URLhaus Database

You are currently viewing the URLhaus database entry for http://perfectprint.gr/cli/sites/on9ocg4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:420150
URL: http://perfectprint.gr/cli/sites/on9ocg4/
URL Status:Offline
Host: perfectprint.gr
Date added:2020-07-27 20:41:04 UTC
Last online:2020-07-28 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-27 20:42:03 UTC to abuse{at}hetzner[dot]de)
Takedown time:12 hours, 55 minutes Good (down since 2020-07-28 09:37:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-28A_TFA_070120_RLN_072820.docdoc 03c755321460ac4015e02fbda399f9fa099bfcf9566ac0b91ff525f03bc9dca6n/a Heodo
2020-07-28W_1201287042276131413.docdoc 3922ed31097dad6980d7aa3830470de434d9e128f5f37fecabf5637e7c5ab0e2n/a Heodo
2020-07-28BAL_9ICM3SS6BC0.docdoc 1f2d563a9cc13dacc7e5ca5d6b8745f38a4244777fc5ebde045785790441b196Virustotal results 37.10% Heodo
2020-07-28INV_PO_07282020EX.docdoc 2b2dc53af6714037713433698dae9be164fc7c66c23377ec620a17a4130bf425Virustotal results 44.83% Heodo
2020-07-28PBS_268122804233287409727.docdoc 29c42aa5892fede943d2975f64abfccbcc8cfa164a85e278753f970a17d010den/a Heodo
2020-07-28BAL_AB3526123186WX.docdoc 6f725b4e11df45b38cea3502301ee5e92df17109fa860dc84523501a6940f5d6Virustotal results 42.62% Heodo
2020-07-28INV_REJ1P732.docdoc 2b4263841c81074211dd59e820bf05562e5c59be8d38bf8791a0a21753cdf504n/a Heodo
2020-07-27DOC_46197363.docdoc dd1fe9f11a267149ce356a768d071605c1972fd10d1f7a57a29fe8a2c8fb41c1Virustotal results 41.94% Heodo
2020-07-27FILE_IOJ_070120_ILE_072820.docdoc df3f07a28988e65741321c968afd02eaf8a49fa2dcf2e2f2685d04e13a236122Virustotal results 41.94% Heodo
2020-07-27REP_R4FOJ0CY5N4F85.docdoc e014e7351a4ad87f016b72570a6ea61c63069ef368ef1501bf75c019760740d7Virustotal results 41.67% Heodo
2020-07-27KD5424714628RR.docdoc 5d08f7fb64c5fc4af654eed617b862ed33cd458b34326c027882d886627f96d0Virustotal results 40.32% Heodo