URLhaus Database

You are currently viewing the URLhaus database entry for https://www.proagent.at/log/zsyh-bgke-7308/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:294052
URL: https://www.proagent.at/log/zsyh-bgke-7308/
URL Status:Offline
Host: www.proagent.at
Date added:2020-01-21 19:12:06 UTC
Last online:2020-01-29 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-21 19:14:02 UTC to abuse{at}a1[dot]at)
Takedown time:7 days, 19 hours, 47 minutes Bad (down since 2020-01-29 15:01:15 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24INVOICE HZL0456_1229075.docdoc df476578ee7f5bcc90c4578a7737fffabc637ca583c3ff9d4b79822e68148179Virustotal results 25.00%Heodo
2020-01-24Inv WMPA2_08931329.docdoc 0410a5d9885db43d1b91eb836ab2e33102eec96ec006db3ac01737fd6e10ca5dVirustotal results 29.03% Heodo
2020-01-24INVOICE PNV6_2087766.docdoc 21ed646e9c73d65b5355a50adb7b3a7b2f6d76b45d4248e2ad2480fd784ee8b5Virustotal results 25.40% Heodo
2020-01-24Invoice_FTR8_486421.docdoc e6227f508ea8149469cf318e6939e1fd1d8b32b728997677e8220d7c4b827ac3Virustotal results 25.40% Heodo
2020-01-24Invoice-1281_915837.docdoc 829533600afafde7716701f0ea4bc0cb998fbd85124cda950547315d1c512adeVirustotal results 25.40% Heodo
2020-01-24invoice JZDC5362_0264271.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24invoice-X9_969007654.docdoc 1824cc4bac3c95af19bb19db000fa09999ed3e4ceff6bb1ca9af0ab4a96104e4Virustotal results 47.62% Heodo
2020-01-24INVOICE_RFD54_63626517.docdoc 0ca26646d4e6d640b628e402fcbf0dc050634baaf8b6468051b29dd30a1cc140Virustotal results 46.77% Heodo
2020-01-24invoice_JJBS16_498064425.docdoc 5c566546a1462e17becc0023ddfae0f8e4d8b495e4feda5bcc5f7fa52e0ddd0aVirustotal results 45.00% Heodo
2020-01-23invoice_MQD11_463051.docdoc 4d65aa1d4d4356e59a68839a7e437a4e3d207e6bf481c90baf4ba6de5b9d0ed4Virustotal results 34.92% Heodo
2020-01-23Invoice PBX8852_721158108.docdoc 4d903e16f764960f758403ee88c04d33109f7148020565ab567b66dc178d2c91Virustotal results 30.65% Heodo
2020-01-23Invoice 0_5836662.docdoc c178793508c9ec1955d363fa70ab41ca7a17928c7445a1594789904e320ce640Virustotal results 29.69% Heodo
2020-01-23INVOICE YD9620_459126106.docdoc 6dbf308715c0b429e1b0e16054cdad388a7095462af98c1893432f3967836b53Virustotal results 32.26% Heodo
2020-01-23Invoice-221_8840229.docdoc a822d46ff789d95a0a7433319bc99c759a917cbcc998042645f54bd8bed3eb40Virustotal results 31.75% Heodo
2020-01-23Invoice R806_00478871.docdoc 3475216fd7f40791c7a6f620a37544ce6ff9866f4ade999ad3e4eab76ccb91a7Virustotal results 31.75% Heodo
2020-01-23Invoice_K7358_087071900.docdoc 93500a32e011f40c983cee5dd2d53b447421643672ec0823b81e5f7d5125a6eeVirustotal results 31.75% Heodo
2020-01-23Inv-2794_3332252.docdoc e41c558156d999fcb01df97b67cc0df4652e2799d05f12f7bf987d9d54e668acVirustotal results 29.69% Heodo
2020-01-23INVOICE-TJ9046_99292531.docdoc 9bbfe0b457184f41255832ce9e3b15e25fe0bdb51a9ecf942163063c7f38acc3Virustotal results 25.81% Heodo
2020-01-23Inv-B6073_04403212.docdoc 4efe99e760c862d17d3128bc8c9bfe85a4512b981ac9944bd6f3c38d0d02651bVirustotal results 28.57% Heodo
2020-01-23INVOICE SLBV4_051447573.docdoc 248089756bc9657dbfe332ec94f5d2a71815ea2f66e3c12de45075ffdcafd1e4Virustotal results 33.87% Heodo
2020-01-23INVOICE DAMC7_767750.docdoc 3c8f1b91ec9081fe9a7f3a148e86f65019a450a87c13110116b93cfab2bd72efVirustotal results 26.56% Heodo
2020-01-23INVOICE 80_79967049.docdoc bcd78fb2ae376c31ea21a7d1b7d110e4dd0a49c9a8261bc5f68816e4d1091bbbVirustotal results 22.22% Heodo
2020-01-23Inv-LZNB468_989430234.docdoc 023430cd6c69dc69f461d433915b89ed4b22fab2cbcc9882319f266d3e20f6d4Virustotal results 22.58% Heodo
2020-01-23Invoice-DYRM42_6893063.docdoc ede0274ada2624e552749f7852dc316f0d689fa6669b78853a60f65e99d1aa93Virustotal results 20.97% Heodo
