URLhaus Database

You are currently viewing the URLhaus database entry for http://satelmali.com/libraries/ufnnn-46hit-678464/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:308716
URL: http://satelmali.com/libraries/ufnnn-46hit-678464/
URL Status:Offline
Host: satelmali.com
Date added:2020-02-05 05:41:03 UTC
Last online:2020-03-08 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-02-05 05:42:02 UTC to abuse{at}lws[dot]fr)
Takedown time:1 month, 1 days, 21 hours, 9 minutes Bad (down since 2020-03-08 02:51:49 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-07Inv_WSW9806_983437516.docdoc da55d54edd3021ebaf41530e1ec8dd18fb5541bb09c3cc9d10c88e9da0351409Virustotal results 32.79% 
2020-02-07invoice D710_44079237.docdoc fabe5daadc59a858e5152921d00a9134c5f3202570daf8fa151f214455e84879n/a Heodo
2020-02-06Inv-J6048_648539.docdoc e4fb9545c3c20d2673b8ae61dfb83a4ae8724a4ada189d08b9765241d06339f5n/a Heodo
2020-02-06invoice-97_685713.docdoc a91eba1db4ddcc5437aec16814c764bd4fb7d18f221f84031177016e8e52066an/a 
2020-02-06Inv-IWL517_8036277.docdoc af68f95640411edf06350ddc5f697fa63501dad1a427026652ba7a411e87c258n/a Heodo
2020-02-06Invoice HJA5_4201080.docdoc 08a17a2ca774e5d63d00d6347ab8569354e6fc33b9e65cd55db64f088125e77fn/a Heodo
2020-02-06INVOICE-WG833_912758.docdoc a6f83c36cfcb51c3f166faff124cada228ef05461001847944061e18a897c01bVirustotal results 27.42% 
2020-02-06invoice-S5556_9501172.docdoc 925ae322b24b7f2d6d39b258388984c572fb6e83dfa782e4895c576f26b76198Virustotal results 27.87% 
2020-02-06Invoice HFB79_3328208.docdoc f529e7394604d172959df3fb126f30946377ffcbed5a186bee86ce1ae13a2902Virustotal results 24.59% Heodo
2020-02-06INVOICE_BLR568_401637.docdoc 3a3f0714f63453bd2fcc58a0596220a3506fd01ca30af70047e5ed75fe53dfcen/a 
2020-02-06INVOICE-JZ5_17610590.docdoc d8a98e712d6775091bbcdbe1e2b1ed30135d7fcb59a9ec4ce71bd80823438c5aVirustotal results 23.33% 
2020-02-06invoice-4_63613290.docdoc 0dcc63432d1c79cd46bbae2af17c856ccf14d669abfd200c5d21ec050dbac004Virustotal results 33.90% Heodo
2020-02-06INVOICE_823_601949.docdoc aa1a76b81c26b3039f992fa97b4738751e8bd457072a3c63260ce986b96488edVirustotal results 33.33% Heodo
2020-02-06Inv-KUB2008_2075462.docdoc 9eca08bea00fec73f8bdc769abf28f857d39de7d922c4d0dfd4017dc5981d2b0Virustotal results 33.33% Heodo
2020-02-06Inv-HK633_115715.docdoc 90250acf44f763164182f91d1d9e734ea442e491965e1c3883ed40fea09f0d2fn/a Heodo
2020-02-06invoice-4_43384632.docdoc 7eac21ec4810b17ae186a7cb7619660833006d22ffdd25ffa44769a9474a13b9Virustotal results 31.15% Heodo
2020-02-05INVOICE-2_1054026.docdoc 23bfb58c53002a4c03a4931e057316564e8ccab64975f93e2d66ceca6c73f7afn/a Heodo
2020-02-05invoice NMLU26_048036.docdoc fbc7e227ec8bd45144bdd33ac13c8a9b563282ce2c47bed6f613e71ed22dea4bVirustotal results 26.23% Heodo
2020-02-05Inv-NO26_04307520.docdoc 4c81ae4043b5ebb941a22c4511a4757a6a0ca5a842660b5c1ea31c57955800c5Virustotal results 26.23% Heodo
2020-02-05invoice RUG8739_897222.docdoc 9a6d2baf1a6f63a692b3584aecb501ab9d2c4cf6cc5e97ed5390454ec60bc466Virustotal results 26.23% Heodo
2020-02-05INVOICE-WZYM882_78327136.docdoc a2de78a3a39c2c5d3d3c617de7f83a6ee2ba59eeb411de1095a208d4b21ecffen/a Heodo
2020-02-05Inv_D919_861920.docdoc bac64a981e3fddb119868ac4b6c14005db9b3c64f608849911d6c08947267dcan/a Heodo
2020-02-05INVOICE F122_36275418.docdoc 2592177b8fc2dad7890e1d568a33bde6b00c015fc0c96dbccf47299f5f0953b2Virustotal results 27.87% Heodo
2020-02-05Invoice_GPS2624_514873381.docdoc 927609b9f9efb576a2233015595d50cfecd6d736c6fda23e8742330c6051e64cVirustotal results 25.81% Heodo
2020-02-05invoice CPPA9961_4218153.docdoc 3d86715a18dc19cdf1364d58ff7deee2c387cde502de5b43166a7c0d98b2a24an/a Heodo
2020-02-05invoice-P3_680682392.docdoc dc0402b2e8b444ac6695dd0686b697822b5c339fb556f63aaf4cb4dce9354572Virustotal results 27.12% Heodo
2020-02-05Invoice_XUUQ2_5657397.docdoc fa5927f2181dbeaef9cab75616169a02fe02b41df92e598cabad444619c3befcVirustotal results 26.23% Heodo
2020-02-05Inv FFPT594_384528362.docdoc 4cdac2f4d63304355834be949d3daa22b6de9607436c0f5cbe758f86c05c5b72Virustotal results 33.33% Heodo
2020-02-05Inv-FTWJ14_43123911.docdoc f0c8167a4da04cc86ed0d830f9a230b7ff2d87278d84986cb07aaf319a146fffVirustotal results 34.43%