URLhaus Database

You are currently viewing the URLhaus database entry for http://dec-u-out.com/AyUYBivh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432760
URL: http://dec-u-out.com/AyUYBivh/
URL Status:Offline
Host: dec-u-out.com
Date added:2020-08-14 02:15:29 UTC
Last online:2020-08-14 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002867257 created on 2020-08-14 02:16:06 UTC)
Takedown time:14 hours, 24 minutes Good (down since 2020-08-14 16:40:11 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14invoice B12 655520.docdoc 3d56178779af4f3321a7d6adabc672edb3e9036292191e34bb37d215e19a9f4bVirustotal results 30.00%Heodo
2020-08-14Invoice KMM056 989195772.docdoc 21511c67cd43296f448679a1ab0dcb2df5dc543f64170dcb21ebb6858afd53a9Virustotal results 28.33%Heodo
2020-08-14Inv-5-971448.docdoc 936f0b1c957e1480cdba3c5cefac63730008c19b570d825bd0d6c6de85ca38b2Virustotal results 27.87%Heodo
2020-08-14INVOICE-YKKG6458-24460257.docdoc 9d6676d7926e7555e55f55924ee0a8082d62b5b813ac98704090a5a23e7a1775Virustotal results 25.42%Heodo
2020-08-14Invoice UQFC76 134354.docdoc 104251c4ce5ddfa9732871b3478c81882c4e2544e2f2b615ee7e05a6c4c35b0cVirustotal results 26.67%Heodo
2020-08-14invoice_H927_7475043.docdoc 6969c9659df92d53fbfae853c8c208cb0e09fc6acf7dce23773cb66cd060294dVirustotal results 25.42%Heodo
2020-08-14Invoice MACQ4 73008138.docdoc 7dc64cdcabade0fe1b2cccc83c3a256efb0de22bbc1e8b17a072104e393b3b26Virustotal results 25.00%Heodo
2020-08-14Inv-DD98-22753721.docdoc a4bd9a81a37fee5b41e731813e4cea46796d5684c624d7f09e25be438d71b6dbn/aHeodo
2020-08-14INVOICE47276301.docdoc 293c5df488141cb4aaa3c1d4e450c5f3fce9c1b3ff26d587b42c17d6a05758b2Virustotal results 26.23%Heodo
2020-08-14InvJU0739298.docdoc a1a4e0ad515c876cb30c66a20c277c87c86da8cb938ea0a978cdbada6ed475acVirustotal results 23.33%Heodo
2020-08-14Inv 73 97406979.docdoc 7358c63d00a9a687434f3915c70e05e268b5d414d08c19e063de5f08e84e92e3Virustotal results 23.33%Heodo
2020-08-14INVOICEZP37977782197.docdoc 30030c6895075670e825e0525914a4cd47352951eb3a2a04a2fab5e705f848cfVirustotal results 25.00%Heodo
2020-08-14Inv-VHRD441-68013504.docdoc c8491294ace5a6682e374787541ec78d155b4e288f143a086cb3320328782317Virustotal results 24.59%Heodo
2020-08-14Inv-Z20-299339907.docdoc 495ebea1fd0ea1d5d47a3696aa58045c06311416da9f715ead1bc2809b8732b9Virustotal results 24.59%Heodo
2020-08-14invoice_LCSL5_437462.docdoc b873855abe6ecb687a4df753ed5f4882475ca551c53ffc20ef18b3c896115a91Virustotal results 23.73%Heodo
2020-08-14INVOICEZ46464414136.docdoc 27db24afe51c643a809e559c190b96146022ef6d3394b8e990c6eee4bb9846acVirustotal results 40.68%Heodo
2020-08-14Invoice-SOEH5-632525.docdoc fb17807621969c33d345882ad5ae95cd5294c32509e13a6fe8ce1d317a5c3f4dVirustotal results 38.60% Heodo
2020-08-14invoice_DXK794_49777433.docdoc 3132acbb0aa02f175f2e8bf589a53e732564cf73f1f003cb64c842ba52d3c889Virustotal results 41.67% Heodo
2020-08-14INVOICE HQ2 59703160.docdoc 845f584a4b58e05f5eabb64041142baac8b97a971f88d4cb2544c4ac3af97a3aVirustotal results 40.00%Heodo
2020-08-14invoice ZQ7 27931122.docdoc 382eeb05e0b37509916697e88d5f58e00cfd17db07cf9b27240fd84aa4bcd26eVirustotal results 40.00%Heodo
2020-08-14INVOICE-GENH60-208542155.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14invoice-JC5680-8544555.docdoc a5cebe26ebd797b743940f94cd3b74255ae3864a8042734c1b430e3da0198e2bVirustotal results 40.00%Heodo
2020-08-14Inv-RLDV1-864607.docdoc f740ad05fe75e146443ce0776602fc5828a534f28e1e2f34a1d785083de85bd1Virustotal results 38.60%Heodo
2020-08-14Inv-743-64104404.docdoc ebfd94ac1cb7510d9b3fe2de38c88bb88d64956d0c6eb93aceebee8ea83ac763Virustotal results 37.93%Heodo
2020-08-14invoice_2158_0831577.docdoc 62bcf4a344f8f50908c761aa1f7b889f12c4f072d7e58acb808f2267fe3665a8Virustotal results 37.29%Heodo