URLhaus Database

You are currently viewing the URLhaus database entry for http://olli-f.de/Sicherung/report/05396736731806099584wa1b6fojb9rc7h54fxr/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435033
URL: http://olli-f.de/Sicherung/report/05396736731806099584wa1b6fojb9rc7h54fxr/
URL Status:Offline
Host: olli-f.de
Date added:2020-08-17 17:50:11 UTC
Last online:2020-08-27 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 17:52:02 UTC to abuse{at}oneandone[dot]net)
Takedown time:9 days, 13 hours, 3 minutes Bad (down since 2020-08-27 06:55:11 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19X_27465701793361.docdoc 13b1f46a749e4cc9b3bf917bb29bac23d8c73b5fd97982cc625304ca1ed50edfVirustotal results 20.00%Heodo
2020-08-19TAM_080120_DMW_081920.docdoc 6e24d40dd2ab39e102c07369124f050fc0b0f2c103fc5acd2fcf280d8048b1bbVirustotal results 18.64%Heodo
2020-08-19BAL_31510581.docdoc 40fa8d283d305ffcf422b0f327dc4da32e62cbf82da81841240e3e2c1bd53881Virustotal results 16.95%Heodo
2020-08-19FILE_PO_08192020EX.docdoc a47b7f6d9af6602b2dac196cb0faf5414e8a3d7f94604f937e2e66f19fd17b61n/aHeodo
2020-08-19JE_QAN7MBOZD8LI.docdoc 40430817aac77bdfe251ec9275bd54f3f38e091508e5381af53292469132db78Virustotal results 16.67%Heodo
2020-08-19FILE_PV1297153775CS.docdoc fa3a4eac9e3ce646dff62fee34d1d25b303584637a2f596797e0848ddedc34e4Virustotal results 16.39%Heodo
2020-08-19JQWE_FD4668208384TL.docdoc 8fa3388c004c72bc132d2ae9af6e47729f3e30ec0337e69115fbf3b2d2b4260cn/aHeodo
2020-08-19INV_1413755777555690419481.docdoc bc5f7faf4b9266301e7e8bd3f6ad494c0b34e984278b3a484c6c46d845d9a28fn/aHeodo
2020-08-19OUT_080120_UWE_081920.docdoc d054c0a4a703726e52aaa5f6db946aefbc777af3e84c0bef5d5cfa5f7dbfe034n/aHeodo
2020-08-19FILE_44493784.docdoc 28c14d0d9ba56ed508a4312e9098de46caaa153eb89958b6a8e027476ee3e6e5Virustotal results 16.67%Heodo
2020-08-19REP_X6QFOK6I50.docdoc 1d0d782d8396cb7c83be29d2f7baf7413db37d06555a498f8a89d075dbf163dfVirustotal results 15.25%Heodo
2020-08-19BAL_93929329.docdoc 6ca7b784b7754fff5b22f3944f8be3abfa721a3da2e8944d3576eb3bb078f046Virustotal results 18.33%Heodo
2020-08-19FILE_PO_08192020EX.docdoc ccb2eeb74e4295cc786dee710d39ea735540fec1d56385abcd861a0cf3ed025eVirustotal results 16.95%Heodo
2020-08-19U_PO_08192020EX.docdoc a7f7da45bf54c26cc2fce4e3c3a639209f7701cad6339b69b3980224423d2d7bVirustotal results 16.67%Heodo
2020-08-19YN8223664471JE.docdoc 2b7a49352e724f27cd732cdceeb85765bee1e1b37a8f0e554eadb1d7388e6831n/aHeodo
