URLhaus Database

You are currently viewing the URLhaus database entry for http://gzamora.es/9s52_ou17husakvth9fs_resource/balance/3lapb208851679463esxrl5jsbjuzw62vd/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429818
URL: http://gzamora.es/9s52_ou17husakvth9fs_resource/balance/3lapb208851679463esxrl5jsbjuzw62vd/
URL Status:Offline
Host: gzamora.es
Date added:2020-08-12 01:13:07 UTC
Last online:2020-08-22 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-12 01:14:02 UTC to abuse{at}oneandone[dot]net)
Takedown time:10 days, 13 hours, 38 minutes Bad (down since 2020-08-22 14:52:05 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14Z_PO_08142020EX.docdoc 185cb4e38cbff2f593ac7d05a6ebcd0f09537f27acf014fb1f99107e4fbcd1ecVirustotal results 35.59%Heodo
2020-08-14L_PO_08142020EX.docdoc 6ab2c399c8174e97809e728dc331f229df5e7d30dba04a5b1658ff245c45a657Virustotal results 35.59%Heodo
2020-08-14BM_DKW_080120_HBR_081420.docdoc 1caf3b81363b58c02feb6ae2c0ccb617e3ed49bc8a03b4f3de7243dfe6451fdeVirustotal results 35.00%Heodo
2020-08-14INV_PO_08142020EX.docdoc 28bc4f423b833b0fadccb2de2327be63041318014cf1ae1e1dc1941010322f53Virustotal results 35.59%Heodo
2020-08-14KBX_080120_NRT_081420.docdoc d4fade764b1ae03f546843ff7b67176a1d7fca0c1cad66455d0770c364b5746eVirustotal results 36.67%Heodo
2020-08-13INV_O8C5DXV6.docdoc ae007fe87d30f9b482a9a7525e1ccd6b8a482bd23635156170ae371339d27341Virustotal results 36.07%Heodo
2020-08-13FILE_UE5697988356GL.docdoc d70047b36eb96337b545ff3355409a4722a374e18f8e5955fdbdac3b835f81f1Virustotal results 36.67%Heodo
2020-08-13KBNV_PA8247159483QX.docdoc 0ed266508f694702f6337f375bc70e94eb3c5397bbf5e4fddf1d319a751544dbVirustotal results 38.33%Heodo
2020-08-13EVW_080120_FIG_081420.docdoc 5ded872455abe72f89fe59836761a2e78293c02d5af9a016a031be0af60e9c40Virustotal results 38.33%Heodo
2020-08-13DOC_UJ4787470260VW.docdoc 8b3fa444872b20aa1e609001ac291988100750b43d3cbca610afffbf28ffbff6Virustotal results 36.07%Heodo
2020-08-13DOC_67586708.docdoc 40fa25d14444c5f0471cb5e33a8397ec008ad42615aefa558366173602afc62bVirustotal results 38.33%Heodo
2020-08-13QY8291224091EU.docdoc 9b6d833972d18927b686656be4ce748c8824166731d940152534142ce2647cafn/aHeodo
2020-08-13FILE_PO_08132020EX.docdoc 181c8cee3b6463be02aa4dcfbcdecf6a495a03e0692a379e34467dd0ed5a6fdbn/aHeodo
2020-08-1391036793.docdoc b4a759ab982ab288dd6ab871610df205148b10cf4305cd15be190ceb1370e330Virustotal results 38.33%Heodo
2020-08-13INV_JP7181653421MG.docdoc f153d1cd2401db480ab764a78b8a1928c558755e34f37ecc8ece84b1f14e6964n/aHeodo
2020-08-13FILE_10745681496079.docdoc 92b38ca67d00bffc28647167730cef8ea6123542c4123464f1c565e59186b871n/aHeodo
2020-08-13D_077144490483.docdoc c6597ca46da5d84ed3f3d60e2c7564e0852351c5f9c18bf94aa190618c3d7a0en/aHeodo
2020-08-13VL5328852726OF.docdoc ea4ab11724bb19ff8c0451069a27cfc6b2de7b7ad0254edd07f3036c265a066fVirustotal results 35.00%Heodo
