URLhaus Database

You are currently viewing the URLhaus database entry for http://1018.lv/wp-admin/swift/e0gtah/4oc60031616mikt0sn4jc9b0r7vo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:452954
URL: http://1018.lv/wp-admin/swift/e0gtah/4oc60031616mikt0sn4jc9b0r7vo/
URL Status:Offline
Host: 1018.lv
Date added:2020-09-04 02:23:06 UTC
Last online:2020-09-07 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 02:24:05 UTC to abuse{at}datagrupa[dot]lv)
Takedown time:3 days, 10 hours, 19 minutes Bad (down since 2020-09-07 12:43:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05C_ZD5184386593OT.docdoc 8b23e164f16ba0caed21611db9782895ac3a6a1f5b30a16e7cff6a2f8e3c3008Virustotal results 44.07%Heodo
2020-09-05BAL_HEZ_090120_QQL_090520.docdoc 7af3dc909adeb725c75008edbf92a3dd653ffcb75119c693aa432873568080cbVirustotal results 43.33%Heodo
2020-09-05DOC_AGQ_090120_FGM_090520.docdoc 7888c29713425a14d1a374dfad7e3ba568408a4c756f476461f1357fe69699e6Virustotal results 45.00%Heodo
2020-09-05BAL_1MQ75GFVN96JDI9.docdoc ef7cf4395e6f154ad0deda89d832839b0301a4973ac6c002652d2cf6cf185ee9Virustotal results 24.59%Heodo
2020-09-05PO_09052020EX.docdoc 7c88f52c679aeb917f52a42b5424f5aeb90901cd44d00fe9aa0608e4f2940cb4n/aHeodo
2020-09-0586025687.docdoc 2e997a833026463ee1ddc2b571d97d90c94ac88cdb614cc5e5803d48b640391cVirustotal results 43.33%Heodo
2020-09-05JYF_BV6664776994GA.docdoc bb9c837b1bd4fe34cf3377a063261449907bae9ffec1af75dcfbe5fd01ec9a7fVirustotal results 22.03%Heodo
2020-09-05INV_33746618.docdoc 2b7b0ff44457a586cf0ca88f5b8f4bee199a18d6c52e494b2ecbbe083c3baf5fVirustotal results 40.68%Heodo
2020-09-05BAL_FF2987349704CW.docdoc f2c72c50487b631344d96edddf586d9e99c4685edb37450bade175f676504f32n/aHeodo
2020-09-05DOC_GG0825270917ZJ.docdoc e58920e12dd5ce571200cf0e7449728756bbb8a0b43d301ea7a625b5d7755c1eVirustotal results 35.00%Heodo
2020-09-05422980226254554640.docdoc 3ea82d40a32c4a7efd0deecb56f9bd8d6ded9f90c47eff0dc2257c5d35204402Virustotal results 33.90%Heodo
2020-09-05707456213061351.docdoc c409cd7639c969f0ed59d092f2ae2232a491fda76e08a4abbf011a59a648258bVirustotal results 29.09%Heodo
2020-09-05REP_92415305.docdoc 5da552ae322580d7638f987c1c33d95ddf6ce5515f9b5c96ce75ef88111fd5f8Virustotal results 31.67%Heodo
2020-09-05BAL_45395521.docdoc 8d8cc6bdd5c9ff157d1d4967a626d0638a66654fc8ed2af24e807dbc11746e43Virustotal results 31.15%Heodo
2020-09-05EZ0773807056EY.docdoc d687cfe8a3bb92d088de0d9d1a6a61c4254635189e0a677975a5fb453724576bVirustotal results 31.15%Heodo
2020-09-05REP_WZF_090120_DLL_090520.docdoc 8dadb1448be18ff1a6f7368dbef2f14f940b87b1d8133d3a8ef264d547457451Virustotal results 22.03%Heodo
