URLhaus Database

You are currently viewing the URLhaus database entry for http://dlwebermanlaw.com/files/HeYNzD_9DeMJ9cw8HlzqG_disk/individual_portal/xZB8Vr_5N3IGdeoviu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429156
URL: http://dlwebermanlaw.com/files/HeYNzD_9DeMJ9cw8HlzqG_disk/individual_portal/xZB8Vr_5N3IGdeoviu/
URL Status:Offline
Host: dlwebermanlaw.com
Date added:2020-08-11 09:29:34 UTC
Last online:2020-10-05 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 09:30:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 month, 25 days, 3 hours, 36 minutes Bad (down since 2020-10-05 13:06:50 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13Dat_20200813_9744387.docdoc c62a518ca9ef501b1280c2228b3010d2cd95cf5edbdc697620d8fdcf58884e8eVirustotal results 28.33%Heodo
2020-08-13arc-20200813-6706.docdoc 5d621088961412e1b6d53afa8deaddf2677283556ab355494d79359b90f19adeVirustotal results 26.67%Heodo
2020-08-13doc-2020_08_13-3965.docdoc 5c70b1d9be2e62d3cb581708789ffcafdc47ae8733f09039db0c3c7bfe9041d9Virustotal results 51.67%Heodo
2020-08-13file_20200813_3652.docdoc eca29e6b51bd3a1a11e111442145b444d56ccf246f7fe2598901c5fc75843e58Virustotal results 51.67%Heodo
2020-08-13FILE 2020_08_13 DG085.docdoc 059d90ba2fdda046ef59121b28ea19e6e7d5b9560b0ce0dab9234e0b0c93e56bVirustotal results 53.33%Heodo
2020-08-13file-2020_08_13-WV5609.docdoc d88d0131f8422f4ca25451d4c1f3642d6bcab4aa071bbf0cfed86e54a6e62976n/aHeodo
2020-08-13File 20200813 VH344792.docdoc d16cd96a6382c743e97444d51967f3d83c72ca0618c6d92facad07211712c9beVirustotal results 51.67%Heodo
2020-08-13dat_2020_08_13_J396865.docdoc 34b90b804ac07f37b48a7437f520d80dd3efe9bc79c96c722240c63d9e457164Virustotal results 52.54%Heodo
2020-08-13MES-20200813-7476.docdoc 0920dc57ca08f4f9277d39f3d1b693eb0d12d7fc1c856a1c90689f5151a62dd5Virustotal results 50.00%Heodo
2020-08-13MES_EO92763.docdoc 7efe325d3dd462aa685894527836d96928d50d1fe594ceab5af597a3df8c258aVirustotal results 52.46%Heodo
2020-08-13doc-2020_08_13-810382.docdoc ccef51f2aac08b771675329e49226ef621176b8408f1e7f7b72aa4359c3d137dVirustotal results 50.00%Heodo
2020-08-12mes_20200813_TYA42337.docdoc 508b0f1d8e5ede23aa2da775ab08b29c3be1fea89e1d2646c00c0b3c3570af5bVirustotal results 50.00%Heodo
2020-08-12FILE-20200813-0232.docdoc 93038076936e036e53a02867d6ec372304df2638bd700bb923f54bd20c5f2f7fVirustotal results 48.33%Heodo
2020-08-12MES 2020_08_12 01456.docdoc 986acc515daf31c8bd8d424f27e1307eab1f51a043c896ffeb2cd94df1eed8a1Virustotal results 49.15%Heodo
2020-08-12dat-2462249.docdoc 9745f640a27a145d01b04bb88de1d7b7ab7e784d59fdf5248a9bf9f0508cfefdn/aHeodo
2020-08-12INF_20200812_4790.docdoc 623465220d4d4d4e975bdabeb93d3fba141ba28b54394250b066cdc693a0eab1Virustotal results 48.28%Heodo