2020-08-13FILE_PO_08132020EX.docdoc 537b82770a281caa9472d66d322d16411e29851ee2a0b50528909951cafc59ccVirustotal results 35.00%Heodo
2020-08-13Z_11474050.docdoc f959a3ec8067a6967f047b19554210234638a6ac9b0bac85e006979f09c33d11Virustotal results 37.29%Heodo
2020-08-13REP_PO_08132020EX.docdoc 81c7769a0b7529af3a8694dd0b1141ae2446ebc681026ae67653753eba1ed6b6Virustotal results 33.33%Heodo
2020-08-13REP_RJW_080120_ISC_081320.docdoc bccd7607de30c4481db2b724437ae78b0d1248b1b7bd563add97f212194b4fd3n/aHeodo
2020-08-13BAL_32819359.docdoc d23240e530c6e128759819077cbfc29eba747c717b96093efff66a139c0bb25cVirustotal results 32.79%Heodo
2020-08-13U_05654762071.docdoc 5dfe99bdd766418f029d534146438a97818581f989d4b2ebf5f92179344000c0Virustotal results 30.00%Heodo
2020-08-1339803617902011908.docdoc 50ae6ef0151e609445f804907715e5381eaf3d7b45d75cad261dccd87069e371Virustotal results 28.81%Heodo
2020-08-136112161071599.docdoc cc1a7efdcb7e41f40365042a5f31c2338804f4bacce2f64fec0ef2fcc3dd2f96Virustotal results 28.81%Heodo
2020-08-13D_PO_08132020EX.docdoc 3dd6562787c08407c9fbd639fc7e1b5a90251fbf8bc40b032135cf84a2243970Virustotal results 29.51%Heodo
2020-08-13BAL_UUF_080120_ZJE_081320.docdoc 93fef58b5b863ec8f45fd49b459db7ce2121c203cacd7c6ed19fbe4f542dc812Virustotal results 30.00%Heodo
2020-08-13FILE_2509554879.docdoc bd7871f1fceddc02727f3be310e4507aa75ac650a9319a03989d0a1c18bc74cdn/aHeodo
2020-08-13AMM_080120_LKW_081320.docdoc 415f12593d783f3724a45d8024d5e50439644e8cb0e91457f529e45114cb9129Virustotal results 30.00%Heodo
2020-08-13LWQ_SY9440026838JP.docdoc ae0c7dfa89cf0301b64ef4f6b364a1e426c79c80a9d0943916c93f3315ebc907Virustotal results 27.87%Heodo
2020-08-13PO_08132020EX.docdoc 02e3709bae515c464ffd58cff635717bb10f8a7333efa3be788a76b84d46ae54Virustotal results 26.67%Heodo
2020-08-13Y_3737220958603885013.docdoc 430d07c2162af45022115ce4b557ab182afc95143b698568d50c41832c6b281bVirustotal results 29.51%Heodo
2020-08-13INV_PO_08132020EX.docdoc b2bfc91f206f6382a07f81da9b0e9664871a8f2379548f4c3ed5fb0cc3da2bb5Virustotal results 27.12%Heodo
2020-08-13FILE_518447640235219757895.docdoc 0c4015de45653ee2f8fc6e338461a2377e14139b1ff879df5a2fe1d3c200a15eVirustotal results 28.33%Heodo
2020-08-138425739374.docdoc d366a539f2295b53ca4674d4807b866b78979fda3a5d80e006ce2aaf2e1c24c7Virustotal results 30.00%Heodo
2020-08-13INV_PO_08132020EX.docdoc f1194d491ba7c0f8f39b1c0b9d47c4324742b324adc2e4a3feba13f77e9b40feVirustotal results 27.87%Heodo
2020-08-13PO_08132020EX.docdoc 99cfef089f3adc2b3bc70f4fc99eae27e6742ddd207e66c6ee4ad1aef5210532Virustotal results 26.67%Heodo
2020-08-13DOC_RI3332277509PH.docdoc e1bf8d2efe529d4cbe16fa5c6f747b604e88d6ffbeec9742a7617aa8617a9133Virustotal results 26.67%Heodo
2020-08-13ME_PO_08132020EX.docdoc 4abecf9c71a16e78392600309278c84a75e35f2d1fa5bb8ef6c347820092d753Virustotal results 27.87%Heodo
2020-08-13T_760425457220236226820756.docdoc 9806f54f8d2769646e6a9caee3f1c15a1b47f781be6eef64c390d6e9ee867bd4Virustotal results 26.67%Heodo
