URLhaus Database

You are currently viewing the URLhaus database entry for http://stoepfer.de/cgi-bin/http:/sites/TZTKiEtZYzOTsADBr/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:452807
URL: http://stoepfer.de/cgi-bin/http:/sites/TZTKiEtZYzOTsADBr/
URL Status:Offline
Host: stoepfer.de
Date added:2020-09-03 21:41:07 UTC
Last online:2020-09-04 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-03 21:42:25 UTC to abuse{at}strato[dot]de)
Takedown time:21 hours, 25 minutes Good (down since 2020-09-04 19:08:16 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04147324.docdoc 95718b95b1e8732ffb58a93557e44c7e7f99a0dec4ab200ad2ffa83e6b455780n/aHeodo
2020-09-04LIST 2020_09_04.docdoc 380c46aa7a6ebfb32b4e005930aa368ca90386ecf02e2587a0c6f035569df404n/aHeodo
2020-09-04Attachment 83271.docdoc 6811ea887aa1fb0b0947ae4c101b1bccd01e6be62529652d9a9c70a8879485feVirustotal results 34.43%Heodo
2020-09-04rep_20200904_829819.docdoc 6f0b6b0222cea2d8ba538112fd54ca8a8bdff5682be620babe330264cca0858aVirustotal results 35.00%Heodo
2020-09-04file_20200904_X996946.docdoc c9af36ca0fb3bda5fbb9b2b047989fe8f0464034fef0f22352c26edb9f8f050aVirustotal results 35.00%Heodo
2020-09-04S9545 20200904 P569.docdoc c9b3d60eb5016eb7958189110cbe77208b4099ca5f9f4b71d6170a263905e07bVirustotal results 35.00%Heodo
2020-09-04inf_2020_09_04_56805.docdoc 403170a4ca043be478bde432c994bc04e0ec0bb95f4d457928890829a998e46aVirustotal results 35.00%Heodo
2020-09-04Untitled 2020_09_04 473336.docdoc 5f507662f25de9c594d9c295a8fcd49bab262c3b83c2a470ca2a0303834b57d1Virustotal results 35.00%Heodo
2020-09-04Untitled.docdoc d21d369a575521b056524693121464f2aa51cbbc0790a6b01069bae6bb4dbb32n/aHeodo
2020-09-04Mes_20200904_GX893.docdoc 2de84dc5866a028c50d2092b83ad65d0377d6419786fcd9b87c75a624600ebcfVirustotal results 35.59%Heodo
2020-09-04List WPD1552.docdoc 9fcaf4513c97d7fc9141d719481fcd7479ef7213701221d18a3755a7035e4d3bVirustotal results 35.00%Heodo
2020-09-04ARC_2020_09_04_0386611.docdoc 7ba727e56ef8d6bd90965dcbe4450880fd516019d4c10f8a5d101541aa883dfaVirustotal results 35.00%Heodo
2020-09-04FILE 20200904.docdoc b246ae5854fc909f2e54163de7a8e78ef5de5a8648ec2768c6533c0ad65a15d5n/aHeodo
2020-09-04Arc_2020_09_04.docdoc 60417a3fac59e91bb0031c7e6fc97a808021296c159f11631bc3ac3e34ec5603n/aHeodo
2020-09-0478276.docdoc 088de2c93ca2a5d1c4e17cab469aa2ea619a58e4c03c744b338f74787e4dca86Virustotal results 30.51%Heodo
2020-09-04Rep-20200904-48465.docdoc 9c82f57cbccf6ba04020fd7828aff371796a2f69e908f5ecf8c25d921a13abf6n/aHeodo
