URLhaus Database

You are currently viewing the URLhaus database entry for https://www.drs-spotter.de/cgi-bin/open-4vreah-phcjV2P7c/vxVyP8I1lC-lH39iR5Q-ibVLzlO1q5-KOrpKeL1/BS72d-cus30mMb16r/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:417962
URL: https://www.drs-spotter.de/cgi-bin/open-4vreah-phcjV2P7c/vxVyP8I1lC-lH39iR5Q-ibVLzlO1q5-KOrpKeL1/BS72d-cus30mMb16r/
URL Status:Offline
Host: www.drs-spotter.de
Date added:2020-07-22 18:40:04 UTC
Last online:2020-09-07 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-22 18:42:03 UTC to abuse{at}strato[dot]de)
Takedown time:1 month, 16 days, 14 hours, 36 minutes Bad (down since 2020-09-07 09:18:19 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-23file-20200723-379.rtfdoc aec05999d3751d7cfd9ade2316388ee6da303748401fb7eada3edaf2b37a18a3Virustotal results 43.33%Heodo
2020-07-23mes_20200723_5285791.docdoc 907cdbd0036f8c72ef0830f26aee15b16f5498fe3fb88c9ac852fecebcfd2771Virustotal results 44.26% Heodo
2020-07-23REP 20200723 4174.rtfdoc b27dff26a97f18384d8db6b7e5a3c5006d66ed61bba5313f802ebf96543c1c5eVirustotal results 44.26% Heodo
2020-07-23Mes-4129.docmdoc 5a2ebbb1273d774d883ccc80441f1c0a31352cca7114330d6272919625c803efVirustotal results 44.26% Heodo
2020-07-23dat_2020_07_23_3810344.docmdoc 1a49241764ba049de98c9d050dd57d0c9089402768b9a1206e09dedde0282d0bn/a Heodo
2020-07-23File 2020_07_23.docdoc e73f1ef263f3c13e83599b2740bddf21cac0115e8a8da4a0c728e024efc669bfVirustotal results 44.26% Heodo
2020-07-23REP_KL754.rtfdoc 0f79dd6c7bd7490955e93399a3e660272c22f6f7f5e97a24ff33d1d1af714941Virustotal results 45.00% Heodo
2020-07-23DAT_20200723_VA167.docmdoc 34184c5992ed62afbaee71a96232106fc41857b255341becc56b01722b343c3fn/a Heodo
2020-07-23inf-20200723-3053074.docmdoc 654e6bd6920ccd6177242d7e58e504e354a9e5fc0be08816ce3afaa64b0dee93Virustotal results 44.26% Heodo
2020-07-23Mes 478371.docmdoc 885dc147be1221ecee44115a61f7df1e11df4c2bfd930c5dc7e3c8ae1910d1d9Virustotal results 43.33% Heodo
2020-07-23Inf_20200723_5979.docdoc c16f62ec18e9ca91236dfbab6da3e98fc15a8574e3c66dcb4c652ba820bac07fVirustotal results 45.00% Heodo
2020-07-23rep_2020_07_23_KA114.docdoc 57c916ce284fef78cf597e34daaba2cf0aeed7a30602b72dc93b8ec0a1aa8cc9Virustotal results 44.26% Heodo
2020-07-23arc_2020_07_23_481166.docmdoc 1b96d3881a05f141dca8c4cc847ff24cf5e03d3e37e67333351cf7cf4bb9e32aVirustotal results 44.26% Heodo
2020-07-23INF 33098.rtfdoc c4ddc964c0d911deab5fe24136c588c63d4fe247aeedd42d0ea37491e44af3e5Virustotal results 44.26% Heodo
2020-07-23LIST 2020_07_23 9142922.rtfdoc 4e765584956c4f9fe770cd92e1d32522023508d48ba53b6ce7ace6c04d4e8d83Virustotal results 43.33%Heodo
2020-07-23MES_20200723_DIO429643.docdoc cec6250fbf5fb227dd2bdf92b7031f41fa3d65fe1f1d5a441229c14913884ea0Virustotal results 43.33%Heodo
2020-07-23File_CG34761.docmdoc 3871eed6206b0a99254d0c9687c02a628857c89231e009285a476dacff80d98dVirustotal results 43.33% 
