URLhaus Database

You are currently viewing the URLhaus database entry for http://www.ffval.hr/cgi-bin/attachments/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:422075
URL: http://www.ffval.hr/cgi-bin/attachments/
URL Status:Offline
Host: www.ffval.hr
Date added:2020-07-30 16:14:04 UTC
Last online:2020-08-01 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 16:16:02 UTC to abuse{at}hivelocity[dot]net)
Takedown time:1 day, 21 hours, 6 minutes Poor (down since 2020-08-01 13:22:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01REP_LQ5873879089BO.docdoc 5a2264b5329055980b5b31852aa9ee101f846027b9263c5b1783e51a7f38b6e8Virustotal results 48.33%Heodo
2020-08-01WMI_217380484985006260.docdoc 94d26039afb10119b8ed05666e43a95e3b9e8093304d9b796aa1c791f200ccabVirustotal results 54.24% Heodo
2020-08-01INV_844786982.docdoc 3d313d6dc6fa20a7e7637af1c94de520d97a71eb8fb1e68a5f6f69054d801469Virustotal results 50.82% Heodo
2020-08-01FJKZ_76047839.docdoc 94740399d4f82347d284463c29d6bd05a288b65a122efd5f8d8b379ab5979a80Virustotal results 47.54%Heodo
2020-08-01X_CSJ_080120_UNZ_080120.docdoc f5671015ad6746cf334bbde3f8310dc831719a74e5432d619f8843e20be44dd0Virustotal results 48.15%Heodo
2020-08-01DOC_685506207.docdoc be43fcf269bd584b8090b74e5e9844dd447d960fe54898b24607e7f7f1c4066dVirustotal results 45.90%Heodo
2020-08-01EV3157301267VE.docdoc 74f6a642516fef91d682406dfcdc231db9d1798d4bd343a0b8888d04c0bd53ecVirustotal results 47.54% Heodo
2020-08-01STW_080120_VFS_080120.docdoc 17ea9429352e51852304bcd9b0393f24a925ee4da8d3d0d9906b6432d1fe573bn/a Heodo
2020-08-0188162842.docdoc c02a5d2dafcd0a26dfcc6fc99e6a1c4f78ff16544e57ad60998d675a3fe8d3f3Virustotal results 45.00% Heodo
2020-08-01DOC_481978085934237748796637.docdoc 227f278128e504844cb3789981dcc458041aab38e94b6a5e90e6662b55587fa9n/a Heodo
2020-08-01PO_08012020EX.docdoc c1428a65c5e75c9b7ee41ad547278aedd961bd3491449fbfde3000c771cba87cn/a Heodo
2020-08-01DOC_PF6741527891BT.docdoc 12a240e352c39dafd09034e35be7b6229070a3ae198b4c6c161189c2c2e4f38aVirustotal results 47.54% Heodo
2020-08-01INV_59371504.docdoc e878ff9037ead41dd3a88bb8c1600662ef4c90b18bb2eb5186c78a87ed42ff9dVirustotal results 46.77%Heodo
2020-08-01FILE_8NXRCNC9NTMCO4.docdoc 0f407bd9eee75654bd7a4269820b3b92598889007bdf34fa863723f0f633d753Virustotal results 46.67% Heodo
2020-07-31M_PO_08012020EX.docdoc cc7bdd707f48d5b726a93953080eba89aeac024a738dee113d31c83c8ea8a88dVirustotal results 49.18%Heodo
2020-07-31BAL_M7Y8L8I29EII1NY.docdoc 48ec3cb0b3408e9a5eee789c2be3831f7f404716cd35363007175398554f0219Virustotal results 47.54% Heodo
2020-07-31MH9514802515HD.docdoc 6e57ee227a3844d09aa4ed4a64cf69ec819367f00f8df9bdac7f6e09ffc551aaVirustotal results 48.33% Heodo
