URLhaus Database

You are currently viewing the URLhaus database entry for http://dockendorf.de/Tilch/https:/3436894558672/OZCbdSvxCRZWNs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:453331
URL: http://dockendorf.de/Tilch/https:/3436894558672/OZCbdSvxCRZWNs/
URL Status:Offline
Host: dockendorf.de
Date added:2020-09-04 14:30:04 UTC
Last online:2020-09-07 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 14:32:23 UTC to abuse{at}strato[dot]de)
Takedown time:2 days, 18 hours, 31 minutes Poor (down since 2020-09-07 09:04:15 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05mes 2020_09_05 HS173248.docdoc 4c3f9a91ab8bd67a7de8b61f6d5e49c34a0c3ded123f63205f02d17ff570c204n/aHeodo
2020-09-0589154EGQ_20200905_Z444180.docdoc 8abd1fd956a522b05535b6b9ddb53a6c4353e20235979a9ed05679ac4f2a95caVirustotal results 29.31%Heodo
2020-09-0505728 122837.docdoc 0b9a2df9ae8e7dd522a8250303134d9778a41e95d02c06cd0b6a060afdb62cbdVirustotal results 30.51%Heodo
2020-09-05list.docdoc e598cf9a18d4db4fa8174ec8f921eb470f8b844063cec6fa35185f7f8f1d2b4bn/aHeodo
2020-09-05file-345503.docdoc 99b355a60a9590d4a7695c3e6dbd12bcc643041c7f98e39ebb7bd29d4300b770Virustotal results 27.87%Heodo
2020-09-05ARC_2020_09_05_42377.docdoc 36db57afc7d4faa57d7bbd559db7ca4ae2bd483caacaa9fba1a3cc6839b240a3n/aHeodo
2020-09-05Attachment_ZQI29009.docdoc c687016b2136760124efe54694e2980e93b56aa5278ec587b7290a01f02c93fdVirustotal results 30.51%Heodo
2020-09-05File_20200905_52781.docdoc 178548af9f561e5bf22a2a3bf689025f6219b073e79e56ea0b74f164dc02820eVirustotal results 29.51%Heodo
2020-09-05arc-20200905-067339.docdoc 54fac54bf401937afa1a48e9545b32e46ac8be7c543918e4a841177baf879ea3n/aHeodo
2020-09-054164XBU_20200905.docdoc d4c076603f475a562c8771e360b65b734aba563731f4417b117ecfad4297d562Virustotal results 30.00%Heodo
2020-09-05INF 20200905 S3712.docdoc 27ad65edce895a8ac105708b7510859313c9f88cec6a66611b581bc480ad6676n/aHeodo
2020-09-05doc MAX59652.docdoc ca1ecf3a84713ebe3b95b15bb7e7d4fe779daa81b1a2879feb79423222472ec8Virustotal results 29.51%Heodo
2020-09-05677418-6846.docdoc 51da971ad054a7cc8d3a929c87eba819eed539387ca660dad760e7bcf2477562Virustotal results 28.33%Heodo
2020-09-05Dat-20200905.docdoc 62cc3eedb06b43f8a3e286b0a9f04cbf36fe240a532b217d91950ea20fa0ba9cVirustotal results 28.33%Heodo
2020-09-05list.docdoc 1fde53646d2021d4bd959bcc2ee2b8c1db5ca4b112b58af96efc114ffd4dc6e6Virustotal results 29.31%Heodo
2020-09-05doc.docdoc eda41409cac593fa280357f888dfed9313d45a2523ff59de058f32b76478d925Virustotal results 28.33%Heodo
2020-09-05LIST 1092.docdoc 4845d731ee51494da878e4a1e0c22ad0e6e1885aebe593bb6b3adf115f9c84d3Virustotal results 28.81%Heodo
2020-09-05Mes_2020_09_05_61542.docdoc 173c9cfe44cb721e3d1edede6afda3a107dd78b74c1adb41c19fae5ae6a382d7Virustotal results 28.33%Heodo
2020-09-05list-UIS4699.docdoc 206feb1d69aba0e52a7d33975a49cc2a9443deb7bcf9fb4f8a6428ffcd95c97bVirustotal results 28.81%Heodo
2020-09-05FILE_2020_09_05_7041165.docdoc 7b33fe4f09c06251aba09bbc5407ae8fd899bae0a40d3e7d55f3806a8b6a74a6Virustotal results 28.33%Heodo
2020-09-05LIST 2020_09_05 K636.docdoc ee2869e612b62baacd8f12266c98e851549e6789343a4020cc424755ae55326aVirustotal results 28.81%Heodo
2020-09-055493297-20200905-322980.docdoc c66ac5fc632592fd547d29b2ea0d58d6fd421effca802489611fb9a43a656a45Virustotal results 24.59%Heodo
