URLhaus Database

You are currently viewing the URLhaus database entry for http://elek-ortoped-orvos.hu/libraries/available-array/security-yj4-07u30k2za1/1QLAf3B-hr7n31cwhhwef/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:294072
URL: http://elek-ortoped-orvos.hu/libraries/available-array/security-yj4-07u30k2za1/1QLAf3B-hr7n31cwhhwef/
URL Status:Offline
Host: elek-ortoped-orvos.hu
Date added:2020-01-21 19:55:05 UTC
Last online:2020-01-27 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-21 19:56:02 UTC to abuse{at}deninet[dot]hu)
Takedown time:5 days, 11 hours, 4 minutes Bad (down since 2020-01-27 07:01:00 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-23FILE_20200123_O564909.docdoc ec50dd262063dfc0f05309888bd9e76c316af53094c814cddd7f219d9c2035b8Virustotal results 35.00% Heodo
2020-01-23mes_2020_01_23_5078.docdoc 737261cba27fb5709e37158314184d01a7f6a36386fc2535e236893d82590df2Virustotal results 29.03% Heodo
2020-01-23Dat_20200123.docdoc 6cfb6058d1b0f8aa7927a40680c7fcd88e0c3f67cdfc2b271af7823dd89754a3Virustotal results 34.92% Heodo
2020-01-23FILE.docdoc e64e311b594718ab849cdf6a3379d11774932a94c3498135f107d659174adb40Virustotal results 28.12% Heodo
2020-01-23Rep-20200123.docdoc afe09e292b9823a2d28f0c6b6c795b2e3f9d1758d53e30d1eaafd8dd29b2d0a4Virustotal results 26.23% Heodo
2020-01-23inf QYK6492.docdoc 4b10f942d9197454cbd1e18eb87d18ab77fab4e78186b0157e96404d3ae11a3cVirustotal results 20.97% Heodo
2020-01-23Arc-20200123-YH491609.docdoc cd0198b82476b890c4adb94b65b55245c7a7a375e809a127ee20f1a01cc26c1bVirustotal results 20.63% Heodo
2020-01-23DAT-2020_01_23-433.docdoc 6c2d471a2f006e30296c8dd0e9f7eaae3742e6031681e94d1808dfbecf86c57fVirustotal results 20.63% Heodo
2020-01-23Mes_2020_01_23_EPM63958.docdoc 44bf0077af152d7d892947c473b68a731a7341fc10cc40505a6c2d624b77c17aVirustotal results 31.75% Heodo
2020-01-22doc.docdoc b3a1cdb8288e369fec04ec55e099c9bd7e8593d24da31870c3a782a351d98ba0n/a Heodo
2020-01-22INF 2020_01_22 LK000908.docdoc 94e08c0bae9bdef279f8e2b9c6b4f5315c766e6d9dd73b9fd4879ddd3520bcadn/a Heodo
2020-01-22Rep-20200122-952633.docdoc 346b0ba9684b9fdc8dde08af0ab486c86cbea5347a32be77aaafb0dc9034f2e2Virustotal results 28.57% Heodo
2020-01-22List_XX08210.docdoc d11ac96224df72410e7801b55a880897f814ba64e954d6b43069cf114fdb5248Virustotal results 28.12% Heodo
2020-01-22INF_20200122.docdoc 79022e8af5cac5f1a1105b8ff407d7910508480d4d9a6118f812dec8b9c06b48Virustotal results 28.12% Heodo
2020-01-22DOC_2020_01_22_554.docdoc dad1b60c001deb55fd561c435e1825db93fd1dc33d40fcf6d99a469e56d0f6e0Virustotal results 27.69% Heodo
2020-01-22arc 2020_01_22 4871.docdoc 99e9e97ac0dfc43735a952ff9211cec510d2e0544c94082030824dec5c8dbf13Virustotal results 30.16% Heodo
2020-01-22FILE_2020_01_22.docdoc d5d9a7450867f6c951b33c65e5c363becf43297041b078e61259006714be9da2n/a Heodo
2020-01-22mes_2020_01_22_U64634.docdoc 63e4f747e3e1e3b0013d5e079ba505deee4fac664d83b0e250297677230bd592n/a Heodo
2020-01-22DAT 20200122 Q608292.docdoc 35aa31f7e13efde73dda7cd2a817bd49c6f322ffe1f765e585c50f564ae330f0Virustotal results 25.42% Heodo
2020-01-22DOC 20200122 2515011.docdoc 27a95f049070cadbefa3c02a756a3b031f62b48a3fd6b2deadc601e88c1e2defVirustotal results 27.12% 
2020-01-22arc 3246192.docdoc 234cba08fc425f95447f2c72a2dae3ffbc5b47f1d14013c13cdcecad60ce1802n/a Heodo
2020-01-22INV-20200122.docdoc f215874c38b91208764829b0950f3658cbed0e5931060ec4d658ff212f019642Virustotal results 19.67% Heodo
2020-01-22REP 2020_01_22.docdoc f57549b2d5b329a8c83b05e2a6ea4f288e4215882c24d2650cc818e65fcd6239n/a Heodo
2020-01-22Mes LA18942.docdoc e32b84c7d967bd21ca4def6c66ed1441afca25b720e896b926f4c01906891918Virustotal results 19.67% Heodo
2020-01-22File-2020_01_22-1891363.docdoc b92b6beab56264910194b45aac22370981155c53c9914cc654e211652b370c95Virustotal results 20.00% Heodo
2020-01-22mes 2020_01_22 603406.docdoc 55e7c45b115a1b3f5841cff784e524e1a7db1007c8b7dab6c0ac641891d18a4bVirustotal results 20.00% Heodo
2020-01-22DAT 20200122 TAZ396.docdoc a6d88c45a2db468584d02f98537fa9948fb89553ecdb4a9ed46bd92cbc43d863Virustotal results 21.31% Heodo
2020-01-21List_AKE8522.docdoc 2119f3e51c12625d689a0d06dbbbf6d19fc6555e7f33b67a54e3df778f1a09fdVirustotal results 20.00% Heodo
2020-01-21file_XJC25617.docdoc fbc0fb3b339db0716a9cb4ec9fc14cb367f2a8597bbfcdd7dd553c1a96ccc410Virustotal results 20.97% Heodo
2020-01-21Pay_2020_01_22_530.docdoc 053f8aa722cb6b921c25cdf4e020bc1272f3869f35f9eb9ac4e1314906f9451dVirustotal results 20.00% Heodo
2020-01-21REP_N12347.docdoc 011423eab82e47c067f2e01970d903718cfb94cc1a92becd1df0736040f1a2dcVirustotal results 20.34% Heodo
2020-01-21Dat_2020_01_21_VMZ402246.docdoc 00f1cf8171212e68ae5a2ba054c92bff0f29117343462580b28756bd2051203dn/a