2020-07-31DOC_1DOZ815KWAKX.docdoc c90b7d8ea24c2301682e47c0533760cd90319f4cd576f476b31e9bbb448c6cd5Virustotal results 49.18%Heodo
2020-07-31PO_08012020EX.docdoc 7a5911301b1b83e475a1f9d388add6ea34617263f712fc80e34c160f16cfbda4Virustotal results 47.54%Heodo
2020-07-31W_6386677403158.docdoc 41fe7adf7807de60a91dea01796332752f93281e218123f39fa550d31aa15d13Virustotal results 46.77%Heodo
2020-07-31Y_43208547.docdoc 4834d43a503e5a10693dcc514692016c26b9084f17b258a3505a4e44ac893db7Virustotal results 47.54% Heodo
2020-07-31K_95913271.docdoc 7b6a76a3a932265f067c2751c8bd6647327d0ec5bd95563dc3dc38d797a1469eVirustotal results 47.54%Heodo
2020-07-313018313252786050369.docdoc 1e4b706d611f935dd5aaac2b97e921c9c1df152d9dcf98127840b7c0e60348eeVirustotal results 47.54% Heodo
2020-07-31KW4114688115PK.docdoc a3667171b7c4b632d7241b65287398007d28c018697677f2bac729d91af17b06Virustotal results 47.54% Heodo
2020-07-313254223084372992288594.docdoc e792dd738d65feae60cbee6722c08fedfa8dbac81f0f437dd64b143f58bf3dacn/a Heodo
2020-07-31L_BWJJCH9AO.docdoc 634f50b36e81b7e81cfb0e42da0afb32839b6f8713b7ef336ef70ed10d716159Virustotal results 47.54% Heodo
2020-07-31PO_07312020EX.docdoc b11eaad1e22807635c63807dd30bb4dd1c372e41d164ba8ff9999a2fb5e941c9Virustotal results 47.54% Heodo
2020-07-31INV_PO_07312020EX.docdoc 3e877e91b120fae817597856860472c1418f1d1befb2dfa3a2796f5c47470c77Virustotal results 47.54%Heodo
2020-07-31BCHWP6N.docdoc 7f9ca2eed49a599b0f3f58c4641986960b01e2ca4fbd9212625d076abd9a665cn/aHeodo
2020-07-31BAL_82761338.docdoc 058d1f89179dfcc881c3b5536cb2043d92c25b8dc70c74af1fe9fe6d6f49e75en/a Heodo
2020-07-31CZ99GL08Y.docdoc 70924fc6c621c4d89c01cf966e0759c7efafb358fdfb087b76ac091cc5cef356n/a Heodo
2020-07-31BAL_81847191.docdoc b7164e5314e8030a20bba3ddacb9030ec7e6b8459ce2a1643f6181eefacacfc1Virustotal results 47.54% Heodo
2020-07-31K6GJ2W8.docdoc 5f3764a42ab9cc52fdd195dbb18957316d72bf382a89b998df3186f4635aa55cVirustotal results 47.54% Heodo
2020-07-31K6GJ2W8.docdoc 5f3764a42ab9cc52fdd195dbb18957316d72bf382a89b998df3186f4635aa55cVirustotal results 47.54% Heodo
2020-07-31REP_54681102.docdoc 1c2a8cebd9dfaa1c8cb5cbd5b65529c2da636a4b9c3439b43e99a296c304b8c9n/aHeodo
2020-07-31INV_LQY_070120_VMQ_073120.docdoc a4793238143f28a12c3574808fca946d088dacc4570bbb1fd33df193b2185bb3Virustotal results 47.54%Heodo
2020-07-31Q_BUQ_070120_JUN_073120.docdoc 8174f855fde235a5c33778a867d83daef055075f49b6ddcddedeecf8a466172fn/a Heodo
2020-07-31FILE_PO_07312020EX.docdoc 54ba24d383abb977b3b8e9fd0ad9a73735f0953a3c0f89fc0c192e86cb67d45aVirustotal results 47.46% Heodo
2020-07-31CO3705514475TW.docdoc 4db8f43dfde4fbe7685741821ef2d4d1cbb869c2b63001941d16c3390838fc1aVirustotal results 45.00% Heodo
2020-07-31IFT_070120_OZZ_073120.docdoc 5ccd841c99093d56cd8f101a9adeb6ece91ba19ff20022b0a6fbdd61f9d82f39n/a Heodo
2020-07-31BAL_77401814.docdoc 87a3224fa89663f53a2114b2db0c6140013d1f5ea825037d85290190c0081e44Virustotal results 45.76% Heodo
2020-07-31LP6464778372GY.docdoc 257e3016460e8df9f770cb9cdb2b68ee6d89f9c7103a721a9d5443373c4b3246n/a Heodo
2020-07-31INV_00147561262458.docdoc 9a9cd71793b09f981ba4404a0281b4443309cb521fe6096f5df138502daa01a9Virustotal results 45.76%Heodo
2020-07-31FILE_TNA_070120_YJJ_073120.docdoc 97a0ba05768ba99119322c6cb79f62bfc92dbfbd64b56b393aa203e7679f5328n/a Heodo
2020-07-314831930635933050537999.docdoc 6a0ae157161a401ce10b9193d319636f8d7c0d4a9c16581e01810d96e5f878e3n/a Heodo
2020-07-3172718206.docdoc f8c08709b04ec9e95d8f36c1b99b4ad75eb823d513d3f7dc020c3fc96ebfd770n/a Heodo
2020-07-31BAL_AD2193352340BD.docdoc be25a159797aeb8dd13c31aa586f331f8c98cd83b54dd4ba5ec2fff63b5ff246n/aHeodo
2020-07-312414388992727614970643636.docdoc 33cc5ac87a9b8a4bceb717df74b6cf6b1162ff33a67dac529744e3f81c55636cVirustotal results 45.00% Heodo
2020-07-3159239121.docdoc 98ee1381f134eaedefa2baef746295a547b2a4b7468ffbf5a9834e65a71c7c8en/a Heodo
2020-07-31FILE_XVO_070120_KST_073120.docdoc fc8260756d35c29ece5bf1f7e3841128d9a81a67341151568d6885a070cd82b6n/aHeodo
2020-07-31PL_PO_07312020EX.docdoc 18d9ef695345eb4c97d2ac385a33550e01a3760dd3e3edeea1507af436451b0fVirustotal results 43.33%Heodo
2020-07-31DOC_09797598.docdoc 8876342a76e0843d39e640a43c7870089dbf3a3ffcd79980c44a14383a4c856eVirustotal results 40.68% Heodo
2020-07-31U_GUH_070120_MOM_073120.docdoc 522b63a0d190f96b3d7e635d7431958b68f94c8f95a44594318d0e382b17bad5Virustotal results 41.67%Heodo
2020-07-31FILE_GO5699058757VV.docdoc 5e55aa28613770be2ebdf584ad12081c21c3029122a4d016325fe4c933a1fb68n/a Heodo
2020-07-31FILE_QUW579OKZ489X.docdoc 20265e7b88ee06f8d6c99269ac1bc743eb01af3e679b55558ab32d0e0177d22an/a Heodo
2020-07-31DOC_69722547.docdoc 9e7028d16ec6751019c80ff608d17691d7f07637b8155b56eea82c7815f151a8n/a Heodo
2020-07-31FILE_33365505.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3n/aHeodo
2020-07-31FILE_KO4KXDX0Y.docdoc 8caa9f65e0f889be60e96d670e1bccc90b18e929144a14c24e58819586f6c223Virustotal results 49.12% Heodo
2020-07-31INV_50815849.docdoc 1e1e7af492496b66f2873a928a6a0f002e92903b87c9b92eea02b8066d34649cn/a Heodo
2020-07-31INV_090718823522.docdoc 5449a4fcc5eda70c82619469ec7199dd1490bca7b545031447453d241127aae6n/a Heodo
2020-07-31REP_PO_07312020EX.docdoc ba5038cd1699fcd67a0053b79048fff5b473165426cecff97e8b2f0a60057522n/a Heodo
2020-07-31JGXB_06398550.docdoc c433371e8083d2992d2b56e8c6e0ec027e6096daea3729e250cd30c75ec68052n/a Heodo
