URLhaus Database

You are currently viewing the URLhaus database entry for http://dlwebermanlaw.com/files/001961612936-FFPAATK8Cwc-array/interior-959479300-S3ZhjrHZWan5Nc/lbvja-x570vwu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:436721
URL: http://dlwebermanlaw.com/files/001961612936-FFPAATK8Cwc-array/interior-959479300-S3ZhjrHZWan5Nc/lbvja-x570vwu/
URL Status:Offline
Host: dlwebermanlaw.com
Date added:2020-08-19 17:05:05 UTC
Last online:2020-10-05 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-19 17:06:05 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 month, 16 days, 19 hours, 41 minutes Bad (down since 2020-10-05 12:47:28 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21DAT 2020_08_21 0043860.docdoc f0de1107bb611dee9d1090aac12016f3319466328cd390c3634698f10618491fVirustotal results 27.59%Heodo
2020-08-21Dat-2020_08_21-9950.docdoc 5b5891bfbc8b88ab10b54cc859b95f089ec8a3f4b990b33062d97591f1c3b8d0Virustotal results 27.59%Heodo
2020-08-21MES QQG7517.docdoc bb5ea6401f31e4c9a16297546ea7dc58a1b86dec75837de0e5ce9e9709a53919Virustotal results 26.32%Heodo
2020-08-21Arc-20200821.docdoc 3b17e737a54751a71b9d73e78868fe24f0033eac1b31dd744fcbc169eab139beVirustotal results 27.59%Heodo
2020-08-21Inf 2020_08_21 RC192391.docdoc 73c81bb630bfceb653d5fb6d8142cec1a3de9b2c90f78a189f32c5618264ffc6Virustotal results 25.42%Heodo
2020-08-21LIST-Y7579.docdoc a86d6bdd369e4b4b35a48cb3f91dd48015e470d4ec96c3d8ff3f42cc405e1538Virustotal results 28.33%Heodo
2020-08-21MES 291560.docdoc ca6159cfb8c0492a5de566fe70b1741acf00e6111f45c291e520c13a8cac9b69Virustotal results 21.82%Heodo
2020-08-21List 20200821 ATM693.docdoc 41b160a7d55e5fee3871597117f8a0606985711d0413a8378ea0127fcf9e58bdVirustotal results 22.41%Heodo
2020-08-21MES_20200821_914.docdoc 752d91924381fb8b6fd87454022cecc75e98a3274f628049158974fe49161386Virustotal results 21.43%Heodo
2020-08-21INF 2020_08_21.docdoc ba5472a30812aa52184f748504cc057f145bbf2bf03a2808785af67df5e2865bVirustotal results 22.41%Heodo
2020-08-21LIST_622.docdoc d1547bfa089b962d6fff129db06683ac0bc083c1fbff4d37d910e85932ab2b4aVirustotal results 22.41%Heodo
2020-08-21INF-2020_08_21-JS3131.docdoc c7e786414c6dec0fad5e797e71a92d7283d50345b4e08a0ec3dfbafca90ae822Virustotal results 21.05%Heodo
2020-08-21rep-2020_08_21-T049.docdoc de515e7ec0dae90d1800cbb006a20ce039f15b596a5125ad9a44859bb3efe77fn/aHeodo
2020-08-21inf_20200821_SYZ05390.docdoc b148d085ba83f250eb10d2a636900d58212f8725fcb783566c0de0ce822d49f6n/aHeodo
2020-08-21Mes_20200821.docdoc 46e0471a4ef5b075bac9fc9db5a1c2c2c56ddd03c87e15d8c658fdd4ff865912Virustotal results 20.69%Heodo
2020-08-21mes_2020_08_21_H685115.docdoc 69e2642a39f3623ff4684c8edd401395687e6df7b69781cbfbda139c3893e56dn/aHeodo
2020-08-21rep_20200821_KNS042678.docdoc f82a8e3d673d04163870c652bf79760f7a9f4644923e1c1a506114e2b344dcb2n/aHeodo
2020-08-21Dat 2020_08_21 092887.docdoc eba8ffc3c1fc4d1ebcf33cc7e1aa34d5c99f7bd59095363ad7515afcb73141dbVirustotal results 28.81%Heodo
2020-08-21Mes-2020_08_21-0411195.docdoc c69ea10443ff91142a59112f029a71717d582ef3a01e2f2315745a3d6d8adaefVirustotal results 30.51%Heodo
2020-08-21rep_2020_08_21.docdoc 823259e20aee973e7f3a3066d4fe14f60b4b0ba731059c37b07274421ff68c52Virustotal results 30.00%Heodo
2020-08-21Doc_873918.docdoc d197888c1aa3df7eecf029acae0150d6092c71f5ff95a9f10c54b8d3567c982aVirustotal results 30.00%Heodo
2020-08-21Doc 20200821 4416020.docdoc e934e66e19e33d54a2df8f96b7f7f1313d001e2d20259d4826a43f27e4819f34Virustotal results 30.00%Heodo
2020-08-21arc-LH0154.docdoc c5f1db69ed174b44e6f28d9059127762a2e9c095c3ed2dfa8df24cbf041bcf36Virustotal results 30.51%Heodo
2020-08-21List-SC13968.docdoc fa336adfd7a299b591529b19cfc7dffb2f8b1ea588d2a794580f82b0920cf159n/aHeodo
2020-08-21INF_2020_08_21_7810.docdoc bac36bfa92ebf4974968ae2f004d3cc1444eb6525e8f0d952c44f6e089955efcVirustotal results 30.51%Heodo
2020-08-21file_20200821.docdoc 1041d215adf5d2e0fbc48e95e42e71b6a39d5f07484f553324cff17cd1b17b63n/aHeodo
2020-08-21Inf_20200821.docdoc da0e89a0758ddeaabbf75668f4631c30ae311a1facc583f9e7f031fb678bbcd4n/aHeodo
2020-08-21mes-M4871.docdoc 4cc1da12449a3482d7e0b3de9cba0ee86abb8ad7e7f368ea5600eed7027c1a9cVirustotal results 28.81%Heodo
2020-08-21List_2020_08_21.docdoc 9438307031b23631459f162fd10260fab6f9d1b13049bb1cb6a09d3484cd1f40Virustotal results 29.31%Heodo
2020-08-21File_20200821.docdoc 64577b122e08ff791d955ce2758f2c256ee71fca48d12f7612b056cf4de541d0n/aHeodo
2020-08-21doc-34855.docdoc 0aef0abb386c3c08a0f0e185462213b345f9591e943882b015b1d0ef8eeaa2e3Virustotal results 30.00%Heodo
2020-08-21mes-2020_08_21.docdoc 787791fc510f985811dc139c9ccacad673d5ef20030d69b0bb63c9a12ab7ada6n/aHeodo
2020-08-21FILE-A383.docdoc 8d533777e5e6b3040faea6d6f9c839f55ce377d49607833baefb3a1141eeef47n/aHeodo
2020-08-21mes_2020_08_21_33824.docdoc 2e837bdd08baa417e4b6e6e286ec14454940b09b23cd893532ab7dee4b4ec061Virustotal results 30.51%Heodo
2020-08-21Arc 20200821 TLC18111.docdoc 07108d19c9ebaac8f7dc6c7259296014f7bd6f4f8df85c582b156900b6af3ea1Virustotal results 30.00%Heodo
2020-08-21REP UP160449.docdoc abfc420601b0287aec162de246589aecfff4819b9e63229e06225ee8dc13f5f3n/aHeodo
