URLhaus Database

You are currently viewing the URLhaus database entry for http://timzone.net/newfolde_r/swift/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:428875
URL: http://timzone.net/newfolde_r/swift/
URL Status:Offline
Host: timzone.net
Date added:2020-08-10 21:40:09 UTC
Last online:2020-08-11 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 21:42:02 UTC to abuse{at}panthur[dot]com[dot]au)
Takedown time:18 hours, 52 minutes Good (down since 2020-08-11 16:34:32 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-11INV_0RGWHV6K.docdoc 156c89b670d37466329fb682dd618caf3bd58f87e765cca5964284ab364e311bn/aHeodo
2020-08-1197810660249295.docdoc 5a7268af14b85f336d44d0d10af1c59a02ce7738a4966e2ef96a39574a42b7c6n/aHeodo
2020-08-11K_0550642636764613072682445.docdoc 5ca1aedbc7b3e63e13e3b3263321e12f1d49d668c331db20a1f996b3fd362894n/aHeodo
2020-08-11FILE_SHS_080120_OER_081120.docdoc d760943bc37af2bcfc28d0e4f2a9de09a531cf8eb96220ea588ab5373d0b5ddan/aHeodo
2020-08-11DOC_HK0251688772BA.docdoc 8bfd3587537db9be73cc189509eab9796c40a95566b79753724b36ce7dce7c19n/aHeodo
2020-08-11INV_PO_08112020EX.docdoc e86b2beb2b36a9530c75a89e078c28b809fca63518cebdcd860f0135e899ae90n/aHeodo
2020-08-11C_SDENMXVQ1.docdoc 74c60ddf02800ed5d9c79d78e912a81ed34d20ccb8fab265ac1512c0ef32a93eVirustotal results 25.00%Heodo
2020-08-11FILE_QKG_080120_IYD_081120.docdoc f266dfe6eca386777143d38c655e759b22fba117bcd9138c44354938222c1673Virustotal results 25.00%Heodo
2020-08-118784804764296823888651347.docdoc 3c96d99ab907c8544c09f14a63fff98744847da193d7884e99d16710cd130d31Virustotal results 25.00%Heodo
2020-08-11REP_UMT_080120_TPK_081120.docdoc 44371483f703d07a492861139471189a8755d6863157b3ace04c1e4ea205987fVirustotal results 24.59%Heodo
2020-08-11REP_89945568990180015.docdoc d8beb1de5adb1f3ef5c811ddade7dae86aab73a38461546c8dfe473c74294331Virustotal results 25.42%Heodo
2020-08-1145406041.docdoc 2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404n/aHeodo
2020-08-11QTEVWTCF60WWNV.docdoc b20330780ffde03eb1b391b3a57cd24eca45f10aff5916ff6ac1366f033f6c32n/aHeodo
2020-08-11INV_DO5684600869UI.docdoc 5fd5d52919277328ddc6a266f40c3ad46a8b4196c9fe8f14d7f42252def786a5Virustotal results 22.95%Heodo
2020-08-11FILE_6849041112.docdoc f525a4c14fe2ed5ebc5a3b09a1a8ce10dac9f2df2449069c3b3f493878b20c03n/aHeodo
2020-08-11E_PO_08112020EX.docdoc 8fb11051f6a6f86033a5491a0ecaf31b9127f53878d2cda6b6adfd79a47ec79cn/aHeodo
2020-08-11FILE_PO_08112020EX.docdoc 9088702b9de53e98d1a703557ef6c594d9025b61613169b5d0098d607a4ae12cVirustotal results 23.73%Heodo
2020-08-11DV_352762107082544502282316.docdoc ff1106fde0971d8fcc68af9662bbb95aed36e07900ddb0fba6f66cf8bca98fben/aHeodo
2020-08-11DOC_011598305170.docdoc d89122b3343485f18e72909f9c77fca6203a619ab86c89f197dcf234b555785an/aHeodo
2020-08-11S_SDFTOEYT.docdoc fe1403af8bfc6dafc09d02f60f2b208d0891210f6d16fc2db622f950339c7f99Virustotal results 22.95%Heodo
