URLhaus Database

You are currently viewing the URLhaus database entry for http://ntc.learningapp.in/fjvcmcp/nzvteyf1-iieyt-16/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:302232
URL: http://ntc.learningapp.in/fjvcmcp/nzvteyf1-iieyt-16/
URL Status:Offline
Host: ntc.learningapp.in
Date added:2020-01-30 06:14:34 UTC
Last online:2020-02-10 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002286227 created on 2020-01-30 06:16:05 UTC)
Takedown time:11 days, 15 hours, 25 minutes Bad (down since 2020-02-10 21:42:04 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-01INVOICE 0252_3468852.docdoc 970df6100d8375af169bb259df2c7bb1ad641294e34ed57dc3ad02a38371b4c7Virustotal results 36.51%Heodo
2020-02-01INVOICE 24_5219865.docdoc 1491cb08ae7c2b936616e1b7ea1efb1f8ad91e756eb54d35d87dcf8dcb096aa7Virustotal results 38.10% Heodo
2020-02-01Inv 4918_476530344.docdoc 068c0fa7ec2b72cc8c87bf99a725b7e44c8a49a5b8461358acd77d6186504229Virustotal results 35.94% Heodo
2020-01-31invoice_3_398924.docdoc be8e29291f74f6e6d6af939a01b396322fc81f5fad594008c08b46d63f558057Virustotal results 36.51% Heodo
2020-01-31Inv-CHKH07_157885494.docdoc 37b09dc7cdaf548fb8ec04343f9c26c237ab87f2046d4cd84ece0808d38d99c3Virustotal results 32.26% Heodo
2020-01-31INVOICE-PUD2039_195277847.docdoc 3c898038b0729e908f29fc28f0b7b4032f71c1bc46d890ded09e2b435bb75256n/a 
2020-01-31Inv_UOZ0_736477047.docdoc 557385e0fca72ec0e0cb78e4fa3878193ac984e8c59bb33353c6565695d6a1c3Virustotal results 31.25% Heodo
2020-01-31invoice JU269_9010060.docdoc 0bd72d993da218ba82d5892601f4ecc67b198087b88c07fa200c03705570bb52Virustotal results 26.67% Heodo
2020-01-31Invoice S3877_17164355.docdoc 2e765041cbf5e4c6a8bd18266ce47fe5b05e8610def9a64bcaec548155282edeVirustotal results 33.33% 
2020-01-31Invoice AAVS2998_736433994.docdoc 1092c9cc1b0dbf643c81898c30d3034b4db59f49a86de85ced39a5315ce4549eVirustotal results 35.94% 
2020-01-30Invoice-FU8357_07544392.docdoc ea6f1cce0c55d30e9208bafb1eb0abd1322a40c841e4b8b096289e70335e0d17Virustotal results 34.38% Heodo
2020-01-30Invoice-FWJG7171_298078.docdoc 9755ef1672fe2fea84ded8999cf71bd62d9a3873bd4fa6ddafab57f59f0527f4Virustotal results 33.33% Heodo
2020-01-30Inv-9_553308.docdoc 4a3c80c332223617307abe24fd210e5371bd0433ef4c3eaa0ba4b61d059ff8f0Virustotal results 39.68% Heodo
2020-01-30Inv E838_2570549.docdoc 70029b2efe245977665727cabe746a92f951297bf034a85f96c12a828c18a682Virustotal results 38.10% Heodo
2020-01-30Invoice_46_017242.docdoc 444380961c88bf398e9078529bf648cf7f4cc69a583fea9d036c4427e533d8c5Virustotal results 34.92% Heodo
2020-01-30INVOICE-D6_59826446.docdoc 9440498706f2d925d78ed85c677ee615fe3fdf05c7188cf59cadf543e59e0c32Virustotal results 32.81% Heodo
2020-01-30invoice-4_293703.docdoc e88c11fe26e7cad165df54049eeb12ea47f3cbb684fb6f8a5235d4a379e646ddVirustotal results 31.75% Heodo
2020-01-30Invoice_ZDM51_6486257.docdoc 5452b9448c3310adaa86f6020c32d6ae4727fce5049f613ad9242e2f35e94effVirustotal results 26.23% Heodo