URLhaus Database

You are currently viewing the URLhaus database entry for http://www.aagrivarta.com/wp-content/Reporting/vcyv1x76h/c9781812306qitkhuagmf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437721
URL: http://www.aagrivarta.com/wp-content/Reporting/vcyv1x76h/c9781812306qitkhuagmf/
URL Status:Offline
Host: www.aagrivarta.com
Date added:2020-08-20 22:56:10 UTC
Last online:2020-08-21 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002878685 created on 2020-08-20 22:58:05 UTC)
Takedown time:20 hours, 53 minutes Good (down since 2020-08-21 19:51:10 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21DOC_8625426470530919700864.docdoc e3a1db9625e95bab4a009a18804f0e89bb1233d33af7e255b6e304a51b582450Virustotal results 25.86%Heodo
2020-08-2158790378.docdoc 73af607e5e74aa92ccc4571a5ebb32a9f82fc68737dce717ba8e7ec003f2501eVirustotal results 22.81%Heodo
2020-08-21REP_IDF_080120_HIR_082120.docdoc 9224304a855950f2d9e20fba315013eb2b5c32ba77120148b472abf2d2ca036fVirustotal results 26.32%Heodo
2020-08-2107672917.docdoc 36cfe2c9e748465f27e670ee4877f686c8194cf21b19145ba98e77a88057f74dn/aHeodo
2020-08-21COE_91977818.docdoc c6a5cc3476c048456af1997e698dc72231c1be3e590f6c9783e8adf136320f46n/aHeodo
2020-08-21PO_08212020EX.docdoc 77460cc133315ccdfbdaf1546ce45acc79abed14bb832947ca2dd33c1425dd49Virustotal results 27.59%Heodo
2020-08-21PO_08212020EX.docdoc 8629c793b67877bd01d45910331ea12b6f45da2b3723d513588c6f27017f7af5n/aHeodo
2020-08-21REP_PO_08212020EX.docdoc 33da171c98a915b6b46ee6b15f06b10f57557c479fe659f138921a4578264ab1Virustotal results 27.59%Heodo
2020-08-21C_AI0663376395UT.docdoc 3e8208734b44f5600a38c69cd3cd3275d2fe8dc82af7ec78c8619383741b66d7n/aHeodo
2020-08-21G_PO_08212020EX.docdoc 7e98e23799012588113a6d4c049b1b61fc8e47b51c62af6f7f6ce336f28057c1n/aHeodo
2020-08-21174952529975017828.docdoc a733a4e6024de8fb8639c32f10763eb1350346440beca5654a2d0dcb93ad94f0Virustotal results 22.03%Heodo
2020-08-21INV_08382730.docdoc 3e43c82de197edaeba10530c998314e4ebf5ed9cc234544f13b1a3b41d5f2520Virustotal results 22.03%Heodo
2020-08-21FILE_KN6680011018XZ.docdoc 6eb69e6bf953f664d116b1f723231c894c54ff4b2482e3f9d1120b10fc541bd5n/aHeodo
2020-08-21INV_82854361.docdoc 71168d573c54a2d35fe5f22691d9090791fe2c78cd932b4c9fdfec7062329f87Virustotal results 20.34%Heodo
2020-08-21DOC_WT5GNSMO00MQQT.docdoc b326935dc2c2961ba03dbcb71953cb015dc694fdd25510aaea3efd5f86ac04c1Virustotal results 21.43%Heodo
2020-08-21BAL_IXW_080120_ZYT_082120.docdoc a8f4d3cce2e44d80f854033bc5abd85b25fef08d58f6cd0c2e3624ab6c5833bbn/aHeodo
2020-08-21L_2DU6Q5DUJZK5.docdoc 83912e356ffc063006637864e3ceed204efd7141ac92b7ff91fc4e3372c2552cn/aHeodo
2020-08-21V04QWBE3OAIFAPTL.docdoc e0edc38058ce9b689134aaa2fde3ffec05c36a32a51eb58932d313160434ec50n/aHeodo
2020-08-21H_PBR_080120_UMY_082120.docdoc eea83be73bb6b63138b070ecbc75bc0af0a8f6540fb9125735eda75701adc2b5Virustotal results 20.69%Heodo
2020-08-21BAL_PO_08212020EX.docdoc dd3afacc150ce99efa0843ef4211a83be23385d9f1d8661b1fd04f45975323e0Virustotal results 20.69%Heodo
2020-08-21FILE_756480013829948879725471.docdoc a99bc78979b657a1d16c9c3cb64ddfbd2d0317097210ad0dd85088b7a6c1b3ceVirustotal results 31.03%Heodo
2020-08-21BAL_41641699.docdoc bf9fe3f7b66ae5baa3877c2da0edf95f1434298010128ce61c76f6bb6c4c46e0Virustotal results 29.31%Heodo
