URLhaus Database

You are currently viewing the URLhaus database entry for https://ufs.pivotroots.com/wp-content/uploads/Scan/nauuimii/iex09w165388519089dde467yrowd8qtep00c/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:428121
URL: https://ufs.pivotroots.com/wp-content/uploads/Scan/nauuimii/iex09w165388519089dde467yrowd8qtep00c/
URL Status:Offline
Host: ufs.pivotroots.com
Date added:2020-08-10 07:51:04 UTC
Last online:2020-08-11 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 07:52:02 UTC to abuse{at}linode[dot]com)
Takedown time:1 day, 0 hours, 23 minutes Poor (down since 2020-08-11 08:15:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-11INV_OPK_080120_PHT_081120.docdoc efc80a3910740ed508a126ac5b5399b38c8c22a84e428367917c44dcc5766c73Virustotal results 22.58%Heodo
2020-08-11165653427089250225.docdoc 8328de3ec368a2d8a5c3080d9985f321c3769eaad778aa2a01fcaf66c58f3cfcVirustotal results 25.00%Heodo
2020-08-11BAL_10764740.docdoc 4a4a4dd5d1a19053ad3e765787b01d9dffb8b06be5faf5ce7a36efc5285df326Virustotal results 43.33%Heodo
2020-08-11FILE_DT1841094624PG.docdoc 8edf233ddcd24433edb9bf021d9eb73597b9d87e5bb9ee0c3fc936977dfe6f45Virustotal results 45.00%Heodo
2020-08-11RZB0B1YJLERV.docdoc 4d2029f90dd4666820163090c7717ea8b2166605108cf8e5292054e752213b86Virustotal results 45.00% Heodo
2020-08-11BAL_PO_08112020EX.docdoc 36182989cb2b226533aa5f3d453c63bd43acc1e70950b78a287f7ff1e61f3481Virustotal results 43.33% Heodo
2020-08-11BAL_378069289490564805089.docdoc 97a0a86caadf0c11a90388dcc018d2aae2496f377a0863a67aa05f261ce23436Virustotal results 44.26% Heodo
2020-08-11FILE_PO_08112020EX.docdoc b0276a23c508f3b994e893c4a51a5130674d5aebb945c3dbffcbbe22e7d62846Virustotal results 42.62% Heodo
2020-08-11OMUAJ5Y.docdoc 456af69e338aa9d67ece10771794a069df53f57b268711c18606ef7d54f0feb8Virustotal results 44.83% Heodo
2020-08-11PO_08112020EX.docdoc 106e9a3097680f7a8270ac6a6a5c75fdf983b6e2ce326e7c56403aefa0eff516Virustotal results 43.55% Heodo
2020-08-11INV_YXP_080120_LPM_081120.docdoc 77d07ebb9067728855c77e0d2486102c7710c99f4d2f952cde12dd1aff24ae2dVirustotal results 45.00% Heodo
2020-08-11INV_PO_08112020EX.docdoc ef8d089f8eb24df2f211ebc1cb4700181f97d431f3d8706c0977619cf01435d5Virustotal results 43.33% Heodo
2020-08-11V_REFKVE33WTY9H5Q.docdoc 37f50253f8018bae34e45657de8074c1a59a940ae12792fc8a5cdc8c700bc5eeVirustotal results 44.26% Heodo
2020-08-11INV_GJE_080120_CMZ_081120.docdoc 62104fb8abc7b1ebfcc1f27dc49a753517b49182741b3bee249633214a595e82Virustotal results 44.26% Heodo
2020-08-11FILE_WO0622636111BU.docdoc 4d67767678a9079f097fa98392ca9191d4dd429a1da0506b2e60185b0ded8609n/a Heodo
2020-08-10BAL_ZRF_080120_MMT_081120.docdoc 0aac84e792a3fda908009cbfdfbfa1f1e9e8f024bc759b760ec6a4a62e6958c1Virustotal results 40.00% Heodo
