URLhaus Database

You are currently viewing the URLhaus database entry for https://www.serviluz.com/leopardo/INC/ysftnf3tkn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422395
URL: https://www.serviluz.com/leopardo/INC/ysftnf3tkn/
URL Status:Offline
Host: www.serviluz.com
Date added:2020-07-30 21:21:09 UTC
Last online:2020-07-31 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 21:22:03 UTC to ikerg{at}cubenode[dot]net)
Takedown time:11 hours, 54 minutes Good (down since 2020-07-31 09:16:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31ZK_YQ2590084162PA.docdoc da59a26f771c7a720ed7c690852b971068c090d3fbad6c755e62526acff9dd89n/a Heodo
2020-07-31M_USG_070120_LZE_073120.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3Virustotal results 48.33%Heodo
2020-07-31FILE_JEVWHSHPCSY9TU.docdoc ea37595a4802120f66a609e536e29eb8d342291b5e852c8554b1ed845a2e7fb8Virustotal results 49.18% Heodo
2020-07-31HSB_070120_TVI_073120.docdoc eb4de0607032c708751372ead86a2fed758f83ac11f563f2763f2703f13f6c77n/a Heodo
2020-07-31INV_AG1C8VYCQ.docdoc c8d29c17695244d3a3703e94ab4af9dfbfa15eb3b92906fc2139292a7fa28d09n/a Heodo
2020-07-31FILE_CWU_070120_VTM_073120.docdoc 2db2afb589741f5b0c9d9664e2510f5d3497e24ec06588da2004db3c53074267n/a Heodo
2020-07-31BAL_73993827.docdoc 17592f34648b1b8fabe68fb11ba3945bb82b9b7c3eca7f20210fa1d18c1af346Virustotal results 49.15% Heodo
2020-07-31BAL_VYUD4II.docdoc 9e2281655f7c68cdd376157b01db76237250a6c8a9ad766b4c9e541980f6168dn/a Heodo
2020-07-31LXCZ_730469540145.docdoc b3ef47f4c34fd270e8e97dcf5117fa5ae1c737eeccdea4717e498aba02710bf4n/a Heodo
2020-07-31H_MRU1LK8U5.docdoc 49607420463039be83e2fef6d13b6998ba5829ba255f017c28ce9fbb5f45487cn/a Heodo
2020-07-31DOC_MM6483200806OA.docdoc 86c5dfaedbd4d9194b9b151a7c04a77eeed74491bc24e407bdfa249f82ba0377n/a Heodo
2020-07-31UI0849270293OQ.docdoc f83d7820bb180adcbf234472afa88b0b1c5080d98c454704b13537ee050ca429n/a Heodo
2020-07-31P_MRN_070120_FFH_073120.docdoc 582a1cef0fa903d6e306172892c6ec7fc72bed9ac3fa49364da864273c260db1n/a Heodo
2020-07-3039156251.docdoc 29bb463a499d45a2b27d4f278b883361ed66aacd2f6184c93f79f9ba5df2fc53Virustotal results 50.00%Heodo
2020-07-30REP_VNZI1744Z3I.docdoc 785da8b434141923c6196ff5c06b283e08a9ad63ed5454278a6826312061bb0fn/a Heodo
2020-07-30REP_WR4505482085LI.docdoc dd4fb6c70656957415214f04b8140c86f59491dd53c396283d1968888e5a48fbn/a Heodo
2020-07-30T_KKH_070120_VQL_073120.docdoc 2479f0c202e0b1e1af6e349625250c5e8433d8c2971ba1cb5325402e1ca70e54n/a Heodo
2020-07-30INV_HXE_070120_QCP_073120.docdoc fa9ebbddf93bf0bde73a7e62692c9a2ba07478ad334b60810862fe795384032en/aHeodo
2020-07-30DOC_P45L17QZ8HX.docdoc e2bd4b9161beac093fc18bd29e08e53a735f5853f1d683b11848c73f919ef3b9n/a Heodo
2020-07-30BAL_DUQ_070120_DMF_073120.docdoc 938eef5af1fcb36268d2fc14becef86e477ea0ef1c824fe19c450453c5499215n/a Heodo