URLhaus Database

You are currently viewing the URLhaus database entry for http://rgitabit.in/zixtbv0/5956564681-YjPXp0sR-4jgIo0zbdl-eRVAr3lZxF/open-space/o4zpsqmmi-v2x5937/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:302095
URL: http://rgitabit.in/zixtbv0/5956564681-YjPXp0sR-4jgIo0zbdl-eRVAr3lZxF/open-space/o4zpsqmmi-v2x5937/
URL Status:Offline
Host: rgitabit.in
Date added:2020-01-30 03:27:04 UTC
Last online:2020-02-03 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002285963 created on 2020-01-30 03:28:04 UTC)
Takedown time:4 days, 4 hours, 40 minutes Bad (down since 2020-02-03 08:08:12 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-01MES_2020_02_01_146.docdoc 235d2f577ec6a02ba838f9d253b4730ca8e5fe3f89141028bd88932350766f0bVirustotal results 38.71% 
2020-02-01mes-1390.docdoc 8cf321c8769a59ecb8e1827a743e100005bc77d8d4f29cb684e497ead703ccfeVirustotal results 38.10% Heodo
2020-02-01Mes-20200201-38719.docdoc db7f5b6d87d0f0ae4d1382c466452fa7957c4187f6a2c5604f3c40c326b2d627Virustotal results 38.10% Heodo
2020-02-01Mes WG297326.docdoc 183e62f5bf4e4e6d18a1bfb90dbbee1555da7d65f21fca506a930a27f0aefba8Virustotal results 38.10% Heodo
2020-01-31arc_2020_02_01_P201405.docdoc 145bd9fd7db4ebd0472e72dfa89fb1a9656cacb74556485977bdfbf14e254696Virustotal results 36.51% Heodo
2020-01-31Doc 20200201 109.docdoc 111bbe3116737d3299bb49d3fe0feadda406d9c061e02171c4bb61d30b3eaef6Virustotal results 32.26% Heodo
2020-01-31Arc_2020_02_01_97128.docdoc aebb8ef053c29de1aab7da94fc9873aee20eadcb51be762f73f08a2aa0cea7baVirustotal results 31.75% Heodo
2020-01-31arc-887.docdoc 786338c65b78c5ba2c61da98f185fd1ea8efa6d26cdce817ebd143cdbf5aa79eVirustotal results 32.26% Heodo
2020-01-31Doc-2020_01_31-I807158.docdoc 75a193ddb301d33ccb84b3ec9ac81a9bc61313864cafe25f23c10cd31e159587Virustotal results 34.38% Heodo
2020-01-31Mes 2020_01_31 203025.docdoc 1bbba6556de9b7552cfe85621ad8905c44d0a59782a9db60bec73e07847e7767Virustotal results 31.25% Heodo
2020-01-31list 20200131.docdoc 3a1bb7b01c02be6e2e71fd83c2bb04835747b98aafc1ee772f88c618b5325d53Virustotal results 28.57% Heodo
2020-01-31arc_P6840.docdoc 075d1f5b7944bb5b788d8b9036b9ade54bf6cda3e8d6809c6846900039d90e18Virustotal results 25.00% Heodo
2020-01-31arc-PC40968.docdoc 91275159f80eeb0eff909660f56290704daffd027e4b5725ef33573c925488a4Virustotal results 20.31% Heodo
2020-01-31ARC_2020_01_31_RN3243.docdoc e7863425cfe23c40a2c40e179c1bd67eba047602a382158bb9458b1f52cbeec4Virustotal results 20.97% Heodo
2020-01-31DAT-2020_01_31-916.docdoc 94126672a1eae302832e65ad27da988191a1cfe19203434facd8fc6cda3605adVirustotal results 20.00% Heodo
2020-01-31DAT 20200131 DHB247099.docdoc 09c4e38f5ae89bb62c021442a2e76b9f572255957f80b6d5af3111d7d9623325Virustotal results 20.31% 
2020-01-31REP-20200131-YAX776.docdoc 95c8cf64216794e220da4ea2be433e97ba4e1ff99696be784f418e8bd023c313Virustotal results 20.63% Heodo
