URLhaus Database

You are currently viewing the URLhaus database entry for http://falmer.de/test/d781j97qy/zvg4647066690948auwc73e6h16rtjw7vjb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:425991
URL: http://falmer.de/test/d781j97qy/zvg4647066690948auwc73e6h16rtjw7vjb/
URL Status:Offline
Host: falmer.de
Date added:2020-08-06 05:03:03 UTC
Last online:2020-08-06 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 05:04:02 UTC to abuse{at}telia[dot]com)
Takedown time:3 hours, 26 minutes Good (down since 2020-08-06 08:30:10 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-0643202450597283972698.docdoc c1cef0fb2b5bf3232c5bde5d9cb7b06007e0a635ea6f092d109519b95e1d4071Virustotal results 15.52% Heodo
2020-08-0688491030.docdoc 995be23dc0d3ee7c4f282548b4755e02e5ec5a8a8b303aa746005cc1e787261cn/a Heodo
2020-08-06IYG_080120_NUO_080620.docdoc 760332e0cc50301ec3479486479a525dab98e541c7400d07d8158dbf76135b4cVirustotal results 19.67% Heodo
2020-08-06OFK03FPOFIA.docdoc e6a45f7c1be03604263bb5d5368c322f9085a5d98a7a9c23c073e8a7e8a07b30Virustotal results 18.03% Heodo
2020-08-0659031753423731617460.docdoc b05b7a5b7251a3088a61d778b36b9806d3c57425a15891696e1f447a258f08ffVirustotal results 27.87% Heodo
2020-08-06AL_40984971.docdoc ba8540360200ccce58d2b79cd48c1478ef917f68b460fcdc58f78d7cabb5e4d8Virustotal results 26.23% Heodo
2020-08-06DOC_OFT_080120_YQK_080620.docdoc 62c944e88aa9a89db23e2db63e8744e0ec22dd0ccf46478bbcef7c688752b06aVirustotal results 25.00% Heodo
2020-08-06DOC_83776157051158.docdoc adf0c0b95460759ec00397aad0ac4ff47dd132b7b72cd4c13064f1d23c44b2c9Virustotal results 24.59% Heodo
2020-08-06T_VR6563317998VC.docdoc 54b00033c30eff4f4585b45a9f04a22fb283856b5cfdaec0adadfa44645e2e4aVirustotal results 26.23% Heodo