2020-08-12rep ZP389.docdoc ac4a497f08d9286aff7a72c55589c9c1ee603462e501e24b5354e0dad963cea9Virustotal results 48.33%Heodo
2020-08-12Dat_20200812_4664924.docdoc 657108dec334ce0dc7b2f812ad44ebe4305705d156853e7c3f4c929f9127daa7Virustotal results 50.00%Heodo
2020-08-12FILE 235.docdoc a96471c2ef6e0f48534a2d7bf4dae0559e635b17db0c186973c27ccb3a6bb53cVirustotal results 45.76%Heodo
2020-08-12rep-20200812-XRI8818.docdoc 28466240c1ed4603033b5c216943cf3ea98d147ee101228b82ddf3033c9d8db3Virustotal results 45.76%Heodo
2020-08-12Dat_2020_08_12_1699.docdoc c3c7747e66aafb9af769e878af351dc5bf1d8a99d79617122ee15e02ace032b3Virustotal results 40.98%Heodo
2020-08-12inf-RB6645.docdoc 0cb6700ec14b3bab7a93b82cff3e797676931357fa974ebe8a16b0de55eaead7Virustotal results 38.98%Heodo
2020-08-12arc 2020_08_12 532022.docdoc 22d5bcf65dec583782e51f67e601a8e90d5deb8ba7cf1fb547feb1915c04961aVirustotal results 31.67%Heodo
2020-08-12Rep 2020_08_12 WM8323.docdoc 9e2108ece91a29ed453a943489b8fbf126a00114b4aa73c987b230e4a83bc5cdVirustotal results 30.00%Heodo
2020-08-12Mes-2020_08_12-9955261.docdoc dd2e74bc0055a3c3b570343b3820ee447a0960d450778c134677763be91bd9a0Virustotal results 30.00%Heodo
2020-08-12file-20200812-2884051.docdoc c6f429946fcd3e6e755bdcbe2432c36bb06c309e745c2973d5d795fac283e415Virustotal results 28.81%Heodo
2020-08-12file QT7038.docdoc dfd7cacf89ae3e789859a1008834beb34dd19ee305c54436efbcd70b475e4a0aVirustotal results 27.59%Heodo
2020-08-12MES-MA6482.docdoc ebe2942f03be48db9a6fadc6c49ddf806aef0ec3b5aec0331a93f51ab66532d7Virustotal results 28.81%Heodo
2020-08-12Mes_20200812_5548.docdoc ca4bef19033883ec9486d1042c9f532caf4d255db82f59f74c4788fd66136b22Virustotal results 27.87%Heodo
2020-08-12Doc-79619.docdoc 3a31c8a247fc5b726521c3e4404fae4ae5cab5c3f1583ef130e96c96be41544dVirustotal results 28.33%Heodo
2020-08-12INF-WSQ923027.docdoc a19722b22309648038cd9e6383078f7e27adac9534e3c87faa8eb9e849f3c1f7Virustotal results 28.33%Heodo
2020-08-12FILE-2020_08_12-H357.docdoc c15363c91a8b99bc22063620a1747a678b17db67321d1b7e850d753f76f56231Virustotal results 28.81%Heodo
2020-08-12file_J756487.docdoc 91d1de9f9ca14571341e814b616d797f0fdf0e67023264c34f733c0fc991ed66Virustotal results 28.33%Heodo
2020-08-12List 20200812 2769679.docdoc c7de0dc8fb8f16b37e43d73816978a6092ec008ed25974395972009a69084a5aVirustotal results 28.33%Heodo
2020-08-12MES.docdoc c5cf72d67d389db548717373f054466733e27034856015726230320261c7186fVirustotal results 28.81%Heodo
2020-08-12rep 20200812 673.docdoc f5ec89a6e0a9e6f12727251ded2279035d817716542203ea13f4de99606a8974Virustotal results 29.31%Heodo
2020-08-12ARC-ZZF69898.docdoc b2638f5a62f9d35d681d04b249fe965504f71fd5e9d9dae777b51fe94e169c3aVirustotal results 28.33%Heodo
2020-08-12mes 2020_08_12 KMK130.docdoc 16b1a2608a3fb3030eb55c06c4fba55b308753907c915bc6caed2bd397c65390Virustotal results 52.63%Heodo
