URLhaus Database

You are currently viewing the URLhaus database entry for http://defiteqazerbaycan.com/Overview/docs/0adxrdan/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437966
URL: http://defiteqazerbaycan.com/Overview/docs/0adxrdan/
URL Status:Offline
Host: defiteqazerbaycan.com
Date added:2020-08-21 06:11:38 UTC
Last online:2021-02-23 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-21 06:12:02 UTC to onur{at}voyar[dot]net)
Takedown time:6 months, 6 days, 12 hours, 13 minutes Bad (down since 2021-02-23 18:25:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-01EIS_080120_BOY_082220.docdoc b619a3ff4687c780f368673729c78779f7cdd143abfdcc5ee05530d2dd5e99a0Virustotal results 71.93%Heodo
2020-08-22INV_37062551.docdoc 096a3542fef0f482f624aefb72a07ce378c1b5618b69a2067567a88f09b01190Virustotal results 34.48%Heodo
2020-08-22LBT_080120_DUR_082220.docdoc 70ac24d401d9e9e234080bee44b24b274e7a2356994d1acc91678f6f52fd1937Virustotal results 35.59%Heodo
2020-08-22DC1936472022HC.docdoc 9a8cf33cb840374c162689ca999f89cda396d27c6f78919245af2730b1afb2deVirustotal results 35.59%Heodo
2020-08-22M_BDA_080120_TNU_082220.docdoc 7cc0c880d55c37aa23a77e2002e19f7b8187f065384cb3ed03d43ec181cbe496Virustotal results 33.33%Heodo
2020-08-22O_OXO_080120_HJW_082220.docdoc 145acd5e0e67f614595dd75a8650697247d18e68629cacad0810b67783e01b64Virustotal results 36.84%Heodo
2020-08-22THGWVQEU.docdoc 9d28728ad9b834f59079daf4cb54603a868e3909eccb6ba13e229901a40103c6Virustotal results 32.76%Heodo
2020-08-2218594249893247652497285.docdoc e58f047fe04cae788a4aecc9507bf22d1c090e44f2181a4d57f2d7c5d7535f75Virustotal results 32.76%Heodo
2020-08-2101406024.docdoc a6679eb46ce9ffb28041319f4f1f5d9ec789b87a8ee7d4e8a35d1971f7d02e58Virustotal results 32.14%Heodo
2020-08-21W_X1TEMQZ.docdoc a94bfdde9ea088c41de28d3442c32ab32bc1fedeca96db46e004671e01f80e21n/aHeodo
2020-08-21SLJ_080120_ILR_082220.docdoc b18ff814b0ba77996f0fb7438dcab6de0e4af317dd07c77aa494904df1aa5446n/aHeodo
2020-08-21REP_HL6WTNMP1.docdoc d5be5e80d08055b8f4a6fab2d84a09f74f07939c707d2c73234e1529723f6839n/aHeodo
2020-08-21284034094813808.docdoc 4bfdbdebb1f582e2fb034a60c4b82004b6ea2db5c8d312d5e384133dd634c5b2n/aHeodo
2020-08-21BAL_VMW_080120_XFO_082220.docdoc 63e8e5f134319a61ee0ea021511f79a597ad651a1712ff703902454157100d1cn/aHeodo
2020-08-21DOC_Y5NCY04O3XM5UFN.docdoc 87946e4acae842c121b63eacefc34325426535b79aa49dcbcb4d1c74faa7adefn/aHeodo
2020-08-21REP_27583790.docdoc 656cc3eb3438badf2ad21a9aa6c6a7b35ef4279cc9469344dabb0878569757b3n/aHeodo
2020-08-21X_OW8031386196PL.docdoc 6323c7b4ec8783e51f631813adf56905ab2c875fd1c8f94f58f7b2f98ed037f7n/aHeodo
2020-08-21C_WMHGG7PR.docdoc 860c5f447f202c55885fc12b01dae4464cb7a2813113a03099954d6e2487f437n/aHeodo
2020-08-21XE2572328779QV.docdoc c23c13d2d134c96634d942166257baa97b35c635a000d8bc2f654fdbd6a86e4an/aHeodo