2020-07-23FILE-2020_07_23.docmdoc 769b01f8c9dd10732e0a5d287a38b2946260496bcb17be7319e7070e4f3a62b0n/aHeodo
2020-07-23DAT 20200723 NGX286617.docmdoc 3f733796d3615608e933be5a6880061ec7fc506529e9ca3ad7c555fe460fb388Virustotal results 42.62% 
2020-07-23List-2020_07_23-ZVQ875.rtfdoc 49700dd4aae08be36bff9524c53990a3f170568a9e5e56b7148ef982d9f3bcb2Virustotal results 42.62% 
2020-07-23INF-20200723-M019780.rtfdoc 1b9e74162d42d570c37b7fb5cae6e43929257833fbbfd3fbc9d26579650840ddVirustotal results 44.07% 
2020-07-23LIST_2020_07_23_O477889.docmdoc 9a85400cf019aec876aa8f402aa493488a4baabd22e521a73a69397b09854156Virustotal results 43.33% 
2020-07-23mes.rtfdoc afaba3e7c44f16cafd700c3cf2bb48367f1319234da31884c14d364c90c15700Virustotal results 42.37% 
2020-07-23Inf-20200723-ETQ088.docdoc 275106731a63f606b2872a59c94e63ab81c43795ae62521e8c3083d113060c01Virustotal results 43.33% 
2020-07-23DAT-20200723-840.docdoc e50229adad96d87fc334ebdc7b337d1d90eb8fbcac675be16f14bd72254aa0e3Virustotal results 43.33% 
2020-07-23FILE-HLW37216.docdoc f90d92c5c4d8e67b7332df917d99caa81a46a3fde2e3686f43af146265bdd6b2n/a 
2020-07-23FILE K308372.docmdoc 1dfea81b5777c0554c227f6e584810d2cfe5a178e38133583c6e936f8405c36aVirustotal results 42.62% 
2020-07-23ARC_20200723_2021417.docmdoc 8d52990eb4b83e90b44ee30643fd95f19f9388ee75c00be6df5599390ad4e60cn/a 
2020-07-23INF-2020_07_23-MUY0359.docmdoc d5e2ef1b48c0740ba9410628213d0e0bb1ffa39148dde8fb760a21b0ba623cceVirustotal results 44.07% 
2020-07-23dat-10474.docmdoc a33dd73bdb7ea44a14ba44f8f9316d8b4b9f36c62f7cb5aed940f70713955a1aVirustotal results 42.62% 
2020-07-23Doc_2020_07_23_423.rtfdoc cdaf685fd8b510f10e149f663e8f7bc591d2351bd7296fd34a358f0f9f26b7c3Virustotal results 41.67% 
2020-07-23Mes_754541.rtfdoc 8485394f6bb30ed472a2f5f0f1271098ea0ca479ebf1ac5e419f65c5a6c3750eVirustotal results 41.67% 
2020-07-23File-08851.rtfdoc 04f164be53df8877786862bdc212d2138e66e3d3eec4669585165b8957de5897Virustotal results 41.67% 
2020-07-23inf 2020_07_23 J96740.docmdoc db63760903d7321d485e5e4de4871219bcf280aa8d10a5b45adcba8968650ab0Virustotal results 40.98% 
2020-07-23Arc_2020_07_23_K00892.docdoc 2baeb9021538a6e46d0f337320965c7765bec4f69047f0cb249fff3c51972a81Virustotal results 41.67% 
2020-07-23mes 2020_07_23 9372496.docdoc 57dfd33d9f1ac2d1ac1e989fc1f64affb20aafc1530591370203e9bd13be3e82Virustotal results 40.32% 
2020-07-23Doc-2020_07_23-15698.rtfdoc 19fb3f434975d157f252494d3d919bdc412e6018df10f3b5b293f7bb65ae1d32Virustotal results 40.32% 
2020-07-23Doc-2020_07_23.docdoc 33c154cefec10fc509dc5502bf3632658935229cf47994b249d2c528c0c5bbcaVirustotal results 40.98% 
2020-07-23INF-2020_07_23-81457.rtfdoc e881a58826ad79a56fff01bc459089e0e02bcaa8071bbf4737279a153c4c60eaVirustotal results 42.37% 
2020-07-23Mes_20200723_G7254.docmdoc e4c0c53d2566fd3d639ce00a49816d813b56df5c37b964bbc9a551a411f8873cVirustotal results 40.98% 