2020-08-21arc 20200821.docdoc 2fb4d27ecf72a41fb9d7eedc6e4dd2b7a3028de206c728c23575284c734fca60Virustotal results 30.00%Heodo
2020-08-21Mes-20200821.docdoc 387e73e8b041a7eadb9503b7cd1f194ec03c786ba1d81b2c895fa324e27e7866Virustotal results 30.51%Heodo
2020-08-21file 3158.docdoc 320f79bc8da507b0654c51440956e4baed76ba2e755cb5cd0c66b9f3cb4ccef1Virustotal results 30.51%Heodo
2020-08-21list 2020_08_21 1254.docdoc 74aa225334a26fc1cdf238fed7de6f44a9d131122ac0f220d79467853579708cVirustotal results 30.00%Heodo
2020-08-21Arc H783.docdoc 083fb252fa515eec398b54d1cd4ac9b2eb4f036bde680135b33bd25f97256726n/aHeodo
2020-08-21ARC-2020_08_21-481.docdoc 174b8620c03615174f2b7d2ab5cb4adb81d92cc6c863c02d7e66812c1c35d60fn/aHeodo
2020-08-21INF-VZX7333.docdoc 86b2e2bb47bbbea1a01f03f9d4a2d191f0f9ca40c688f6b06378db262cb20e3cVirustotal results 31.67%Heodo
2020-08-20mes 20200821 60120.docdoc b135596817592f86075306dd65d590f784e864963d463676af67625110f53f88Virustotal results 32.79%Heodo
2020-08-20Dat-20200821.docdoc 1b867960e5ab02a6d80e0a17c3d320992910d1600eca110899808b4dec8b6050Virustotal results 32.79%Heodo
2020-08-20ARC_YE23116.docdoc f3628cce512675151ecc79b76c4fab0c1be35b785bf673ff2a44d61dc3066048Virustotal results 32.79%Heodo
2020-08-20Mes 840.docdoc 739d1a0cb32d1185c3a29e2fdba23d010d6f89076810095357750c6960ddbfd4Virustotal results 30.00%Heodo
2020-08-20Arc_O55626.docdoc a188cc37f6aa01d2f1449c8892bc75e22ae587b9ea10bd7a8f14aa1f865d7defn/aHeodo
2020-08-20REP-28887.docdoc 42d8ebfe1c29fa0f24cce958075ec39bbed956a42ac7e07e1536db538e52fe6eVirustotal results 28.33%Heodo
2020-08-20Mes_800.docdoc d74739d4b2e9d93a617920af5b793616e0269bb2ad9bae8117508032830bdf52n/aHeodo
2020-08-20FILE 20200820 0991.docdoc 81e327d2b9c295f94b08d293399cdd2f911dba48a5a2ad1103f45d26d58d4d80Virustotal results 25.42%Heodo
2020-08-20Mes_20200820_NI09994.docdoc 86d480ab25fee4635d9de621cfd8f3866e047465bfbc8afeac4bfe33591c7190Virustotal results 25.00%Heodo
2020-08-20file FZ1360.docdoc 73198101e95bfef34926be6d2ffbe774214a82cb2c9b8965bc6d9e6d9b20aad2n/aHeodo
2020-08-20rep_2020_08_20_870.docdoc 33838e3f4c9c5cc5da0c23cecd5959b5df99834c832cb1284f646cb179a4695dVirustotal results 23.33%Heodo
2020-08-20file 20200820 3592.docdoc 9ce07c9533158a2746e1d54d350d03cd64b1504b69558341659a574238f74753n/aHeodo
2020-08-20file_5305935.docdoc 48c065c3c6c626c7fca855686845bf480a74dd0902ae005eeea171dcb5237947Virustotal results 24.14%Heodo
2020-08-20arc_2020_08_20_2488016.docdoc 3d4a0f8a98752647dfa9302e9f1c7bdfb0550da20d226a13b6a49bdb673ce355n/aHeodo
2020-08-20doc-20200820-B151877.docdoc bd074de7433279e0cc643f3cb23cd96cd5ff3ae7fdc879e39f6d1ed6dbd7180dVirustotal results 24.14%Heodo
