URLhaus Database

You are currently viewing the URLhaus database entry for http://rantau.us/Hirudinidae/protected-resource/individual-portal/sssy5ofv12-2x254535t61w0/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:418630
URL: http://rantau.us/Hirudinidae/protected-resource/individual-portal/sssy5ofv12-2x254535t61w0/
URL Status:Offline
Host: rantau.us
Date added:2020-07-23 20:51:04 UTC
Last online:2020-07-24 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-23 20:52:04 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:20 hours, 11 minutes Good (down since 2020-07-24 17:03:09 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-24Inf_20200724_41599.docdoc 8c31e01d64ab35fee10650f47066018520ad0cbbe47d1c6d6907debbc8988da2Virustotal results 47.54%Heodo
2020-07-24file.docdoc 680810ced71322512a57ff7105b70c304eb31070c55e3d510591e79510eae3f8Virustotal results 48.33% 
2020-07-24inf_059893.docdoc cba9c3956e13feb14892d0edfbb6c304f5a050ec62a899ebefb3113a43dda43eVirustotal results 49.18% Heodo
2020-07-24list.docdoc 5572c7e494ab9ac6e07ab78d1eaa09658c5d52b613590fbd45dab38ac3e66455Virustotal results 47.54% 
2020-07-24Inf-B022.docdoc 787310593eedfe67ce8f219412d01235728e11d10a53578b3e673db921be2833Virustotal results 47.54%Heodo
2020-07-24file-20200724-HU402771.docdoc 82237411edab3b0cd9bc01935c55ffb42b8ea2b2af9c7540f56375628d424420Virustotal results 47.54% 
2020-07-24DAT 30269.docdoc aadb1ef348657580765dd31c88bcd1e021dd9656710bf1615dd29d68e1d36e83Virustotal results 47.46% Heodo
2020-07-24INF-2020_07_24-932411.docdoc 3067d395de7661161d83b094f8bc41fd3dbc1cf4005fec8e9104100c0128fb7cVirustotal results 47.46% Heodo
2020-07-24Inf 20200724.docdoc f786bab6efaedc6a4f36411d1732917929e89097b85917845016f7eb0ca6e2e8Virustotal results 49.15% 
2020-07-24MES_2020_07_24_FV3685.docdoc 410a9f48f1f612819c5e10e8cbfaf3e38cb1021b5c93516ace19d9faf788652en/a Heodo
2020-07-24ARC LGN4893.docdoc cdca918e9b3ebbf49b86e29fb68d77d4a1713ee7ed7f0f3901a3f3a171478eadVirustotal results 47.54% 
2020-07-24dat-20200724.docdoc 6c367b2213de689d037cd7b663ad35ca64515345f4cd1f745d26741ad410fedbVirustotal results 47.54% 
2020-07-24Mes.docdoc 052d7edc0e3713623074a7e629d4005eae2901c9ed7dce61fec770ec23d4db8cVirustotal results 47.54% 
2020-07-24dat.docdoc d368979a419eaac0edcc0dbdf6c70319dd94359ac32022efa48b9c82baa7d1e7Virustotal results 50.00% Heodo
2020-07-24Rep_20200724_08427.docdoc 6661deeecba0b174cbdbdf02612f2d302b4b196fa0fb1f851de17a8a021da429Virustotal results 48.39% Heodo
2020-07-24inf.docdoc d9b2fff8958aedae29c3184d49e95ea6de55895edcc085fb007fff53f0e8804cVirustotal results 48.39% Heodo
2020-07-24Mes_20200724_DK7749.docdoc 80c1da80f4772d3833bbd63b80fb5681251d98d81182e0d45dbc9da399cdfaf8Virustotal results 48.39% 
2020-07-24inf.docdoc 6b19d60b725c1852e9ae04f54eda81e330faec55d14abaa6cbfc384119ff2c98n/a Heodo
2020-07-24Arc-20200724-447.docdoc eeaf42f3d695819d6824ff5bc775215e75863dbc990bccdfa9b4501ac7de55d2Virustotal results 48.39% Heodo
2020-07-24list-UO6116.docdoc b4482eafc69dbe44793e00822fdace40943daf1424b9724b1ffa23ac2a9e83a5Virustotal results 49.18% Heodo
2020-07-24Inf 458.docdoc e1e9a5d06147ad3e11bdf502a8c1d7c5049621df024a884806f0292d013e9c77Virustotal results 47.54% Heodo
2020-07-24arc.docdoc 663d0a45c550d49aec378a8c4a3f41816e666e06759f2e4fa3a69e2b34de198en/a Heodo
2020-07-24REP-20200724-U153652.docdoc 76893f2b549e01ce97c38433f893c0c38a4fcf62676fc218df42e1e7e197f873Virustotal results 48.39% 
