URLhaus Database

You are currently viewing the URLhaus database entry for http://hvatator.ru/6OCJDownload/ZTQ3556434OR/959502689/ZSAM-AWUI-Aug-09-2018 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:40678
URL: http://hvatator.ru/6OCJDownload/ZTQ3556434OR/959502689/ZSAM-AWUI-Aug-09-2018
URL Status:Offline
Host: hvatator.ru
Date added:2018-08-09 19:01:03 UTC
Last online:2018-12-07 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-08-09 19:16:40 UTC to ip-box{at}ripn[dot]net)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-10ACH 554063BNIAL.docdoc 37d4fdeae85c9ee511aad50011f0d198a72825597c1f288f434e716405b9a2bbVirustotal results 35.00% Heodo
2018-08-10ACH 5743653QIPWZG.docdoc be067a5bb420931e608a60872fe4cf7f94009e0bfeeffbbeda1fe556ed0dd071n/a Heodo
2018-08-10ACH 3375997WMTEAJQH Aug-10-2018.docdoc 8679469288439887ca42ffebb82bda8f26cf82f70cd00941ca54703307842b79n/a Heodo
2018-08-10WIRE 205KXMQUW.docdoc 6a9b3661f52200da3d02070b646874fdde1902a5bd2a22dccb90ddc21d8df0ccVirustotal results 35.00% Heodo
2018-08-10PAYMENT 3FT Aug-10-2018.docdoc fc368060fb4946b073b55e56d495e7ab249dbdabbc8f7cd809b55089c9854feaVirustotal results 33.90% Heodo
2018-08-10PAYMENT 503MT Aug-10-2018.docdoc 2c97f2997575df803d28dd38636856fd0efb9fa7efaea22c526b8dc71daa9aeeVirustotal results 30.51% Heodo
2018-08-10PAYMENT 01868Q Aug-10-2018.docdoc 96ac2e256739d1baefe78966e86480a6480c73588e1948a1efe5f944bf1ef847n/a Heodo
2018-08-09WIRE 13138QSTR Aug-10-2018.docdoc 21982965fc5661c509d1833f8fe9caf02d7649619b7b542d7a735abd7936a9cdVirustotal results 32.76% Heodo
2018-08-09PAY 06615ID.docdoc da09534b67058e48e72b4a9b7a1d620818291bd7f684a4b05ce6a08ce079c90fVirustotal results 31.67% Heodo
2018-08-09PAY 2850761GQQ.docdoc cfa7724adc8ed5123e38607f34fbbd7bbdeb531ff1456b0733070f15c2ab1217n/a Heodo