2020-08-21DOC_LV8041668808YK.docdoc 1022e8758c9c8dfd250c7ba0b11aab2f91e2f1a695616c8cebf548ba5c75fad5n/aHeodo
2020-08-21FILE_3UTME5EXPU.docdoc 48b6551e86b81eed2eee275cf1d833e44580745dc6f578ee3fe8c139e0c205d7n/aHeodo
2020-08-21REP_23464833720605511.docdoc 4515983abea28fd6da7bd8991a47916f0a226647eae1305d1aa554af62144d8cn/aHeodo
2020-08-21TIB_080120_QXL_082120.docdoc 36cfe2c9e748465f27e670ee4877f686c8194cf21b19145ba98e77a88057f74dn/aHeodo
2020-08-21REP_PO_08212020EX.docdoc a7da93abb18c18072efe59aaa0c6479e8c85e09c61336c1684a118219facfafdn/aHeodo
2020-08-21E_PO_08212020EX.docdoc 55c098b1fd0458cfafe7839002c15777abafdccae1eb822693225399a46f744an/aHeodo
2020-08-21ZJJ81YAHH20.docdoc 8629c793b67877bd01d45910331ea12b6f45da2b3723d513588c6f27017f7af5n/aHeodo
2020-08-21INV_PO_08212020EX.docdoc cd582a8f6da0324022baa471fcbc16a2445360a8341dc7bd1d5f90d12e576d32n/aHeodo
2020-08-2187053972.docdoc 3e8208734b44f5600a38c69cd3cd3275d2fe8dc82af7ec78c8619383741b66d7n/aHeodo
2020-08-21VKR_FZ8298539247PV.docdoc 7e98e23799012588113a6d4c049b1b61fc8e47b51c62af6f7f6ce336f28057c1n/aHeodo
2020-08-21X_NK6328837633BX.docdoc a733a4e6024de8fb8639c32f10763eb1350346440beca5654a2d0dcb93ad94f0Virustotal results 22.03%Heodo
2020-08-21INV_AGKWOMV2F7PYNH0.docdoc 92ce63816306ff769b615c927a2677d7a4d1eecdbe7e6bc825ce4a446df1bc7eVirustotal results 22.03%Heodo
2020-08-21H_55405668580033341141904.docdoc bce60944d3f355c0b0204703032c8c88b18863aab47ce9c419f3b2b9bead9c9bVirustotal results 22.41%Heodo
2020-08-21B_PO_08212020EX.docdoc 6d41dda6d8f84da740366a301d3a7e30f305bbd2935b6b609341c5558cb47b28n/aHeodo
2020-08-21GJV_080120_WWT_082120.docdoc 8a887dca0fea26577923cdf9c4985eac7870541eacebc98ac38b51a4bda04ab7n/aHeodo
2020-08-21SUI_080120_UNX_082120.docdoc 6da5305c5476e37418039466c6809a7b54104ba1e58a922c6383a74d7fb2517an/aHeodo
2020-08-21ATV_080120_MJQ_082120.docdoc 83912e356ffc063006637864e3ceed204efd7141ac92b7ff91fc4e3372c2552cn/aHeodo
2020-08-21DOC_XQJ_080120_NKL_082120.docdoc e0edc38058ce9b689134aaa2fde3ffec05c36a32a51eb58932d313160434ec50n/aHeodo
2020-08-21IO8604867602CR.docdoc 10b6f0f265e6ffee5f3f24d1719593a94876a740dccbeb6f319bdf53a44a72d8n/aHeodo
2020-08-21GUJ_080120_JGT_082120.docdoc 9bef601df3e482ea5b723a710c2086bab43312b7c275da979b1765cb7660f060Virustotal results 21.67%Heodo
2020-08-21INV_15523032.docdoc 28f2d62905428be69bb94405cef4459871fb4d34be7d8e1cd99be4088802ce60n/aHeodo
2020-08-21FILE_LBF_080120_KRX_082120.docdoc dfa53b1ba591b08dacd3b798dedee90d559b092102517b46cd1a04bccf51e386n/aHeodo
2020-08-21DOC_AUV_080120_QZF_082120.docdoc f4cf506743474d0a3cd6642db40bb54301ec4a84e38d41782b1199600b16df5dVirustotal results 30.00%Heodo
2020-08-21BAL_QH7054452497WQ.docdoc b3bab296d26d412d3adaa195a93ca6ff44a5b6bc5e16f130e2386928d12f0570Virustotal results 30.51%Heodo
2020-08-21WTWN_3585233652.docdoc fd2732589c07dc97af78689360772ace939ebdbf5c47132f7df607d9e24a267dn/aHeodo