URLhaus Database

You are currently viewing the URLhaus database entry for http://ustaburda.net/wp-admin/axXkirtT/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432616
URL: http://ustaburda.net/wp-admin/axXkirtT/
URL Status:Offline
Host: ustaburda.net
Date added:2020-08-13 22:50:15 UTC
Last online:2020-09-06 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-13 22:52:02 UTC to abuse{at}megatrhost[dot]com)
Takedown time:23 days, 21 hours, 48 minutes Bad (down since 2020-09-06 20:40:49 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22invoice-62-6175801.docdoc 052f2f6308f52052a7e69b0708d0d876aaf69ed5e03d3e715048aa186a4c7d53Virustotal results 59.32%Heodo
2020-08-14INVOICE_24_9721377.docdoc c129af5aef7d314993b58cc7c4a1df79f5550e97f3eb6b9f1d558defa38df88fVirustotal results 30.00%Heodo
2020-08-14Invoice QEDN10 023636260.docdoc 0b9b57254dd7909e3811cb4909af8975a9206c13f6fb6f2ae5c8f9a2687ff202Virustotal results 30.00%Heodo
2020-08-14InvoiceELVT256048681.docdoc 3d56178779af4f3321a7d6adabc672edb3e9036292191e34bb37d215e19a9f4bVirustotal results 30.00%Heodo
2020-08-14invoiceVJWT610821807691.docdoc 022cf3a8bcb181e5218ff3a6b7e759e94462df01ff93902560371dfa2ffc0950Virustotal results 28.81%Heodo
2020-08-14invoice G2028 696603301.docdoc 47e583738beea94617d095118319318193630be4e2ddf5ae8ce66ebb131df7ffVirustotal results 27.87%Heodo
2020-08-14Inv-8622-34580449.docdoc 9391f6273b2194e171e3c816e6a0549045505185552855f8a39b0cbb3b76575bVirustotal results 26.23%Heodo
2020-08-14invoiceTV05547861.docdoc aa431fd3b4d6535fe771e56eb36fab47a8aed5572200c9bc3bff969fda210235Virustotal results 26.23%Heodo
2020-08-14Invoice-DH394-3018476.docdoc 9f48ee817d634981b3bf2419fae553b17bbd85ae489e4d7efa83364c7b7b286bVirustotal results 25.42%Heodo
2020-08-14Inv-GX005-035929970.docdoc 7dc64cdcabade0fe1b2cccc83c3a256efb0de22bbc1e8b17a072104e393b3b26Virustotal results 25.00%Heodo
2020-08-14Invoice_KQHS8250_672072.docdoc 82a5a61ce9f0067569a614f6db871dd79f0722e3a2f7c899175d63b2237d3559Virustotal results 25.00%Heodo
2020-08-14Inv-YP278-2202940.docdoc 293c5df488141cb4aaa3c1d4e450c5f3fce9c1b3ff26d587b42c17d6a05758b2Virustotal results 26.23%Heodo
2020-08-14INVOICE MDRG9604 92583554.docdoc b580ef15f157d6c19b61810ddb5f085007685d55693d05cb54782cb52bac7e2bVirustotal results 24.14%Heodo
2020-08-14invoiceJRQ603759226.docdoc b491fec759260d8a1c9a3ae8ca946359d8abd506b683a71ee5a45fb91e170236Virustotal results 23.73%Heodo
2020-08-14invoice JWRI9 4941746.docdoc 3a05ceccd595d5635e66f16ae47e0a770f4e6f2569c7cd141676678cb7c61de5Virustotal results 25.00%Heodo
2020-08-14invoiceCJR37258786688.docdoc c8491294ace5a6682e374787541ec78d155b4e288f143a086cb3320328782317Virustotal results 24.59%Heodo
2020-08-14Invoice_RJ516_5519045.docdoc 495ebea1fd0ea1d5d47a3696aa58045c06311416da9f715ead1bc2809b8732b9Virustotal results 24.59%Heodo
2020-08-14INVOICE-HQM2-37407866.docdoc b873855abe6ecb687a4df753ed5f4882475ca551c53ffc20ef18b3c896115a91Virustotal results 23.73%Heodo
2020-08-14Inv-LOVZ33-856357791.docdoc 538aec1c87a88d78a75a417c253579be5fa18cefce592109122505cf70f2eea9Virustotal results 40.68%Heodo
2020-08-14invoiceNMOI270611881471.docdoc 99dac5a117859eb23edb38d2da4b792d02b4a4d1fab2249bc171faf6bf1dfda9Virustotal results 40.00% Heodo
2020-08-14Invoice-Q8-173475157.docdoc 3132acbb0aa02f175f2e8bf589a53e732564cf73f1f003cb64c842ba52d3c889Virustotal results 41.67% Heodo
2020-08-14Invoice-MYL20-75643907.docdoc 845f584a4b58e05f5eabb64041142baac8b97a971f88d4cb2544c4ac3af97a3aVirustotal results 40.00%Heodo
2020-08-14Invoice-PS66-362322.docdoc dbc3f242e959a4c3398cc0676dacb940b4253a18f4a2be2d3a1aebb7c1f62d74Virustotal results 39.34%Heodo
2020-08-14Invoice-HTFR8-584459.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14invoice6534240209.docdoc a5cebe26ebd797b743940f94cd3b74255ae3864a8042734c1b430e3da0198e2bVirustotal results 40.00%Heodo
2020-08-14INVOICE-9-095810.docdoc f740ad05fe75e146443ce0776602fc5828a534f28e1e2f34a1d785083de85bd1Virustotal results 38.60%Heodo
2020-08-14invoice-OSUN5-21831624.docdoc ebfd94ac1cb7510d9b3fe2de38c88bb88d64956d0c6eb93aceebee8ea83ac763Virustotal results 37.93%Heodo
2020-08-14invoice_YOC20_704049442.docdoc 0b134d91d537beab9f4e700b126eb1b43b69c80126818592cef4697fce08263bVirustotal results 37.70%Heodo
2020-08-14Invoice_YEB871_6082077.docdoc 2879a9d705300779c0269f3a6847fb725a3564c7ae27f44226fe17f422474ca3Virustotal results 36.67%Heodo
2020-08-14invoice_DTNC25_193604.docdoc e8516c23d1aec8faadd52ae68fd240339940d05f4a1db7c56afdbec1eb5de0f6Virustotal results 36.67%Heodo
2020-08-13invoice_27_3512270.docdoc 3c2103ec1e6af0ce039524d58d70a4ced5e2845549def894d03f836978afa09dVirustotal results 38.98%Heodo
2020-08-13Inv-OU9-82043444.docdoc 3136cf638c86c78695d200b294c06841483dd93c0d249a56bb212c1ed55c52eaVirustotal results 35.00% Heodo