2020-08-19FILE_YQA_080120_VBJ_081920.docdoc 25155c0bdbb328c6e4d68df35320b627b978d287c658085bc03617601fff804bVirustotal results 16.67%Heodo
2020-08-19IRQHF7N0WP6O58.docdoc c84cc34fabe449b4d98254989e104711653a48f902a35184e496f2f61508fc55Virustotal results 18.64%Heodo
2020-08-19M_88491252.docdoc c76dd6c988b0d2886904cc2f393b360277487b31602297b5c5268ae59604586eVirustotal results 18.97%Heodo
2020-08-19DOC_NS5323347877EW.docdoc e7801b2180c3386d049135af6b5e4ad14c56a7a6eda2cf87dcf474e3ce9c4e39Virustotal results 18.87%Heodo
2020-08-19Z_73576490.docdoc 0099a00ee33efc8e25e68b3bd2862656ac4819416a7ce5252da75b326480ece2n/aHeodo
2020-08-19INV_SJMICZR.docdoc 05897a743fd2fe3d791b9560b3a3a0d5fa3f4ca8c2dc6f1a490aaf4a7f4f5636Virustotal results 18.33%Heodo
2020-08-19DOC_YEC_080120_EWU_081920.docdoc bb8f4400df61e199e8f1c8bf7bc8f4409d7ad9eae9af6cc6ce8ae32bcb99be8bVirustotal results 18.33%Heodo
2020-08-19DV0409071041EQ.docdoc 8f9d37fa58ce7df58a90fc82d80da4ff63b634a0dc855729e1c18e7bd66f7872n/aHeodo
2020-08-19DOC_OEZ_080120_JWO_081920.docdoc 73bb57416aa009d5bc50da9027eec6bc8bec76050d7db2a4626cf60bb4f5331aVirustotal results 18.64%Heodo
2020-08-191GNR23JH.docdoc 8cb099dfe32cbfe60c289a8b7c4aea909b9a0ee9fdd5a757bc169147fcc9445aVirustotal results 18.64%Heodo
2020-08-19BAL_YIA_080120_MGE_081920.docdoc 1b65c5b7a01d6bdf62f116d7f5ec112791380234747d3b47374bf28c9457a51dVirustotal results 50.91%Heodo
2020-08-19DOC_002364198155725965419.docdoc f329443fa89c43b3eb672ac38e5144982784f69c43d462af0883121d249bc4b2Virustotal results 46.67%Heodo
2020-08-19PO_08192020EX.docdoc a3773aee947b0fdf4bb4d2a48777f6e8e4a83beb62f033efffbb0b487bef2e8fVirustotal results 46.67%Heodo
2020-08-19PO_08192020EX.docdoc 9300711f5a35bc33dab0314d010f858ea9385b9b41b60e8db605a367ee901d57Virustotal results 48.21%Heodo
2020-08-196838VOAYU4ITIL.docdoc 882600fee7e0ea4b30699f07b2c5237c9cb80b2ed0bdd471d055f7b450565272Virustotal results 46.67%Heodo
2020-08-19YO8887081282KH.docdoc a7fff8bf3bbff829f3388723e5da242e32d59f0b648925cb3ad55dc7db5697eaVirustotal results 46.67%Heodo
2020-08-19DG4874175679WA.docdoc db532f530a3c0922c028cff817afb07a9e082ec260a37750a8af82739e8e8ba8Virustotal results 46.67%Heodo
2020-08-19INV_83284076.docdoc 4fafaff4c35c7050da039eba46004fb4df1789b0f4cb103ecaf05d4fcf0834beVirustotal results 47.46%Heodo
2020-08-19Q_PO_08192020EX.docdoc ade0c61c5a90ff1c6aa1b54b0f5d9e29382b98feb206f3b170724aa6e34cb389Virustotal results 47.37%Heodo
2020-08-19REP_18027108970.docdoc 0e79daf2a9f00edeae140c5e513dfe381e03f54ae3fec2dae7b2bd9f005b4f6fVirustotal results 46.67%Heodo
