URLhaus Database

You are currently viewing the URLhaus database entry for http://www.neptunservice.ro/wp-admin/closed_sector/close_forum/z78sbzh_sts20s69z9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426434
URL: http://www.neptunservice.ro/wp-admin/closed_sector/close_forum/z78sbzh_sts20s69z9/
URL Status:Offline
Host: www.neptunservice.ro
Date added:2020-08-06 17:53:35 UTC
Last online:2020-09-01 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 17:54:04 UTC to abuse{at}romarg[dot]com)
Takedown time:25 days, 19 hours, 42 minutes Bad (down since 2020-09-01 13:36:19 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-07List-2020_08_07.docdoc a6cf38618a58d0076e02ca5aa15020a6971e1367e0b8c00168775a31f8b92618Virustotal results 40.00%Heodo
2020-08-07REP_20200807_8651599.docdoc e3cfb2e0648535875890582842fe912425271c2dfaeb7c1ef7f982a9ac41c18fVirustotal results 37.70% Heodo
2020-08-07INF 2020_08_07 YG073.docdoc fe032b45e17799af19f0dff52340131849e761ed8072baa910c48854206f12b6Virustotal results 36.67% Heodo
2020-08-07Dat.docdoc 080257fc7c2e7a1d17dbd6b2031f80db4ab6688105cf69fab75041a1586d3045Virustotal results 37.70% Heodo
2020-08-07FILE.docdoc ceb04f1a654420e65799fffdb67da0fb040b60a786dbcc5a874b89a63e0c7670n/a Heodo
2020-08-07doc.docdoc bde536ff0957de3adb9867d66016e8c3cbf60783323bb1589b762ca55e034fd0Virustotal results 37.70% Heodo
2020-08-07Inf.docdoc ae908684371dfff2fef8392c36cbf6a27800823f0c41b16230094f8dce844029Virustotal results 32.26% Heodo
2020-08-07Doc_20200807_760384.docdoc 8dee1c489137e967d7674246af7a20f33986189be2bc33d2d1c2a766391d65d1Virustotal results 32.26% Heodo
2020-08-07FILE 2020_08_07 589.docdoc 13c170ae434fbb8b3aacd4d570a8e87de168decd5016266098bff59c7b388df0Virustotal results 29.03% Heodo
2020-08-07FILE_J76548.docdoc 41ef14a19213118eb0e697d1b79f445cf4843cde57bd4b92ea7d33ad44d26f43Virustotal results 27.42% Heodo
2020-08-07List-20200807-802547.docdoc 6c822bf85153ffff4d424e12352a19e60d31782008681d7287a00bf4750feb70Virustotal results 29.03% Heodo
2020-08-07List 2020_08_07.docdoc 5bb39eafa5028062850d6792e1c03eb121c1102ab0454e68ab2ae662305c2f3dVirustotal results 31.03% Heodo
2020-08-07REP 2020_08_07 FP4265.docdoc cdad26800b0cbf8b3c591cc545378d50c93a28c735fada99d6bbe4228f2ed6b0Virustotal results 27.42% Heodo
2020-08-07file-2020_08_07-324593.docdoc b8dacf3ee73cdfc545f0e66e81dd8331ad345136a5a94dcc78f387bc7dfbea3fVirustotal results 29.03% Heodo
2020-08-07mes 2020_08_07.docdoc 2a005cc6ecad083fbacad57dd64f003039138ab3058b1914a4857ea7390df298Virustotal results 29.03% Heodo
2020-08-07file_2020_08_07_HYN8351.docdoc 2d9e8d19691ccc198cf997196c54e831404e2577b1bd3c17ae29b1c78b0f95a8Virustotal results 29.51% Heodo
2020-08-07Arc_46414.docdoc cb965595bedf28e722085f2c70f7ade49c8c594ecc499ce0c78bd06d6365cab8Virustotal results 26.23% Heodo
2020-08-07Rep-CY436267.docdoc 90f8bbf6dee1ad7d38d610ea379dd8fd80444592cadac1f1497cad9b6d4e5caaVirustotal results 27.87% Heodo
2020-08-07Inf.docdoc ce537cebc52ef63cd5bf7f35abb10712d236835b821443089e3c40551d3cf481Virustotal results 29.51% Heodo
2020-08-06MES-9936.docdoc 3a17dd818992725fb9bf1c2e0d4d18141f5b9fe15a184e7ebac32b935fe7e60fVirustotal results 26.23% Heodo
2020-08-06inf-20200807.docdoc 2c5b7f8488ec8abc944d1a90f84293494cb7c6dea6cd23bad40fce8429f41442Virustotal results 29.03% Heodo
2020-08-06list-20200807-WE662.docdoc 834ae3e3344f994a972b0a6dd3850fc3a7d26a9d1ab48ed2c3ec49e34239147eVirustotal results 29.51% Heodo
2020-08-06REP 2020_08_07 FON219873.docdoc 9fda153dee6f47ac4ab198402cc17dac3bd96bd975458ef5dc23e2345abe48bdVirustotal results 27.87% Heodo
2020-08-06Inf_20200807_311457.docdoc a1668530748354caf4b83b007f729aa168414a2e53c2c87bc4043bdd0c7a3c06Virustotal results 25.00% Heodo
2020-08-06rep FH8564.docdoc 98d5c8044b069739335b5df00eabef5dc49008cce5db65b6311bba0e426f1d72Virustotal results 28.33% Heodo
2020-08-06REP 2020_08_06 JW01031.docdoc 91fb6e58eb106a9b22d169074f6a0cb518ffc6a0a39a4be3f413f540c48c9899Virustotal results 26.67% Heodo
2020-08-06dat_20200806_991512.docdoc e4c0b9acd76b72b5cfaae774818c9222ae052b5fdcb6c29bac642d6c0b720477Virustotal results 26.67% Heodo
2020-08-06LIST_824376.docdoc 5aa5250ff5c978f28b1cae5cd797f549c018e87636de1298771d8c1fa0e7ad0bVirustotal results 28.33% Heodo
2020-08-06file_RN526.docdoc eccf3fc72b302caef9a6b06ea0e0498e89c128011dd344bb63df5727b1ad3795n/a Heodo
2020-08-06mes_2020_08_06_MU9616.docdoc b1677b8c7736ccca1544b631f95f9c8997e288c8a69b94d957c518f0b12c9076Virustotal results 25.00% Heodo
2020-08-06Dat 20200806.docdoc 5d3307535ae53d63979ef1653955d6d158dd1b5b91a623eac5e044c4d8fcb54bn/a Heodo
2020-08-06File_201838.docdoc 8de17adc871dd2bf55bc2e2f0b799772bbf81891cef9f28bdbbb5783a260e38en/a Heodo
2020-08-06inf-20200806-MQP498820.docdoc b1f9e43e7c341f9cf6b44ef2864eaecb8d70e417f5e0550b805d1705b75dcaabn/a Heodo
2020-08-06Doc-20200806-98215.docdoc d0a24444d0f97ecbc49b529c1e8ad930ad3c32d18b825aa7f90cb9ddc45ece0aVirustotal results 23.73% Heodo
2020-08-06inf-20200806-VD932987.docdoc 53b122f391aea078ab8674ee41a6df82d5267c254a901ba4efa61b1d7e147096Virustotal results 23.33% Heodo