2020-07-31CENY_7781384833807.docdoc 4c7ecb99c3763636a148a4f3acc34885807261432a6d9a30a46f362d75b01578n/a Heodo
2020-07-31SI5088551392TL.docdoc ef621fdd3d3121ae84099bdfc6c83795cf25b42d57b6b02b0c64c99609fe621fn/a Heodo
2020-07-31XF_GB9306519884DY.docdoc 86c5dfaedbd4d9194b9b151a7c04a77eeed74491bc24e407bdfa249f82ba0377n/a Heodo
2020-07-31INV_DAQ_070120_NQB_073120.docdoc f83d7820bb180adcbf234472afa88b0b1c5080d98c454704b13537ee050ca429n/a Heodo
2020-07-3129146022.docdoc 582a1cef0fa903d6e306172892c6ec7fc72bed9ac3fa49364da864273c260db1n/a Heodo
2020-07-30INV_XXF_070120_LKP_073120.docdoc 29bb463a499d45a2b27d4f278b883361ed66aacd2f6184c93f79f9ba5df2fc53Virustotal results 50.00%Heodo
2020-07-30WI4233806998BU.docdoc c36f82ea105cba4a44f73acab1118437af3aab1d9a0f306fad8180ed6fb20205Virustotal results 49.15% Heodo
2020-07-30FB9468775198PC.docdoc 7c27fc12153685ebfa853201b4b71b6183b994f0bee705daf6d52db0f1062747Virustotal results 50.00% Heodo
2020-07-30BAL_QF3744056518LA.docdoc 2479f0c202e0b1e1af6e349625250c5e8433d8c2971ba1cb5325402e1ca70e54Virustotal results 48.33% Heodo
2020-07-30INV_PO_07312020EX.docdoc fa9ebbddf93bf0bde73a7e62692c9a2ba07478ad334b60810862fe795384032en/aHeodo
2020-07-30BAL_13451284.docdoc 2f335817434e148eb3306ec99d29a3947f89ff9e3aee56f76f227d5894334abdn/a Heodo
2020-07-30INV_PO_07312020EX.docdoc b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378Virustotal results 50.00%Heodo
2020-07-30SD7621070990KL.docdoc f90c979802dab34907b0e678e95984f403e634040bcadeaa8794c6762f5e1368Virustotal results 48.33% Heodo
2020-07-30V_PO_07302020EX.docdoc 0dfe8241724d2db0c393e179062ae196f5655be6e3335c37b05cca6cbb2e9205Virustotal results 47.54% Heodo
2020-07-30INV_1KYRKKLGO638H.docdoc f3ceae5781ace1e523935bb48baaf6484791c5cde8e95f8ce6db69f31b2917a4n/a Heodo
2020-07-30FILE_PO_07302020EX.docdoc 6bc285b63167413a7816f863c28d41d9fe89bca6acd784d2b54c7f35a601761en/a Heodo
2020-07-30INW_070120_NTT_073020.docdoc 3d10e87c65df148b00ee77cac7e5ecc608f2855e1b8f6e1149ca2d8a8dd956e3n/a Heodo
2020-07-30RH2364777049UV.docdoc ae3abc573956f6ecf54602dabcc2c4c20488c1bd826e4a064e379ffb44b76424Virustotal results 47.54%Heodo
2020-07-30N_IDM_070120_QGI_073020.docdoc 044a931e427040bddbe572ff16a3bc688cd83e8796727a0df74491157ba7d1f5Virustotal results 47.54% Heodo
2020-07-30INV_91390913.docdoc 3ec0cda0966fdfac5059b61d8b718eb7dc9e4454c370aa8260f34a3c759d43c2Virustotal results 48.33%Heodo
2020-07-30184431229509893687717.docdoc b7c80485c06d98376a33061daffa3a5da0b493251d67b50832d2dff57354ff87n/aHeodo
2020-07-30ZT9757876686RS.docdoc 21670c1b2f6bd3739bdf6a11f4edc5cf70af68046eb16b6a392cffccb2cdaf84n/a Heodo
2020-07-30MJ1870349130CG.docdoc 56efe1ba284bc56f894fe77e121885b4be0f672f1d9bde0e15dcf150a4bd21f5Virustotal results 45.76%Heodo