2020-08-20arc-20200820-913.docdoc 41e41e5f1f8b2aff80e45e953dd83940e4b3f419f749158861614405f686a5ben/aHeodo
2020-08-20list_20200820_950429.docdoc c770bba68818296583e90edb1401e456254a70721f9572ed9036d9a4aabd3aa5Virustotal results 22.03%Heodo
2020-08-20Arc 2020_08_20 T1351.docdoc 56036d4f91d588879040deb29a6acc4940e7b33007f647ad866359a47a53da7fVirustotal results 22.03%Heodo
2020-08-20inf_20200820_M1127.docdoc d4fdc6601cb728a5c566ca6e8277b70e253a88e7a74dbf6a0ac9f426ffebee5bn/aHeodo
2020-08-20mes-AY351773.docdoc 8072c5b68b5f032f8c9269d8941c036435d85d0fc7f7239103e28a92f6a52d1dn/aHeodo
2020-08-20Inf 2020_08_20 694953.docdoc 385b99deb4659a9229df342c92919b54428710364712aa73f5de71245a8e4e55Virustotal results 21.31%Heodo
2020-08-20Arc 2020_08_20 4161.docdoc 953b662d9aef02326fea06afebcb2c0f499bf6075210cee6bc361cbf62c74c8bVirustotal results 22.03%Heodo
2020-08-20dat 2521280.docdoc b3d5549c41a6159ff9e0df4205dc4cc52da484301e854c8b9d34fbc808bb49d0Virustotal results 21.31%Heodo
2020-08-20file_2020_08_20_26246.docdoc a6495ce0634ebce9b181f45914574e07b54400238c8a8eeeacd6516ccce7752dVirustotal results 43.10%Heodo
2020-08-20mes_2020_08_20_0919.docdoc ff2219bf2a6e79b513db9d0cf17c1ba49ab9b6b9b64ccc86662e2a8090a54b13Virustotal results 41.67%Heodo
2020-08-20Doc_20200820_TIA75434.docdoc baecfd05f5a6a6f654ef927e3a8bd1c298a12f8cfaa1a494cca33e97f45329d3n/aHeodo
2020-08-20ARC.docdoc e47caa21a204cff18af76ca9418e048f41e70ffea406ea5c41bbb6fc6bac357fVirustotal results 38.33%Heodo
2020-08-20Arc_630727.docdoc f28b0ecc48cbc29c0012148055d79a34ab74c7915bf0cca7ba368c935913dad2Virustotal results 40.00%Heodo
2020-08-20mes-20200820-205.docdoc 3053fecb237566671c1a363da6607e769c25e6b7ba72d41a683f18a8f128072fn/aHeodo
2020-08-20Inf-20200820-8131.docdoc 1d2b1c4630cfe0d010a3f59c5fe31ac16e7a9d9647202a9d7a6c94d602891fa7n/aHeodo
2020-08-20Doc-20200820-0383589.docdoc c9148cbc2fcb560bab79cd760d252b5fee0cf7421b96d5f610de9a149b39c6a3n/aHeodo
2020-08-20Doc 2020_08_20 9047713.docdoc 5ad149456e0772a69b4139cd61954bce1285c24eb8e99a88b9570736e7ddae47Virustotal results 36.84%Heodo
2020-08-20DAT 2020_08_20 J74568.docdoc 952683edbc68d14ab30b2b3030a02fc68c3210a7f1a95ba97cf484fbb25c045fVirustotal results 37.93%Heodo
2020-08-20rep 61288.docdoc 744029fece917740a88f43a6f35c563dce6abb340e34652085620785547883e6Virustotal results 36.67%Heodo
2020-08-20Doc 2020_08_20 SBJ6512.docdoc b9dd0c46c40a59f5ee13585b936980a4e93d12bace98f342421fbb63fc15a460Virustotal results 38.98%Heodo
2020-08-20mes 2020_08_20 8982827.docdoc fa5fd14228252426c8224b795502a3ba3af894cc4117e8247d8bc9901d4a2588n/aHeodo