2020-08-12Doc 20200812 9098.docdoc e44866ddc3408fab14c87c206e408852253a05de531691d4cb8e1dcd7f37cf72Virustotal results 50.88%Heodo
2020-08-12doc-20200812-LCO42569.docdoc 4ef3949ed5a22c9289425dbdcfdf323645416878743a70de4c0fa49085d34e69n/aHeodo
2020-08-12list-2020_08_12-QK142338.docdoc 1e49a48de56f70d98bd4a9438f95292a8725b5025075cbf8f0bccd551474754bVirustotal results 49.15%Heodo
2020-08-12dat_20200812_129341.docdoc d6ceff199daed77e31636bbce10dd06d27353c4064b10c076028aea4313071c1Virustotal results 49.18%Heodo
2020-08-12rep RDQ17922.docdoc 9e95cffa8cb342aefdb7f8c1a029adcd48d1304b400d07318215436dd2894341n/aHeodo
2020-08-12doc_4804.docdoc 590e4167894112b18705fca17ee4057b39745b4af8c182ee650b066c9b195f8cVirustotal results 48.57%Heodo
2020-08-12Dat 20200812 LNK860.docdoc 97c96d516ed17d4020cd6eb8bc30414a3c99e2d192a3ac91fe520cca444b1924Virustotal results 50.85%Heodo
2020-08-12file_1303.docdoc 106b70745b6bbcd2a3b1590f596682076f039f584ccde6df0ca12dab353fb701Virustotal results 51.72%Heodo
2020-08-12Doc_20200812_NFO1957.docdoc 6fa74bb52572c68bce1d712b488aea9184f884d85ef22b26492011dc0fbec3a8Virustotal results 52.54%Heodo
2020-08-12inf.docdoc 972372bf61555e5ac2960184e0c02960b7ecafaf9af5649d7ab2c7d0ef73e090Virustotal results 48.33%Heodo
2020-08-12Inf 2020_08_12 C212.docdoc 2d9d999204b6190a6e91bc1da7b0330466f17a916b33c2cab9bd681bc5060e10Virustotal results 48.33%Heodo
2020-08-12FILE_2020_08_12_XO19295.docdoc e49959014262227a3e6ca5bc2937e6afab83a251fc694000d1a3d38e7814d9dcVirustotal results 50.85%Heodo
2020-08-11File 2020_08_12 HLK181.docdoc db2aadedc60eea4a3a77bfbd6c1334cfca2091f721e34c196cde4f47624bcb90Virustotal results 49.15%Heodo
2020-08-11list 550.docdoc d135bfa839f7aced43217658d78cc59d8c51a7120940e59b3c805612e1b276eeVirustotal results 50.85%Heodo
2020-08-11REP-456140.docdoc 0241b1ed7a1656dab5d9fe64b7e59fec547126495769ca53d78220090b494889Virustotal results 49.18%Heodo
2020-08-11REP_2020_08_12_R668.docdoc 116d5a4d0b83b31befcc51de658fe9a2a9554ada261572c59be7e4c01a077efdVirustotal results 50.85%Heodo
2020-08-11REP-2020_08_12-F58518.docdoc 593a1eee983e1c66c480fc52ce564f0ebb60c48d5cadef3f5ed4367d32f1112bVirustotal results 50.00%Heodo
2020-08-11FILE_2020_08_12_73710.docdoc 7100d7486bcccf991906541b709fd020c8cf3aebaed5025f37c19ea15924b034Virustotal results 50.00%Heodo
2020-08-11Arc-2020_08_12-KLC0750.docdoc fd98e040494ec96249be1460752ad33da1d1a230de136873e2c99e72fdbc336fVirustotal results 50.00%Heodo
2020-08-11List 2020_08_11 252.docdoc 6bbbfea0979ddea7c5b31d79ead31b118ac7455812560b7e9bea64b8d1cc3366Virustotal results 47.46%Heodo
2020-08-11list_2020_08_11_95951.docdoc 6c43bac38a962a5ba3d1c691a45946526dc5a550897af82d14982b94077a6d29Virustotal results 48.33%Heodo