2020-08-19K_HMH_080120_QZQ_081920.docdoc 5b39d05fd1a75574a20fce09addb52c62b766bb08f8812b8d692936918ba780dVirustotal results 46.67%Heodo
2020-08-197KMEQRU1Y03DW.docdoc 9ea591e1d7a55e8030d08c4d52a5f187c45415192f0417c121de3875d92245c1Virustotal results 47.46%Heodo
2020-08-1936317594.docdoc 28e4449bf2803e0d685599cbfbd23a03ac3f9a69b25f6a2669de4ce252de4073Virustotal results 48.21%Heodo
2020-08-19IIH_080120_FMJ_081920.docdoc 546326b982f8d4e1c2af1b80d268127974403aae48e453ff6d8f1820120a8d0fVirustotal results 45.76%Heodo
2020-08-19ZD8978548529GG.docdoc 94fe6d0cc1723a60d8965c606027ad0283a60c1f4677cf33c8cb85fd202bbc60Virustotal results 47.46%Heodo
2020-08-19386365502412809.docdoc fededa8f56c791fe22493104398edd8f25c5b47a5668857fbbe72e6ee16ede93Virustotal results 45.00%Heodo
2020-08-18FILE_W3UY0I1A9LSJ4.docdoc 6e7bc5b464486368fc64b81be80628536390d77832adc42ae658a9ec6642f2b4Virustotal results 45.90%Heodo
2020-08-18DOC_213521808852105648.docdoc 6c9d3d58e28a1e8bbf0d1c77a0bbb7f6c71a55ac204041c9f1f8e372b19df91eVirustotal results 45.76%Heodo
2020-08-18FILE_71278426.docdoc 805f00873a643dff1edc0ebb808bcc771a6641780897a3d7732b01444b2ec3d8Virustotal results 40.00%Heodo
2020-08-18BJ4249556616PE.docdoc f81838aa227956ab72ef239e4bb20e9f84a8596e89e7dc91d59d66c488ebeb1eVirustotal results 40.00%Heodo
2020-08-18DOC_AF4SE1645BZVC.docdoc 2db327ec6e030d7937f39cdedb6cbdbade5a89c43fbf6ff39f7c4b7299261a0dn/aHeodo
2020-08-18PO_08182020EX.docdoc 7457d0d48a6875b4b70d817d7542bdd94e000e4293907a48b014189b5e7bada5n/aHeodo
2020-08-18ML9986531129ZZ.docdoc 87becefe3e3cd497258a1bfe5a143aa5f119ddb98b934070d60c747f85529fa6Virustotal results 40.68%Heodo
2020-08-18INV_LYD2BAY1M.docdoc ba7333c62eaf38c72ba462b0189a0a07f8e6e6ac98bbb7c516ac21648b72ad51Virustotal results 39.66%Heodo
2020-08-18REP_TY6505269730ZJ.docdoc 460a8e4f639b96c10e0094ce3aceeb1f60278284a1d7b27e3b16fd4b76744636Virustotal results 40.98%Heodo
2020-08-18BAL_22058222.docdoc 0abe25a1015f697d6e8f5657c0b05437419935530321c56d7d76893e138ab8f6Virustotal results 40.00%Heodo
2020-08-18DOC_PO_08182020EX.docdoc f13b6d284eb7046fcbacbc7d199359ef96282da973fb4baee25c10fe1f96d9b9n/aHeodo
2020-08-18BAL_OR6267032961MR.docdoc 4b7f1d4444db5d249123e54f4b583946c8c0db484f2c8ce65ef0bb922e96c4c8n/aHeodo
2020-08-18INV_3FTTUWVC91DH.docdoc 40bf45a0f3955cc2cb68375dd18ebe4bfbf79a8c1ced852bfaab79bcb58eb4bbVirustotal results 38.33%Heodo
2020-08-18DOC_98352711152.docdoc 4d8e7cfda1c0e9d03775d5858d97345d0a2ebd918a721a33ab2b2225e594711fn/aHeodo
