URLhaus Database

You are currently viewing the URLhaus database entry for http://ezerangyal.hu/cgi-bin/pRjHEutQ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432299
URL: http://ezerangyal.hu/cgi-bin/pRjHEutQ/
URL Status:Offline
Host: ezerangyal.hu
Date added:2020-08-13 18:50:10 UTC
Last online:2020-08-14 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-13 18:52:04 UTC to abuse{at}telekom[dot]hu)
Takedown time:19 hours, 27 minutes Good (down since 2020-08-14 14:19:09 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14INVOICE-F2159-599259.docdoc a2cea9e0832fb379153f926fbb2d729495d30705dade851347f35fe2060519edVirustotal results 27.27%Heodo
2020-08-14INVOICEXXU7864177.docdoc 4935ab1182453885ea821cc714b1679ae7eeb54bb744fe13f52ad6e954a7f785Virustotal results 25.00%Heodo
2020-08-14INVOICE-FT476-556647401.docdoc 9f48ee817d634981b3bf2419fae553b17bbd85ae489e4d7efa83364c7b7b286bVirustotal results 25.42%Heodo
2020-08-14invoice-X93-679141.docdoc 4b1f4de38d23df072402ff46c59faadafed1bcd11b7158106edc189d8433845cVirustotal results 26.67%Heodo
2020-08-14Invoice-HDO84-263290.docdoc f29b2352c27bd3d9fca98d1f168efbbed851c986473a4281bdebadee731653f7n/aHeodo
2020-08-14InvoiceA1180136220.docdoc 16551fc9c14cdf382cc5649b29fe015c8fade29c8165b9216226636d69bb2e22Virustotal results 25.00%Heodo
2020-08-14Inv-189-540537.docdoc 3d1d9383eb8fa943d9a30683c659bf8dbd0728daae34c9e0227d1585f26cb327Virustotal results 25.00%Heodo
2020-08-14invoice_YTL0_60217227.docdoc b491fec759260d8a1c9a3ae8ca946359d8abd506b683a71ee5a45fb91e170236Virustotal results 23.73%Heodo
2020-08-14Inv_DNKU3779_54311606.docdoc 3a05ceccd595d5635e66f16ae47e0a770f4e6f2569c7cd141676678cb7c61de5Virustotal results 25.00%Heodo
2020-08-14Invoice_N231_9889049.docdoc 07b144dd0033cf31233b85369f90ddc087ecdf0c5ae378612e504252db7c3f32Virustotal results 23.33%Heodo
2020-08-14INVOICE-PRSW43-1381500.docdoc f841c145c39f74c12260a67c686e4dde761614e633f204a3e68f47750f2e6d1fVirustotal results 24.59%Heodo
2020-08-14invoice-7-05229369.docdoc 99db7baf30cee72146c4791d36d158ca3ed62a58dd3bd57b7bfa60d0f13b08d9Virustotal results 24.59%Heodo
2020-08-14Invoice-BRAG9191-82793760.docdoc 27db24afe51c643a809e559c190b96146022ef6d3394b8e990c6eee4bb9846acVirustotal results 40.68%Heodo
2020-08-14INVOICE-MDN82-120564049.docdoc fb17807621969c33d345882ad5ae95cd5294c32509e13a6fe8ce1d317a5c3f4dVirustotal results 38.60% Heodo
2020-08-14invoice-XMNH016-244886774.docdoc 3132acbb0aa02f175f2e8bf589a53e732564cf73f1f003cb64c842ba52d3c889Virustotal results 41.67% Heodo
2020-08-14INVOICEALTN958122575.docdoc 845f584a4b58e05f5eabb64041142baac8b97a971f88d4cb2544c4ac3af97a3aVirustotal results 40.00%Heodo
2020-08-14Inv 6577 4227620.docdoc 382eeb05e0b37509916697e88d5f58e00cfd17db07cf9b27240fd84aa4bcd26eVirustotal results 40.00%Heodo
2020-08-14Inv-RTCF9937-771194332.docdoc 4156fe5a204dbbd2086b1c71f40ced2d03b723dfbbf218927b71ad2b2fb369c6Virustotal results 38.98%Heodo
2020-08-14Inv BMJ54 17345594.docdoc 8b725e5a090dcb30815c5df978e72af9a04372b9fda6729678004e9bdd617ce6Virustotal results 38.33%Heodo
2020-08-14invoice-FYMX2297-41645088.docdoc 2da551517d3d24f3485bb7c1edd4dc79031582d5cc3f4066169ecdbe26b4df18Virustotal results 36.67%Heodo
2020-08-14Inv RLQB4798 4043371.docdoc ad1c63f07f872f3b37453d29dce7654dc1b79e4f3e875dd8090977c30093b6f6Virustotal results 37.93%Heodo
2020-08-14invoice-PPOZ76-76261044.docdoc b912946f86e61acf37130b179be53f6dfa2fdd31fa0e158dd2fd19f557aaf059Virustotal results 36.67%Heodo
2020-08-14invoice-CNO975-098916.docdoc 60f8488fdb7df1654b540cffa5a6b15006c90ab03e4cfbc618d7594c813c252dn/aHeodo
2020-08-14INVOICE CNN20 5230676.docdoc 2879a9d705300779c0269f3a6847fb725a3564c7ae27f44226fe17f422474ca3Virustotal results 36.67%Heodo
2020-08-14Inv-GQFZ3189-960121595.docdoc 532d6be9513e3dea9cfb7040d4e2b0878429f90b84e8c3229ba775ff99dcfbbcVirustotal results 37.29%Heodo
2020-08-13INVOICE_YRBQ5_96521197.docdoc 3c2103ec1e6af0ce039524d58d70a4ced5e2845549def894d03f836978afa09dVirustotal results 38.98%Heodo
2020-08-13InvRS872451570.docdoc 1903fc2590537417ead798a7e0026a3f89c338018d0ff2942e8f984a197b930cVirustotal results 35.00%Heodo
2020-08-13Invoice-71-28614212.docdoc 2700c5a0f48e93d064b77b0179fc337d59ed7d100dcdfa5f29c2f1d035e03204Virustotal results 36.07%Heodo
2020-08-13Invoice0519125068204.docdoc e1ac6201887f008a8beef8eca74076739b93dacf2d0d366f3329ca55dbc3c827Virustotal results 36.07%Heodo
2020-08-13Inv25308234.docdoc 653065e50db8318e4c980f45418849681df513e216b29c07cc7036442b0f9cfeVirustotal results 36.07%Heodo
2020-08-13Invoice V959 428745.docdoc cf0b0c4bf2dec3979bd7cc8606c1c911299845f9f97067fd4ae7af1985e6f6b9Virustotal results 36.07%Heodo
2020-08-13InvoiceSTI6819161816.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo