URLhaus Database

You are currently viewing the URLhaus database entry for http://maraxa.cz/507YXPAY/QN6920196STMDA/4778487818/ATJN-UXN-Aug-09-2018/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:40935
URL: http://maraxa.cz/507YXPAY/QN6920196STMDA/4778487818/ATJN-UXN-Aug-09-2018/
URL Status:Offline
Host: maraxa.cz
Date added:2018-08-10 04:19:59 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-08-10 04:36:51 UTC to abuse{at}wedos[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-10PAYMENT 2RCJWDYX.docdoc 8de305b293446832443b59a5cb64b332297899625e12ebb28f12f7612f02b214Virustotal results 35.00% Heodo
2018-08-10WIRE 8745EAOFMCA.docdoc 03332a430c38c770377d70a9315b85c8a70da60d53a8da23008b3b53eab6d95dVirustotal results 35.00% Heodo
2018-08-10PAYMENT 8QSW Aug-10-2018.docdoc a3bdbf915ea341df524f11475ddbd70785e8fa544291e52739c2dded2e087e5fn/a Heodo
2018-08-10PAYMENT 92YKXQZEFN Aug-10-2018.docdoc 6099ee06c408aa011e2e27a8d32bb29a7418ca9fa5d63038df70c18b8853f95dVirustotal results 35.00% Heodo
2018-08-10WIRE 53921ZNRGSEE Aug-10-2018.docdoc 136cc4762f5d36541f46e018328397e1bac634a88282587ba26385c780288087n/a Heodo
2018-08-10ACH 4292ATL Aug-10-2018.docdoc aea801f386a57a8b1bc1ec560cac259455cf1de3fbece36ab27ab54cba4805c7Virustotal results 36.07% Heodo
2018-08-10PAY 290FRPKAIJH Aug-10-2018.docdoc 7a103ac80d6b58922f979c4f6ac95aebf085fbbaa02e4ee269d13231b39c63c1n/a Heodo
2018-08-10PAYMENT 5884AYFJE Aug-10-2018.docdoc 3ac2d948a193f03d6d6bbd288ab9ae2b58588567e459aecae80a66e00a291847Virustotal results 33.33% Heodo
2018-08-10WIRE 0GU.docdoc 56de2fad613807e46613e7159681a962cc8c54fc6ed20c7c3e90e104cdbfeaffn/a Heodo
2018-08-10PAYMENT 15ALBRKZ Aug-10-2018.docdoc 1af67c800700954695d42c3e124753750016b7c598c6fa2f9bcd9f85723dd1c6Virustotal results 30.00% Heodo