2020-09-05A_PO_09052020EX.docdoc 7332b5582ed72e5d0f8ddd61b24b1329f4a0e3b5083cbe586c00e49f88e04b46Virustotal results 32.76%Heodo
2020-09-05DOC_09634159593210674.docdoc 3de96a57dc1f01e5d74c2d3ec9b3b15e4426645cdaaad296b03adaa3f3c752b4Virustotal results 31.67%Heodo
2020-09-05PO_09052020EX.docdoc e09612bc00202606cdfdfd5140ede548aa4d9224c339eb3e4ed0ad24dbad4f0eVirustotal results 31.67%Heodo
2020-09-05H_61207843.docdoc 13ad6c45f7189df1c3e34c5d0f1b0688a5c6bed6688be2ab02294bd75dcc80efVirustotal results 31.67%Heodo
2020-09-05INV_68094044.docdoc 2ea112ff513cfbbaf84731cbd3a3e700cfb6f87168673755d8bc47e616c7773eVirustotal results 18.33%Heodo
2020-09-05DAT_KHUIRS8QC16M2FQ.docdoc 6289f2e9039d8290e8166b5e1251bcd8d8317a3c458b4d21b7e210f113245c7fVirustotal results 31.67%Heodo
2020-09-05REP_3SXL6C60EM3O95T.docdoc 56c847d2b7384b5406bac28244f2abc04230c231e066dfb357bbf635c1d9d368Virustotal results 30.51%Heodo
2020-09-05SHY_090120_NYU_090520.docdoc 2ab1b7c9f559d5e8de517a4ef7e9a74f42734af66db94ae3e2a28825fc7f30f9Virustotal results 22.03%Heodo
2020-09-05FILE_HC1789585752EV.docdoc 8a1b69d8887c60c1170f376610877703b08db59b89d9f5992c95b7dd3a332a21Virustotal results 26.67%Heodo
2020-09-05INV_50239985.docdoc 5600e9c28bb38a742f7c07ac798dea247fd6b3211b1d06b8d47a192711da8674Virustotal results 25.00%Heodo
2020-09-05T_S3O9085194.docdoc ebfcd70ebff55e62fec45d3a0788f6e8c9c17580d337ada36af00299b4fc89f6Virustotal results 23.33%Heodo
2020-09-05FILE_RYBXXZ86YA0.docdoc 9ad810cd693a0eca802f2ece316a557f035008c8279573f03873351d0b13d5f2n/aHeodo
2020-09-05BAL_1462061545905153730738707.docdoc 94f9c25b45754447e5b9f5ab22473c2b379e80102bc979514581a079593c1325Virustotal results 25.00%Heodo
2020-09-0506346167.docdoc 06bba3841bce09d816852e07db1632f9afdade1c5f7080d4da62953bc2c6b5b5Virustotal results 25.86%Heodo
2020-09-05PO_09052020EX.docdoc cf6719f39578634ece9de98d7e1fae9627af684f706d094e9f022876dbf8e9baVirustotal results 25.00%Heodo
2020-09-05REP_98356810672858095250.docdoc c32724190cce2c08e0ff24aec9d392c06d60d948d66449850678496e1427640bVirustotal results 24.14%Heodo
2020-09-05REP_PO_09052020EX.docdoc 4a09b8410533e58450903480f4bda8f6857774c7c0a4e157418e8c3bb716202dVirustotal results 25.42%Heodo
2020-09-05INV_89199441.docdoc 4bf44bd8a61f253d3dd3abfe8029d51fb70f2d7f75d5ae48c50cdf53a813121cVirustotal results 24.56%Heodo
2020-09-04DOC_MY4386051559NJ.docdoc 5d0a19a1fe7969a9950c8d711f2e80d7203cce5287c039937b593fd098938701Virustotal results 18.33%Heodo
