URLhaus Database

You are currently viewing the URLhaus database entry for http://dockendorf.de/Tilch/https://3436894558672/OZCbdSvxCRZWNs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453287
URL: http://dockendorf.de/Tilch/https://3436894558672/OZCbdSvxCRZWNs/
URL Status:Offline
Host: dockendorf.de
Date added:2020-09-04 12:42:33 UTC
Last online:2020-09-07 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-04 12:44:02 UTC to abuse{at}strato[dot]de)
Takedown time:2 days, 20 hours, 13 minutes Poor (down since 2020-09-07 08:57:02 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05mes 2020_09_05 HS173248.docdoc 4c3f9a91ab8bd67a7de8b61f6d5e49c34a0c3ded123f63205f02d17ff570c204Virustotal results 30.00%Heodo
2020-09-0589154EGQ_20200905_Z444180.docdoc 8abd1fd956a522b05535b6b9ddb53a6c4353e20235979a9ed05679ac4f2a95caVirustotal results 29.31%Heodo
2020-09-05list.docdoc e598cf9a18d4db4fa8174ec8f921eb470f8b844063cec6fa35185f7f8f1d2b4bn/aHeodo
2020-09-05list.docdoc 99b355a60a9590d4a7695c3e6dbd12bcc643041c7f98e39ebb7bd29d4300b770Virustotal results 27.87%Heodo
2020-09-05ARC_2020_09_05_42377.docdoc 36db57afc7d4faa57d7bbd559db7ca4ae2bd483caacaa9fba1a3cc6839b240a3n/aHeodo
2020-09-05Attachment_ZQI29009.docdoc c687016b2136760124efe54694e2980e93b56aa5278ec587b7290a01f02c93fdVirustotal results 30.51%Heodo
2020-09-05ARC.docdoc 21f96b0a4c469ce65b33f8065a32ea2bd729830598c2d0af1e670ca4f84a1ed2n/aHeodo
2020-09-05Arc-20200905-352405.docdoc 523e87e4ec97f2222463589b553503e6fd1b248fb7856dc28bb5a67f05709a6an/aHeodo
2020-09-05ARC-20200905-74579.docdoc d4c076603f475a562c8771e360b65b734aba563731f4417b117ecfad4297d562Virustotal results 30.00%Heodo
2020-09-05INF 20200905 S3712.docdoc 27ad65edce895a8ac105708b7510859313c9f88cec6a66611b581bc480ad6676Virustotal results 30.51%Heodo
2020-09-05doc MAX59652.docdoc ca1ecf3a84713ebe3b95b15bb7e7d4fe779daa81b1a2879feb79423222472ec8Virustotal results 29.51%Heodo
2020-09-05677418-6846.docdoc 51da971ad054a7cc8d3a929c87eba819eed539387ca660dad760e7bcf2477562Virustotal results 28.33%Heodo
2020-09-05Dat-20200905.docdoc 62cc3eedb06b43f8a3e286b0a9f04cbf36fe240a532b217d91950ea20fa0ba9cVirustotal results 28.33%Heodo
2020-09-05ARC_2020_09_05_RCK9360.docdoc eaf88121ded36bd379c812377e329473a1c6e8b9444fa3e2c31410b54883ab0dVirustotal results 28.33%Heodo
2020-09-05List 2020_09_05 WH7013.docdoc a6861aa553541ef958ad8dbfff87e748c920813dd0b745d69787b2818357158aVirustotal results 30.00%Heodo
2020-09-05doc.docdoc eda41409cac593fa280357f888dfed9313d45a2523ff59de058f32b76478d925Virustotal results 27.87%Heodo