2020-08-11MVI4NK1RJKX15WXP.docdoc 9fa6f271532ad52f77c508705e1b99fd612fde44318f5bd13a6a3925b059ae8dVirustotal results 22.95%Heodo
2020-08-11DOC_JPKN8MX.docdoc 4a4a4dd5d1a19053ad3e765787b01d9dffb8b06be5faf5ce7a36efc5285df326Virustotal results 43.33%Heodo
2020-08-11D_59150858.docdoc 8edf233ddcd24433edb9bf021d9eb73597b9d87e5bb9ee0c3fc936977dfe6f45Virustotal results 45.00%Heodo
2020-08-11INV_PO_08112020EX.docdoc 35eb2d4352b9d7bfc467b51f9bd95bb119c239c1229cb06f1a71d62063971f03Virustotal results 43.55% Heodo
2020-08-11519827302910450980.docdoc 57d5fc234966fd696f948b9952b125ec464fe2c3b2b0948e151dc74218050cabVirustotal results 40.35% Heodo
2020-08-11FILE_9032879471844738.docdoc 97a0a86caadf0c11a90388dcc018d2aae2496f377a0863a67aa05f261ce23436Virustotal results 44.26% Heodo
2020-08-11BAL_AIP_080120_TMU_081120.docdoc b0276a23c508f3b994e893c4a51a5130674d5aebb945c3dbffcbbe22e7d62846Virustotal results 44.07% Heodo
2020-08-11BAL_EOT_080120_TGD_081120.docdoc 106e9a3097680f7a8270ac6a6a5c75fdf983b6e2ce326e7c56403aefa0eff516Virustotal results 43.55% Heodo
2020-08-11PO_08112020EX.docdoc 77d07ebb9067728855c77e0d2486102c7710c99f4d2f952cde12dd1aff24ae2dVirustotal results 45.00% Heodo
2020-08-119125398056052.docdoc 7a21ceea16e5ac47afe5072b7863649cccdc31540f9e90634bef272b619a9d65Virustotal results 44.26% Heodo
2020-08-11SKPIZ2YCQWEMIA.docdoc 37f50253f8018bae34e45657de8074c1a59a940ae12792fc8a5cdc8c700bc5eeVirustotal results 44.26% Heodo
2020-08-11SS0376894831QR.docdoc 62104fb8abc7b1ebfcc1f27dc49a753517b49182741b3bee249633214a595e82Virustotal results 44.26% Heodo
2020-08-11REP_SP1593761484NB.docdoc 4d67767678a9079f097fa98392ca9191d4dd429a1da0506b2e60185b0ded8609n/a Heodo
2020-08-1039397498.docdoc 0aac84e792a3fda908009cbfdfbfa1f1e9e8f024bc759b760ec6a4a62e6958c1Virustotal results 40.00% Heodo
2020-08-10PO_08112020EX.docdoc a09d06d100d5eba226f9edb3218e903fa13d1068e2dced8b4479d7d961f3c892Virustotal results 40.32% Heodo
2020-08-10DOC_63863810.docdoc cb3e4a2162e7b5270caab7fb7c679a8f127b6e41d8ab953542e159e2200e1eb1Virustotal results 40.98% Heodo
2020-08-10REP_14313413.docdoc add109b87a469c3dfa35ae3c978d11c7a009a56f87ded73152008445468ef8dfn/a Heodo
2020-08-1083461896.docdoc 55202eaa4d47d55d4a8a81a17bfdfe00081b47923d3ac1249c6d5a7fa90b81c1Virustotal results 40.68% Heodo
2020-08-10DOC_9D2KZW7172YJ.docdoc 1701cece68d9611b07097a1e331039dc38649b44d3ea02351e0b494b6bca4fe9n/aHeodo
2020-08-1055855345.docdoc b5e1229c49f51eba4bb306aece6c81e4190cbecee9196e2f46b4076a3c563cccn/a Heodo
2020-08-10REP_PO_08112020EX.docdoc d04235ea57172d8e82ab7ceea5c85b7a847adbc9d6e6b2fc5bbaeaeaf96d8661n/a Heodo
2020-08-10DOC_32021541.docdoc dd27fbe8edac24db562a13614357e380f49894285fe1193552a3b71bb887d478Virustotal results 40.98% Heodo
2020-08-10DOC_80226325.docdoc 66cf04f23a74dd0317e267811bbabb028ba5c808e9fef37f056935e02d881ae9Virustotal results 41.67% Heodo