2020-07-23LIST-2020_07_23-YGV032603.docdoc 74bd3d0b665c51b3517da40d77beefa5dbe6983292640c44650a350187dcfd9an/a 
2020-07-23Inf_20200723.rtfdoc 72d01c86f0d425a4f2bb8b4bf5e4321c7f49cc1283bcbc074d66c366f6ffa324Virustotal results 40.00% 
2020-07-23ARC-JO86000.docdoc 79b3b0ed83202e34b8f1e3030face4fc7df332281b16802674bc0cd0dd27bf5aVirustotal results 39.34% 
2020-07-22LIST-2020_07_23-7727073.docmdoc 6b9a8492195e594bfae51fd48f35fd2ed3c614a1078a518769f44f72a234f37bVirustotal results 39.34% 
2020-07-22mes_086144.rtfdoc b936ca1824141941696f21188294398f23a5bf8f6dc5211f7a89d68996eb1496Virustotal results 39.34% 
2020-07-22FILE_20200723_407663.docmdoc 85c9b8464b14bbfbc90c01fe540a9ba134191dd42668aebfb5c09e35b1887dc0Virustotal results 39.34% 
2020-07-22rep_2020_07_23_37750.rtfdoc 8aa7ea8c9d1c9de29d54f88600c9ffc99c05fafa3017b298e03b7cbc73ddf5e7Virustotal results 40.98% 
2020-07-22mes-20200723-LFT550408.docdoc 093cc1977c0adf342635037335e8d76802041ca0b406c065ee63bb3c4b0d30aaVirustotal results 37.70% Heodo
2020-07-22MES-2020_07_23-ASF740902.docdoc be720b7a706eae0e4fb267e2ed1709351ae68658728bc8e55a774921eb79a81cVirustotal results 38.71% 
2020-07-22Inf K7295.rtfdoc 06ea16c8f47256c5551752bd00c34d5cb30e9b5ea7daa3434e35ca178ca75c2bVirustotal results 37.10% 
2020-07-22INF-20200723-LZK573.docmdoc f0c435e77ffa71b2c40109d083b689c870f13ba21021562482e0c1bd6fd7df6eVirustotal results 37.70% 
2020-07-22arc 2020_07_23 197.docdoc 7b0a43ed14a889ff1b2f26657bc4453ef52f45ffa85ed059e8109ce860239530Virustotal results 36.07% 
2020-07-22MES 876331.docdoc 41386a0cbdfd22f4a7d46f44c00c2e393e548a2c722a7287046bd76f946c386eVirustotal results 35.48% 
2020-07-22mes 2020_07_23 U0306.rtfdoc b7443aa0dd6d738e32a1c4fcd5990b7ca23d2fa98f65c703514e3e82d72d7843Virustotal results 35.48% 
2020-07-22REP 2020_07_23 038.docmdoc c1e8ca6ab04cda931078956f97ce9472cbac4e8d0718506c2d4f3c618514e7c5Virustotal results 37.70% Heodo
2020-07-22INF_20200722_JBW540461.docmdoc 9ec35b3f9214dc7f51aaf74a259d4de0e79a1c790d82b8f55377e9456b01dc1an/a Heodo
2020-07-22Mes_20200722.docdoc 61ac92f083c25879585954c7ade43b7b17fefbfadc38a09fa9793f769f33f9f4Virustotal results 36.07% Heodo
2020-07-22Dat_20200722_XY769.docmdoc 73d6cf5248a0604eba81bfe1a1f55473820a97df0c5746014dd47e3d10071cb2Virustotal results 35.00% 
2020-07-22doc.docdoc cf53854628d9e95bf9c5b164c75908fcd42e2de87401607eaa617f331d376864Virustotal results 36.07% 
2020-07-22arc 20200722 60323.rtfdoc 4e5ca71ab308655fe2a2430dfbba2c2f7633fbda4a0e4c44714724f00e27dc51Virustotal results 36.67% 
2020-07-22Doc.rtfdoc 0909752f9e8cf877b820f107687a6dc12e42ab76f995635a56116d94fa3cc86aVirustotal results 36.07%Heodo
2020-07-22Doc 2020_07_22 485.rtfdoc ef64e139ac5120bcb2be7ca49559d2e39d9a00d5007ba03f7745618a805d08cbVirustotal results 40.00% 
2020-07-22Inf-2020_07_22-192.docdoc e3a151fd0c1efbcd3873fb1cd5992e620ab4d82343fea02cdd59df1fd962bb2cVirustotal results 37.29%