URLhaus Database

You are currently viewing the URLhaus database entry for https://rider-crm.it/cast/FnoYQbXdv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:417397
URL: https://rider-crm.it/cast/FnoYQbXdv/
URL Status:Offline
Host: rider-crm.it
Date added:2020-07-22 00:02:07 UTC
Last online:2020-07-22 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-22 00:04:02 UTC to abuse{at}hetzner[dot]de)
Takedown time:7 hours, 32 minutes Good (down since 2020-07-22 07:36:11 UTC)
Tags:doc emotet link epoch3 heodo link ZLoader link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-22Inv-O168_62841263.docdoc 02c7fd8ed2ff395eb8c7eb3caca1e0cec299f4db7480e6d19829069ce541bc7dVirustotal results 27.42%ZLoader
2020-07-22invoice V1761_889999.docdoc c679172a57262c3c69a11b8b2f0c2074c71f3a338be835c38c72557cefb2bc38n/a ZLoader
2020-07-22invoice-GXJL54_9329753.docdoc 962dfcf9dbe2a5f4e39e1ad1100caa0da7d50a87928be0985eb4014a51f3ebc5Virustotal results 26.67% ZLoader
2020-07-22Inv-KBV0751_6227057.docdoc 57bbc36f8aa8cb407d0c50ca951d626555bce1bece1b524d00d0b0d5aa3257fbn/a ZLoader
2020-07-22INVOICE-HYZI009_019947.docdoc e7edf63be003d87056435fd147d04f6930e07f08dc6534bdfdb3913f4cbbd59cn/a ZLoader
2020-07-22INVOICE 83_36300844.docdoc 4a77f876b6d9a044b69944ac284abd8838dfac4208cdefc8de51907727421d46n/a ZLoader
2020-07-22invoice_UO20_555814.docdoc e7af4a6f667a4edbd224f0b3c1358fcc307b4f67688529201e0c1c9a91560f64Virustotal results 26.67% ZLoader
2020-07-22INVOICE MSF46_29513371.docdoc 455dfe523b388db738afa8d1f08933f7ff42ba148a286ef3b05c0d12d3424d5fn/a 
2020-07-22Inv-MZ727_38127822.docdoc 40b8fbc9e4135de9d65f33366f01bddb05cfca61799ce403b30c092fcb421725n/a 
2020-07-22invoice_TG5_907290.docdoc 6475e70afc346103957694beb826b2eefdb2850c9939c91d6b514ce9e1cd32a4n/a Heodo
2020-07-22Inv-63_01531495.docdoc 85f96e5cf282786ef803c7c7886284d3225a9daeecc04ce3b8e5bbd143a3e0abVirustotal results 25.81% 
2020-07-22invoice-QZGZ127_52801442.docdoc 7476dba24b28d2a074d7e75aea79591f98fbb95b065c91870b5a8198ab615f19Virustotal results 26.23% 
2020-07-22Inv-OB0088_1205047.docdoc 28a1e738931c60a90b2ea0b05c82c3a675b08700aad5fde4ac91ba96b78970ebn/a ZLoader