2020-09-04Mes 20200904 DD9339.docdoc be6a2393d8d58557a21737649e0977851d793862f1b80f1d27a1ee2ee70b3154Virustotal results 30.00%Heodo
2020-09-04List-2020_09_04-9401.docdoc d7452abd23b4d0a252d67436bea5f98b177d6d4a707ce10ce71852940cf97a3cVirustotal results 28.33%Heodo
2020-09-04LIST-20200904-YY710881.docdoc 07a163e438bc23f4ba37b5191bd5bd2134b87c7fe63924af48c3601f222bf676n/aHeodo
2020-09-04doc-2020_09_04-171216.docdoc fe8b0f5cf9354ea102596195bbbf5947c2103a393c585873166112b4734d3169Virustotal results 27.59%Heodo
2020-09-04Doc C6796.docdoc d0faa29d011a7abe3a5e2d03346780cebd6a5dc766e52241014b96e58b4a99d7n/aHeodo
2020-09-04dat-2020_09_04-556944.docdoc 22541ac301b5c8fdf15f74cc06df0c5a237bfe5593f910699acdaa3ae869edd9Virustotal results 23.73%Heodo
2020-09-04ARC_20200904_BTX389.docdoc 92292a49939cb6ff5b8d8da77b4c5a898f4d833bbf5ec9fc2ec997e254c91e35n/aHeodo
2020-09-04ST8846_A5663.docdoc 2e6992209a57f96c89556ed36c0e872bf312cc0e79e673c6888fe3b263c1ce06Virustotal results 23.73%Heodo
2020-09-04Inf_2020_09_04_08006.docdoc 29ffe94790ecabfa236c6b248a97808417fc07a48c0460dc56eac0c1820b0182Virustotal results 22.03%Heodo
2020-09-04MES 2020_09_04 9149.docdoc 0348b2d84a9245b99853803db4a5d8a6bb6b89ba2b30d2d201dffbe97b718d82n/aHeodo
2020-09-04List_20200904.docdoc 0b32acf0a3322fe655fc8ea7251ece0b782a819ae84d5819cbd4f1e2ce7fb031Virustotal results 21.31%Heodo
2020-09-04doc 2020_09_04.docdoc 1c67628b01a329488b609ce13ceba3610a0d79cfe6bdb3d6750f714ffc97f27fVirustotal results 27.59%Heodo
2020-09-04LIST-45664.docdoc 8c4a8a1c7d4ddbfd0b727a5f169b6bc78e7997fd2b0947299d663a215bb3a9d9Virustotal results 27.12%Heodo
2020-09-04Dat_2020_09_04.docdoc 9896f6412623c9c75887ccf147bc7461f10527fbfb3463272f2086e56cc0b645n/aHeodo
2020-09-04inf 20200904 H648688.docdoc b7755557dad3aeec317596adb01ad1e78baf190e8c236e588d7bcb6a6681ac3fn/aHeodo
2020-09-04MES_WKS200.docdoc 6b12df90c4f1f8bdf2bcc412748ab826992ecf7c8f1d6dff2768fff19be85236Virustotal results 26.67%Heodo
2020-09-04FILE-412903.docdoc e71c38eb1939116c282af23aec1b2cc64e8a452a766d9fc5b7274d970ac57827n/aHeodo
2020-09-04UNTITLED.docdoc e514ee40aaf58363f83b55c5bb9e01e591be5d5fbea0402363bfe659405e331aVirustotal results 25.00%Heodo
2020-09-04dat-2020_09_04-AZ39917.docdoc 5c3e085b8dc0398471b039b43d850dc0dd50acd421707eb3296026e53b65d5a9Virustotal results 23.33%Heodo
2020-09-0426303503 2020_09_04 K575911.docdoc bfc004f7ac8d0c2e241dc8086e3e58fb542fcc47b5114ab614fa893199328acfn/aHeodo
2020-09-04Untitled.docdoc bfa8973f2e13b6e793f43e4c1d1b68e81e7928903e0f8edf9fd3b146ee1cb9f1n/aHeodo
2020-09-04File 20200904 6420116.docdoc bbb72c4df6c036dd3b187c18c6ba7bf547ed934e658bdcd5d3c23d14d244c2eaVirustotal results 22.95%Heodo
