URLhaus Database

You are currently viewing the URLhaus database entry for http://skullmedia.de/befroe.de/rrFL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:430581
URL: http://skullmedia.de/befroe.de/rrFL/
URL Status:Offline
Host: skullmedia.de
Date added:2020-08-12 15:55:16 UTC
Last online:2020-10-14 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-12 15:56:11 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:2 months, 3 days, 5 hours, 16 minutes Bad (down since 2020-10-14 21:12:32 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13Invoice-KIC80-35083406.docdoc 8d7640adaf6a576ce6484be49d372141feaf9dd38837bf8da72271ce7ae7e127Virustotal results 28.33%Heodo
2020-08-13Invoice-M32-60419038.docdoc 52c981dcee0a9c0bc80ec192b453e8af6b01ced6cb3187645687ad0fd1b13221Virustotal results 27.87%Heodo
2020-08-13INVOICE-NP2-279268.docdoc e9bc4332a3fd2de13d8f4d58aaf749131a93e652fd663f83005b1437936a715eVirustotal results 26.67%Heodo
2020-08-13Inv21322481639.docdoc eeb469414b6509fdd0d204f306b29d55021e2de94608991794b5f59c2add1e07Virustotal results 26.67%Heodo
2020-08-13Invoice J04 6853248.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13INVOICE CPN763 998872.docdoc 267245def36dc107de0213044013ec67b837c68ed109267f13728319263b5664Virustotal results 25.00%Heodo
2020-08-13Inv-RCTW457-56555276.docdoc 335ffaa3c9914aabf84fec4cf13a891465b4c0c3700777b1fa2877df708b4c7eVirustotal results 25.00%Heodo
2020-08-13invoice-MYS31-675094322.docdoc 906423a8a219d85fee1c58feac18a6bc8689504a672ec96d5df2e61079f60672Virustotal results 25.42%Heodo
2020-08-13INVOICE_3976_364160386.docdoc 53aa63c2bd135d388b8e04488a7c9ae94867bdb6d13388bd623b3c988500e59aVirustotal results 25.00%Heodo
2020-08-13Invoice-DA129-981904408.docdoc 0b9983bedd5702a9bf94c237a85fdcf11a637f0212b8ab32dc746da8a2a62148Virustotal results 25.00%Heodo
2020-08-13Invoice-DA129-981904408.docdoc 0b9983bedd5702a9bf94c237a85fdcf11a637f0212b8ab32dc746da8a2a62148Virustotal results 25.00%Heodo
2020-08-13invoice_NG9_6915318.docdoc f844331d28cf2533981a9e753d6df2e9677efadaeea9b2c014266991ae78280fVirustotal results 26.23%Heodo
2020-08-13Invoice-4-0307377.docdoc ef4bd4002ad40e14d4be0e1b65b772318b986c643bf1704805b738350cdf8747Virustotal results 25.00%Heodo
2020-08-13Inv-HTAT0-576161513.docdoc 0cab070d00fe082504fdc13ea0398dee0f4dd71f4d3b296c8de086abde57a87dVirustotal results 25.00%Heodo
2020-08-13Inv-AI6555-282416.docdoc 8313a416feea74f1e4555d53dbb6e2c4e7a831c854f7fa38ea8b3815b3bd124aVirustotal results 24.56%Heodo
2020-08-13INVOICE_M1763_611993600.docdoc 701f6714acc1e2c42435c5ca1c3c5919ec11dcaaebe5791bbea60eab5c8327c5Virustotal results 54.24%Heodo
2020-08-13INVOICE YFYJ2603 4737349.docdoc 04f398e872a21555e613068343a42ae713930a96f16f079aba07a4434b800180Virustotal results 54.24%Heodo
2020-08-13Invoice-HEAG33-12162352.docdoc cd0aaf460944efd580dcc39bc1dd0460f88f2c3c17e303694ffa1eae5020eab2Virustotal results 53.33%Heodo
2020-08-13InvoiceO05537855378.docdoc 17b6049e45eaf5263f576de1799a8b8ccd0164f7e1241cf72738d56e8793458aVirustotal results 53.33%Heodo
2020-08-13invoice-UMOH16-77294833.docdoc 015990746f332cc1ad898d46ef3de53f4ffc95d723ccd19bea5fc12b95f86b47Virustotal results 54.24%Heodo
2020-08-13Inv_IMCO569_224900.docdoc 015990746f332cc1ad898d46ef3de53f4ffc95d723ccd19bea5fc12b95f86b47Virustotal results 54.24%Heodo
2020-08-13Invoice-1275-53178085.docdoc 97e52709f1f9169fb2a3d0cfc7852f811d067999ed1bdc700c6b66bc7dc23765Virustotal results 52.54%Heodo
2020-08-13Inv-CG5021-85364477.docdoc e26bbe184e43c8251aee307aa6d392971f7facdda4ce50f9733a966dc7905ff2n/aHeodo
2020-08-12INVOICE C6119 67653003.docdoc f0c882d52064e9965202bcad61de9663457c9564ab432b3a009de74238d21346n/aHeodo
2020-08-12INVOICEMRXQ3896581.docdoc 8feb19a7e4447548ee33b791936bba0f89689bce34033420d3b05995e8126a6eVirustotal results 48.33%Heodo
2020-08-12invoiceYLBG4228428239.docdoc d60d130c4369c7d41edf041927897b2ceb6b845a66b97bfeb0cf7d60575fe399Virustotal results 47.46%Heodo
2020-08-12Inv-HG467-9399942.docdoc 86f28a02ba775b0ca41c9b11ecbe4455335eeb3a3e6e0c3860098aace208a315Virustotal results 50.00%Heodo
2020-08-12invoice-7897-5805980.docdoc 24b41c6091602c0f9df9cc64905ce9dac977a04f700ae0607de467c101a093dcVirustotal results 49.15%Heodo
2020-08-12invoice-THN1-7917141.docdoc 0c7d085dc88b57e56819a0a9319e1aa089ad9851a0ea21137aab6309395ed039Virustotal results 49.15%Heodo
2020-08-12INVOICE003767553652.docdoc ff563f0125c05e1a24c111ca5306fc7394a4a705167d272704bb0c2067a96b4fn/aHeodo
2020-08-12Invoice MY2356 64413250.docdoc d1ce5170f24fdb09f187ca0e3e0f6e689fa2c73fc6953ff18ecc123bb8eed49cVirustotal results 50.00%Heodo
2020-08-12Inv-KHT352-7034475.docdoc 95fe4603a20fce976fa2b80fe19e89a3a8f0df85029a1cfbc4a05990aaa78a3en/aHeodo
2020-08-12invoice-YB02-613936034.docdoc 970ea46ba9ce5ac7bd86202e5806c5cff029066731de8902f4605e22d44e1a6aVirustotal results 45.00%Heodo
2020-08-12Inv-NY83-585109.docdoc 1bf7159812124e19faf31cbed4b558aa9fa78b5f1a0562cad0dac81865d03094Virustotal results 43.10%Heodo
2020-08-12Inv 9703 9876834.docdoc 7ddd9bdcbe8ca80a8ffa5bdbf8ad1e388522433cf9925d2686ce9e3295c9bba5Virustotal results 41.67%Heodo
2020-08-12INVOICE_GS2_41113817.docdoc f30c10c17760141100196b57021e2bed24a5576335a5b58e4c78b65eeb80c4b0Virustotal results 36.67%Heodo
2020-08-12Inv-YHR1473-079955.docdoc d87649ae95488494c207932376d0c23a9c4b33b1cc2482b7aacfdddfaf9565b5Virustotal results 31.67%Heodo