2020-08-18FILE_EO5G7BHXZMUQ.docdoc 010999a8438ea40d8012240b03d2ced196d695c0e6ddcdb43bca7d28693c16dfVirustotal results 35.59%Heodo
2020-08-18FILE_BVI_080120_DBS_081820.docdoc 2d39a2c3798256d5fe256cc31b187ea8d4304b72a38c6c03f7646c74d84f19e2Virustotal results 30.00%Heodo
2020-08-18BAL_OB0W7V9LSVGI0RV.docdoc f769750910439a4e1091fe3e718a7cf0b9e2fc7441d1ea7fa6bb6c9340367283Virustotal results 28.33%Heodo
2020-08-18FILE_DJJ_080120_ZIO_081820.docdoc 77300670b06067855e3c1d1b58df8a505ec1598099aa1a03970407a2798336c7Virustotal results 22.03%Heodo
2020-08-188706423201220762899.docdoc c6313b13d24c46970563fd973b3b8b40ffd67b9270160ba475ba43994c824d8eVirustotal results 22.41%Heodo
2020-08-18REP_6205529825200978993.docdoc 1bd70dc84522b79f56c90126e0135d75cb385aa343b4f67ec56921fc62e62d8an/aHeodo
2020-08-18REP_631449864859998087442.docdoc d5604fb88ba80d9402a76951dce44b0405d3d1d07c96f697c14a57768b63dd49n/aHeodo
2020-08-18DOC_ZWCVWOXNVOH9HF.docdoc b112d8627b556a0c0ac19e877bdfe439b82cb1a1985603fa5c3a8b3de73a4fe0n/aHeodo
2020-08-18REP_LJSPCVRXI6PI3.docdoc 85431ac67a721a63e9e100e9176634b535969b4cd7c70c34908ab629a7e80d26n/aHeodo
2020-08-18FILE_9AS55BDHL.docdoc b8578fc1800c341816ee50de533d7e77a647bb4005e63d7c5234b983863d9c34n/aHeodo
2020-08-18PO_08182020EX.docdoc d021a79aebe130ed1440dfc99908def9a8947d245ad9f8c9dec7a339adc06135Virustotal results 22.95%Heodo
2020-08-18INV_PO_08182020EX.docdoc 42a17008576c5465f5efff9d1a844f425b1391aa877e0d02b91ed7e09e978f57Virustotal results 20.00%Heodo
2020-08-18REP_4879035894390282.docdoc ea9dfb49de29351fb9fae1e80177b3ed473f9229e5da8e2ae5eea121deb29760Virustotal results 21.67%Heodo
2020-08-18FILE_Z3LD8IFFNZ6PSFFF.docdoc 13f007247a133e15c91b87cca369b39cc7b383603cbe773fb626e306a41a99d3n/aHeodo
2020-08-18BAL_9037071436.docdoc b2a6495cdb9ccb4d2ed6e1e9e311a8b2f6c986a803159ccf83b91d821897cfaeVirustotal results 22.03%Heodo
2020-08-18Y_9105963289696759241861.docdoc 3f5ff54ee1bbd646e9c3b15d2ad35d9bd78c11037dc671bd7d935aaa05438158Virustotal results 21.67%Heodo
2020-08-18BAL_GN4191442937UH.docdoc 4ce7c9c36eea321e4805b6659532b84bd731c6e282a4565e32366fa2176fe340n/aHeodo
2020-08-18INV_03441393.docdoc ab6c9909e16fdf41b17881417d7ae3e0caa1a66bff25a443a4e5ce8b338ddb0dn/aHeodo
2020-08-18DOC_SSW_080120_EJT_081820.docdoc 7976a8188a5d793cdbb85eae76d2bf5dcd550789634815969fd953edefd06been/aHeodo
2020-08-18REP_GYAGFT60H7H8Q.docdoc e7e59e1fee68542ac8095f59c35cd7c88c27b60952550c64ebbc62c63a66e507n/aHeodo