2020-08-11LIST 20200811 99183.docdoc 505bf00a3f0c6b5d8ececc410f78de1bdb0fffc8fe7a3324166448fbb3a213f0Virustotal results 46.67%Heodo
2020-08-11list_2020_08_11_F870421.docdoc e589ae383d2dda4770ca6a4cd98ae21ad8e8230567a0c3c2dd5fe33395d90cefVirustotal results 38.33%Heodo
2020-08-11List 20200811 9942083.docdoc 1da87bf7cde42012d6ef60a19e839e43b5cf12ca5942cd31c40cc0ac0e31da49Virustotal results 40.68%Heodo
2020-08-11File-2020_08_11.docdoc 41a14ae8992338c85b383362556c69ed34ef79be6782f91011a521681efea640Virustotal results 40.00%Heodo
2020-08-11DAT_2020_08_11.docdoc 43dfe63eff9212397ee2b7be571cd22d59ee8e88b32968034a655193a6ff6b71Virustotal results 36.67%Heodo
2020-08-11rep 20200811 35938.docdoc eceee3a8316d96e7e391178028416a764a5aa0eab8dcf94f1ec6af4f5ad3d977Virustotal results 36.67%Heodo
2020-08-11rep 123.docdoc 4a0b580e9b59383cef5ee984231048e27d3e01c6bbc31f779fc80f435d286940Virustotal results 37.29%Heodo
2020-08-11REP_20200811.docdoc 3f42c82f2f7de6ef82c2ecb7cd33aead81989314771113ca39e4b739a0d8f4adVirustotal results 35.00%Heodo
2020-08-11List_20200811_MP334292.docdoc bef25908178e50a5ea5c9427e2d767e442719458414443980f1d1454659d4804Virustotal results 32.20%Heodo
2020-08-11ARC 20200811 89722.docdoc 443267f63d955561b6da7e86366dcbd233c605fb7eb3b92e5863f7482738e692Virustotal results 32.20%Heodo
2020-08-11List_20200811_JO4473.docdoc 356e3d6505e5c614fd7fe96e3e20c392e04e5b6e552a28f069dd37250d00508eVirustotal results 30.00%Heodo
2020-08-11FILE 2020_08_11 4047.docdoc 252db122a1b30ce47b633f1131fad749c4e0fd1f6f4c9ade52bd27774d41ed62Virustotal results 30.00%Heodo
2020-08-11doc-350590.docdoc 5c7e33c23d454291dacaf4ae431d451d0659a56b3cf2e2a0ed82002b5ee21bdcVirustotal results 27.87%Heodo
2020-08-11dat-69360.docdoc b6996cae658283af7922ab5b0c3a2e16fb4fafbe641c818ff651053bb7836342Virustotal results 25.00%Heodo
2020-08-11rep_20200811_Q56532.docdoc 23315f65b06123e965e1949c08085c097b3efc919a3807955cd3e1acc596e809Virustotal results 25.00%Heodo
2020-08-11REP 2020_08_11 Q32198.docdoc 29d67f5bde2807da0a4316463578997237825ad1a5e219e2dc5d9c4efa4cf3e1Virustotal results 23.53%Heodo
2020-08-11Rep_8254.docdoc f680090987b21b32b1b79195b479f3bb74ae2e1507572e091736a055335597bdVirustotal results 24.59%Heodo
2020-08-11Inf_99559.docdoc a6913ae8ba43c0a8e7e2b3ad3e2623096c45be801d9274e6162c679cb4fd80e7Virustotal results 24.59%Heodo
2020-08-11Mes_2020_08_11_YFR35550.docdoc a72210e93b8fbc11a25dec4ea2f7d6f637a31a66e36a71a9b1c9ef71aed2b62en/aHeodo
2020-08-11dat-1379.docdoc e110bbd4a3f29fa7c662bf2dc8a9c59cdf48bca88ea30bbb6d4ff9e1a84dabefn/aHeodo
2020-08-11dat_2020_08_11_19273.docdoc d4050a58a41dd6772a72b9db7e54c8edcbf596762283a46a9a04ee37952ce224Virustotal results 23.73%Heodo
2020-08-11INF 153.docdoc 400606c4f2d3e3c0c7847fdf8847eaff200a7b862ab7dbf625524bf3584f4992Virustotal results 23.33%Heodo