2020-09-04INV_69846324.docdoc 37322ab2ee3b3076399bb4b5969b90c2ee555f63ab2ca6ee03ea929e0aea1f37n/aHeodo
2020-09-0418130484.docdoc 42fa7e03e642ef8e9b55006d837fdcfe0edc2260c882eae114f1505365f15475Virustotal results 26.67%Heodo
2020-09-04DOC_707367392.docdoc 8b862cd5cece96f37514b0d188f8c210426e88f591e867c618df952152c7ff5bVirustotal results 22.95%Heodo
2020-09-04JVK_090120_MFZ_090520.docdoc e3dc535e0f5a45859e8c323deeb9865a9d02594ce15fc062b0a65984ff34023aVirustotal results 25.00%Heodo
2020-09-04PO_09052020EX.docdoc fab2e15b24926b36896f0aae619e19001af9577998f0e99344f1326faf43d174Virustotal results 23.73%Heodo
2020-09-04IFM_090120_DRG_090520.docdoc b5533222607313c1e5318c308f318224a53034815f0c64c398f7a47c3a022efdVirustotal results 37.29%Heodo
2020-09-04PGT_090120_RBN_090520.docdoc 76169ff374a9346a75d77ab68b5e4d9565aae56d2b73736ddde1a02bd95dd5f2n/aHeodo
2020-09-04BAL_ENL_090120_IYO_090520.docdoc a0f35af9f069a6bbda4bbbe47e5bd86255d33fe49f8c47a25d5895791accdce4n/aHeodo
2020-09-04DOC_SZV_090120_KEP_090520.docdoc 36175bb468657b427148c493fa79bd8b5a274d61b18bf20ae6de60800a42e644n/aHeodo
2020-09-04Q_TBH_090120_DTV_090520.docdoc 35a4b27dc346f8c9b47dab76cc43a413a42eecc0968f3e773feae4980fa34456Virustotal results 36.67%Heodo
2020-09-04ET2031733306JF.docdoc 0fc7be2a9f6e2bd7d080d5d7f6f609dc5281c52980e7d2871d6c8658a9980e83n/aHeodo
2020-09-04002750399542.docdoc 4ef546f286f47adeb1332f3d817a9aaf39d7ecc531a022b9791eb14fc9de79acVirustotal results 36.67%Heodo
2020-09-04REP_5855081716552445.docdoc 203b5367b3bf06f1b801c1c3321976fe1fcf2702a2413773b492878d541ebff2Virustotal results 37.29%Heodo
2020-09-04REP_ZB5925856821HR.docdoc 0ccc2086f49d393bf08092469d40a557d9b68c3653500e5826e7479b69b84c6aVirustotal results 37.29%Heodo
2020-09-04REP_13113077.docdoc d23faf09d666b06ecc0248933f0050591863e4e0eca630cb4c1be7f58512fb3bVirustotal results 36.07%Heodo
2020-09-04BAL_25069619.docdoc da9a6385696d505459b043b8444346c7faa2614fd5f77a0e0df5110774036e08Virustotal results 37.93%Heodo
2020-09-04BAL_SY1OTBEY2BQA.docdoc 02dfcb241425a1573bdaa28cefb98b7ad06913ea17c20ab173ead3402c03e12fVirustotal results 37.29%Heodo
2020-09-04DOC_19352241.docdoc be7359d5f34e145487cc45d11a463a8826b0aabbf7a8da0bcd9b4498bd6d3974Virustotal results 32.20%Heodo
2020-09-0406944192.docdoc 5dd7cb7722d8fbc0dd1e2c9e3faa7f7c0839734b00d04ee5b4fb1a6c09ab77d5Virustotal results 33.90%Heodo
2020-09-04DOC_616558938340819341440.docdoc f2bcc6d8340a374e5ab78dc34f0ee3466bf303f6f77532bf94033595f3fff21bVirustotal results 33.90%Heodo
2020-09-04PO_09042020EX.docdoc a2fdc9abbb2377b367097472c437e5a8ffedbf8e9b27eaa1e230d8cde71f89f7Virustotal results 33.33%Heodo