2020-08-18EM7693362054XS.docdoc 4dba7674a65d6c5e1cd3a1ad7226c21f0b91705ac0a61326e58044947a641cacn/aHeodo
2020-08-1862206737.docdoc 7f1c65238bdfc720f45f489cc20e78173bcc8d8bacad5a4299fcb08f010a0a14Virustotal results 48.28%Heodo
2020-08-18FILE_44728689.docdoc a7f9d63388739119575efca17a203780aa3111a89831740d7395769fda081b2bn/aHeodo
2020-08-18INV_PO_08182020EX.docdoc 01003564db8e02cdc33e4d259b217f180b85cc278ef24e8f8077a6071c0899d6n/aHeodo
2020-08-18REP_YYY_080120_OFM_081820.docdoc 5cd230c2b9aba6fe87d1b68c517682690a758f5fa5864a6424b548f7417c39d5Virustotal results 45.76%Heodo
2020-08-18BAL_OER_080120_DJQ_081820.docdoc b1021100edd56e9a41eb6661376e44e4066fe511be9fcf5a71538156713fd91fn/aHeodo
2020-08-18IYW_080120_BYE_081820.docdoc 2b221062e6443009fcdbcc513a4f981e019e92626e88fd9a6f1c849a74b1169an/aHeodo
2020-08-18REP_PO_08182020EX.docdoc b4391434a4bd48c6f939fb55a7ed439917514aa935d56b3bf82123bcf44d1d54n/aHeodo
2020-08-18REP_86624272.docdoc e2f0cb86eadbea45515eddee89bc46912333b4bf97129ee3cb33951aae3c3fc4n/aHeodo
2020-08-18FILE_NBH_080120_ZTG_081820.docdoc eb46b89d7e58183df45838e5a44989e33a129063e6b410d5e1a0fb8eb9e5cfban/a
2020-08-18REP_16419032.docdoc db593f135aa15cb1d2279c26e034744e979223392fe2ecd2d5e204648bd0ca6dn/aHeodo
2020-08-18QTXIA5LH4TC2GF0.docdoc e284647edaee2ed25f77af25077cf6abe3b9339e1890a0cae20dbfdc5bf1399fn/aHeodo
2020-08-18REP_QGH_080120_NIV_081820.docdoc f5938c3d6599dd45b99fc2c626e01c9a6d9718e4170519a9802ff99a6b9f3373Virustotal results 40.68%Heodo
2020-08-18BAL_0321504203152869448939.docdoc 5d423fc54fea2aab0c905e32a63397c0b39419e98d6b50af5079a73c7052fdc6Virustotal results 40.68%Heodo
2020-08-18MKN_080120_FUM_081820.docdoc d455be8bab47cee43ba5e71e1ecb482cddbc0c320d39874a081d23d5d27d7fa8Virustotal results 42.62%Heodo
2020-08-18ETX_080120_HEO_081820.docdoc eec53e193ef4301a8a7e0c901b5525cc447136daa569cb0a4e589d75bed15be9n/a
2020-08-18INV_AVW_080120_VDC_081820.docdoc 27c375a8f3878f06b0f95f14705dbf8400f42c0208bdbffc432c9fe9be231b7an/aHeodo
2020-08-18566473314070.docdoc 4b2c463c130aa9358e9853fd7af4e476c3f9721168623f6befc47050979d936eVirustotal results 42.37%Heodo
2020-08-18DOC_41387842.docdoc b0b5f47d96db0bdbb7063d1de4cf59b14f9db794c75ef3f86680db0f131c6fd2n/a
2020-08-18XAYN_WE3625811177IG.docdoc 5c8b923944c5816b259806159d34a3d379b2c8f347ef3b69cbc5b18f60637d93Virustotal results 41.67%Heodo
2020-08-18H_UFZ_080120_UKM_081820.docdoc a9f2dfb969ec4a5c09edfdcf49a041eed112c8ef64c36610131b1ef17118292an/aHeodo