2020-08-13GE3752766562RX.docdoc a8bba76a96bc1cc1852b0b70a3e75776d9dda9cdd9a5978c25f38dd031cd1d4bVirustotal results 27.87%Heodo
2020-08-13DOC_55338674.docdoc ba510b5a0f97430a09efbd12acbb4c1be869e71e678adf5fa0b5498fb477068eVirustotal results 28.33%Heodo
2020-08-13FILE_VWRVL6DB.docdoc 286553ae57a160d6c96aead277a25d92227a3f0030fb98198e7be863f897e1deVirustotal results 52.46%Heodo
2020-08-13UDC_080120_KWQ_081320.docdoc d3cbf8eb26742271a0281233827b52ab52334bef5335d0f8a27c9db613de55c7Virustotal results 53.33%Heodo
2020-08-13FILE_RT7708901744AS.docdoc 0938a3eb8d86fa634cbaa1f643bd2c6cafcdacba202e4683cf7245705bd11fb3Virustotal results 52.46%Heodo
2020-08-13BZKLSGY.docdoc c2bb5e128810c06abd15ad3ef0bc95622c20da154ca500892972305c94feabedVirustotal results 52.54%Heodo
2020-08-13PO_08132020EX.docdoc 294dc4d0897b43e65d8e7c4ab761281fae2d7ff62a16dd47e9b7731019ed0c21Virustotal results 53.33%Heodo
2020-08-13T_6102428758133.docdoc 2ec1025c3a44b35de74853b22998ea439d6eb5f0d92d9065256692f0deadcbd9Virustotal results 51.67%Heodo
2020-08-13N_HF3493095349SE.docdoc 5ec2a412f6729dbbd84453b84c85ac56f93e865a1900eb514efedefedc56467fVirustotal results 50.82%Heodo
2020-08-12R_PO_08132020EX.docdoc a9af06ae735677ec282b4a66f7bc85a343dc7c71491658673fed6150e05ef3c5Virustotal results 50.85%Heodo
2020-08-12REP_SX9300886839EW.docdoc d0ecee1cad0e97af4b127dc23861ffbee329ef4a465840447b48e554801e6081Virustotal results 49.18%Heodo
2020-08-12BAL_CRZ_080120_HXR_081320.docdoc 77b30bd340e5190b08a7d94df99aa81a4aed0b89711a543fa9f87bb83fe3a72fVirustotal results 50.00%Heodo
2020-08-12DOC_CT5743401302QX.docdoc 29c5831f071871eed50e5f9e8c02779dedc26d8d1b5485a57cef2f7dae79c9f0Virustotal results 50.00%Heodo
2020-08-12PQEI_UHC_080120_TUI_081220.docdoc 5ec93d8ade8ce137e0a4718134228f587451d59aeaa2e27d24713ccc4866e8edn/aHeodo
2020-08-12DOC_3179615451770627850376616.docdoc 44d9b68f5aefc2eef02bbb78ffdd24d10ff0097705b179cd623a8833dc64ff89n/aHeodo
2020-08-12INV_PO_08122020EX.docdoc 81b56737e0ebf1766ee14ae1a7c022da0208f91ddbae7d06bee3cefbbf3b01a1Virustotal results 48.33%Heodo
2020-08-12KKVC_RMZ_080120_ESU_081220.docdoc 86a7080b18d0d16fd7b1505799c006382ff034fb5dbb65b0e933ab56cee84215n/aHeodo
2020-08-1291954324.docdoc 42784e0de01af05a046c1361a8e58eeb1d7eb88b72badd646658090e49a54939Virustotal results 49.15%Heodo
2020-08-12REP_1930139144871333.docdoc 01817dd6570dc258829c88ceab491052f8376cc5071286d89c5ef07b621f96ddn/aHeodo
2020-08-12DOC_VJ3304569731EH.docdoc 0694defa98963c712991c89bd42b7b679eb379486fe775cd134d490f4aac7978n/aHeodo
2020-08-121983603969490.docdoc dd4525e6914fa0fd2f91bde41f2df30ef8857b9f08c19e0a106ec78098ab63c1n/aHeodo
2020-08-12FILE_PO3129332927TL.docdoc a271c8c4e792f23b038df5aa420090f4cad1de687dea9c0926e46940966b462dn/aHeodo
2020-08-12REP_XA5751674921AV.docdoc c99e3c74dfec6465026a494216c1ac797697cb816f37baa98d571a089dacb73aVirustotal results 32.20%Heodo
