URLhaus Database

You are currently viewing the URLhaus database entry for http://elementalburn.com/7107012102381-23SZF9DZczYzLB-module/payment/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422377
URL: http://elementalburn.com/7107012102381-23SZF9DZczYzLB-module/payment/
URL Status:Offline
Host: elementalburn.com
Date added:2020-07-30 20:59:34 UTC
Last online:2020-07-31 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 21:00:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:20 hours, 59 minutes Good (down since 2020-07-31 17:59:32 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31PO_07312020EX.docdoc 93a916a37039c35db0ae99e9119dffc92dbb4224c25eafc2a4b63475576e88daVirustotal results 49.15% Heodo
2020-07-31PO_07312020EX.docdoc 93a916a37039c35db0ae99e9119dffc92dbb4224c25eafc2a4b63475576e88daVirustotal results 49.15% Heodo
2020-07-31TAU79LJ0YE2RR.docdoc 1c2a8cebd9dfaa1c8cb5cbd5b65529c2da636a4b9c3439b43e99a296c304b8c9n/aHeodo
2020-07-31CZI_R108CVBXI.docdoc a4793238143f28a12c3574808fca946d088dacc4570bbb1fd33df193b2185bb3Virustotal results 47.54%Heodo
2020-07-31015WU7PXCY.docdoc 139e9c5ad9d6a1623f98793bb06bda1b4e5da37d9c26de4f314fc2eb5673acbdVirustotal results 46.77% Heodo
2020-07-31IS_2245270460.docdoc 5730c4c8436965355b6f87bb9ddd7c86a1a11e75775c732c12fe03fa142d0757n/a Heodo
2020-07-31L_CCG9C892.docdoc 55da5c5eb03990c56ace11826deedcc82fe9d5f1a0fa6055575be6d9830f85e2Virustotal results 46.67% Heodo
2020-07-31INV_PO_07312020EX.docdoc 1a4bdb64a47146d10bf8594404bcf28b53acfdb7242c989eb3d1c6673a270f86n/a Heodo
2020-07-31INV_0J2I2KBLDDW6Q4W.docdoc 070d85940c505f80e563146c1264493f523229d81ef2aff4374669e0cc1769c0n/a Heodo
2020-07-31FILE_PO_07312020EX.docdoc cfa6624b88ef3814f55f48c574834fb7e6bd4c5102043a9b1568f571201d6a49Virustotal results 44.07% Heodo
2020-07-3160799289203.docdoc 080138d1e0b1b30c9251e6aa2467689804143563243d0fedf4f60f5065e7e1a3n/aHeodo
2020-07-31BWM_LOY7PBNZ04R8.docdoc 504834100a9af027c208a0a9b1f6b09b526c4e6d4925f4bc15e4c30a6c6edcc0Virustotal results 43.33% Heodo
2020-07-31LHZ_070120_GGX_073120.docdoc 628a4059b2b1433fae9cd2e40f5e6c8dc2528d5269c48dfcd20ee92378809e66Virustotal results 43.33% Heodo
2020-07-31WV6018730367UW.docdoc 74c79e2ddbba251595996dc010becfe64bde18250a2996d4930d60b6dc688f79Virustotal results 43.33%Heodo
2020-07-31P_783202411.docdoc 79c176bbb127e50221aff1d14c8b4f8536dfe567f477e4608a526858824fcd26Virustotal results 43.33% Heodo
2020-07-31REP_07954822.docdoc 67eefdc61c4894365a14b80f30a06e1581213946458527b37964761cfae38cd0n/aHeodo
2020-07-31BAL_44877999848339.docdoc 8d3d57f3ae15f3a97337fcd5d624d4e1dabe04c558203f41ea9e93c23928790fn/a Heodo
2020-07-31P_I7A7O5JYH4.docdoc 3dc5ec3fc47a3d3cc7a39aa7b36f0d5edc36aabb1c459f26ea6cb221cf78d461Virustotal results 41.67% Heodo
2020-07-31UN7EL57LXTKHG6VN.docdoc a17fab324db66fa23c620268ea0be1b78c9da505dc0580f5a21a915118a09bb8Virustotal results 42.37% Heodo