2020-08-17PO_08182020EX.docdoc a783101fb9253a2ae868e31c813032e4f2962e5a6e94e19266e5ec25a14ab9adVirustotal results 42.11%Heodo
2020-08-17T1OTEB3QRI5.docdoc c0bd051153ba3fc559191e1a744dafb51332259e42fe8e436dade8cc96fae9een/aHeodo
2020-08-17REP_53088494.docdoc 000a79f815b3fec41875c4a836751712c6447fad1a61998108810463c083a669Virustotal results 41.67%Heodo
2020-08-17PVO_080120_GHT_081820.docdoc d4917c2e36254107abd6f1f06201f1cedf4bc6fdf73e569b6ae7827bdf677925Virustotal results 42.37% Heodo
2020-08-17REP_IY9293468153YG.docdoc b9b63541ecaaa34dcbec65dc87f19610faa26ac3f9b45a749f686bededa3b54eVirustotal results 40.00%Heodo
2020-08-17ZRDQZLO9SRREKGYC.docdoc 18b1585abb668182213b56998ae5ed30758e1649c11469b52af43723c5b0704eVirustotal results 40.00% Heodo
2020-08-17XU8766409758TH.docdoc 6eb52f464c8845b595169880341a670e6dfc2fb1c5ba4e59f01122d6e15c9536n/aHeodo
2020-08-1773BAUICND.docdoc c70fe59a67a2136f0a15f346ebb447c499d6d4a8642552cc3b0f8573b1a3ef2an/aHeodo
2020-08-17D_VR1181280594YR.docdoc ce6e19d4ee2e8590e6c58c39a9f35b9872c2b31d3fba395531f6c44e049566bfn/aHeodo
2020-08-17D_LE2126489036HN.docdoc 4ec08e452e7eafcff44c88aecf71b7cd95f8d3a68a7258f9bece3aa3a0caa123n/aHeodo
2020-08-17BAL_2425213602433.docdoc c7595cc977ce809096eeafa5542fa816e3a8f68effa336371c9536bbb92254caVirustotal results 32.20%Heodo
2020-08-17FILE_3144112652367644900.docdoc 3ee4af869f74285c3506566a4df827b46129038c38f621349ae70b937ac04b20n/aHeodo
2020-08-17HNJG_653049000.docdoc 45c12bfb8fe3999e238da081df10be3d1eb7d03190fdd0921affae9bc945729an/aHeodo
2020-08-17DOC_FUU_080120_XKS_081720.docdoc 8c5b8907514829cd3c77fd2dc48359d7a74533ae80fc0451d6ac51a998894584n/aHeodo
2020-08-17FILE_119910880.docdoc 6081a7fd5bc17a551c83adf95e2ce4101e03a1de13cd02668259ea8f16432df0n/aHeodo
2020-08-17HNJ_54519809.docdoc 98b1f2eff24595a16d48e214e8f412c7e6dca8a44e20f4bc3aee00441439eab8n/aHeodo
2020-08-17INV_82678638.docdoc 367d2ef7ea1441dcde2fc0753659e679ada7edfbc17a2a0501123ba0d39ee926Virustotal results 28.33%Heodo
2020-08-17K_35ZSM5GL4.docdoc 3caba7efd725be382a8a8eac13727a40e06874f65eb610f89e0b36dcc38ad34eVirustotal results 28.33%Heodo
2020-08-17427943932981.docdoc 61ade7afc3021dfde983fdab31597cc2934ccda2012fe9ef49c985f5a52aa89dn/aHeodo
2020-08-17BAL_26281327.docdoc ea5c34f5476af3a195a69280a548a233ef0657ade8908a1df661ee3c9abbb802n/aHeodo
2020-08-1778129508.docdoc 7953c54fcacaa1a31dfbd127cc41f089eb3d531f9d8c863404d07aa902f0f3eaVirustotal results 26.23%Heodo
2020-08-17REP_PO_08172020EX.docdoc 0a632f709be67f76806b32a6dec3f19fe66e793e09c6dfbcc80cb0f1219e4916n/aHeodo