URLhaus Database

You are currently viewing the URLhaus database entry for http://yourways.se/roawk/esp/zpqzevykwq7z/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:289701
URL: http://yourways.se/roawk/esp/zpqzevykwq7z/
URL Status:Offline
Host: yourways.se
Date added:2020-01-16 04:10:04 UTC
Last online:2020-01-21 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002249775 created on 2020-01-16 04:12:04 UTC)
Takedown time:5 days, 14 hours, 4 minutes Bad (down since 2020-01-21 18:16:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-18FILE_416925211142423607.docdoc 860f77fd78db2a063a42e3c8b23b2b0e20e330499e5cc2cd4301256c9dd0e2b1Virustotal results 28.33% Heodo
2020-01-18SW_KJ3207588200AL.docdoc 9ba523a49280a5213dbdd7832ba69bbfed94fe8c05f269bb8319c05003a1a1b0Virustotal results 19.67% Heodo
2020-01-18DOC_IUD_010120_DSR_011820.docdoc 910cf54e7950d880c8bc459c76df3dfa906226ac6eaa41adc218c83a0bf03078Virustotal results 19.35% Heodo
2020-01-18PAY_JC7932929590XE.docdoc d74eceb575bd923a2830c611d8cb087cb1c02fb5a4650236b6f67ab80b1609f8Virustotal results 18.03% 
2020-01-17Z_JN5061965155QN.docdoc c3e3999605d56b10e2f6d2c56c967277107cac16238a5fe8be011f1610641b57Virustotal results 20.97% 
2020-01-17PAY_PO_01182020EX.docdoc d95e601b3c631dc51b76b89d7887d80e8325c6ef6575e361610416fb03db6e6dVirustotal results 16.67% Heodo
2020-01-17INV_GKL_010120_GKG_011820.docdoc 7e89360cca8f0234341841cbdf174fef602631feea9e9870c553d8dc29a7b0f0Virustotal results 18.33% Heodo
2020-01-17XZ_02546395.docdoc b1f490485294ca464fb35ae4e0a2b54246838c77f58ce26d8ca8b1748148e64aVirustotal results 20.00% Heodo
2020-01-17B_08507280.docdoc b8662d6e10f9dc0f0c27460ff54e4f215ddc996fc96e8bcee1c3e925f206a9fcVirustotal results 22.58% Heodo
2020-01-17PAY_PO_01172020EX.docdoc 3c2318ca52d11a2b600705eb1dbb662a143b5a02704d114f5fd639ed93145b29Virustotal results 20.97% Heodo
2020-01-17L_IS2608946405YZ.docdoc a1d5b978ea573a62a2565f7d51d54b1a6809a3d870c2ec98435b37481a9dc068Virustotal results 18.03% Heodo
2020-01-17FILE_85052492.docdoc 398c180bca3820858404f155f0050ec466519c6ad151414f5489e1e9f8395abbVirustotal results 22.95% Heodo
2020-01-17ST_00188407138228.docdoc f551cce962d17fa9a9a26927436adcd8505c5a675436833b8c386606fc612434Virustotal results 21.31% Heodo
2020-01-17PAY_59996807506784044457029.docdoc 76910c73a167eeb913b7ccd98861df47a7a02a53f6506659e041d92cc8633f7cVirustotal results 22.58% 
2020-01-17RA7FF9X8C62NX.docdoc a13b037457db0cfd6982e62e3f76dd834a9ae2ab29af1bbd7b72023221c47e69Virustotal results 23.33% Heodo
2020-01-17K_82247622.docdoc 4c599d62c5811475285b14bbfa88fdec394d420b82d93c20e51a4630adac0828Virustotal results 19.35% Heodo
2020-01-17AH_PO_01172020EX.docdoc 496e82b4aac77a47fcb312c63e8f4061b480c523124f87e037522a5ecec5aa5bVirustotal results 18.33% Heodo
2020-01-17REP_PO_01172020EX.docdoc 38c7d4b6816ab5c1ab3e4102e12df1f28a9bc48378c7d707d733234746005b26Virustotal results 19.35% 
