URLhaus Database

You are currently viewing the URLhaus database entry for https://rc-models.gr/wordpress/8B0OAECTQ5R6U/7wqeh7lye8m/6mqx68477869776667ps8n0af9zxbbx/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:431153
URL: https://rc-models.gr/wordpress/8B0OAECTQ5R6U/7wqeh7lye8m/6mqx68477869776667ps8n0af9zxbbx/
URL Status:Offline
Host: rc-models.gr
Date added:2020-08-12 17:18:16 UTC
Last online:2020-08-13 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-12 17:20:05 UTC to abuse{at}hetzner[dot]de)
Takedown time:15 hours, 51 minutes Good (down since 2020-08-13 09:11:59 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13BKHDZKUPPP.docdoc a2e1cbd8bcebea064d5eec29c1762d587ba24bb1074fa4bef29b9511f228f62cVirustotal results 26.67%Heodo
2020-08-13R_IE9679724001TC.docdoc ba510b5a0f97430a09efbd12acbb4c1be869e71e678adf5fa0b5498fb477068eVirustotal results 28.33%Heodo
2020-08-131KYET8L.docdoc 6e1291bf2e422791c6b4abb7f2e1b3d1a79264db6091c37b93c92e4ef6a2b903Virustotal results 53.33%Heodo
2020-08-13IUU_KDN_080120_QES_081320.docdoc 5ec2a412f6729dbbd84453b84c85ac56f93e865a1900eb514efedefedc56467fVirustotal results 50.82%Heodo
2020-08-12FILE_05GBJ5W.docdoc a9af06ae735677ec282b4a66f7bc85a343dc7c71491658673fed6150e05ef3c5Virustotal results 50.85%Heodo
2020-08-12CSB_080120_GCF_081320.docdoc 3f2c7f4bb20e2148cac0026f5bff3510157c873e143e98062b3485923df31b0cVirustotal results 50.00%Heodo
2020-08-12BAL_2TQIILPO2N.docdoc c872e36dabcc02d5ca6d5a1c7ff09a8673509c3a45dc42978988f19f053fffadn/aHeodo
2020-08-12REP_ESM_080120_DEQ_081320.docdoc 29c5831f071871eed50e5f9e8c02779dedc26d8d1b5485a57cef2f7dae79c9f0Virustotal results 50.00%Heodo
2020-08-12L_BFT_080120_WTE_081220.docdoc 42784e0de01af05a046c1361a8e58eeb1d7eb88b72badd646658090e49a54939n/aHeodo
2020-08-12X_VHW_080120_YIL_081220.docdoc f19b16a6b70c8cb1df5f029983b5176588645914bead2d0b21292174bf7d0839Virustotal results 45.00%Heodo
2020-08-12NQ9922092231ZT.docdoc 000aead7b794677467a325c4ce004ee4411f2217ed69454545202dc9577191f9Virustotal results 43.33%Heodo
2020-08-12PO_08122020EX.docdoc b7e654a560a88bf16d0484d7edaddf1aa1bd09fe6329b834be3b7a6d02da873bVirustotal results 40.68%Heodo