URLhaus Database

You are currently viewing the URLhaus database entry for https://www.bss-ticket.de/wp-content/browse/7o06yaxzr8/p3xywzd24817897103294146tnev8250q0q/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:445040
URL: https://www.bss-ticket.de/wp-content/browse/7o06yaxzr8/p3xywzd24817897103294146tnev8250q0q/
URL Status:Offline
Host: www.bss-ticket.de
Date added:2020-08-27 07:46:04 UTC
Last online:2020-08-27 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-27 07:48:03 UTC to abuse{at}oneandone[dot]net)
Takedown time:4 hours, 38 minutes Good (down since 2020-08-27 12:26:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-27FILE_131445690062237.docdoc 2136cb67c60f9d08a5305401c1c4a33d58bf58038a9ce7d125d6ecf71e73655dn/aHeodo
2020-08-27E_PO_08272020EX.docdoc 9aa50c5b73758bc856e8457c181b159099dcd5dd98c31b8f1c2b5ba3f95fc96dn/aHeodo
2020-08-27PO_08272020EX.docdoc 0b996a31427775476402581dd429db57db41e3a98ed148776a2ba8f0b6cc1a75n/aHeodo
2020-08-27DOC_395977583584433679.docdoc 8b1e85e899250ae238664c29df61c908610d31299f75ab0da17ab24d8e89725eVirustotal results 29.31%Heodo
2020-08-27REP_PO_08272020EX.docdoc 606f2aaa6e7955ce889ca7bab690fdc3c65468565ab9a4c7beb3c6ac79050405Virustotal results 28.81%Heodo
2020-08-27LFPSRX2052DEQ7YF.docdoc 43adfc38793761eb64cc935275743618e593fea7c5502fada3b1212413e8be8dn/aHeodo
2020-08-27BAL_32210908.docdoc 4ed2cd6c5535cd7ce956db26cea56e2cb6ccd3679ae409be2b5c4288480a49a4Virustotal results 28.33%Heodo
2020-08-2762426244.docdoc ad2830d53332799552182a550a4d3f874618ab44fb3fd5ed52083ec516bb2227Virustotal results 29.31% Heodo
2020-08-27DOC_5SKMIMGIR5IPY2.docdoc 5446f8e283ca5372189e59b1c650fb1d2dbce0c61245c634d6a181772bf2758cn/aHeodo
2020-08-27256249020049.docdoc 20c3a7be51f8040c61c0e273bbb24b48baa3591f42ceeed30a1feb5915b085ccVirustotal results 28.07%Heodo
2020-08-27PO_08272020EX.docdoc 6aa58a4fec778614d948932485867bd12462484a07436b65b4039c413ba6955fVirustotal results 31.03%Heodo
2020-08-27876406717673302139927.docdoc e0e964de7f7e0c1f84a7bc56d2f08ad81e0553ec45f707614dc8fdf09e8c15c6Virustotal results 28.57%Heodo
2020-08-2766401206.docdoc e145b5be039742a0b89435111a34036fd1d0316c27f2ad4781450cc43073dd5eVirustotal results 29.82%Heodo
2020-08-27INV_GU9946749186QF.docdoc 4b21ed50ed79a420217fa1a72731b1a30d251a06141cd56f00a0fdd17ee11493Virustotal results 29.82%Heodo