2020-09-05LIST 1092.docdoc 4845d731ee51494da878e4a1e0c22ad0e6e1885aebe593bb6b3adf115f9c84d3Virustotal results 28.81%Heodo
2020-09-05Mes_2020_09_05_61542.docdoc 173c9cfe44cb721e3d1edede6afda3a107dd78b74c1adb41c19fae5ae6a382d7Virustotal results 28.33%Heodo
2020-09-05list-UIS4699.docdoc 206feb1d69aba0e52a7d33975a49cc2a9443deb7bcf9fb4f8a6428ffcd95c97bVirustotal results 28.81%Heodo
2020-09-05Attachments_Y066.docdoc 7b33fe4f09c06251aba09bbc5407ae8fd899bae0a40d3e7d55f3806a8b6a74a6n/aHeodo
2020-09-05931 2020_09_05 OD36197.docdoc ee2869e612b62baacd8f12266c98e851549e6789343a4020cc424755ae55326an/aHeodo
2020-09-05Rep-2020_09_05-8673311.docdoc 2ddd8ba7251afbeee6c41576c377265c1a2a9f5370cd66683c24db0c89a0062dVirustotal results 26.32%Heodo
2020-09-05FILE-20200905.docdoc 346db091f843b130bc229ea6a6cf9d569e0a9d2408e413dd9a5087bb25437652Virustotal results 26.67%Heodo
2020-09-05list_YZF45490.docdoc 0917f0cbca78c19301ba65aa799b29dcf90ee3666fc9f8b83f00c5ea34a0eba6Virustotal results 26.67%Heodo
2020-09-05doc 20200905 QVM730445.docdoc a4455d8697ed542eb675343e5b8806faa6b522c16a69fa423acaef8577319b47Virustotal results 27.12%Heodo
2020-09-05dat-2020_09_05-39819.docdoc 8d7ac57ba3c19f60ff3e7d2e5bccfb5a790b9d05c84fd5237e4235be91fde6a9Virustotal results 27.12%Heodo
2020-09-05UNTITLED_20200905_H6957.docdoc 83d89a6f47106112698cbbe3f9f407abbefeaa5304896f38e7bff037db8cf901Virustotal results 25.42%Heodo
2020-09-05list_20200905_JY9545.docdoc d933cd9a8fdaa58bf021074d4dcbca7f3fed26971db346a66f8b2435afb70b50Virustotal results 21.67%Heodo
2020-09-05list 20200905 V63360.docdoc 92bc3c4ef5b89ad046cb64e9cd6ee2eb8d1053b1b07620f1a0aa6503912b05efn/aHeodo
2020-09-05rep-20200905-EFV048.docdoc 349685f93e08324717dd09b79130205af7e095872a599905ac58c453d5a4f25eVirustotal results 22.41%Heodo
2020-09-05INF_20200905_B915452.docdoc 2d5d1fe8c77135420414a5cef6384683cfbf59f04e7e9b03c909c2f4c3ec54e9Virustotal results 21.67%Heodo
2020-09-05DAT_20200905_PXL785.docdoc 3c51d26e98137dad5c907c872c1af3b0faea7094df4acb08d71d8873e8800a9dVirustotal results 21.67%Heodo
2020-09-05Inf 9899778.docdoc e5b5640cb999ccd3a5fa07ef28ecdb37ea16dbe142bd3cec619837a9c0c3baddn/aHeodo
2020-09-05Untitled_HS173248.docdoc 5d1e5bc11522b6d4daf399dbbd1a18561ee98aad33dce8f798e2aad3a2a5c329n/aHeodo
2020-09-05Inf-20200905-N55118.docdoc 4c30d9c7120c06908f0bfdea08c45fbef17a72793a4688a2aa236899c0aa8d2bVirustotal results 22.03%Heodo
2020-09-04Arc-BV88768.docdoc 4501204cd406a353ac88516bb9f133148c882ea030d84403dc54bd0297f68b6fn/aHeodo
2020-09-04Rep.docdoc be5a076cc07b81d54fda54ef3c56f2d60ee214c3d1fe46de3dc59a1df619dc29Virustotal results 21.67%Heodo
