URLhaus Database

You are currently viewing the URLhaus database entry for http://avtoshoolvsa.zt.ua/bin/tz22-0001750/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:436779
URL: http://avtoshoolvsa.zt.ua/bin/tz22-0001750/
URL Status:Offline
Host: avtoshoolvsa.zt.ua
Date added:2020-08-19 18:11:41 UTC
Last online:2020-08-25 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-19 18:12:03 UTC to abuse{at}thehost[dot]ua)
Takedown time:5 days, 17 hours, 29 minutes Bad (down since 2020-08-25 11:41:05 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21invoices 33407 & 2057.docdoc 2722912646668099c2c0bca95e61e654df8a201fd127ecb8ae5d6ba79299768fVirustotal results 25.42%Heodo
2020-08-21004266740.docdoc 43638c344ac4a446af722c229682fee9a8434923ce1cf6dd1a19bd2a0fc78c21Virustotal results 25.86%Heodo
2020-08-21INV #009917414 FOR PO #041282365.docdoc ed0a6eec86f44151f9815362fdc3c778a7f176378e582bfaf012098d9b98454cVirustotal results 25.86%Heodo
2020-08-21INV #539 FOR PO #009707535.docdoc b76166d90236fcf6a548f8e77f55c56ee763ee2278a941d20f1c0a360fd63171Virustotal results 25.86%Heodo
2020-08-21Inv. 3248147907.docdoc fa793702b351ab1f22fa5ff1d20c7f6bf822bd6954f637389577767a163275bdVirustotal results 25.86%Heodo
2020-08-21PO# 08212020.docdoc b7e0ba8f8567d8ee7a59765814c534ba0c4b1044ae4dceca564f53124b45aa36Virustotal results 25.86%Heodo
2020-08-21S047 invoicing.docdoc 78a36b1f41b0c09c31d6bc4665036ff311e872b98404bb726312e26f0d559803Virustotal results 24.56%Heodo
2020-08-21INV #06027 FOR PO #0029744452.docdoc c6c8fb9bb0d155bb4fe8b4b7904de586efbf5c79f49877313b380b848ad12da1Virustotal results 27.12%Heodo
2020-08-21Form - Aug 21, 2020.docdoc fa73c7c4709f00943c0995e1c8b64edce7bd0443e3a2fa1c4940c978d35fa794Virustotal results 23.33%Heodo
2020-08-21Inv. 9460474.docdoc 2ce951fdd23668dc604d3edaaa4e54fa607e9bdf62e6d471a60ec5671ac4b9a3Virustotal results 22.81%Heodo
2020-08-21TWN-080120 EIWJ-082120.docdoc 1b0e2d810c06da0602e0fdc4a558ebf38c6fe9c8d2caf30fbbb4d364dcafcde8Virustotal results 22.81%Heodo
2020-08-21Invoice #0009139.docdoc abedafc5e19de68937c53f7be30c1b392975062ba9a11d34a991ca703cd3c578n/aHeodo
2020-08-21form.docdoc e8b022037ce9db5f0d89c476b1774684986ea2b643baead908f4a06f22012bacVirustotal results 22.41%Heodo
2020-08-21Form.docdoc 13fa777481b0ef753826e2f217ba603567e9cb0b86cf7560b440caaa935e829bVirustotal results 21.05%Heodo
2020-08-21form.docdoc 403c11dfcd14c01cf91b6fc45cb7ef0a55919e8e5e0292399e1cbe734bb9d2a3Virustotal results 20.69%Heodo
2020-08-21INV_13724.docdoc ba4bb5f049cb59a1eb23f083cf22fe726a7d87f12e9b577f2eb52102b55496bcn/aHeodo
2020-08-21August Invoice.docdoc 119ea90f9ae4392e35ad517dbab4465ac0f0ae12cb58b0e85f007e105bb91036Virustotal results 21.05%Heodo
2020-08-21094423.docdoc 4da5e980866878da930be670800361fd6b9b6ec73983dd60cdba9eb29bd09ab6Virustotal results 22.03%Heodo
2020-08-21Invoice.docdoc 1c8f1124a4ccfc01bfc51367aeeda6685df4fc2ffc245deca3430582af9e816aVirustotal results 20.69%Heodo
