URLhaus Database

You are currently viewing the URLhaus database entry for http://www.l600.ru/Rechnungs-docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:29540
URL: http://www.l600.ru/Rechnungs-docs/
URL Status:Offline
Host: www.l600.ru
Date added:2018-07-09 18:55:06 UTC
Last online:2018-09-10 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-07-09 18:58:11 UTC to abuse{at}rtcomm[dot]ru)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-10Rech-CSI-0012682-93.docdoc 9925020e79ac83a06b0828d6bdaa352aba4121c0d41334d13c2ac1a29d4ff806Virustotal results 36.67% Heodo
2018-07-10RECH-EJU-0803204/25.docdoc 84b5e3235e3e651e446b71aa7b68bb61afec3c7fb60e6189883f23f3779fda68n/a Heodo
2018-07-10rechnung-QWO-0949559-68.docdoc 3af191c8f9577b27d8f8756b4ef37cf76bd33adb01feec6ee737181f1e64e219Virustotal results 33.90% Heodo
2018-07-10rechnung-XRE-067-58921255.docdoc 56c5ad2c64f884d2a9cca477b72bc154056d9e573ab1a4ec087fa466f7297bceVirustotal results 33.90% Heodo
2018-07-10rech-UAT-011719518-1.docdoc 7413b134a63bf6c0bd02c784ff8c9b5716af9512ef029b0fc1c745656c2ea76dVirustotal results 28.81% Heodo
2018-07-10rechnung-ZFW-071-2759469.docdoc 6c4667324cb5dcfd8561431ee18d285925fe9d39771ee6fcbd03ab7092024ac1Virustotal results 30.51% Heodo
2018-07-10Rechnung-EA-080406012-4.docdoc 4d909f80fda16d515cb3b5d45b4e9b868742de09c57282d015c9d44d3ba85d86Virustotal results 28.81% Heodo
2018-07-10rech-FIR-063-30215972.docdoc a6af6325bafba6343bb8e39ff465f0daf339c9cfb7bcd7119ea4e0d0597667c1Virustotal results 27.12% Heodo
2018-07-10RECH-LN-06881100-77.docdoc d2beba142d02c877bfe71dce571348be5558b5ccebc5d32237e17948fdf7c756Virustotal results 27.12% Heodo
2018-07-10rechnung-QCR-08-434465.docdoc 8a0676c5261a7272536b401161c015c9670abf423d65f9cc1f1bdadad9d4fd0aVirustotal results 29.31% Heodo
2018-07-09rechnung-OXD-045092445/6.docdoc 7e3ea7a1e6f1e70cb6c2c85f4571fab88f27aec9677e0e1b1f070d617ef1ad3cn/a Heodo
2018-07-09rechnung-HM-08612739/84.docdoc 14b38d7f07dceada9dcf142d1d36b40d9236b3f323fed45f8524563ba8f7843fVirustotal results 25.42% Heodo
2018-07-09RECH-LJ-01/625748.docdoc c413d4f2b81c58717d19fedfbaf5cea74542f23dc55afde48c8ca821c4d14fdfVirustotal results 23.73% Heodo
2018-07-09rechnung-XVA-07-919438.docdoc ca6c16531b266910860007e0736315e7e5aa5534d62bd95e763e2676def65454Virustotal results 25.42% Heodo