URLhaus Database

You are currently viewing the URLhaus database entry for http://jurczyk.biz/piotrek/btv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:438622
URL: http://jurczyk.biz/piotrek/btv/
URL Status:Offline
Host: jurczyk.biz
Date added:2020-08-21 20:37:11 UTC
Last online:2020-08-24 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-21 20:38:02 UTC to abuse{at}h88[dot]pl)
Takedown time:2 days, 14 hours, 28 minutes Poor (down since 2020-08-24 11:06:19 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22Inv_652046.docdoc d264878eae29d3da022f38e67a38560346ba42cbb6dbebbf0e6c852c666fb1acn/aHeodo
2020-08-22August invoice.docdoc 6f6e1037eabcdd4495abaec04471ac97398c57eb88493b324e2d89ad9bd7af08Virustotal results 38.60%Heodo
2020-08-22Electronic form.docdoc 31c1361e8baf77b4fb015cde0ac73df4a7476022d35614113a88c60fe658cb9cn/aHeodo
2020-08-22Form.docdoc 2e74991bb85eca7f7f2a23a4d66723c0fd913e04060037642abc2f9525560cdbn/aHeodo
2020-08-2286749.docdoc 90f17bd24601e8b3707503a6768ee606d3133da51a9d9e539bf906a83fcdda4bVirustotal results 37.29%Heodo
2020-08-21Payment status.docdoc 27e2a7ad7764b75f11753d945f9b7b087f89fa4b8b9bc1198bf7992c7c85d1e8Virustotal results 37.29%Heodo
2020-08-21Payment.docdoc d09a4703239b8dd258d5174bc65647fa6b951cecfcb7c2f9c46a29a061a7a769n/aHeodo
2020-08-21invoice #4346.docdoc 31ef2257cdb7b9006892fb9754673511beaf648f6c3a899b9bff3031310a9acfn/aHeodo
2020-08-21Inv_53063.docdoc cd51eb10684d011728e273a115ce4655403d5a5fb2d0ddf0d015e93aaba39852n/aHeodo
2020-08-21I-080120 CPPH-082220.docdoc 2d4370eba117c88617870ab941572195d2facde4eb4e1d768507d37840812da2Virustotal results 33.33%Heodo
2020-08-21Form - Aug 22, 2020.docdoc e5c9f8c0ccfa47835d30be512636ad1b0e40d75587d5a309f586b67796aae5cdVirustotal results 33.33%Heodo
2020-08-21Payment status.docdoc df8d09457a129b57c4740b237ac226b0e0245d035dc20930563bab681e98e8c9n/aHeodo
2020-08-2129525.docdoc 43057d3c74a6fbe3be2660879e861ae3d0b2118866abb1e3fe8bc169c526d957n/aHeodo
2020-08-21INV #76107 FOR PO #00447247628871.docdoc 214116ae52ad96af88fa41e0ea271fecb493e2afbc403bc3ca2c184ffd03d996Virustotal results 32.76%Heodo
2020-08-21August invoice.docdoc 9e8252eaa40d9995798d1c88f2ee30e36cac7ac88bbddd38c4dd2d4c8d19385cVirustotal results 32.76%Heodo
2020-08-21NAK-080120 BXDI-082220.docdoc c2df091253a5c3fd605759d6e277f88a01de99b7cf35b2ba5b1dfe70689726f5n/aHeodo
2020-08-21August invoice.docdoc 1947636aef5e8a688d23466d461c19f6ac67d351c6c14000ec3095c257cc737eVirustotal results 31.58%Heodo