2020-08-21Form - Aug 21, 2020.docdoc bfa9030c4923b22a26ab343f17ace0c0b90cb5a79c02e635937d73b994c50b42Virustotal results 18.64%Heodo
2020-08-21INV_97447.docdoc 251fdfe9b6b577506ee78b0db8c9edf72052745ac2bd469f640b2b580f6931b3Virustotal results 20.00%Heodo
2020-08-2100322180.docdoc 8ffb84f76b863917f3ef52c3c75dfa70bc77599b7deb86067b43c413c8ff681cVirustotal results 20.00%Heodo
2020-08-21Invoice.docdoc 08b9f7ca75b18aa5ac89ec3d9232718b6027867f80a02ce5c5d9e90f8eef711aVirustotal results 20.34%Heodo
2020-08-21Payment.docdoc da6cfd72a982796c23b85856bdad5e44b0a6b35b120440b1be740f5424b3dffen/aHeodo
2020-08-21Invoice #8789412.docdoc beb57be5d7b7a5323ead5a11721211e06b8ea9dc1318680473c33d71fa1a34dcVirustotal results 20.69%Heodo
2020-08-21invoice.docdoc 2038376e7b3db5ffb8103caf52d4b9b374f1235fd0f9bba8d1ef3aaea90143feVirustotal results 21.31%Heodo
2020-08-21Copy invoice #66845.docdoc 3d0173175bbc0f83d9a5a2b8324c817f6a433756949f63691ec5374d82859a6fVirustotal results 18.33%Heodo
2020-08-21invoice #55010.docdoc 394c97133b4d81514504f55b62d339ee9f96ef1e33e3e5e348219975abc2aff2n/aHeodo
2020-08-21form.docdoc 310dc3ae17963a0ac8df3cda0697749f205c3c01787d4e24026bc30ccb7f90b5Virustotal results 20.34%Heodo
2020-08-21invoices 51331 & 4625.docdoc be0c986b37c30a192c9f2e62d6c85b635a3e25bc10cb8a8b4ddac390bbc93163Virustotal results 21.05%Heodo
2020-08-21INV #670 FOR PO #0067209814.docdoc daff53b3f31512e392f8dda6d5b14fd834122189c03f9887514c2ef91599969dVirustotal results 18.64%Heodo
2020-08-21August Invoice.docdoc 1313ff749e2cbb39eb12cd00b080dc06159270b9309b7211be0fb2223b924d1fVirustotal results 20.00%Heodo
2020-08-20Electronic form.docdoc ed8f3cd480b6fef9996f65e02cc1cb3d295447728fd009032ac3838d32e01f37Virustotal results 33.33%Heodo
2020-08-20M-080120 ZUUM-082120.docdoc 3fb4829564edbb691226f1298c052a8a39087d1a99e583bcca9781e9061b4c44Virustotal results 32.20%Heodo
2020-08-20Invoice 00782415.docdoc 73edfc2aba2a5e763fb0b40b55a4695a6d9e6f0069b17e693c982385b150b4c7n/aHeodo
2020-08-20Form - Aug 21, 2020.docdoc 4e132ba6d019767be2f8156e367e5c0f60ee91db33f3517c525d22cace8bfa9bn/aHeodo
2020-08-20Form.docdoc a5257e575894b7fdceb18f36985ab8d6394e335b4458d40dc376703089368bb7Virustotal results 32.20%Heodo
2020-08-20INV #0926860 FOR PO #00140183254338.docdoc d602c575bf86a934dfc17916699ff512aba1b2b6829f1e4fd1ac6c4d1a9e9d55Virustotal results 31.58%Heodo
2020-08-20invoice.docdoc 0c9bdaf25bc6465c491f19c920faa56544188ae9d41c7a0905bda06a835b6ec4n/aHeodo
2020-08-20Form - Aug 20, 2020.docdoc f457c31693c17d7acdb742f48c6956eacee52a2ecc0a3e126b6741050d067c58Virustotal results 30.00%Heodo
2020-08-20Form - Aug 20, 2020.docdoc acf06f69fc335f401184ad3a218aec5075641fe29bce91e0f71b698c062b3e0bn/aHeodo
2020-08-20form.docdoc 6d8877c3fe622e60ade68b560890183ab6a8f3808d4425263f61709f82496187n/aHeodo
2020-08-20Payment.docdoc dfa76e9900bf8cbd12e33296a77b645201adf2d0fd4977e777eb203cd11f1b3dn/aHeodo