2020-07-31FILE_QQXLX4X.docdoc 9c184a50a28234ea058519a136d7e474a3e8fa0d75828d3b5167ff02cbf87b8fVirustotal results 40.68% Heodo
2020-07-31EEE_070120_SJG_073120.docdoc 728a0a1d8f9a71bd86dce389f0dd100a5abd819ea428304f97e35104903c0a28n/a Heodo
2020-07-31RE_IG7581275660SY.docdoc 98c69796d0d4c669225ea7ee1ba6fab9cd3b038014bfcdb4e95b82a7ef96d4ebn/a Heodo
2020-07-31INV_IMR_070120_MLG_073120.docdoc da59a26f771c7a720ed7c690852b971068c090d3fbad6c755e62526acff9dd89n/a Heodo
2020-07-31DOC_DAJ_070120_MQE_073120.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3Virustotal results 48.33%Heodo
2020-07-31REP_SM1682152468PC.docdoc ea37595a4802120f66a609e536e29eb8d342291b5e852c8554b1ed845a2e7fb8Virustotal results 49.18% Heodo
2020-07-31INV_C2Y1NLP.docdoc eb4de0607032c708751372ead86a2fed758f83ac11f563f2763f2703f13f6c77n/a Heodo
2020-07-3149896173514824950.docdoc 0ab86823b70ea0debb9b67bf3947e1f5f751101476cf11859c2630521854ebddVirustotal results 49.18% Heodo
2020-07-31O_58153049.docdoc 2db2afb589741f5b0c9d9664e2510f5d3497e24ec06588da2004db3c53074267n/a Heodo
2020-07-31BAL_SWL_070120_KZO_073120.docdoc ba5038cd1699fcd67a0053b79048fff5b473165426cecff97e8b2f0a60057522n/a Heodo
2020-07-31B_FYNG4BNIFVH0.docdoc c433371e8083d2992d2b56e8c6e0ec027e6096daea3729e250cd30c75ec68052n/a Heodo
2020-07-31Z_HDH_070120_BOI_073120.docdoc d5b15e347188c06c7829b732280cf56f551f62cbe17ca56b9cc96f5a083dda23n/a Heodo
2020-07-31MQH_BV8910596328JO.docdoc 49607420463039be83e2fef6d13b6998ba5829ba255f017c28ce9fbb5f45487cn/a Heodo
2020-07-31INV_113626598298458703.docdoc c3ee2087183e8fc4fa6ad487d597d161b3bf5d8c3fa9b042f081d0c218d87931n/a Heodo
2020-07-31DOC_PO_07312020EX.docdoc 8720174dbaed005a6b50566b3309f992a9c5546b54c63419a4d44bc9c09a657bVirustotal results 48.33% Heodo
2020-07-31BAL_PIG_070120_LIO_073120.docdoc 8d7f5cd06bb06193bf56a6084659355f3087b32118304efa7f736950c5c3224dVirustotal results 48.33% Heodo
2020-07-30DOC_PO_07312020EX.docdoc 226d9689fcf84f7cf9decb14e3b58a86f7f82df4ad2646632444f63095544015n/a Heodo
2020-07-302J9CJW84R.docdoc c36f82ea105cba4a44f73acab1118437af3aab1d9a0f306fad8180ed6fb20205Virustotal results 49.15% Heodo
2020-07-30BAL_WD01Y12SZMRSZA45.docdoc dd4fb6c70656957415214f04b8140c86f59491dd53c396283d1968888e5a48fbn/a Heodo
2020-07-30DOC_ZW1261368833PX.docdoc 087d886769130e2e66ae3c58ffae09a89067b34644d00e1b033022da3f23eb86Virustotal results 49.18% Heodo
2020-07-30SH1DEE87BS4JZD7.docdoc 6021073b6ea70ee11cd7e0ed9870576731cf122279533ddaa21ff9a37be8ff34Virustotal results 49.18%Heodo
2020-07-30DOC_33679295114721872527882.docdoc 2f335817434e148eb3306ec99d29a3947f89ff9e3aee56f76f227d5894334abdn/a Heodo
2020-07-30YU4009592538AG.docdoc 5f59aafd6bce42eec504ff932ae259d616752f9dda9d1b669c1b407352742f86n/a Heodo
2020-07-30WYI_070120_HTF_073020.docdoc 94f3b93f70927545dbfa262ee3f1d7e90f8961a0d5d8993f4703976de3cf5b77n/aHeodo