2020-01-23invoice-EUW85_99009580.docdoc 1bb5f74622a32fe8a3000608c2103a22c23e5079170faf756e844595dd91742aVirustotal results 22.58% 
2020-01-23Invoice-544_97748976.docdoc b4f3c614764ab55febfefc958d4fb70920c4c17380c6d2adf4f77d68878598daVirustotal results 33.33% Heodo
2020-01-23Inv-DT1_9712100.docdoc 8d578bb497d24a668b14672ae884d4efa720d8dc69af8576fd4173d472329a8cVirustotal results 35.00% Heodo
2020-01-23Inv-819_22240826.docdoc a6caf4ef566d28695b60b4316c66a9354a608127c38c5725d8bcde83f06c1ac3Virustotal results 28.12% Heodo
2020-01-23Inv-VJTW9_997600233.docdoc fde16d92d511109ff85a224347f7d64064f5e5a11e1a4deefe96dfd8a04375aaVirustotal results 38.71% Heodo
2020-01-23invoice BLI4_026828474.docdoc cfef2d0896c8f6b8665524c08dcadeaf306d68d6f41337b34bc6916d2b06e12dVirustotal results 32.26% Heodo
2020-01-23Inv X721_318327136.docdoc 920fbbc436a2e803b1b03a31bc44363cbac1dcfa2dc2729ec0ade9c6178d35b7Virustotal results 33.33% Heodo
2020-01-22invoice_SE6_396894.docdoc 5f90a562e8540b29714d08b103b911722e04e3662b4fa2326d1d4aadae35cc18Virustotal results 32.81% Heodo
2020-01-22INVOICE 4674_071615.docdoc 8011476e9a36ab9f8defcd9fab9979d4a19203eec24376520d244caea880f353Virustotal results 28.12% Heodo
2020-01-22Invoice_SAB3_5968731.docdoc 3c1cc64c9babf45acdb186c3dc9689517fefa31918bdd47faf8e17878f2e43e4Virustotal results 28.57% Heodo
2020-01-22invoice-2609_27538253.docdoc 029859049d0e521193d86baf0d209080d9d885e31b9ecab91b2c2484acd58af8Virustotal results 30.16% Heodo
2020-01-22Invoice-G9799_208557750.docdoc 6318e663d8ed1530d52e0a3770b033d00fe037533ccf2e5a56e9f36a7eb28653Virustotal results 33.85% 
2020-01-22Invoice-49_971261326.docdoc 3c883920142d8e22088985f3f3594665bd83571bfb755aa1aa5b7354fa7912bfVirustotal results 29.23% Heodo
2020-01-22invoice-RPPE3986_5787382.docdoc 65c7a5643d85ceecb76612f8ae912c3bee670e1a62f6c7ec02161277d2e11189Virustotal results 27.42% Heodo
2020-01-22invoice_Z9_998204.docdoc 65cba6a906f2a7520df807c03184497be908c91ecb85d00b1caeea1513a948cfVirustotal results 28.57% Heodo
2020-01-22INVOICE_IVSG78_994271776.docdoc 8c7789d0789c1577504a4fe78fcd941bf7213492ee0ac852e59a69e5f3365f2dVirustotal results 27.42% Heodo
2020-01-22Inv-MYKH7206_1593552.docdoc f9560dc519e813ec3b39ea3d9dd1d863c2187d14f983d291c801452aa7c43db1Virustotal results 30.65% Heodo
2020-01-22INVOICE-FRS83_895876269.docdoc 28dd5855d4a2794c748e05180897d51cec6ddce941374738098c85fa53caaf19Virustotal results 29.51% Heodo
2020-01-22Invoice_Z6_5167807.docdoc 5cc7928f997633eeecd265d6925e0c3b46f93c226894377bd1076e14f29dd3d2n/a Heodo
2020-01-22Inv-H33_010574.docdoc 1bcbdde37aa474f7da9b6aa87a35050a574fde322383a5326ad3a2de336659a5Virustotal results 27.42% 
2020-01-22Invoice GGSM1_783655669.docdoc a43dc802a0108342f8a4a1b4573770b5cbc35fca8be069827599a7708e2c16cbVirustotal results 26.23% Heodo
2020-01-22Invoice-IZE914_422056.docdoc 88ce28544773169c40c27fca43e493f73d997ad67d58000d9554edd251754738Virustotal results 26.23% 
2020-01-22INVOICE-LHM317_427485430.docdoc e3c19433848a0b0023963e05496e09744003119af344985daad6a614cebfb1b4Virustotal results 21.31% 
2020-01-21Inv I6_51445250.docdoc 1d0edf1be46e8567cdbcc608cb4556c0fd8af4a1f011a3a249c6d00e6e5ce8b1Virustotal results 21.31% Heodo
2020-01-21INVOICE-F74_6980446.docdoc 367ba91cb54e7938d84bb39986cbc499e92acaa19f78b6345d13b3fbd1d903c0n/a 
2020-01-21Inv-NL3323_702129.docdoc 3fb6dabd9e46b09e9906cad336321983eedb8601725e0cfd49c9e99ddefe09c1Virustotal results 22.58% Heodo
2020-01-21Invoice-9739_7106339.docdoc f2bfe6faf517c78efd72338864c67c881e1c3a814b7609493d45722307db036cVirustotal results 23.73% Heodo
2020-01-21invoice-NPBW50_8476659.docdoc 34a4bac47f42d2775ebc0c1f274f4fdf207acbf79d681c4da5a612c5f2987599Virustotal results 22.58% Heodo
2020-01-21Inv MKBL913_7656924.docdoc d26c57d416e5f158878e3b5620b41b27455cbc9efc358eeca7682373317d615aVirustotal results 20.97% Heodo