2020-08-21FILE_45649473.docdoc f4cf506743474d0a3cd6642db40bb54301ec4a84e38d41782b1199600b16df5dVirustotal results 30.00%Heodo
2020-08-21INV_PO_08212020EX.docdoc c6fbe26a69de6c684e24b5438000839980b291ba697b3749c226ee5871517433n/aHeodo
2020-08-21DOC_QKA_080120_MFQ_082120.docdoc fd2732589c07dc97af78689360772ace939ebdbf5c47132f7df607d9e24a267dVirustotal results 29.31%Heodo
2020-08-21IV7438088481LB.docdoc 0566ee320bea900383d9ca704bf88d12efbcb69e6eed4b55d1e904ced4c6af2an/aHeodo
2020-08-21X_36231040.docdoc af3988b7856704b5467030ee792d90beff86f1f453c3280c8d0f822b2dc9898fn/aHeodo
2020-08-21INV_PO_08212020EX.docdoc 29489d8ec25a46a76a0bb977cba3d4260eef3e2520e1b060a323df2c5f8cd8fbn/aHeodo
2020-08-21INV_QQB_080120_IWC_082120.docdoc 346bffecd143569cdd0fb796380eb297dbf4b03fbb9c68edf994501847763d20Virustotal results 31.03%Heodo
2020-08-21REP_MVD11TGI6.docdoc b067f851af29843c48232b84fd2062937192d864d7f69979bc590786f4f4d4d7n/aHeodo
2020-08-2160569424368394026628365.docdoc b008c2a5a3f325892c0b9e4b83ede888637a59c8b5e320968165589ba583af7en/aHeodo
2020-08-21FILE_ERR_080120_FWB_082120.docdoc 913271f10fdbf26cf67c0c6b3b0f0f501848bf25f539c04feb5553f95307bd95n/aHeodo
2020-08-21REP_6645871902212882.docdoc 7a13dbbd4da1bec806c6eb1b585d5d1be3e682b691fed51ea02a818a10686100Virustotal results 29.51%Heodo
2020-08-21FILE_28399751007.docdoc 32473b384e1e07f387b80575017b09c425d1bee0904b9d96319e3bb72e7d6ecfn/aHeodo
2020-08-21FILE_PO_08212020EX.docdoc 860c1beab2153836d0fc30dce5b6b48b4ba96f3690404c504ebb1283ef780302n/aHeodo
2020-08-21DOC_NAR_080120_WEB_082120.docdoc 4ab707775fa2390fd9243175abdd54e81f7bf91607d4d7fc5c97be1d43f8606bVirustotal results 31.03%Heodo
2020-08-21IM96O6BUI76KXPV.docdoc 24fd38bc7a9fc81d9db5634f8d3c76f68707dd688bd30ade28d86def52b8aa8bn/aHeodo
2020-08-21DOC_FNZN6WQSSZMVA.docdoc bae16ea340cc512d6e1934d205bb3f0e34da81c10bbdf1a411b338c91f415c03n/aHeodo
2020-08-21FILE_PO_08212020EX.docdoc 1125770ca72ec38466e63abb84b14f1128a7b5fdee91ab098dd25c53230e1537Virustotal results 30.00%Heodo
2020-08-21PO_08212020EX.docdoc e9a0e6332b5faebefd8eaa44f82d2bbebeb7b2dea78ecb0b89761f9bd85b0d8aVirustotal results 28.81%Heodo
2020-08-21BAL_80606083.docdoc ee0ecbcd1c840072ab9f352930a3d1d53c1669f8ea22577bed152b6e644a6c74n/aHeodo
2020-08-21BQ6252585532SP.docdoc 827b61d3f0f0d3d42ee69919ecdb9a190e3939c7d32cf425f7cf355276a3d2d4Virustotal results 30.51%Heodo
2020-08-21BAL_84442731.docdoc 92212c2f3b4445e151bb54c869e7b1d8025339f89a49962048c61a425164a38fVirustotal results 30.00%Heodo
2020-08-21U_PBO_080120_IQX_082120.docdoc c78e1a46aaa668a1c315dfb0b147f7a8d1b34af64b8f3cb9c6621ac872d7a2afVirustotal results 30.51%Heodo
2020-08-21Y_BENMAQYF8LMGGY.docdoc 7523d22aeb84f9371a23ac8932c4316ea64ba34548df83083e4110ab90ce9cabn/aHeodo
2020-08-21BAL_PO_08212020EX.docdoc 756a4d472796d23433de7126e62ce1e2db7fe58f109c96ed8539bb03e9032e90Virustotal results 28.33%Heodo
2020-08-20BAL_INZ951TE4.docdoc ba157ef26a5a82a7c5380c26dba2cc7996739287eb02f8af8e4080b08f02d946n/aHeodo
2020-08-20DOC_19005269104.docdoc aac3f9b6d09a48b999dbe421aba8e36591e5f245f960a292bbf0cd518c23b922n/aHeodo
2020-08-20DOC_94743330.docdoc 6154589206b4a6394279b8053f63c1a89f87a7dd81ff376e2f502c63bd70d48fVirustotal results 30.51%Heodo