URLhaus Database

You are currently viewing the URLhaus database entry for https://uml.uz/administrator/uugnz-m8og-151609/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:302878
URL: https://uml.uz/administrator/uugnz-m8og-151609/
URL Status:Offline
Host: uml.uz
Date added:2020-01-30 13:08:38 UTC
Last online:2020-02-05 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-30 13:10:03 UTC to admin{at}tps[dot]uz)
Takedown time:5 days, 18 hours, 6 minutes Bad (down since 2020-02-05 07:16:09 UTC)
Tags:doc emotet link epoch3 GandCrab link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-01Invoice_XYBR84_8267109.docdoc 970df6100d8375af169bb259df2c7bb1ad641294e34ed57dc3ad02a38371b4c7Virustotal results 36.51%Heodo
2020-02-01INVOICE_33_4992005.docdoc 1491cb08ae7c2b936616e1b7ea1efb1f8ad91e756eb54d35d87dcf8dcb096aa7Virustotal results 38.10% Heodo
2020-02-01INVOICE-F521_001229.docdoc 068c0fa7ec2b72cc8c87bf99a725b7e44c8a49a5b8461358acd77d6186504229Virustotal results 35.94% Heodo
2020-01-31Invoice_31_280906004.docdoc be8e29291f74f6e6d6af939a01b396322fc81f5fad594008c08b46d63f558057Virustotal results 36.51% Heodo
2020-01-31Inv-OBG5_198105.docdoc 66cf6a1cda9e240560d3dd09a638f88527ba60dc15d9d5716e63c8ad1df5e954Virustotal results 32.81% Heodo
2020-01-31INVOICE-WNCU4_68704503.docdoc df3b6aaa924ed3e9a2eba95dac5813980820281a3c2d6d6c1c91c0a0c5294ecfVirustotal results 31.75% Heodo
2020-01-31Invoice YO307_2550649.docdoc 7d36bd087bf192b32fc6a40a94b79081e1d7d25d356a9697a158b29bcc1d073aVirustotal results 31.25% Heodo
2020-01-31Invoice-XJE09_891790.docdoc bc79e24ba2ac5c6cfe39026ed82318cd18feb73fd5f8987ffcf5b7f9cdd9af0bVirustotal results 34.38% 
2020-01-31Invoice UXJQ827_62615919.docdoc 1c1ee91ce47a73525fb005c941777860af76c0ce946b7e56c26d920e9cfd2c25n/a Heodo
2020-01-31Invoice-DVZ3_379367389.docdoc 3e43537c29e5174e6e982ff2cfa6b7752413a26de10839b58420ceb8a425c316Virustotal results 28.57% Heodo
2020-01-31Inv SD5_446847.docdoc 7e45e62bb65fbde44d1565ee29cfddb9f9b80e7d53a6e74a37f794cf0d9e04bdVirustotal results 22.22% Heodo
2020-01-31Inv-BZHN6246_832210.docdoc fe77a9badbcdb70929d19744e3a5524f3e0b4619dc205b86785483d8335e5284Virustotal results 20.63% Heodo
2020-01-31Inv_OTN5_398563.docdoc b7240479fd2d092d581c72b25531ea78df9956fb2ea6457b82a34c9c45986bb6Virustotal results 20.31% Heodo
2020-01-31INVOICE_V5_142805.docdoc e1fe6aa5e952e7f904ab79438277216f1af38d9073fa0f7656c8bbfec0ba6639Virustotal results 20.31% Heodo
2020-01-31Inv B7_45468731.docdoc 1588ef587024ad7de73a0791fa28080025d2b56083263d8c9a597c2a4526ef1eVirustotal results 20.31% Heodo
2020-01-31Invoice_4_96705062.docdoc 1d0e564ea6985e92ea399f37d2410b18fe208c71c35c4bca9bcfd196d44017b9Virustotal results 20.31% 
2020-01-31Inv CJK457_68207547.docdoc 02d0fca16499272621f28342b9c41dfc3c6133eb9cc3d485b8334de09bc9825fVirustotal results 22.03% Heodo
2020-01-31Invoice-8_144525045.docdoc 605d7a3139166d8f5ef7e7c7acea745d2c208df433a07e161d991fd71275e763Virustotal results 34.92% 
2020-01-31invoice-CYHT9912_582012.docdoc 813226187f75c12909c10d00dfafe96c916ad768979a68def760048753fdea9eVirustotal results 34.38% 
2020-01-31INVOICE_ML8648_38258744.docdoc 8a06475b5843111147926b32b1aecdad3780400157cfae38379d64a78b36139fVirustotal results 33.87% Heodo
2020-01-31invoice_YZO378_898542338.docdoc 5f956252e9f433a4b7675b2422ef016eac5627672a114bfafbc0c667a22db5ddVirustotal results 34.38% Heodo
2020-01-31INVOICE-GSZF631_613452222.docdoc 8dece0d2130198c1d3acb7688f96392e3ded40745d7d8f7c01f03337209801f9Virustotal results 34.38% Downloader.Upatre
2020-01-31invoice_RN7714_987950780.docdoc 1092c9cc1b0dbf643c81898c30d3034b4db59f49a86de85ced39a5315ce4549eVirustotal results 35.94% 
2020-01-30Invoice-XR2_734817.docdoc b93c176b25e95c8538cc6e80bf1dca7b57ab9a7fe306415caed9989f1c306dd3Virustotal results 33.87% Ransomware.GandCrab
2020-01-30INVOICE XS9035_016110009.docdoc 344ec62beaa38421243bae13fa80d39d7457a5c8a11c3347366c3e638d1326e0Virustotal results 33.87% Heodo
2020-01-30INVOICE_O394_6888227.docdoc 18679279d06463ba2ca553b32ba509a6cb62381bda5381ab82d862beb91da074Virustotal results 34.92% 
2020-01-30Invoice_ZAN55_862882994.docdoc 68ddd33bfa87185496120195d7e4007b09c04f658553fb64e558b89269d70492n/a 
2020-01-30INVOICE_ST9675_7244500.docdoc 2e05dae96f07956982b9edba6d64d8668b4ff90f56d548ce2ef2feee40a6e6d5Virustotal results 39.06% Heodo
2020-01-30INVOICE_AQ1987_88159866.docdoc 4b8c920544a36d2b2fe8e35aafddad4a1052e8cced8e159cf4b9753d1c1a82eeVirustotal results 38.71% Heodo
2020-01-30Inv-CN6_777602119.docdoc 55f4b1324dcf648c873b70518a37777563890c60c108b2a3eb40eaa7f5f2f90cn/a 
2020-01-30INVOICE-UA255_5309486.docdoc f274292ec06934b8c2417a6103a2558010703119785efb96e2443e57f4e1c658Virustotal results 34.38% Heodo
2020-01-30Invoice F3_187670632.docdoc e88c11fe26e7cad165df54049eeb12ea47f3cbb684fb6f8a5235d4a379e646ddVirustotal results 31.75% Heodo
2020-01-30INVOICE FPEG72_806940716.docdoc 5452b9448c3310adaa86f6020c32d6ae4727fce5049f613ad9242e2f35e94effVirustotal results 33.33% Heodo