URLhaus Database

You are currently viewing the URLhaus database entry for https://merkit.es/wp-admin/Overview/83704215/pz3ae-0023739/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437743
URL: https://merkit.es/wp-admin/Overview/83704215/pz3ae-0023739/
URL Status:Offline
Host: merkit.es
Date added:2020-08-20 23:38:03 UTC
Last online:2020-08-21 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-20 23:40:03 UTC to abuse{at}oneandone[dot]net)
Takedown time:13 hours, 32 minutes Good (down since 2020-08-21 13:12:47 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21Invoice.docdoc d3d3fa5a2c2eaa01efb9e027e292340107ca8435c312a037fb69809c454e64e5Virustotal results 22.41%Heodo
2020-08-21L-080120 WBVH-082120.docdoc 2d95348a5ec4fe86adef58e7bac3cc8c8bf1520554fe9d9bda6adb84865fad75Virustotal results 21.67%Heodo
2020-08-21August Invoice.docdoc 403c11dfcd14c01cf91b6fc45cb7ef0a55919e8e5e0292399e1cbe734bb9d2a3Virustotal results 20.69%Heodo
2020-08-21Form.docdoc ba4bb5f049cb59a1eb23f083cf22fe726a7d87f12e9b577f2eb52102b55496bcn/aHeodo
2020-08-219043103107HS.docdoc ebf536cc3ab147667e77823b5feaa2f72da1042d653ad11a26298800a7a86d77n/aHeodo
2020-08-21Copy invoice #033227.docdoc 4da5e980866878da930be670800361fd6b9b6ec73983dd60cdba9eb29bd09ab6Virustotal results 22.03%Heodo
2020-08-21August invoice.docdoc 9da9694a1d52b592d84be3c64b9cbccadfa602164ebe526c2a1223438384e7f7n/aHeodo
2020-08-21Inv. 061766549165.docdoc 6bfe2a94bb14cb68d7ac4a146d4ebd2ece1cacec94b5260c9d59be8816a63601Virustotal results 20.69%Heodo
2020-08-21Form - Aug 21, 2020.docdoc 7b92a86dabe99c11df1d176607cf155dba7ed15763592e1525e8c003d12a7e98n/aHeodo
2020-08-21UO5923593505YA.docdoc 8ffb84f76b863917f3ef52c3c75dfa70bc77599b7deb86067b43c413c8ff681cVirustotal results 20.00%Heodo
2020-08-21Copy invoice #2049.docdoc 74b2828f7b7c61552b965a77ae1b071c06059f184a24b685be5f3094ade311ecn/aHeodo
2020-08-21S94 invoicing.docdoc da6cfd72a982796c23b85856bdad5e44b0a6b35b120440b1be740f5424b3dffen/aHeodo
2020-08-21Invoice.docdoc e194c7cc8ffedeb69d1b752e312fd6605be5ae9f49e9b652a38246d0c865dab2Virustotal results 18.97%Heodo
2020-08-2106956814.docdoc 97b387cc7ac53574e95b7d09f100821989778d4fc076acebf7b546f24b500280Virustotal results 18.97%Heodo
2020-08-21Copy invoice #42394.docdoc 3d0173175bbc0f83d9a5a2b8324c817f6a433756949f63691ec5374d82859a6fVirustotal results 18.33%Heodo
2020-08-21Copy invoice #21092.docdoc 1956596f7ed909a0c2291a2a8b6ce38918255ae87ced9b557c898972bcce4d42n/aHeodo
2020-08-21August invoice.docdoc 8bd0a1327645a9ae845837795dd708e65e529f2b0baf0c5dbc548ef787a20024n/aHeodo
2020-08-21invoice #1403.docdoc 56e0e49883a186240907a045e8933efbbaa016d71dec86c1ae477064db00a160Virustotal results 18.33%Heodo
2020-08-21INV_6618.docdoc 43a46142f7621ade3d5201623975cdd2f46d750261c13be021a2069028076099Virustotal results 18.64%Heodo
2020-08-21INV #870 FOR PO #001597564531.docdoc f18c5d3941f1fe1232a82e045cba9ab62b797025b1b7b5477a19a08b9b3fcae0n/aHeodo
2020-08-20invoice.docdoc ed8f3cd480b6fef9996f65e02cc1cb3d295447728fd009032ac3838d32e01f37Virustotal results 33.33%Heodo