2020-01-17DOC_IKQ_010120_PPE_011720.docdoc 01803cd4cad276de7bde227f5eac222a512d1cdc85252fc4c34d23c36296fb05Virustotal results 20.83% Heodo
2020-01-17VPUQALNEY0VWF9TP.docdoc 4c20b0a5df2b53ec86b0378c0b75db769d6215f470018526561dd9a55c9f0cd6Virustotal results 43.55% Heodo
2020-01-17PO_01172020EX.docdoc 9db035bd19c8d9db27e5c352d8e713cfdd13b9a155772e9266b18ec30d67fba7Virustotal results 41.67% Heodo
2020-01-17SW_MR7880585390QX.docdoc 242bf1a0026fb7d1e3e4c0187c229aed599cacc94382f096f08f8ac65514ec7bVirustotal results 39.34% Heodo
2020-01-17BZR_010120_QUF_011720.docdoc ab93bc28a4a2dba3db6e1c25750476a6691de8988744db041f23d9d5c16e03a5Virustotal results 37.70% Heodo
2020-01-17SW_TPE_010120_XYG_011720.docdoc c984833db58812ed08f1b0560576ec19bfec60b0a8103292c206042ef12007fcVirustotal results 36.07% Heodo
2020-01-16ST_UWK_010120_CFD_011720.docdoc 37b0389ffe84107582dcc9d62fc7091cc3a71915977dc69f605fb398902b3ce4Virustotal results 36.07% Heodo
2020-01-16BAL_FOFR4MYQID2XCL.docdoc 8aa03e0069da2642cdf2b5951f6fc50e9bbdacd01a38e0e6c8d636a1afd522c7Virustotal results 38.33% Heodo
2020-01-16INV_08093929.docdoc 1f3e3d25e4bf6b2abe937cad881f13233701da7dbd9a165f895856e56e0e0ee3Virustotal results 36.07% Heodo
2020-01-16YWDA_KNH_010120_OPD_011620.docdoc 86cbc728df6a04a246a877012acd772a8880f516d4dd8a9bd746a3298af1be0en/a 
2020-01-16HT0766621634TY.docdoc 6dc7f5025f0a9ba2abeb82a8db9a479f41a3a3ec8b558455b930d54029108638Virustotal results 30.65% Heodo
2020-01-16J_GD5596109301YL.docdoc 67e4ad463f707098e9dd3aa9ef44543687de41237cb6bd15500e428aa17c34c7Virustotal results 31.15% Heodo
2020-01-16VI4455390840ZB.docdoc 8bf5586fdf5c09bd987b2246b8a60988842d2b3ca683a4fdd6f0a698d17909b0Virustotal results 26.67% Heodo
2020-01-16REP_FY7911482678DU.docdoc 0e0dcd97d94a05bf1cf56067a564fe6ba5666bc00fbb808c44bb4c17a5bd81a8Virustotal results 26.67% Heodo
2020-01-16BAL_PO_01162020EX.docdoc 1126c643bff1cbc4e48db0e96c1bb7522d89a64e31bccdf10629cc5402a5bdc6Virustotal results 26.23% Heodo
2020-01-16R_PO_01162020EX.docdoc 49186715dc0431481c465e3f635a7e0b8ae3f876b618c034b80254063df056c0n/a 
2020-01-16PO_01162020EX.docdoc 9d8dbba8a0e996de7449c8dfe3136a7eea73a02e9b6f67a095c53c54abb04111Virustotal results 24.59% 
2020-01-16INV_PO_01162020EX.docdoc 2fab2f5e3f28d6a81ba72956df8ac00de3d7dbea09496ae791fd20a7954fe1ecn/a Heodo
2020-01-16RP_87854598.docdoc 9b114f67484468604da8e6d028500f9e0fb32be159dc5dba550cd295be425b1eVirustotal results 24.59% Heodo
2020-01-16PO_01162020EX.docdoc 0380f6335cd6139d31d45caa6a9fb8b005cacf5c7e59ffacace9958c98a7ce2fn/a Heodo
2020-01-16SLS_010120_HDL_011620.docdoc b56a6e25f16b75f974d90ac920bb38757ba86412909d0844c3195a7b0a04c757Virustotal results 43.55% 
2020-01-16C_9176588615044127.docdoc fc68dd9971f85e873151fa2dae765c3406a74e35a608879a7b46cc250986b63dVirustotal results 43.33% 
2020-01-1646010277.docdoc 105469846cd191eb4b1e383757239f3b51f729cc1de37bcb4b1467cd28561e0an/a Heodo