URLhaus Database

You are currently viewing the URLhaus database entry for http://ezzit.com/img/Ha/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:418194
URL: http://ezzit.com/img/Ha/
URL Status:Offline
Host: ezzit.com
Date added:2020-07-23 03:29:17 UTC
Last online:2020-07-23 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-23 03:30:03 UTC to abuse{at}ovh[dot]net)
Takedown time:7 hours, 1 minutes Good (down since 2020-07-23 10:31:22 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-23Invoice WHXT274_276832.docdoc 548e4293f740ef77ecf074a7e8eb5ee8659eb565fd08db697ca873dc770c11b0Virustotal results 46.67%Heodo
2020-07-23Invoice-98_173455.docdoc cf2ba9c49c359ebc0d9ce182b928db8e967b6720c8d531c8366b2420ce778d21Virustotal results 42.62% 
2020-07-23INVOICE-P9933_8353346.docdoc 49e8d0e91070520182b76f279d10dea2f17e87c7f69e61352db25d5acfcc0be7Virustotal results 43.33%Heodo
2020-07-23Inv_CRXG7959_247162.docdoc fd1b363068e21fa7a3e86cc0aa6134bfa46a640d70bcef686f19f57f54340f6bVirustotal results 44.26%Heodo
2020-07-23invoice-KVZO92_216737324.docdoc a7eba5ce690c5078cfc8875f5a8a07cdf7b8fe15a427b22b2620462b04c4558cVirustotal results 42.62% Heodo
2020-07-23invoice_EBDW42_342777.docdoc df314d2431bc91e51d22c2f55c6b9de5577ac0129f93014698c3e17546ae0867Virustotal results 40.32%Heodo
2020-07-23INVOICE-OV8_4162278.docdoc 063f625ee5274a7caa1637adec2235e98aeaab2f5f8b14877835b82136892654Virustotal results 40.98% 
2020-07-23INVOICE-OV8_4162278.docdoc 063f625ee5274a7caa1637adec2235e98aeaab2f5f8b14877835b82136892654n/a 
2020-07-23invoice-6195_776385.docdoc 7b25bdeb4bdd1095c4328d3726aaffb2b6b32fb4c28539786017e3d4f1016f52n/aHeodo
2020-07-23invoice-B651_8072208.docdoc c8974949fec3e295b7d7e7844cdb17d5931a697690a6be15b4863e787931d386Virustotal results 40.00% Heodo
2020-07-23INVOICE_ZKJ0797_567548.docdoc e2796110338cf892ecb47cb8baeafa186dabd1403514af5d5a470c2561c59d11Virustotal results 37.70% Heodo
2020-07-23Invoice KVQ13_51713641.docdoc 88cca8fc8a65b95ca50edf7f8f1bc19f7c7d91935a589e7a4a88b42ea443b603Virustotal results 40.32% 
2020-07-23INVOICE-X71_2113092.docdoc eb8252a2dd0e7e0f44a6b26fb09abb04ef9a618d216f46a9c1525a55350766e9Virustotal results 41.67% Heodo
2020-07-23INVOICE-QF27_904912.docdoc 3509f671940107c4ce10122e95808937ef8a81e9452812ee660cdd2df62af3b2Virustotal results 40.98% 
2020-07-23Invoice IUF8_31282313.docdoc c8bc8587d3706f659ce2dbd1c22be268adad0f5f8c4c7be78ff6b4b17c3f1279Virustotal results 45.00% Heodo
2020-07-23INVOICE-JBIS7_5359303.docdoc 8699c115f17ea8f5ff05ba03ec55c657a076e5dff4f23802b87fb9d012f179d8Virustotal results 41.38% Heodo
2020-07-23Invoice-R8807_7577080.docdoc fc138a4add108557757b357a4de2c8c2b60832c018e4ebabf099a4f63121dff6Virustotal results 40.98% Heodo
2020-07-23Inv-FV14_07391347.docdoc b84bcc1db705ebab3793f52dcf633d1ad8ad2a9b7c96dee5daee12d7d4be0375Virustotal results 43.33% Heodo
2020-07-23invoice-VMK204_476240822.docdoc ec054f61bce05bdbe5b35d954f9e1869d873b720b529dabb46a862550a0f0ba4n/a Heodo