URLhaus Database

You are currently viewing the URLhaus database entry for https://vaziri.echobit.ir/servicios/available-section/open-space/LBYL8HMM2-lbrcpbaprb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:302137
URL: https://vaziri.echobit.ir/servicios/available-section/open-space/LBYL8HMM2-lbrcpbaprb/
URL Status:Offline
Host: vaziri.echobit.ir
Date added:2020-01-30 04:19:08 UTC
Last online:2020-07-19 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-30 04:20:03 UTC to gh_yousefi{at}tci[dot]ir)
Takedown time:5 months, 21 days, 18 hours, 57 minutes Bad (down since 2020-07-19 23:17:54 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30DAT-20200131-1607.docdoc b186bb3159e1ac70eb5ee6dc282a0aab9d7168e558d7800441d2d02b398b9d10Virustotal results 34.92% Heodo
2020-01-30doc 2020_01_31 EY1220.docdoc 7e928307f956ba7153481f9c5ff422807d3b210a51be147e9fe988fa41d392c4Virustotal results 34.38% Heodo
2020-01-30Arc 20200131 251.docdoc 5d669f3035b344006960d92b8e182bc4805b2f45783fc1393e39b27498e25cbaVirustotal results 34.92% Heodo
2020-01-30Rep-2020_01_30-OV506.docdoc 72b6ec3c1e924a2f6b1bbf4f5359a7dff2c8d0cd96062fa882119a929ff9b6faVirustotal results 33.33% Heodo
2020-01-30List-20200130-064141.docdoc 18c2132766612f9c090ea8dfdae10ce6116886abc9caa8854d942ed0cf5a82d6Virustotal results 37.50% 
2020-01-30REP_20200130_895.docdoc 57813997e897ed8c025255e8ccb40972c476a3fc522a5437f5a02aeee20d4e5cVirustotal results 38.10% Heodo
2020-01-30Mes-WV00875.docdoc 2b5bdd3bfb73fa7e1bd1b322c377a0ffd4386f783c6658748a15a25679b09b51Virustotal results 38.10% Heodo
2020-01-30rep-825.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30FILE-AN6816.docdoc 27e174efb0d6e8b05cf666fd50c3163d91cd9bc9416197af58f70c1f027d2a0eVirustotal results 32.81% 
2020-01-30File-3784105.docdoc e6d5e96c13f2b7b829475906025dfeee28fc96d040dff47ec11a3df708572563Virustotal results 30.65% 
2020-01-30Doc_885.docdoc 767b17c9708aa05e3d52db97aa2842a873f2cf8e9d75f19e3e8c84fd32442e32Virustotal results 25.00% Heodo
2020-01-30LIST.docdoc 7099bcda5f0b4caadc077f6bc794a4dc8933e66863535f49c23c8b19ec793b7fVirustotal results 28.57% Heodo
2020-01-30arc 2020_01_30 982.docdoc 6686a87ce4ec03815de4f384705a2a876aee4195ecaabf95d727a6d63030d4e8Virustotal results 29.03% 
2020-01-30FILE-2020_01_30-W705.docdoc 1cfaa5e745d1fa8b33a9d1127e92bb4a28306b9e96ddea13b629e19959f2f26dVirustotal results 23.81% Heodo
2020-01-30DAT-2020_01_30-Y579346.docdoc 23b0933587b2ce021d44e764dcdfb9961d967b9e9490d154457df7e420cf9fa4Virustotal results 25.00% Heodo
2020-01-30Arc-20200130.docdoc 4932fd4b350016a8ffd5945209efaabc177ab4bb83e310f2896d29c02e0a612fVirustotal results 25.40% Heodo
2020-01-30Inf_20200130.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 28.12%Heodo