2020-09-04Mes 20200904.docdoc d9c975b6db619552db6df9461b3c0947dbeb829698591386f2c86994a414e005Virustotal results 23.33%Heodo
2020-09-04UNTITLED_3652.docdoc dd4feaa43e89898264a8512b2339c67fb1207b97e5c6c216fe656ff6234c0098n/aHeodo
2020-09-04UNTITLED-20200904.docdoc 1b9de5149166550851ee26d1ff101cb636ab70e0162faf31397c1b3d9efb8ac5n/aHeodo
2020-09-04UNTITLED.docdoc a116a068131b7ef0d015c07614c3e6f346f604fd7d9b5b974b9f09a997916732Virustotal results 44.07%Heodo
2020-09-04Untitled_20200904.docdoc 4e3917d545fe670b0ea8dd1cf91701595c3cbe5ab87b5c53a826514778bad6f6n/aHeodo
2020-09-04Rep-2020_09_04-3974.docdoc 425e52461ebc8d48bfd618d18286f0f60b45a26d89da4a25c07ea36cb359aeeen/aHeodo
2020-09-04arc.docdoc d310bc1324e7bd2e09dde5482cc4390a66257737f2da4ce7c2bc2f05d04663d7Virustotal results 43.33%Heodo
2020-09-04Attachments_2020_09_04_7355284.docdoc acb81dc6508ccc95393a57308575ed700b2dca51e4f0658f6ce9dacfd214dd3fVirustotal results 40.68%Heodo
2020-09-04file.docdoc ca1b62ba1f6df4e6e7ee6b0ae0cdbf41303c29e916602d32ba15df885ce8d527n/aHeodo
2020-09-04mes_2020_09_04_9990077.docdoc a7f7db7e743de3993fe73005b54d739c61d8b922446cf434ecedcca82c63e922Virustotal results 40.00%Heodo
2020-09-04Rep_2020_09_04_355.docdoc 6bb0dcdffbd9df010a6d7951c4a8ecb8596b694a6b4f59c866f30a012bc325f5Virustotal results 40.00%Heodo
2020-09-040881GE_20200904_GGN36700.docdoc b928a4ea1aae65b1c3ee2634f0d4d3bba7d8f0d7bd647c3befb30ba0f8b6a1abVirustotal results 40.68%Heodo
2020-09-04FILE 2020_09_04 618820.docdoc 027746c91762be2cd5ecdd301acedfce96399a7961478130a7c6e26d2e47ea3cVirustotal results 40.68%Heodo
2020-09-04list-2020_09_04.docdoc 6c3530951ad2bde0a96b5bda4698fb3638e360f5176d3f6aa4f9ea0570a3f45dVirustotal results 40.00%Heodo
2020-09-04UNTITLED_Z11455.docdoc 886d63b614006458acc2c30f3864476e896c318a90248243fabf63f0e992f712Virustotal results 40.00%Heodo
2020-09-04DAT-2020_09_04-638.docdoc 352ed1583217d011b59331d9df7069fb05bffbee3823ffe2603a5cd74f16b850Virustotal results 41.38%Heodo
2020-09-04DAT-20200904-66469.docdoc 90d7013803edb798ee2da7fcf3de07420ccd536dd01c96d0c787a80c0923f08dVirustotal results 40.00%Heodo
2020-09-04LIST-20200904-F2899.docdoc d771bd380512ca62d90490660909fd428aa582bd97ee49d263deaa6334170f65Virustotal results 40.00%Heodo
2020-09-04rep PCE03193.docdoc 2f40ae83dd7e6ea630b731213a7f9629565af65eca2bf9990d77114dc2b441e5Virustotal results 41.38%Heodo
2020-09-04DAT_O8673.docdoc 3b921395ead4db8129425113780d7d7391058b9a70f1bfadaa36d56c48de30edVirustotal results 40.00%Heodo