2020-08-12REP_POIDPV4L5WORKEQA.docdoc 4020a8982e70b51b150cd40a837ea5dfceb35f0a6c9f9858b3fae5e00404ae62Virustotal results 30.51%Heodo
2020-08-12BAL_YUW_080120_PTU_081220.docdoc 5039852e09153172ff5ef82c3e169e6a8c73a0b9f50c3ccdfac9773c3918bc09Virustotal results 28.81%Heodo
2020-08-12INV_HM2DF5GE9VS2O72A.docdoc 555eec27e492447bbe5bb1313613ba7edda123de03e384227bf9440ec1965da9Virustotal results 28.33%Heodo
2020-08-12INV_YM8627601652ON.docdoc 25f0b73743327325b14d463d442803004c258fc86d34e90721738869de61490cn/aHeodo
2020-08-12BAL_381012483940494899684741.docdoc ae3f98c31cbf01b3809feeb57990ae8270686b4e716f2c8971f8408ca1676532Virustotal results 28.33%Heodo
2020-08-12IG7899876041CX.docdoc e9b11c739e5d0a771cb4efdc41e3d084460fa975e42a309294ab185eb2836728n/aHeodo
2020-08-12BAL_PO_08122020EX.docdoc dbbcb02ce1775cef0bf8d1ccdcbf4789d5936dc08b63afaa7ca81e20aa03a597n/aHeodo
2020-08-121P20VRVDD45SIJ.docdoc 9ec7ef1bc0701307cd1c1ddc9a252a989e724abc0705fec55d8bceefc7ffd087n/aHeodo
2020-08-12FILE_AM6401309722VE.docdoc 14967b4d7ed265d47e03452c19a7c3d048828bfe37abacf2f56782e7eeeeab23n/aHeodo
2020-08-12CZNR_CVO_080120_PIF_081220.docdoc 408bd6525ea4e38ffe39a42a4c24c314099dff289a0cf7ff621c7f171c63792aVirustotal results 28.81%Heodo
2020-08-12DH5230160342MK.docdoc 7d5046f3a9a3765884a6c25a9180fc3521778f6307e706c551bf48fec651192dVirustotal results 28.81%Heodo
2020-08-12FL_MIS_080120_UYG_081220.docdoc a56d5701d53cd34f450eb0a957c6f5c0716a835bc9c9070e315e22f71889b72bn/aHeodo
2020-08-12REP_FSM_080120_WKK_081220.docdoc 214f91b9b3ab2ea28b14536241901516f9141df4e12fd3b2ce52088fef0a3734Virustotal results 28.81%Heodo
2020-08-12REP_13446656.docdoc fe14ae5d76ac1ccafc67f474efe315000dadae344444a44c9200e04e94ebbdadVirustotal results 28.81%Heodo
2020-08-12BAL_RR5984710816XN.docdoc 025046a10693eb1c9dca8e64fa2dc55f1ba16ff9c6650493205e2c3af827e1dcVirustotal results 52.46%Heodo
2020-08-12BAL_UK6643526500NP.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 54.24%Heodo
2020-08-12S_89851404531551710.docdoc c978e204a4343d19a9b1df57379618a391455fe0f0fd17e49fcb670670c4241cn/aHeodo
2020-08-12CV_YAN_080120_PLP_081220.docdoc bf23bdfcb1ba099bac9552136a669b228f4fffaa65dd00d243331be54d5ff517n/aHeodo
2020-08-12M_QR5835530610SY.docdoc 1d2096f4adcba717670858b98912615f7bc86bd95ef6b3117901aa4ae6383d4dVirustotal results 53.33%Heodo
2020-08-12INV_PO_08122020EX.docdoc f9f228e552c3971983d4b5909776c052df083b9b41f65f764ceba0dc9d6219e7Virustotal results 52.54%Heodo
2020-08-129WY1W4JX.docdoc e95c19b3173d0c69d60efb950859b2ffd3020235efd6c47ffebddf950a0edf52n/aHeodo
2020-08-12ADITYNKRZ0CR9.docdoc 29a8f854081e5f20b6709851863472cd33a1863fbed4867153edf6fcc5e86dc8n/aHeodo
2020-08-12P327BUF5OWA.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12PIVCD9YL.docdoc 4bf9697c195958d66c73bb025fa342729e0204178694ba1e36bb6760c7d02ca0n/aHeodo
2020-08-12FBS_080120_JTQ_081220.docdoc 80d13e5784bd9233b52f35165e2760d170f1603ab6ba1d2a634c62c34068e412n/aHeodo