2020-09-049374359 RX875.docdoc 6d8bb4cc926450189c32b7634d2940fba6556c2865096d7ccafec6b4b6e0c396Virustotal results 21.31%Heodo
2020-09-04dat_20200905_E61429.docdoc a68967c55063a216717a336462d01e74b4dbf73c0e3ad3b56bfe2c4ab10f3b38Virustotal results 23.73%Heodo
2020-09-04DAT 2020_09_05 AQK3670.docdoc bb32a5e79b853e76e64596002da4cf3b42d9e2c10db3f2b7fc7fd805fa43ff71Virustotal results 22.03%Heodo
2020-09-04Dat_2020_09_05.docdoc 0f264ea12ac1b1f96e80c683d7aabce629b15ded57f43e29a4faa7cbf057d673Virustotal results 22.03%Heodo
2020-09-0471353PG_2020_09_05_P686.docdoc a8e4d449c8018f90196d3de6e14d75cdca5c5f76b989880e012890f87d43f6c9Virustotal results 21.67%Heodo
2020-09-04arc-2020_09_05-9382.docdoc 50d0908dff351c8fcdfd307f4c93cad6065d4c10c2614fd4201209f862681cfdVirustotal results 20.34%Heodo
2020-09-04FILE_5337474.docdoc 44f213e9ff99dece96ea33d94a4e46bb3e508480002c5e255d46ca711b44a9e3Virustotal results 20.00%Heodo
2020-09-04REP-200.docdoc e3986d10ba408aefe9c0f44c298dafcd5501ea916fc093cbff42c479194a9309Virustotal results 20.00%Heodo
2020-09-04rep_2020_09_05_6072.docdoc 17387deff7e3725fb0ae1aacebcb5e9be101e9ad64a337ce858202ef07458f1cVirustotal results 20.00%Heodo
2020-09-04INF_20200905_7199096.docdoc d22f6705c1735812ddadd90de20741627b3116e4f8f97de636b160757970fc90Virustotal results 20.00%Heodo
2020-09-04FILE-2020_09_04-YZ5358.docdoc 9f003b20287110dbbea8826454c0666aee189fbf57cb907e8cf072dfe3829b18Virustotal results 19.67%Heodo
2020-09-04FILE_20200904_325.docdoc bd6fabb51f037d2253220c55129be8125a21f63b579dd69ca9d82604f0208b60Virustotal results 20.34%Heodo
2020-09-04REP-54041.docdoc 9c0798c3e8889889ef70b039545920afb91f1508144606704a1889286192bbf9n/aHeodo
2020-09-04doc-2020_09_04-459.docdoc 623ee20c1b2e5a53a0bbf6eb21f4b87cb0e6392e023f1e08267abc08c26e5bbfVirustotal results 20.34%Heodo
2020-09-04Attachment_2020_09_04_022685.docdoc 44d3865f9ac7efa31a3e9882aa38bad74bdd7e66627f48cf5f915a664ad329cfVirustotal results 39.66%Heodo
2020-09-04mes_MTB6842.docdoc 4c213965b64b715680686d5c98d5d0129fdccb424a5e74f561c6969fa785d75cVirustotal results 38.33%Heodo
2020-09-04file-20200904-7731557.docdoc b89bbae40784e6910424e848eb4f987d2ab547c7293f80702f105bc4a8a086f1n/aHeodo
2020-09-041275P-20200904-4756.docdoc 6679f5b0900d978a3f0c3c6e101bb18ef6a043de0a83d202f80c4cd6c77a2378Virustotal results 35.00%Heodo
2020-09-04mes 20200904.docdoc 4500dc04802c13fe7026076c983b30e2762694f15df4a35bec777b09e64b899dn/aHeodo
2020-09-04Untitled 865.docdoc 9db91d669af1bf809886ca92ed83858aa55b59c031db7bcfcdb470ec77cfb0d1n/aHeodo
2020-09-04arc.docdoc 6811ea887aa1fb0b0947ae4c101b1bccd01e6be62529652d9a9c70a8879485feVirustotal results 34.43%Heodo