2020-08-20inf-2020_08_20.docdoc d551c7110c0181f84537e3409a1adba4a5ea0f98caa90475c6ce740e2c3fa9c6n/aHeodo
2020-08-20DAT 20200820.docdoc 81bed19efa97ba8177bda3736a8ab04d1a331974d94e3ccbda0e1c85f0cde5d5n/aHeodo
2020-08-20doc-20200820.docdoc e5deca8f8e045063d0e0afeda512241e1a5e236df99787831cb21e3efe335acfn/aHeodo
2020-08-20doc_20200820_SP00114.docdoc b9c36d0ae81127e9a86b1e0fa168ac30bc961720617f9aba50858f99186786d0n/aHeodo
2020-08-20rep-2020_08_20-XY23573.docdoc d328fbbc3e82b9e2db08fbfcc9d4554921637299f82f0cd330253529ba130219Virustotal results 32.76%Heodo
2020-08-19File-20200820-HE257.docdoc 763cc0ddbf92ab735d7975d8e7137950d402f8475ab7f08f1e332940e4dbdd05n/aHeodo
2020-08-19DAT-4559636.docdoc 446c2fb367a6b3f01cb6ebea3d7cf2addb59449f0d53875f0e510603e2e82ebeVirustotal results 31.67%Heodo
2020-08-19Arc 83797.docdoc 18f2491dcef8d7f0113049e146994fc5a8fc1615ff0fbbd659fa0a5d580ea72dVirustotal results 28.07%Heodo
2020-08-19dat RBM666.docdoc c940432dc1875cdb1adfbda4eb2c3a23b3a10fd0a53cf12cc32e79389120b5d8Virustotal results 26.67%Heodo
2020-08-19Rep_20200819_CUT74510.docdoc 7b1214f3fa1a87909df1dc2aaf3d66f4ef5ebe9cc2a8040bffa44e44e28ae36bVirustotal results 26.67%Heodo
2020-08-19REP.docdoc bf6d7ade5a7b3c0f6a148b27c94f1add55ce47e95f34e83eebbf92167359f595n/aHeodo
2020-08-19REP_20200819_XWP98787.docdoc 418836a63d85c9e9f92094437a4c568d7846aa2ff9d05e55982526a2744aa52bVirustotal results 27.12%Heodo
2020-08-19File_VMU482.docdoc 0049de1a4a6b1dd67a723e087f93fa0dfc155110552068650ff7e7f93bb9cd4fVirustotal results 25.42%Heodo
2020-08-19List 8555.docdoc d44c11183816caefd543eb56f87fc0fe17898ff2f05f42ef617fd3fc067b7d22n/aHeodo
2020-08-19dat-2020_08_19-6001118.docdoc 544d30214310c30ed1c96f7efc2d67112ca152bf4e247951a277932d1afaf252Virustotal results 26.67%Heodo
2020-08-19Mes 20200819 367965.docdoc 74cd6093c787bdddca5131a78f2fe3182a2b85ea646d74fa2dcedfd016bc8952n/aHeodo
2020-08-19arc-20200819-1028003.docdoc d54b881b142aa3ec2e3b816d4dc326d23176dee31c65f78ff9b9328f61aaedb9n/a Heodo
2020-08-19mes_20200819_77067.docdoc 91d76b351c4ea63157aba2fbee15328e674e87decb909d364c0466fe61847135n/aHeodo
2020-08-19List-20200819-THQ066.docdoc 66915150d26a0500bee5a47eef810f6d5ef9c9a9282973f17b3e434bac5600bfn/aHeodo
2020-08-19Arc 2020_08_19 118.docdoc 35a575d3cc73b07a44de16fc04dbd04650ba5d4a0005028abc178ad78e1d47b4Virustotal results 21.67%Heodo
2020-08-19List-20200819-2440.docdoc c313812bbf729a2f67dbad9bccebb42106cf1625d5d9c8a3621ee88aff2fbe31n/aHeodo
2020-08-19ARC_2020_08_19_0726633.docdoc 017dedfe5d57e11c86048a8f6470f4d48573fc0bc581b8ef0a6e22c06169770an/aHeodo