2020-08-20INV #1715 FOR PO #442371301.docdoc ae09a760faec9e5c8f9d147329271cb1fa3971b119943d8cc9e16ce71c8e5fd3Virustotal results 25.00%Heodo
2020-08-20INV #0335 FOR PO #9539016.docdoc 91c3f7f249f29faae299c119c3c8c07ad2bcbcf4e572530355728f63309e4f5eVirustotal results 25.00%Heodo
2020-08-20Invoice 319108.docdoc 722219128e30ae7a17fbcf0d24147c7713f628e28f3af2117130c95e0d75005dVirustotal results 22.03%Heodo
2020-08-20Inv_975445.docdoc 3a9ab8d5a3d76cba944447091197434086ecae7e4ba97affdb86c17fd77c31b3Virustotal results 22.03%Heodo
2020-08-20PO# 08202020.docdoc 4abb7023ed7ece882b48934ef725d200990a05f7a61fa1800d984acdd7adf77bVirustotal results 21.67%Heodo
2020-08-20invoice #2688.docdoc 59bcdfaf3c246f428683928bb6cd81d848f24678c624c51b53617c3b00c71c62Virustotal results 21.05%Heodo
2020-08-20NSN-080120 WODT-082020.docdoc 7e06ee4704f2c5f8a4ed2f68565f3f7518dd9ae22b9ae4fde59b898d8d9647d0Virustotal results 21.67%Heodo
2020-08-20Form - Aug 20, 2020.docdoc 7177e2e37fc39a2e6a83875aca9a3ee888a88d8bc6538b81556edebfe11067ban/a Heodo
2020-08-20Invoice #64202387.docdoc c2860e92b00a96df1031b68a98c104f55bfdc472da83ab5c7d4ebfada4a70383n/aHeodo
2020-08-20INV_5633.docdoc 08b3de55dad98d0f5d6da607f88353e781d425a5751a0c605e694309401b9a48n/aHeodo
2020-08-20Copy invoice #466061.docdoc 700b22e0508a889751892ce66df22fe34fcf52222db541d24e6d338aa351cfedn/aHeodo
2020-08-20form.docdoc 88b2e8e9fce8d57e43a9babac92605fdc43c417e3d6fe2f67e7463fc7dc41424Virustotal results 41.67%Heodo
2020-08-20PO# 08202020.docdoc 105bd46a4e0a001415c70450ac451246d9031e940943bc510da745bf2370e1adVirustotal results 41.18%Heodo
2020-08-20August Invoice.docdoc b462b6985f21115db5a18167bd1701f4a2599116fe237a0156cc2cce93e96edbVirustotal results 38.33%Heodo
2020-08-20Form - Aug 20, 2020.docdoc c500d1d7cc11d82b241b378d7e3015d381ddec5170984b634f89786580b27a24Virustotal results 40.68%Heodo
2020-08-200002298.docdoc 96724ca5aa5c891ca6a5e5ba740b3ec303445857cfd63cecc5828087c6171673n/aHeodo
2020-08-20CNN-080120 KYQE-082020.docdoc 210f3cffbbc984d2b04c012fb54991ba7cec609aaf5d6e97c4b7715fa179a770Virustotal results 40.00%Heodo
2020-08-20invoice.docdoc f1a7f5de80b5f75e5e52318197ab69af5a862ec92c7d2c27680503abc81e989cVirustotal results 40.00%Heodo
2020-08-20August invoice.docdoc 252905fc07b8d4de77b22dd1c68bba23716cb7bfbf56bae15a624f59b7e69c70Virustotal results 38.33%Heodo
2020-08-20Payment status.docdoc 2dfbbfd99447ae402c9cf005efa8fc29ff91103dd7471e1d3aa3dc83ec4973a5Virustotal results 38.33%Heodo
2020-08-20Copy invoice #636808.docdoc 42c878ac8d64be01ebae36247f206a89d0802d503c19e81d187ed9f1eba96bf9n/aHeodo
2020-08-20form.docdoc 3873789add951f7faaee58644422e134440be2903271725124cff640acd0ad4dVirustotal results 38.33%Heodo
2020-08-20Form - Aug 20, 2020.docdoc 416a4f17b5bc066941020cd43640276363268db7cb067a8cc7f1d27c3cb3cdb2n/aHeodo