2020-01-31File 2020_01_31 6180133.docdoc 5e1a30103fd40640c8a5b91d5dadf5564896d808711410002020fa9f136b080eVirustotal results 20.63% Heodo
2020-01-31Arc_DBH836.docdoc 479acd550fee84ce07d46ca359554323d14b0874e9402267f9f6cedc7ea64065Virustotal results 20.31% Heodo
2020-01-31mes G318.docdoc 6fd2e08f2dde33eac79877702712cc2d0e58ce9acd50807a6393b64bef1cc2f1Virustotal results 40.32% Heodo
2020-01-31list-2020_01_31.docdoc dd7ae3bc161b941e8ee4831dd583f504907c07c32c1d64d330d1f08e2030707aVirustotal results 39.68% Heodo
2020-01-31ARC_20200131.docdoc 994ab85c2ed2004c1ac4b7eb7b3300ed9453ac6f02787c92e226c3cfb19cc939Virustotal results 38.10% Heodo
2020-01-31MES_2020_01_31_ZD578733.docdoc 8cf8b5bd984c809a86c9c425d500393b50115233149a953678de79dca4bdc223Virustotal results 35.94% Heodo
2020-01-31list BQ8898.docdoc 02d4150ccb8c0569ecd99cc1a860f5c711f1cd2ba567aa5728b830b9f1789f46Virustotal results 33.33% Heodo
2020-01-31Rep-2020_01_31.docdoc 8ac6cda8c7b4094b736c508bc231f782f410a72cecec097edb943014ce610585Virustotal results 33.87% 
2020-01-30REP 2020_01_31 L840.docdoc 38ed0185799cc1cb1e2fcfea1f554229ad2ddee7695a8eee704426cf83a6b7e6Virustotal results 33.33% Heodo
2020-01-30DAT-039162.docdoc 78af768890683c9271a83b8fa61ac0743bbf82ff74a00a23e8b36e1cc539b664Virustotal results 34.92% Heodo
2020-01-30ARC 29003.docdoc 5d669f3035b344006960d92b8e182bc4805b2f45783fc1393e39b27498e25cbaVirustotal results 34.92% Heodo
2020-01-30Arc_KRH5499.docdoc 3d0d29f9f42fa9d58abba5af05b9a74a48a861b54ea5a1759c4115bb77bf8801Virustotal results 34.92% Heodo
2020-01-30Dat-IW660791.docdoc 2adbbe56b611d03bc76102405f6da306781caf1002267dc5cbe3119f5284538en/a Heodo
2020-01-30dat.docdoc 754cbbb7ddc67e1475afc52e76a09e3c2f2caf788795fec9c7859e82dc81d9e6Virustotal results 38.71% Heodo
2020-01-30file 2020_01_30 25516.docdoc 8f4a6501b7d0a50fd6e8efa50f1eb0cf68d343cd44f5e4b28c47fd843d56fe6fVirustotal results 37.10% Heodo
2020-01-30inf-2020_01_30.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30mes-512.docdoc eba2dba873ee77550f0381f6e0fabf8501232bc19b5540b15d442e85cf817399Virustotal results 32.81% 
2020-01-30Doc_2020_01_30.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30doc X32992.docdoc 8fccb53dc5d9058d11d344f7fbd34609642b1b1d2a9e4699134d165ce6ab21a0Virustotal results 25.40% 
2020-01-30Dat_20200130_BW48725.docdoc 7099bcda5f0b4caadc077f6bc794a4dc8933e66863535f49c23c8b19ec793b7fVirustotal results 28.57% Heodo
2020-01-30arc_691272.docdoc 6926bc1e1548f432acb621ea14a0a04189aacc9b0d3730cc275ea5be5ab2ddf7n/a Heodo
2020-01-30MES_20200130.docdoc 1db0c100dfea192f88767bedda9beef583fcfb5c7797f32d7f93dcf045d3239cVirustotal results 25.40% Heodo
2020-01-30Arc-20200130-U72096.docdoc 479eee421bf4015cb1b00a588e5962438efd1c4dd8125867ddc62109d6e8e3c4n/a 
2020-01-30mes_20200130_5073.docdoc cbfd00a796bdd447134f7dc1f38823e8e2eefb7075068cc197ec67c044ecfc24Virustotal results 24.19% Heodo
2020-01-30INF-2020_01_30-8890732.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 28.12%Heodo