2020-08-10FDLL_300209582.docdoc af547eb34804f006425dafe29de39e4bfef46ee54db5be9e20a1ee36b5cb922cVirustotal results 40.00% Heodo
2020-08-10REP_07783620.docdoc 9f69dab80ed88c105f65738e34f9f97c34813c839c1e78395167bdf09090f89eVirustotal results 40.98% Heodo
2020-08-10PO_08112020EX.docdoc aadddb049f89ec5e5d1e40e88efb782963c3f82c032024f3d3e0529e097d3e12n/a Heodo
2020-08-10E_VFV80UH3ZJ2K6J.docdoc 517c239c322e6fd41f4a19a9ccf94409d986910c42f7e9bd8bb3cd33ff83a920Virustotal results 42.37% Heodo
2020-08-10RJX_080120_JUT_081120.docdoc 1701cece68d9611b07097a1e331039dc38649b44d3ea02351e0b494b6bca4fe9n/aHeodo
2020-08-10DOC_RFU4BXLJ1IJEFHF.docdoc b5e1229c49f51eba4bb306aece6c81e4190cbecee9196e2f46b4076a3c563cccn/a Heodo
2020-08-10FILE_SIXLML15EYU259M.docdoc 7de385983a473687e544d2502dc0fb85bcdd73e191376a94fa6bb028e07d99a1Virustotal results 40.98% Heodo
2020-08-10DOC_YOP_080120_NGY_081120.docdoc aaa17626011fd8709d2db7d9a466aa405485b300c881a5868f328cff238381d1Virustotal results 40.32%Heodo
2020-08-108BQWALC99OQL.docdoc bb9c6274ff65ac8ee339d712ae7f3d2b010cb74f04603840cc6017db29aaa3caVirustotal results 40.68%Heodo
2020-08-10PO_08112020EX.docdoc 33d40d4480617fb77d5d793051a847a5f4d09e1bd9845507308637ddf454e47aVirustotal results 40.98%Heodo
2020-08-10DOC_ZB6173533938AY.docdoc 05fdfb096bfe54f0bd2abd84e8143b8378f289838c61d7d1ec4efa141b2045f4Virustotal results 40.68%Heodo
2020-08-10SA_FWM_080120_MJJ_081020.docdoc fa0282385f733053712a3554624957b09fe274dea4427b8e7111e5bef7e1f64en/a Heodo
2020-08-10BAL_PO_08102020EX.docdoc ad90d0071b25f19345c41da1ac91d96258866c8048ddbe085d4c33dfe445e5b1Virustotal results 40.00% Heodo
2020-08-10DOC_BG7789698214KG.docdoc 67944182a5fa81f37c464ff5e81ccf203865d87ee39c6b2497eebcad87f86257Virustotal results 40.32% Heodo
2020-08-10BAL_NR6056706319NU.docdoc 6bbff5c81508a235fc04fffce3bef5c637c819c9648e6f8302a2cddd4cf8df09Virustotal results 40.00% Heodo
2020-08-10DOC_KSF_080120_UVG_081020.docdoc 868e9c0b8d6d8e39b8bd61634f444b5afeb0d108336d68b28332735796526736Virustotal results 42.37% Heodo
2020-08-10PO_08102020EX.docdoc c645f3b63d9dcc3d7d314707384ee6acd0f66be7666b8b8578a9c12e728913c1Virustotal results 43.33% Heodo
2020-08-1085818071424.docdoc 61bdaeae8d1b1877e8ccad0cd15b2ee73b5ff004ca4700ca6ec0d6ec11d20622Virustotal results 40.98% Heodo
2020-08-10CP_93754147.docdoc 9d0c4ad59e201bbfd5e94eae7548229c79cd70382bac9067221f9cf6ccd25a4cVirustotal results 40.98% Heodo
2020-08-101571275009038261200.docdoc 5bda6a8a7a7265b29e8db19103395da39b962063d9cadaa193a0a1bcfda16fc5Virustotal results 40.98% Heodo
2020-08-10DOC_EH3765460398XO.docdoc 722ed869e6d0e77b2dd1f33a633d66af3bf400a01989bb3ee4e6ff70d7b2ee53Virustotal results 40.98% Heodo