2020-09-04Attachment-2020_09_04-NV923.docdoc f9cb536060fce2bb170aa95f67947db48d9b7e43e2095dad2337eda509017040Virustotal results 40.00%Heodo
2020-09-04FILE 20200904 D478.docdoc b0eafc0cd064f11cf1aaea20c1f55afc0770f81b4a59723d453b1ea6f6dd276cn/aHeodo
2020-09-04Attachment-2020_09_04-X35487.docdoc 87b97c090bc37e5a2a9ff93540bcd5085c42db5b1d0d4db34a0c68ab714044afVirustotal results 40.00%Heodo
2020-09-04Untitled H957657.docdoc 6300e903bf3720bb91e4db31ad186d98f0b8307f0abd3b785145f72f0a89edefVirustotal results 40.00%Heodo
2020-09-0450756889-2020_09_04-BGP353464.docdoc c9760ed3a6abb462e2d429280f83f0e912114c2b1923fa1fec74b3ee350afa78Virustotal results 40.98%Heodo
2020-09-04077 20200904 DSG467721.docdoc 0bed9ceb6c02ac01c38804705e397d72379abfba81c416c2deca29e08e32bd54Virustotal results 40.00%Heodo
2020-09-04mes 2020_09_04 LJG243813.docdoc 69e91274a22bb98b54013be9509ad757c17fd9ab44d80c5a8585ec639ea6f04bn/aHeodo
2020-09-04list 37961.docdoc 945f9c6c84eff86e098fcb02268e716fb80f5c6fa8a5e64e08175a306d3c0a2bn/aHeodo
2020-09-041984 20200904 17951.docdoc 39f12f314a1431044af9b7061ac6b7b2d68e29927ba8650ecfd4a5a41337922cVirustotal results 36.67%Heodo
2020-09-03ARC.docdoc 2ce02bed93b32642de024d52e2b8b0cdfc0716e8a0d1e617b67cdf14c195583eVirustotal results 33.90%Heodo
2020-09-03file-2020_09_04-GZN388.docdoc ea4fc36885f9979ad9f5fa421926dba611a7a272abbc518fdb4da57125d0f548Virustotal results 32.79%Heodo
2020-09-03ARC_2020_09_04_OX6132.docdoc 5870705910f4290f13346efd3c9113483974723cc840cd330844efa6f5b3be19Virustotal results 33.90%Heodo
2020-09-03Y497.docdoc 9e3d362ff8dc1daec89813f11f73bac91ac2ee3f97f803fd413522874432ebb4Virustotal results 32.79%Heodo
2020-09-03Doc 2020_09_04 DS27770.docdoc dec0fc4e4611e340eb402f29ab07769dcc51d4a2806a8aa520f4332aca26f2dbVirustotal results 33.33%Heodo
2020-09-03Doc_2020_09_04_8433346.docdoc 939b166130d34042d2f4e49e43067b7670e409ae8dfe5e7d675160a838878230Virustotal results 31.67%Heodo
2020-09-03Rep-20200904-967.docdoc 2f9910b3fffce2373726bb19cee907def1ad66df1c9210d955647c7a638ef9edVirustotal results 30.00%Heodo
2020-09-03File_20200904_555.docdoc eb96e6409fa3b1e2510201d45d3a629be387c1d50ca84645b13d0614702d7c62Virustotal results 30.51%Heodo
2020-09-03doc_20200904.docdoc 184ba331ed727480fd65743bfe0cf1489eca3b4d49b68a31b970ee96288c9484Virustotal results 30.00%Heodo
2020-09-03Mes-UV3897.docdoc 657e6e8ae1d0a5dd81e22e4c5966596510d091f0621e520d9f85c46ddad6f3b2Virustotal results 30.51%Heodo
2020-09-03Attachments 20200904 00885.docdoc eff6ba195fc7d083d41cc3c5d0bf90588ba4de22599bc9adeb053e04f0f4d55cVirustotal results 30.51%Heodo