2020-09-04INF 20200904 2426.docdoc a49d6ff985f57e4d6e09893b343f97b9da664ae8c0b7c0e95f18f1a8f119f1a8Virustotal results 35.00% Heodo
2020-09-04rep-2020_09_04-PYZ8400.docdoc 113c8c78cdad0ed438501117f87ca9b0d52b672ddd8b015284541ded516827e6Virustotal results 35.00%Heodo
2020-09-04MES-2020_09_04-49058.docdoc ef5176343779eaa99518b910aea7bc09e3f3c68b84d581e4762ede0c68729a0cVirustotal results 36.21%Heodo
2020-09-04rep 20200904 S760214.docdoc 403170a4ca043be478bde432c994bc04e0ec0bb95f4d457928890829a998e46aVirustotal results 35.00%Heodo
2020-09-04Inf_2020_09_04_66998.docdoc 8e545a370b86ee0cd6e5c447811aee200ae42181090a0a262326de62dd93aabfn/aHeodo
2020-09-04DAT.docdoc d21d369a575521b056524693121464f2aa51cbbc0790a6b01069bae6bb4dbb32n/aHeodo
2020-09-04file_6300833.docdoc 0cac10e553ca0da14b7f6e1bf4c0586be92226b4edb922d9d7a79fd366142df8n/aHeodo
2020-09-04868KG 20200904 2337.docdoc 854c07b4a1eb19615eb05d07d707451a3515baf609014d5c8ea41640752331c5n/aHeodo
2020-09-0462456_2020_09_04_0629.docdoc 4ff12f48cce6bd43cadbeb06f54c727fa688da49d56903348dc190711e4d0891Virustotal results 28.33%Heodo
2020-09-04FILE_2020_09_04_T304924.docdoc ff21a2ec6d99469e4b92b0e12a00fde35952edf0f9d9d296eb4a9f5ec13d2a49n/aHeodo
2020-09-04FILE 2020_09_04 T479.docdoc 3616487fc9577f23d340266d9936a2e2553b1b9c340d3217345e74a4af603666Virustotal results 28.81%Heodo
2020-09-04Dat-2020_09_04-Q4055.docdoc edbc22e742e12b2af45a775673812f2c751b4f9071a83b9565d3d547fa380655Virustotal results 30.00%Heodo
2020-09-04Attachment 2020_09_04 445965.docdoc db32c617fdfbe03a214b3ea0e57620c34459f86b3c99d815fbc869c3dc5e5fe6Virustotal results 28.33%Heodo
2020-09-04doc-FA5733.docdoc 1a2267bf7b914a9de28507fa9a91a5ae83a2441428bd581f461b67abc2e84423Virustotal results 26.23%Heodo
2020-09-04List 20200904 CME77938.docdoc 6fe4e70594d98f07fc43fc54e2e24a57ba80babf404b803336a8c7cca7f4bd70n/aHeodo
2020-09-04UNTITLED 20200904.docdoc 794287d8176f07c6943cc4ca303d03de2ec84b37ff7262e148c0451087177c86n/aHeodo
2020-09-04Inf-20200904-DBF920.docdoc 1c3e3bdb04dc52f5610c1079242b43b61f136a2a328a6813fe492e4092cd6e4an/aHeodo
2020-09-04Arc-2020_09_04-946.docdoc 006573a1a4acf93e1940fd56fea0e62fa51082d6e0209689974721fc1b3f9f7dVirustotal results 25.42%Heodo
2020-09-04REP 20200904 N5778.docdoc 6ba1180f37e95dd4238a52435a56d2cb1483ed9a34af53b44e0fecd5863244ebVirustotal results 25.86%Heodo
2020-09-04Attachments 20200904.docdoc d05c6ba705d84768f55f4f0c3adaaca4ecb47bca2960d53b0b110b9634eba759Virustotal results 25.42%Heodo
2020-09-04DAT_20200904.docdoc 2231471f3c6d061e183476068e47d6eadb49691f9dc0202a664f90b8b38b8d1bVirustotal results 22.03%Heodo