URLhaus Database

You are currently viewing the URLhaus database entry for http://www.bythesnap.com/Zahlungsschreiben/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:29820
URL: http://www.bythesnap.com/Zahlungsschreiben/
URL Status:Offline
Host: www.bythesnap.com
Date added:2018-07-10 09:52:32 UTC
Last online:2018-09-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-07-10 10:00:27 UTC to hostmaster{at}varnion[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-11Rech-JTI-032/198580.docdoc 9f198da13b021089e26d1b5b7fa86d7aea53524ad010570fcbd1250694d159f2Virustotal results 41.67% Heodo
2018-07-11Rechnung-XL-009928333/0.docdoc 8aafc0f895d212a0d0e2a8787209340cadd7af86c1feaf4427aa7dd85dd12d0eVirustotal results 41.67% Heodo
2018-07-11rechnung-ZDE-036718992-4.docdoc 22e6480db112450a96ee7c4bc75a33a02ee346ab9be1fb477ee502afdd0e4c65Virustotal results 42.37% Heodo
2018-07-11RECH-NEI-005-1492302.docdoc 17f33263e614cd38db13138aa887998f2cc93189b5d3f176a56ecdb360700291Virustotal results 44.07% Heodo
2018-07-10RECH-JAD-029132721-35.docdoc 9925020e79ac83a06b0828d6bdaa352aba4121c0d41334d13c2ac1a29d4ff806Virustotal results 36.67% Heodo
2018-07-10Rech-HJ-086087882-3.docdoc 463fe15318a983c8adbb28bcc68c5ad867fdf4b9c7ce6af284e1b982ff053c05Virustotal results 43.10% Heodo
2018-07-10Rechnung-XCI-00684474-36.docdoc 5545a218b77360c66c377591d31c1b19b7dacad1a6307b2db307648d0a7292fdVirustotal results 42.37% Heodo
2018-07-10rechnung-AWC-03-73264786.docdoc 84b5e3235e3e651e446b71aa7b68bb61afec3c7fb60e6189883f23f3779fda68Virustotal results 42.37% Heodo
2018-07-10Rech-QC-03/46759759.docdoc 3af191c8f9577b27d8f8756b4ef37cf76bd33adb01feec6ee737181f1e64e219Virustotal results 36.67% Heodo
2018-07-10Rech-HPC-074/8466665.docdoc 56c5ad2c64f884d2a9cca477b72bc154056d9e573ab1a4ec087fa466f7297bceVirustotal results 33.90% Heodo
2018-07-10rechnung-EM-086-683816.docdoc 7413b134a63bf6c0bd02c784ff8c9b5716af9512ef029b0fc1c745656c2ea76dVirustotal results 28.81% Heodo
2018-07-10Rech-NSM-06/8534688.docdoc 6c4667324cb5dcfd8561431ee18d285925fe9d39771ee6fcbd03ab7092024ac1Virustotal results 30.51% Heodo
2018-07-10rech-CPG-07913993-76.docdoc 47d769cd763ce91c81fac2ac56d3371b592a973e4c6c1e3f266d35acf36566d5n/a Heodo
2018-07-10rech-EKW-05427087/77.docdoc 4d909f80fda16d515cb3b5d45b4e9b868742de09c57282d015c9d44d3ba85d86Virustotal results 27.12% Heodo
2018-07-10rechnung-OEP-0018167/3.docdoc a6af6325bafba6343bb8e39ff465f0daf339c9cfb7bcd7119ea4e0d0597667c1Virustotal results 27.12% Heodo