2020-08-20INV_13736.docdoc fa10393ccc08487ee9b80a41d01c9e5e87c3c7690a74327b1b19e47f3638b66cn/aHeodo
2020-08-20INV_044227.docdoc 2cceef317fac265bf56fc5819196f6a58b95574e8085a889f61ed9cd5c6c387bn/aHeodo
2020-08-20191117.docdoc 741eedc40d043df1d8abba1e18fdeab3d276fd970087ad3b980243aba3c4878fVirustotal results 38.33%Heodo
2020-08-20form.docdoc 04a14a477cf1d1d2e5a426b932542d931d6264a101a10da26141be2752db8a72Virustotal results 38.33%Heodo
2020-08-20Payment.docdoc cf817564329bd4a2f3c9cdb4ce0609048d648917967fa9f9ff5c05a656ee3cbfVirustotal results 35.00%Heodo
2020-08-19Inv_670176.docdoc 8fef0fa03aec63f50c5f6c1b055fc5c7c90f092a2b4549ef022e6696d49c9bb7Virustotal results 35.00% Heodo
2020-08-19August invoice.docdoc d225f5ee78fabc34f19b2f3cce92c9ba74649bd52222615bc3c7d4301e1d174dVirustotal results 32.20%Heodo
2020-08-19August invoice.docdoc 3f50adbc111dad1db785e1c67241fd31740db030e0307cc9a2f1e4ff21aa2f56Virustotal results 28.33%Heodo
2020-08-19August Invoice.docdoc 2a532523cb09773c9d7a9dcdd27af27c026dcf5a433abf13c392fa73b32b8fb2Virustotal results 27.12%Heodo
2020-08-19INV #00038 FOR PO #008061602.docdoc 9318cf92c7e976a17c5fbb59cf477b976df4769fb71e7f523bc4f42edfa6393bVirustotal results 25.00%Heodo
2020-08-19August invoice.docdoc a42cda56ab706210a825c2992a112c9ede1476180e2564ea2d1d9a5e21287c1cVirustotal results 26.67%Heodo
2020-08-19EU-080120 MZJK-082020.docdoc d220bbc8081710b4776297c19f586d5ea6353b14ae1b1dcc7819e1f969aead89Virustotal results 26.67%Heodo
2020-08-19August invoice.docdoc 7dcef62f0fc5ee7984311d8c0520820bed4f9d2daba7926f4371d2dee98d6f9eVirustotal results 26.67%Heodo
2020-08-19Payment status.docdoc e518a717decc9cfeb174f53987f99d4a4c1802301dc8a18f5d83c137cfd95d31Virustotal results 26.67%Heodo
2020-08-1900394707.docdoc a1502f115a7017cb9c7c69031663b6c1ffcdb53af33a3dfe8b2ed61cdd0bcc63Virustotal results 26.67%Heodo
2020-08-19form.docdoc aaa14437f6dd748c3f483550973aa8a386d763a94036204ac1f2961d104a64eeVirustotal results 24.14%Heodo
2020-08-19invoices 1050 & 09428.docdoc 3f6ede3e0181e7fd9efb5449bf7d89d05cfc819f83c78068116a366a5dd105e2Virustotal results 27.12% Heodo
2020-08-19August Invoice.docdoc d6930b7f588a3196bb268650eb94c774a25c046e316b1c2b532fa72b71ad495bVirustotal results 27.12%Heodo
2020-08-19Copy invoice #71567.docdoc d69e7c1cc00bca634b35c3ad6f47a9682c9bb54a804e431c357f4d4b2a41619bVirustotal results 26.67%Heodo
2020-08-19Payment status.docdoc f730ca57a8d3c6e26d440760271ac159ba93a110fe815fc3babe354a2a5ed4a8n/aHeodo
2020-08-19form.docdoc a812657d14a3e18ca7e96d7986dcabd377bf56ddc9c1359e1b6112b583b8a89aVirustotal results 26.67%Heodo
2020-08-19form.docdoc 715da163a93216d8a21d68d8ba513e1f3229af00409cebf9ec1554118c703388Virustotal results 27.59%Heodo
2020-08-19Copy invoice #3662.docdoc 6f02da28377b727dfbd6e5e9e99efcfbf60faa5aaf59c7d15ffa90d17a2a3451n/aHeodo
2020-08-19Payment status.docdoc 2201ac1f9b0f2dbd4695c4d831567f9292b19a417c5b6e46bb2575a042995fbbVirustotal results 25.00%Heodo