2020-09-05FILE-20200905.docdoc 346db091f843b130bc229ea6a6cf9d569e0a9d2408e413dd9a5087bb25437652Virustotal results 26.67%Heodo
2020-09-05list_YZF45490.docdoc 0917f0cbca78c19301ba65aa799b29dcf90ee3666fc9f8b83f00c5ea34a0eba6n/aHeodo
2020-09-05Doc_2648.docdoc 6914af81ae643d0106a7cb16454991e2b4d29053551e92e659456ad592120f57Virustotal results 26.23%Heodo
2020-09-05doc 20200905 QVM730445.docdoc a4455d8697ed542eb675343e5b8806faa6b522c16a69fa423acaef8577319b47Virustotal results 25.86%Heodo
2020-09-05rep 20200905 398.docdoc f3c01505f223d53a856b4cbb5201b5cbad5706145be5e214e266f4570491a8ccVirustotal results 26.67%Heodo
2020-09-05UNTITLED_20200905_H6957.docdoc 83d89a6f47106112698cbbe3f9f407abbefeaa5304896f38e7bff037db8cf901Virustotal results 25.42%Heodo
2020-09-056114.docdoc f0e8099995f3ce14cd75fb397efda8a5ef10d2360783b3321d55be49eb5a7888Virustotal results 22.03%Heodo
2020-09-05list 20200905 V63360.docdoc 92bc3c4ef5b89ad046cb64e9cd6ee2eb8d1053b1b07620f1a0aa6503912b05efn/aHeodo
2020-09-05rep-20200905-EFV048.docdoc 349685f93e08324717dd09b79130205af7e095872a599905ac58c453d5a4f25eVirustotal results 21.67%Heodo
2020-09-05LIST 2020_09_05 9010558.docdoc 072bf6d9f33086a40282befdb7fbd11fc1015d54c2cf4935ba1dcce2934cbd5eVirustotal results 22.03%Heodo
2020-09-05DAT_20200905_PXL785.docdoc 3c51d26e98137dad5c907c872c1af3b0faea7094df4acb08d71d8873e8800a9dVirustotal results 21.31%Heodo
2020-09-05List-2020_09_05-7856983.docdoc a0c340e5b8f401a13ec7ea03f405623ed8532d1bdfc9f708d34ad94a2c14ac47Virustotal results 22.03%Heodo
2020-09-05Inf 9899778.docdoc e5b5640cb999ccd3a5fa07ef28ecdb37ea16dbe142bd3cec619837a9c0c3baddn/aHeodo
2020-09-05Untitled_HS173248.docdoc 5d1e5bc11522b6d4daf399dbbd1a18561ee98aad33dce8f798e2aad3a2a5c329n/aHeodo
2020-09-05192AD-2020_09_05-VID397438.docdoc 78ed01b95752a63330a863810431b4d58ebbae0e20a745b6df4fe6799a0a8f1dVirustotal results 22.41%Heodo
2020-09-04Arc-BV88768.docdoc 4501204cd406a353ac88516bb9f133148c882ea030d84403dc54bd0297f68b6fn/aHeodo
2020-09-04List_20200905_904.docdoc 6d8bb4cc926450189c32b7634d2940fba6556c2865096d7ccafec6b4b6e0c396Virustotal results 21.67%Heodo
2020-09-04dat_20200905_E61429.docdoc a68967c55063a216717a336462d01e74b4dbf73c0e3ad3b56bfe2c4ab10f3b38Virustotal results 23.73%Heodo
2020-09-04LIST_20200905_3359158.docdoc 137b5a0cda220100df4caefac31efe6cc85c4bd72580fe2ce1987887901d3ed7Virustotal results 22.03%Heodo
2020-09-04Dat_2020_09_05.docdoc 0f264ea12ac1b1f96e80c683d7aabce629b15ded57f43e29a4faa7cbf057d673Virustotal results 22.03%Heodo
2020-09-0471353PG_2020_09_05_P686.docdoc a8e4d449c8018f90196d3de6e14d75cdca5c5f76b989880e012890f87d43f6c9n/aHeodo
2020-09-04FILE_5337474.docdoc 44f213e9ff99dece96ea33d94a4e46bb3e508480002c5e255d46ca711b44a9e3Virustotal results 19.30%Heodo
2020-09-04rep_2020_09_05_6072.docdoc 17387deff7e3725fb0ae1aacebcb5e9be101e9ad64a337ce858202ef07458f1cVirustotal results 20.00%Heodo
2020-09-04LIST_2020_09_05_2943.docdoc 4833c57c4ff48c2720247aa3bc9c8d62222f9fe3d095924030c344bfa8673847Virustotal results 20.69%Heodo
2020-09-04INF_20200905_7199096.docdoc d22f6705c1735812ddadd90de20741627b3116e4f8f97de636b160757970fc90Virustotal results 20.00%Heodo
