URLhaus Database

You are currently viewing the URLhaus database entry for http://zienoptiek.nl/wp-admin/http://lm/3fjAz7jiWk4R/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:452588
URL: http://zienoptiek.nl/wp-admin/http://lm/3fjAz7jiWk4R/
URL Status:Offline
Host: zienoptiek.nl
Date added:2020-09-03 17:03:03 UTC
Last online:2020-09-09 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-03 17:04:02 UTC to abuse{at}argeweb[dot]nl)
Takedown time:5 days, 21 hours, 22 minutes Bad (down since 2020-09-09 14:26:30 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-055696DMX_489608.docdoc 62cc3eedb06b43f8a3e286b0a9f04cbf36fe240a532b217d91950ea20fa0ba9cVirustotal results 28.33%Heodo
2020-09-04REP_2020_09_05.docdoc be5a076cc07b81d54fda54ef3c56f2d60ee214c3d1fe46de3dc59a1df619dc29Virustotal results 21.67%Heodo
2020-09-04P94109_126123.docdoc 88d669402f9cb6d3c39a7de76b5e16c45d5db2b7a4e5c5f2b9ec112d299f85d6Virustotal results 21.67%Heodo
2020-09-04dat 2020_09_05 INO469.docdoc 0f264ea12ac1b1f96e80c683d7aabce629b15ded57f43e29a4faa7cbf057d673Virustotal results 22.03%Heodo
2020-09-04654696 2020_09_04 45892.docdoc aa3db031e17cd90af00951bc4d86c18c8e42328f47e9014b552993ff1b29c557Virustotal results 20.34%Heodo
2020-09-04inf-20200904-7794853.docdoc 623ee20c1b2e5a53a0bbf6eb21f4b87cb0e6392e023f1e08267abc08c26e5bbfVirustotal results 20.34%Heodo
2020-09-04Attachment_2764.docdoc 112b31f94d0408209223b109553273ff732fcd2f05b532c53d7ef7e4658bec80Virustotal results 35.59%Heodo
2020-09-0406938 2020_09_04 2622975.docdoc 2fa57b312c1f1976a6e1237388978f53045e0bd342f5ecb46de197c6f2e4b5b8Virustotal results 36.21%Heodo
2020-09-04Attachment 947704.docdoc 09525f62505c8bf7a99dd08caa65a18ab1c71a0f291fd666b3c53972aa9f1466Virustotal results 35.59%Heodo
2020-09-04Doc_2020_09_04_30856.docdoc 6d0e0c6c270e763b2d4e0f6e14fd373b7ca0688c6b0d27a4589f39d40c756d3fVirustotal results 35.00%Heodo
2020-09-04Inf_2020_09_04.docdoc 8a87e7dcaf07545941e8f4859526c55f0b840dc1d051e86b09200a3a49ba5c01Virustotal results 35.00%Heodo
2020-09-046671TTT_20200904_0480.docdoc 07499f73c1b2290d3f1628c566a91f8f3bda896e9c9774c4de22d614a8b1381eVirustotal results 35.00%Heodo
2020-09-04FILE 2020_09_04.docdoc 403170a4ca043be478bde432c994bc04e0ec0bb95f4d457928890829a998e46aVirustotal results 35.00%Heodo
2020-09-04list 20200904 67223.docdoc 530c8a300c489e40c554fb9c0be1d28633675699b2a84b520ff020fcebcf964dVirustotal results 35.59%Heodo
2020-09-04REP_84891.docdoc e4006ffd7617f48dca3ed5e7220e159de2160b07f86452e1fcb7fa0f27ed1d9aVirustotal results 35.59%Heodo
2020-09-04DAT 20200904 TUU4874.docdoc 20f0a0ba4cd0dac615e918dd489d36a9dbe9da8eccd28074379ccb9297f44202Virustotal results 30.00%Heodo
2020-09-03dat_E6012.docdoc dbc13cd5e6ecadf32014b392f23502deefc834c7eb890da0946c1a50d059aebbVirustotal results 25.00%Heodo
2020-09-03CRA91659-L481199.docdoc 696b7ce50ac4fdcb98c6acf48b99570ee095ad2d898b88a51dc7c228337746f8Virustotal results 25.00%Heodo