2020-08-10REP_IRY_080120_VGG_081020.docdoc 21600f61f85f24fcc273a012d7344a44750a49d52c6ef86ef576f3d8c75cbe4an/a Heodo
2020-08-10FILE_UMOG3XPUYRQ4GTNL.docdoc 2f1c1797aad2e944e5064a10670e8feb3bcbd2ff85bb0c3cd9a3a16efa130426Virustotal results 41.67% Heodo
2020-08-10DOC_55647933951730832127895.docdoc 3a6d2b0e5b190a5fea50684eabbee0a85819344e19159bf26ac8e1b93ea4140an/a Heodo
2020-08-10FILE_15840749959895388254.docdoc 365d24b51aae43c58665a5fca72115289aa276c62ddca2554fd016ac299ec917Virustotal results 40.00% Heodo
2020-08-1066172892.docdoc f8f7b8382a2b523434f8826e74bd13ac94a03c98be63a7ae9154bbe3a3295c69Virustotal results 36.07%Heodo
2020-08-10IW8884180023DP.docdoc f602c49cb3a75d9e1621b6c62ecffcda74542f712afc23c222ea4460e3729985Virustotal results 34.43%Heodo
2020-08-10H_PO_08102020EX.docdoc 9e9dcc63032c40001dbddb5bd18a2b6fe5605bb069cc340d150b9a779f2ae273Virustotal results 34.43%Heodo
2020-08-10FILE_FRH_080120_GDT_081020.docdoc 8bfc9f0131ca6f43abc2eac3a5e2345362e5c80a1d7f5ecf729811990863a1c4Virustotal results 30.00%Heodo
2020-08-1068691652.docdoc a9037fe87ed3a03f60771c046496bbf16e1d5646f87a7f4f59a58471050a272an/a Heodo
2020-08-10INV_WXBIR2T32A24HM5C.docdoc c53160bebc0aaaa274a2594c7eb4977b0626c3aa4c2e2fac71206c2a65d50da7n/a Heodo
2020-08-10PO_08102020EX.docdoc c3089aae17704c9ddcc67b476b66c0a66f756ef1dad5b90062f06ec428ee5d3fVirustotal results 22.95% Heodo
2020-08-10M_EVO_080120_NTY_081020.docdoc 2b2b4341e21f9930df58f0f4f10bd2642775d7eaba166ec686f12a411011c3a5Virustotal results 26.67%Heodo
2020-08-10FKVX_RA3249594043GS.docdoc 407736ca4a4bdab4ea158b768aacc22239f4c364a9a0911bdf0531d5b6857456Virustotal results 28.33% Heodo
2020-08-10INV_XAY_080120_HJF_081020.docdoc 0a635c6914b1d696e249b62eda3f0fa60f54bbc2c24939308a6f45b0a601796fVirustotal results 27.87% Heodo
2020-08-10INV_PO_08102020EX.docdoc df1f8dc5bdb2922872307a97d663e7a17bf750c84e97d3a48d9f92422a7111b9n/a Heodo
2020-08-10F_NGZ_080120_ZED_081020.docdoc 4ea6035fe5de3a984945448439b050bbd2482348d9ef8927d6e8608f2970b83aVirustotal results 27.87% Heodo
2020-08-10BAL_67629218.docdoc 4ef3be78e6d5e7488bfec47d05dcb528ae781bbfcccf27d5775eabaf583ec691n/a Heodo
2020-08-1043034053.docdoc dc5077277cfc327ea738f49f77b8ccc791a515634d299c2c0467c065eeca0d6bVirustotal results 27.87% Heodo
2020-08-10F_946371752.docdoc ccad7d8f297ecf97b8a2c961ea884e9fd3acde7d74213ba337f42bc8213f2965Virustotal results 27.87% Heodo
2020-08-10FR2FQJ3M68FQ.docdoc 463df8dd11d5de674b664ecaa11298ea676da510e2deaf7d253f54b74e9e3743n/a Heodo
2020-08-10INV_XS7844533149CE.docdoc c233780903a8882552bed316b7beda62f12cdd65ae4cb95e2021374d628ddd58Virustotal results 25.42% Heodo
2020-08-10FILE_ZKD_080120_TVN_081020.docdoc b4fee593515c07d25b65b6ce8810f4848f71b619cc61cd73d544ccdc977e9ed0n/a Heodo