2020-09-04Attachments_20200905.docdoc 4ad62f2c57a013638168235884ebd78c0b024008e87c9b2e84719d7543132e4dVirustotal results 19.67%Heodo
2020-09-0406004874_20200904_H500.docdoc 924f9439383931103e48f1a8618e3b5b0dc6e56ba52261116659d5dd2bbc3050Virustotal results 20.00%Heodo
2020-09-04FILE_20200904_325.docdoc bd6fabb51f037d2253220c55129be8125a21f63b579dd69ca9d82604f0208b60Virustotal results 20.00%Heodo
2020-09-04rep-2020_09_04-9560340.docdoc aa3db031e17cd90af00951bc4d86c18c8e42328f47e9014b552993ff1b29c557Virustotal results 20.34%Heodo
2020-09-04Attachment_2020_09_04_022685.docdoc 44d3865f9ac7efa31a3e9882aa38bad74bdd7e66627f48cf5f915a664ad329cfVirustotal results 38.33%Heodo
2020-09-04Attachment LXN290.docdoc be20749611f2a5d9a09e4782aa4443e339c5e6e4bffe65d32debca99b53d8d59Virustotal results 38.33%Heodo
2020-09-04mes_MTB6842.docdoc 4c213965b64b715680686d5c98d5d0129fdccb424a5e74f561c6969fa785d75cVirustotal results 38.33%Heodo
2020-09-04file-20200904-7731557.docdoc b89bbae40784e6910424e848eb4f987d2ab547c7293f80702f105bc4a8a086f1Virustotal results 35.59%Heodo
2020-09-04L4056 20200904 F267.docdoc 53e22a87b7381a9a4a9bea066f9d1b435964fddef4e38f321f372fe6abc16854Virustotal results 34.48%Heodo
2020-09-04Untitled 865.docdoc 9db91d669af1bf809886ca92ed83858aa55b59c031db7bcfcdb470ec77cfb0d1Virustotal results 35.59%Heodo
2020-09-04Dat-20200904-LD007.docdoc 95718b95b1e8732ffb58a93557e44c7e7f99a0dec4ab200ad2ffa83e6b455780n/aHeodo
2020-09-04ARC-02996.docdoc 380c46aa7a6ebfb32b4e005930aa368ca90386ecf02e2587a0c6f035569df404Virustotal results 35.00%Heodo
2020-09-04rep-2020_09_04-PYZ8400.docdoc 113c8c78cdad0ed438501117f87ca9b0d52b672ddd8b015284541ded516827e6Virustotal results 35.00%Heodo
2020-09-04inf_20200904_VS229.docdoc 8a87e7dcaf07545941e8f4859526c55f0b840dc1d051e86b09200a3a49ba5c01Virustotal results 35.00%Heodo
2020-09-04UNTITLED-20200904-OG809202.docdoc 07499f73c1b2290d3f1628c566a91f8f3bda896e9c9774c4de22d614a8b1381eVirustotal results 35.00%Heodo
2020-09-04rep 20200904 S760214.docdoc 403170a4ca043be478bde432c994bc04e0ec0bb95f4d457928890829a998e46aVirustotal results 35.00%Heodo
2020-09-04file_2020_09_04_68200.docdoc a7f35b06b6d94b7aacb7aaf4681b81b3373a4051b74e97e01ae6d58a2f052b27Virustotal results 35.00%Heodo
2020-09-04inf 2020_09_04 TI2888.docdoc e4006ffd7617f48dca3ed5e7220e159de2160b07f86452e1fcb7fa0f27ed1d9an/aHeodo
2020-09-04file_6300833.docdoc 0cac10e553ca0da14b7f6e1bf4c0586be92226b4edb922d9d7a79fd366142df8n/aHeodo
2020-09-04868KG 20200904 2337.docdoc 854c07b4a1eb19615eb05d07d707451a3515baf609014d5c8ea41640752331c5n/aHeodo
2020-09-04LIST 2020_09_04.docdoc 8272ec5255ec5c1be616ff13df325ee1016d5d40bb129a6687709dfadcc1b3dcVirustotal results 35.00%Heodo
2020-09-04doc_2020_09_04.docdoc 482e43557c2b67031f8b9141f11291ebb6d9fa946193ab1287ef2010ab18b462Virustotal results 26.67%Heodo
2020-09-04FILE 2020_09_04 T479.docdoc 3616487fc9577f23d340266d9936a2e2553b1b9c340d3217345e74a4af603666n/aHeodo
2020-09-04Dat-2020_09_04-Q4055.docdoc edbc22e742e12b2af45a775673812f2c751b4f9071a83b9565d3d547fa380655Virustotal results 30.00%Heodo
2020-09-04Attachment 2020_09_04 445965.docdoc db32c617fdfbe03a214b3ea0e57620c34459f86b3c99d815fbc869c3dc5e5fe6Virustotal results 28.33%Heodo
2020-09-04doc-FA5733.docdoc 1a2267bf7b914a9de28507fa9a91a5ae83a2441428bd581f461b67abc2e84423Virustotal results 26.23%Heodo