URLhaus Database

You are currently viewing the URLhaus database entry for http://traektoria.com/wp-content/open-xnC1kj8re-LdotQee2/baads7e5jpqzr-q9y29cv9etpxo-j19-9mygho7yybb7h/214648-JO0koWnF6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:299707
URL: http://traektoria.com/wp-content/open-xnC1kj8re-LdotQee2/baads7e5jpqzr-q9y29cv9etpxo-j19-9mygho7yybb7h/214648-JO0koWnF6/
URL Status:Offline
Host: traektoria.com
Date added:2020-01-28 09:10:05 UTC
Last online:2020-01-30 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 09:12:02 UTC to abusencc{at}interserver[dot]net)
Takedown time:1 day, 22 hours, 50 minutes Poor (down since 2020-01-30 08:02:05 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-29List 2020_01_30.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29INF_20200130_NPC557.docdoc 2c7a2ffff7a4a2fcb7a86235dafda3b02ce67330155e00a22408d6c14b2f5cafVirustotal results 40.32% 
2020-01-29DAT-2020_01_29-CH56959.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 34.92% Heodo
2020-01-29List-20200129-R65573.docdoc f794730342329d1ca756e53becae5be97d1f5fc5628dc8dd371111d0d8df96c3Virustotal results 32.81% 
2020-01-29FILE 2020_01_29 PU4468.docdoc 49725f6641477d5fcdc1933e66eb652922a1e1264277a6aef8069967eb0084f0Virustotal results 30.16% Heodo
2020-01-29mes-20200129-251.docdoc b09c8d39fe17d600ac2beffd9540076f55d944b41ae3c11b26600252a272b3ecVirustotal results 26.98% Heodo
2020-01-29Mes_2020_01_29_77743.docdoc 5ae7e30b55476614975a3dcc125e78cc5e84eb3a8c413ce9a42be9d99ed7150fVirustotal results 24.59% Heodo
2020-01-29MES_I910650.docdoc ec9b05ca4512e2e594339751e698ee57b1373c749a8c8b26cbe5c79dc1e978ccVirustotal results 26.98% Heodo
2020-01-29list-2020_01_29-TNR250196.docdoc 0b0243567f8017cba7be007b4d797731af10a9c7e9971cb09881d0a646bf88a2Virustotal results 30.00% Heodo
2020-01-29Rep 690559.docdoc 681cf7e6e085dfaeabad5bbaf2adc9194fff19044df752c7adbfd19077ace1e2Virustotal results 26.98% Heodo
2020-01-29mes_K40401.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29File-20200129-ZR862.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29Inf 2020_01_29 6379272.docdoc a1245dc00abc837e5b912c2aab2cc8eb34eb70db4bad71991edb4854fccadfb9Virustotal results 24.19% Heodo
2020-01-29LIST 20200129 0522.docdoc ff622f5e5e3370bc68d5d00d00bb610357cc7620c1ccc8a6f8edc051119621abVirustotal results 25.00% Heodo
2020-01-28file-ZCQ897479.docdoc a5b8d8907e0cf3e09b5a2e7bd993dca67975830d84b0ff832334fdafe4f656d3Virustotal results 39.06% Heodo
2020-01-28LIST-2020_01_29-WBC8523.docdoc 4b4867516d0fd10fb9b46f9474a7db95edf90a09b41086aaa1eef12ed73664baVirustotal results 41.94% Heodo
2020-01-28rep 2020_01_28.docdoc fb2b108e0a60dd86b0478caee0c19cb0056953fbfdf00e100184e1a53a031948Virustotal results 36.51% Heodo
2020-01-28inf_20200128.docdoc fcb69f15a7e0e60e6d3b818f8c82d51c5a011ff2fa5097c6e85fdccc1781049fVirustotal results 35.48% Heodo
2020-01-28rep HR803103.docdoc 76288b03aada28f313d41a8856e42320372dfc03b255335b3d8c0427cb01c4a1Virustotal results 31.75% Heodo
2020-01-28Arc_20200128.docdoc e973fec4c3e5b5f599c5defe0c00df33eae0e9b00f1f8a1d8f9479d4e343e446Virustotal results 25.00% 
2020-01-28Doc_20200128_17870.docdoc 59428bbec1459b7f3517f508013242a3dd7f4dbdee059380b5ff1c265abc6197Virustotal results 26.98% Heodo
2020-01-28list_2020_01_28_223010.docdoc 17de704a282307408b556e2328dec5c5715d0cd7136dcdc1d6fe54f841dc2bc4Virustotal results 23.81% Heodo
2020-01-28doc ES99985.docdoc c50c6dc106e4d46b561eb4f45f329818ee1c5077cf4d4b4010ce38d01e437756Virustotal results 22.58% Heodo
2020-01-28Dat_20200128_HA432197.docdoc ff3030128824873fe504c15ecf0cd7b700b36b02bee75fad21ac9d45ea20fa58Virustotal results 30.65% Heodo
2020-01-28Doc_2020_01_28_1443.docdoc 267aa23c9031b06e6dc7fac45daca30a65d4f08843fe0976c2ad7201d9646dafVirustotal results 28.57% Heodo
2020-01-28Arc_2020_01_28_Q02216.docdoc 1ac8d894b4e2be7cb2d7fc3dee2346677c5fdc5871be74589848518155c5ff8cVirustotal results 25.40% Heodo
2020-01-28Rep 20200128 28852.docdoc 68938178a947046088472c9c687caf7843271233fbba2b888ada13c2bb5a5e5cVirustotal results 22.58% Heodo
2020-01-28arc-2020_01_28-525528.docdoc c5666d80df3d2361122568d511e336c58a58b27576a1cd78b434c425d8b2e809n/a Heodo