URLhaus Database

You are currently viewing the URLhaus database entry for http://derevo.in.ua/4tv7/DOC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301427
URL: http://derevo.in.ua/4tv7/DOC/
URL Status:Offline
Host: derevo.in.ua
Date added:2020-01-29 14:12:03 UTC
Last online:2020-02-13 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-29 14:14:12 UTC to abuse{at}cityhost[dot]net[dot]ua)
Takedown time:14 days, 19 hours, 52 minutes Bad (down since 2020-02-13 10:07:01 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31N_UF2487603374XT.rtfdocx fde981959b6b1118d50bf879509945fcdd62384654c0c29ebc296529e153210bVirustotal results 20.31% Heodo
2020-01-31PAY_987284884164801048324.docmdocx 1d15c420f5149dd31996e11e3d746188181be53557d7956237b8252c9630cd7aVirustotal results 22.41% Heodo
2020-01-31PH3980794178ML.rtfdocx 8733de6d4b6d637e2bbe3928dfeae5cd7838708d9ab3f70799f4440d5757614aVirustotal results 20.31% Heodo
2020-01-31BAL_5509706425.docdoc 12f17aa88c41cd66c648d4f19289192958e721c494829eb67962060967d804beVirustotal results 42.86%
2020-01-31INV_CUF_010120_FRH_013120.rtfdocx 7cc3c9a82d96f25657f9f7cf1dfa55720f5d355762b2e420f7fd0748d8cd0c86Virustotal results 42.19% 
2020-01-31PAY_KSO_010120_QJV_013120.rtfdocx da7ddb46ecec831a2c5293164ee90fcaee314e6c070f201245cc15c1589e171aVirustotal results 40.32% 
2020-01-31INV_62030489.docmdocx 6c537f49120d9eb66ddd4c15b6b27c22fde22d43869c18fa9b8bfb1766d13d15Virustotal results 41.27% 
2020-01-31ST_1798071913.docmdocx 9c5de271d65d0f60677c42eca0d3ef7644017fbeb235ebf84a1bf90f0759e3d8Virustotal results 38.10% 
2020-01-31FILE_PO_01312020EX.docdoc 6971378f1c7eccd93a6ab7cf3dd5ea551a5ca14cf564e121f883c2f364e46876Virustotal results 33.87% 
2020-01-31INV_89145182.docmdocx 693d3dc3b352e37c179f3301a300d7f5c606e70bb96aaea0c37000e1b3ac6f81Virustotal results 33.87% 
2020-01-31FILE_PO_01312020EX.docdoc 757a48d02b6fe0b6727f63c17977c6b7dade46c23a91bd48a77efce02b1619b7Virustotal results 33.87% Heodo
2020-01-30TC5511851979QG.docmdocx 54e129e6834af97b4ad21f3e8157eec8f08d3c46c4c49680d1b9a539429f58f5Virustotal results 35.48% 
2020-01-30RP_VFCUKBC9.docmdocx 76483b424ad76c877f0c7f4e62405edc7e07a17978fcfb4c2b9087196d568a1cVirustotal results 37.10% Heodo
2020-01-30REP_PO_01312020EX.docmdocx 9d7903dcb84d56c7bb6712b573683c2ef0302a29123305fedbf29279c6e9815cVirustotal results 36.07% Heodo
2020-01-30REP_861510156590.docmdocx c7710490083776e7b352f36bc4922c56479b54e76458d8d20a85be4f7b4af7a7Virustotal results 36.67% Heodo
2020-01-30FILE_WRG_010120_GUP_013020.rtfdocx 11850be3ffe56cc8d2b4dba455475beb00c90133752d3e329b2ce202a87bab7bVirustotal results 38.98% Heodo
2020-01-30INV_77374121.docdoc bfb07402a9c2d9bc220ccce8b230e81d4fc183715599b2aae3a17dfa3d9e8419Virustotal results 38.10% Heodo
2020-01-30Y_U23JAY2NM4B14.docdoc 2a4836acbc4c134aaea56cb543461fc151e8db768f9cf1a3edb70813dff8327an/a Heodo
2020-01-30SW_SF1283991746MQ.docmdocx 901b4dd2e122f1f20fbdc06b9fc30b6e24ab1feeede2d2730ae662c7d5f42cb2Virustotal results 32.81% 
2020-01-30KJJ_010120_GGS_013020.rtfdocx 0f306bd8f9966cbd586c596b54c32f00c23bf48963ef3a0158e1faa3ca1add83Virustotal results 33.33% 
2020-01-30BAL_PO_01302020EX.docmdocx bcaa904b499b15bb8bdfd3594adbb8792a1f6d6c0719df8c754ae70d5e01d1afVirustotal results 30.16% 
2020-01-30REP_77533138.docmdocx 6503eeb82c3bc74d74c8bd056d2737b539afd23333ae2f25ec18b2ba72a6c567n/a Heodo
2020-01-3095336791112.docdoc 7578501f349034c9a89ebd79a8c301a6ca55760813992475ecaa08b3c4a6d19cVirustotal results 22.22% 
2020-01-29FEUMTWLK6.docdoc 135e6e64bd7742b372ada6b825319eb55fa6081a563f2bb5b8c41b146badb7e9Virustotal results 32.26%Heodo
2020-01-29REP_IWO6K19T7T1C.docdoc e18317c574e19a90bb705a85073532bd2ec510834ab8698ca864112a79aca9d2Virustotal results 33.33% Heodo
2020-01-29REP_79971995.docdoc 130b62adf5a94840c26634186acf4a9e24225e45330cc266e05d6d9d352d4f7cVirustotal results 31.03%