2020-09-04INV_TN0962512258AN.docdoc 47ca2839fce4d38bf92de1f1e4112489433026b8a2622976d5dcfe4115f3d71bVirustotal results 33.33%Heodo
2020-09-04INV_87007159.docdoc 3212bb6c80b78835f1e18093791987c2ad8b31e57c295a67264ca87c4edb0ad2Virustotal results 33.33%Heodo
2020-09-04LZQ_090120_XNP_090420.docdoc f265c11e67bd9353ca8c6d02ba6c752387a993a73e75006a6b28857634c8b7cbn/aHeodo
2020-09-04K_PO_09042020EX.docdoc cc4eb556c04ba1e96f2e8fd7240565d2b2174baa0d01a4ab3411c71e22e2ac76Virustotal results 34.48%Heodo
2020-09-04497072747056468015057.docdoc 478c0a63a9f6339a032b46388e0228f0306a3be3f5938e8018e26169347460e3Virustotal results 33.90%Heodo
2020-09-04REP_JZ0077456101WD.docdoc 211a1d1f7c9c1a2dc01d0438bb0aae153f85a084521a19e74c0dfc1cc8047b40n/aHeodo
2020-09-04DOC_ZSR_090120_MYB_090420.docdoc 242d81a9bb313e320c1367d234308deb892617e918ef25922449ead23e766f31Virustotal results 33.90%Heodo
2020-09-04GY_92197628.docdoc f19b7c3502d8e70e4a41fc4676cf0ba7a1de47cc19b1e961be4ceb8511119637Virustotal results 41.67%Heodo
2020-09-04RNK_090120_MQC_090420.docdoc db8ec99d40ab02d4ccd48a1c7b15bf169acb5b672dad9862e19dcb7f2805cde6Virustotal results 42.37%Heodo
2020-09-04TEZQK29.docdoc bd6d04f3dae6135958f29487917cf501c1fa74ddb6efc7ce60d56f2d71551b26Virustotal results 41.67%Heodo
2020-09-04REP_PO_09042020EX.docdoc 58688db2a10ad53af04287f0d28ff7a01d056a48dcb725797d9c1f724d13ff2cVirustotal results 42.37%Heodo
2020-09-04INV_PO_09042020EX.docdoc bf52c7ee63e57eab046b65369d5d9bca719accc2b77b4541ddbe5924711aa9c1Virustotal results 41.67%Heodo
2020-09-04INV_JTNMJDI9SC6Q3WG.docdoc c189d47783e317fad94867d3dda3a2cbbfba58dc3cda5f354b7f43b8d80daadaVirustotal results 42.11%Heodo
2020-09-04FILE_05031930.docdoc ad84c8c2cf5cec48293d676cd04c85584493ec6ea41985daf27420a4855461caVirustotal results 41.67%Heodo
2020-09-04DOC_PO_09042020EX.docdoc d4e4779bc7a595b54aef09d0febad3b0412b7919c11c7d60fb1350f25f9d8731Virustotal results 42.62%Heodo
2020-09-04AD6341137812YH.docdoc ff4f948205a9963a9502f66416a727514ecee03ab8d03067fc0a0e636a1bef26Virustotal results 41.67%Heodo
2020-09-04REP_3164727847890276238556767.docdoc 6213a6690c58fe48fb522c125a84a5b500e3e17bead81239b107cc1fd336ee1en/aHeodo
2020-09-04BAL_35638512.docdoc b6f6deed6a2a7773bc32ffdeb76b3c6203ef5104979733b539cefafd5172afc8Virustotal results 42.37%Heodo
2020-09-04PO_09042020EX.docdoc 1d3c23422da9f070996381406668d34699557d693bf4db1e3cf752fe8b83b560Virustotal results 42.37%Heodo
2020-09-04REP_09601714037.docdoc 615736850fd6ace5e3359e30427d4ef5824b28c6d1e0bd9dbd2cc12340dfeda8Virustotal results 41.38%Heodo