URLhaus Database

You are currently viewing the URLhaus database entry for http://www.plasdo.com/GER/DOC/Zahlung-bequem-per-Rechnung/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:30531
URL: http://www.plasdo.com/GER/DOC/Zahlung-bequem-per-Rechnung/
URL Status:Offline
Host: www.plasdo.com
Date added:2018-07-11 04:15:42 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-07-11 04:27:31 UTC to hm-changed{at}vnnic[dot]vn)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-12Rechnungszahlung-OXU8052393731.docdoc 02f9e4f54e9450bb070241a9e602e5f1472b2f0c9d968ced215e540a6c61f160Virustotal results 23.33% Heodo
2018-07-12gescanntes-Dokument-OCJ562799601.docdoc 854e0a13537eaeadb6b2be5d2569d2ad14bb47074231649befedc7ab4a8ee3eeVirustotal results 23.73% Heodo
2018-07-12IhreRechnung-KTM36947278.docdoc 4505995d1d23a2452f64f4c157f1da024a685c6ef9a587d6b2cfe612a6303f9bVirustotal results 23.73% Heodo
2018-07-12RechnungsDetails-IVJ9689963.docdoc 582e1c63f0a635b9c6780d7f193b71b5fda7a420a136b09ab841c8f910bf30bcVirustotal results 21.67% Heodo
2018-07-12RechnungsDetails-IQW4949182041076.docdoc d5ccbbc0a761fa078a9bf999f141a78020e5541fbeea55201137608128a4d38eVirustotal results 20.00% Heodo
2018-07-12Fakturierung-CCP415716260279722.docdoc e2515d4ccafe1a5f2dc2180dbd096ee3523de70d7fd38bc886ad09b0ac7a88cfVirustotal results 18.33% Heodo
2018-07-12RechnungScan-MHI9246871.docdoc 9300aee822bc4635a00c90b2215dbde0a857b9fbc0afa3468c5f9f30bfb5a276Virustotal results 18.33% Heodo
2018-07-12Details-HPP09735300.docdoc 7dbe2bd2956993d4108dd602b87bc5dd33d8a7595483a0866df728c08f3d6194Virustotal results 18.64% Heodo
2018-07-11Rechnung-OGP577458590545722.docdoc 366fd5f68f4a68a74fabe97745731eef87510c632fd3f8157d8cbd4707018ebfVirustotal results 22.03% Heodo
2018-07-11Rechnung-ANV97660545.docdoc 64f5e864e68d93025d7e7bb48d5c185e33579dfc4425c4551b707ec3e1cc8dcaVirustotal results 21.67% Heodo
2018-07-11IhreRechnung-WRA889929608481900.docdoc c02c8e4dc502303d14c993c97c7d74c95df30ccb605eb49f5444d9122a6d247cn/a Heodo
2018-07-11Details-XCF333305745.docdoc e571e2dde219f648861718eeae29f73707447fd4b7ef8c8d1dbe0a82c458dceaVirustotal results 37.29% Heodo
2018-07-11Rechnungs-Details-SCE74294862.docdoc a5d40f69009b338cdfc3b513ad17b0f63fb2fb5841296c130cf34e73159ff68bVirustotal results 36.67% Heodo
2018-07-11Rech-GUZ145513185719.docdoc c189a22dc4836bc33b6602e4371284ae3bbbb5845a6da7e8f3e31bb9c5503f95Virustotal results 35.59% Heodo
2018-07-11Fakturierung-JQP68374124132967.docdoc 088f42ed33cba1d26c02b61fc633d5df4868df85f481a5641994c54ad13c711fVirustotal results 36.67% Heodo
2018-07-11IhreRechnung-YCM0341698964.docdoc 8d06c29a1194e9260550cfe65ffe6f28150b99be4992ddfb3b0e1c620617a08aVirustotal results 36.67% Heodo
2018-07-11Dokumente-HEZ580013071212.docdoc 03ef834d233b6043c606633c38d570ae0d993f73df3f5c047d916d5663eb1c21Virustotal results 37.29% Heodo
2018-07-11Dokumente-NYW230268741546.docdoc febe251b7e19d04da4d758227f874d76c4e25a6bb91e9bb9ba8b98fa7672b1fbVirustotal results 41.67% Heodo
2018-07-11Scan-CUL6483701461119.docdoc 6f9ae03683fb127c148cf6f031fbe01a610e2b16c7ea8a7107c06490ffc2a698Virustotal results 45.76% Heodo
2018-07-11Scan-VHI746575551684.docdoc fdb4d1f8756c936899e868596f9f8ea1d7c4f8d8570729764fc8c49262d69f00n/a Heodo