URLhaus Database

You are currently viewing the URLhaus database entry for http://servinet.co.za/ceu/lm/ljevof/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:417808
URL: http://servinet.co.za/ceu/lm/ljevof/
URL Status:Offline
Host: servinet.co.za
Date added:2020-07-22 14:20:08 UTC
Last online:2020-07-27 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-22 14:22:03 UTC to abuse{at}sharktech[dot]net)
Takedown time:4 days, 18 hours, 29 minutes Bad (down since 2020-07-27 08:51:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-23FILE_3843645930252.docdoc 5de801d1734e78ebab4e8a80a424bb6f06e1e7c72938e6d7922073bc7a0370d7Virustotal results 41.67%Heodo
2020-07-23SG5581991081ZP.docdoc 7ae0262abfeb81f5186b2d2a3228db31f1e8c2e76f64307cb4bcda3f113c5e43Virustotal results 42.62% Heodo
2020-07-23REP_DMQ_070120_MQS_072320.docdoc 2e6835bb4cbe6487d7ca03ecaa11680c6a1c67ae96b80f9b13a40a15408abd39Virustotal results 40.68% Heodo
2020-07-23778165404815666997572625.docdoc a6d53ac3f7ddf730b2265f40cc8621657d2533c9b9068b969f9b644f72825a37n/a Heodo
2020-07-23REP_VYP_070120_JPI_072320.docdoc 29e6dc4e9c118ba98db7b5aab063c19788100ccf19ff84d03d8412ffa61765b8Virustotal results 43.33% Heodo
2020-07-2339813057.docdoc 6e9efc2f4e7954913c26e29d8883f05fc837f93cbc11ed6aa1f59e1306bccf97Virustotal results 42.62% Heodo
2020-07-23U_PO_07232020EX.docdoc 516119b22bf255a207f5453e26a9292d9eba7cb81b8619dd36a560fb057094afVirustotal results 43.33% Heodo
2020-07-233767330711.docdoc dc7fcde663a9d815ecd5773ded15b90adcb4da90b556db8ce5474fd8b0526419Virustotal results 43.33% Heodo
2020-07-23J_66960412603568794.docdoc fb4e11b91993d00ee53d54b80a44cd235c151005999e3308a58c58f979a3e47cVirustotal results 45.61% Heodo
2020-07-23REP_22632124.docdoc c7a0c36d929c3967281ea2e2e6f999ac17cdce4a691339ad9850e367ff10976aVirustotal results 43.33% Heodo
2020-07-23PO_07232020EX.docdoc ac4ca26e0b1ce2149f23d81e941c7425adb9f7deaa16b60a33d1f7bec9f99d26Virustotal results 43.33% Heodo
2020-07-23FILE_EF5396538460RD.docdoc 9d24cd113094edffa574173b3ce1295006fd5e243bc82578b6fb81a7d28e95f5Virustotal results 43.33% Heodo
2020-07-23NTH_74461176.docdoc 4c99123bb97ae169e6ab05660104745891d0ae7823f8594f8de82a833dc13d15n/aHeodo
2020-07-23X_FMB9IHQGNNPD9O2.docdoc d204d9a16bd7b8412ab3ea6b430424ed732cd685e4b7b8e08b2f10a7151503c4n/a 
2020-07-23UGXLXONU.docdoc c5af9e9fa8e2d32ee0e979cd671f80652356deee03af4f1fbb226630fcf7038bVirustotal results 42.62%Heodo
2020-07-23YJK_070120_GZD_072320.docdoc 5f2520828449385a186054f9fd1888a69f6d808ee764bb50c387821529d0fdc0Virustotal results 43.33%Heodo
2020-07-23YJK_070120_GZD_072320.docdoc 5f2520828449385a186054f9fd1888a69f6d808ee764bb50c387821529d0fdc0Virustotal results 43.33%Heodo
2020-07-22LGU_070120_CWZ_072320.docdoc ece54d4d0a7d1ac6029624db0e3983d0fb7926c523a190cb5179e98272da53f9Virustotal results 39.34% Heodo
2020-07-22LFEM_HN0035688106ZQ.docdoc fe5fd8accd7bdfbc7cf9aef62b8fcd3fbf3ba0e7ab320fdcfb288a0e3682f986Virustotal results 40.00% Heodo
2020-07-22BAL_PO_07232020EX.docdoc d6dda19b45b3e10925dfcab7b4c0060f7cc816d29ccfa5b68e8f45bd7c69192bVirustotal results 37.10% Heodo
2020-07-22DOC_6OVNBADJ4H.docdoc 1cc88188b7c5862b588b0e9eb1b26ba3f672648e3a7ce82453e02ee1a59e1dfen/a Heodo
2020-07-22PO_07222020EX.docdoc d4a47bdc41372423b274ca067414af10e6096b6e909a51f8e35db1219a38e294Virustotal results 37.10% Heodo
2020-07-222FLP2ZKBDGA.docdoc a55fc6835fd7688e8c1525b6b557dc4c04f7a3500683bc2e271bee96215904b9Virustotal results 37.70% 
2020-07-22YB_6L8GXBLIWCI1.docdoc 1cd9889ad43cd422276df08ecb1c646d283f3c9eef9fd2729d119a76939698a6Virustotal results 37.70% 
2020-07-22BAL_AKV_070120_PWJ_072220.docdoc 0c133bcd327858b979c14422ac2623c0efef1dabc588f2e775e58049bacf093eVirustotal results 38.33%Heodo
2020-07-22DE_72557128.docdoc bf4fffe027c8d6b7f301f79506892c1666c59fbb0e01ee66e6326eae28c6c66dVirustotal results 43.33%Heodo
2020-07-2219693070.docdoc 516b990afeea66dde2feaf3c08cc03d53b102010a7563f735bcd2a9298a4978eVirustotal results 44.26% Heodo
2020-07-22U_ITH_070120_DMH_072220.docdoc 4a9d26b321d5a445a605753d2d0572005b9b9b84a415cd4b915644cede606e5cVirustotal results 42.62% 
2020-07-22S_88248496.docdoc f278eee1a5f1547f83876e1dde7fc705d8eac342f126f1462e3d8c1d029182b5Virustotal results 43.33% Heodo