.35% Heodo
2020-01-17RP_05977237.docdoc 496e82b4aac77a47fcb312c63e8f4061b480c523124f87e037522a5ecec5aa5bVirustotal results 18.33% Heodo
2020-01-17BAL_RO5200137884CF.docdoc 93095a420357ccf306dd35b4d7e955519b34966c1922a181da111dccb4730ec8Virustotal results 39.34% Heodo
2020-01-17SW_VY7461045236CQ.docdoc 92f80243e6766c07a9eb3c8ef28eff839d1f23a112c0387911cda51154751b9aVirustotal results 38.71% 
2020-01-17DOC_ZX2YBS3IXD.docdoc c984833db58812ed08f1b0560576ec19bfec60b0a8103292c206042ef12007fcVirustotal results 36.07% Heodo
2020-01-16PAY_DMY_010120_MWJ_011720.docdoc 228da1e8833b2deb4570eb45b4cb5ceff4c62dd963e802c3a5b769ca9d28ff42Virustotal results 36.07% Heodo
2020-01-16BDUU_PO_01172020EX.docdoc 8aa03e0069da2642cdf2b5951f6fc50e9bbdacd01a38e0e6c8d636a1afd522c7Virustotal results 38.33% Heodo
2020-01-16FILE_58366432146.docdoc 862b4995090776854a12fbf924213919016691e4c85ccfa384c7fa92e02e8591Virustotal results 36.07% Heodo
2020-01-16PAY_9UTB15WAC.docdoc a9c48a4f2a96384b1fe947448cb44eaadeb7c0a7754cd17a6899c7f6ae31f2e7Virustotal results 32.79% Heodo
2020-01-16DOC_PO_01162020EX.docdoc fa978cd717f47c1ee29bb715045047cfb33ac65fb951e80b7bd122d42879021bVirustotal results 31.15% Heodo
2020-01-16FILE_TE9410783491UY.docdoc 67e4ad463f707098e9dd3aa9ef44543687de41237cb6bd15500e428aa17c34c7Virustotal results 31.15% Heodo
2020-01-16BAL_4970818483.docdoc 8bf5586fdf5c09bd987b2246b8a60988842d2b3ca683a4fdd6f0a698d17909b0Virustotal results 26.67% Heodo
2020-01-16KUC_010120_RHK_011620.docdoc 1126c643bff1cbc4e48db0e96c1bb7522d89a64e31bccdf10629cc5402a5bdc6Virustotal results 26.23% Heodo
2020-01-16UWN_010120_NHO_011620.docdoc 14aea8de9f3177801134498a4f81de17f490b3cd087fb826e8383a2b1f1e7049Virustotal results 26.67% Heodo
2020-01-16418654701403939669.docdoc fe6f474786ca7ae00ef0969337551f4f2b639e640014ba936d413e532bd994cbVirustotal results 24.19% Heodo
2020-01-16RP_PO_01162020EX.docdoc 2fab2f5e3f28d6a81ba72956df8ac00de3d7dbea09496ae791fd20a7954fe1ecn/a Heodo
2020-01-16QBA_010120_JRY_011620.docdoc cb14f2d0b46d275f3d060cb7b30c4818b33aa25ce6fef05b7aab90043c79039dVirustotal results 24.59% Heodo
2020-01-16REP_ID50EIFENXKSAG.docdoc 0380f6335cd6139d31d45caa6a9fb8b005cacf5c7e59ffacace9958c98a7ce2fn/a Heodo
2020-01-16BAL_598795450927716936285.docdoc eee372864abb54b9e0ff554f2a067549cc9364d27f24561d0eefec5da296c036Virustotal results 43.33% 
2020-01-164XQ7NJ7AE7Q.docdoc 13aa89755abbea10d5958e7b1d6d8440f1b6cb0d866e6ae70de9a7513e80e409Virustotal results 40.98% Heodo
2020-01-16RP_PO_01162020EX.docdoc 026422da953eb322a55eeb64ece300246b5afd8b4ef077f946880d0202522fdaVirustotal results 40.98% Heodo