2020-07-24inf_20200724_X50415.docdoc 3dd6aaeda724164a79f2043003237ab561a13400cbb27b3b3c43bb7775d1e6a8Virustotal results 48.39% Heodo
2020-07-24LIST 20200724 K526.docdoc 2c7da9f331e3ca0b0f23b6121506d8b40786c7cd5a5b157b2cc6996bd6959a04Virustotal results 48.39% Heodo
2020-07-24File-XN8624.docdoc b8ec8cf8991fa014a75dc1ac57e81ba5b53ee330f5ecc414abe85f5932172b76Virustotal results 50.85% Heodo
2020-07-24doc-20200724-376.docdoc d575f8e2f5ec801a97d32872f21666c26bd09492a8143a3b4b006ab25e062aa2Virustotal results 44.26% Heodo
2020-07-24Mes-2020_07_24-KL8248.docdoc 392ced0f280e30b031303220aa9e84804fa0720485efcc8c9217d2258fbbe3eeVirustotal results 45.90% 
2020-07-24File.docdoc 913878228cade0e66b87ebde3e704e4598e9eab7c4c2bdfa20759839d3596ea5Virustotal results 45.90% 
2020-07-24dat_2020_07_24.docdoc 6aeb6d59aabd22fae43c734ea59919760d7b1e74e25feb0441f7115c5e2e72baVirustotal results 44.26% Heodo
2020-07-24File 2020_07_24.docdoc 34fcdc38101533ee3dee100c3d4ec7c740d8e04951faa4a8033e1aa0c5560d58n/a Heodo
2020-07-24ARC UW627979.docdoc ac1edb89ab6f2aae406ce6fb77070456f521e7b209088e3107db99261a228c1bn/a 
2020-07-24Inf_3376876.docdoc 922fc8cb181e16a2cb48c7ddd8843803d1e92e3429be0508210b12c556e218eaVirustotal results 43.55% Heodo
2020-07-24FILE 2020_07_24 LJN90032.docdoc b7d89220c1854b4268f32f25d6f7118b044601322b494d18d15d80699aed7d02n/a Heodo
2020-07-23Mes-2020_07_24-9110.docdoc fba92cade602038a5bcc38d910e44a4c1c56bba2e1695d6d8bd42477d3fc774cVirustotal results 44.26% 
2020-07-23FILE_20200724_1319.docdoc 4677bd6184f4d4de5ae09c93a37a1e282aee6cc716330108e63a4dfa9ceb53b3Virustotal results 44.26% Heodo
2020-07-23List-20200724-ZA624334.docdoc 457a011021f55e22b0da128cc35063e60afad817ecd176181f05fac58c3a3fcfVirustotal results 45.16% Heodo
2020-07-23Dat-2020_07_24-Y696.docdoc 457f2eebdea5ae72e760cf46e0faef364dcacfd043fe202f9e8503daa4b2d26bVirustotal results 44.26% Heodo
2020-07-23Mes 2020_07_24 260.docdoc 313b6fec26807fff76eb408ed48d7a51a70ae15675c35ed232cd8daf3ce28717Virustotal results 44.26% 
2020-07-23Mes 7106770.docdoc 01cfc21ed3c51eb88b5e4c18b1da03f54027ff638c8823ce0c326fcdfaa37f01Virustotal results 43.55% Heodo
2020-07-23list_893.docdoc bb6905ebe5918f99177099dc69c6c4505dfb99796838bf6f306731af02be438dVirustotal results 44.26% Heodo
2020-07-23INF-2020_07_24-EVD99541.docdoc c09de22702b51ca4441c7926d3e6430afda93334688dcdb270403680ec839ca6Virustotal results 43.55% Heodo
2020-07-23mes_20200724_KGY5444.docdoc e1d155075f383548ac4b5a6d0cd188269aad6b5605b6e48cf02d1ab9a8dd0bcbVirustotal results 44.26% 
2020-07-23list_2020_07_24_232.docdoc 990409004268c808565cc3f84da881a0fc7f0224bf0a99aee08556d9f1b1803aVirustotal results 44.26% 
2020-07-23MES-1348.docdoc be1e2984d3657b0177389beb66dbad8fb3c6ae60d6743d2d3b9793ce3a6c9aabVirustotal results 43.55% 
2020-07-23Dat-2020_07_24-UEH57707.docdoc f58e2197950f1a4dda01577b818fc4e63c99affb794d7160bb5ce2fd9b4f07b2Virustotal results 44.26% Heodo
2020-07-23MES_SJL734.docdoc ae7340d5c2118c69186ec9e4982cdb9f5184f39a2286c630f68793f4887453eeVirustotal results 44.26% Heodo
2020-07-23LIST-20200724-3015848.docdoc 097600e76d21a734f788a905dee867f462e7d7b86be0f553ad285480aaf8d57cn/a 
2020-07-23LIST 20200724 JXI027.docdoc 58f5f5220a5977af6e3dfcc9206356a045b3640c9cbcc7b9f8550a4b6c111758n/a 
2020-07-23list 2020_07_23.docdoc 31f3ec1b15a9c06dacc94a54406f6893bf82d7a00ac2995bd5cd5bfec7397158n/a