URLhaus Database

You are currently viewing the URLhaus database entry for http://mtk-leuchten.de/bilder/invoice/obsotspu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453435
URL: http://mtk-leuchten.de/bilder/invoice/obsotspu/
URL Status:Offline
Host: mtk-leuchten.de
Date added:2020-09-04 17:36:04 UTC
Last online:2020-09-04 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 17:38:02 UTC to abuse{at}strato[dot]de)
Takedown time:5 hours, 21 minutes Good (down since 2020-09-04 22:59:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04INV_88586645.docdoc e3dc535e0f5a45859e8c323deeb9865a9d02594ce15fc062b0a65984ff34023aVirustotal results 25.00%Heodo
2020-09-04FILE_5714751467.docdoc fab2e15b24926b36896f0aae619e19001af9577998f0e99344f1326faf43d174Virustotal results 23.73%Heodo
2020-09-04PO_09052020EX.docdoc b5533222607313c1e5318c308f318224a53034815f0c64c398f7a47c3a022efdVirustotal results 37.29%Heodo
2020-09-04DW_TI2120821810AY.docdoc b24e807d0df1eadd028e3819c82a02a484506947497651f366a72b832ca55c24Virustotal results 35.00%Heodo
2020-09-04PO_09052020EX.docdoc 76169ff374a9346a75d77ab68b5e4d9565aae56d2b73736ddde1a02bd95dd5f2n/aHeodo
2020-09-04INV_9AV5DHNVD51F05.docdoc 8e37d86d7b733fafbb97894ee96d1ad387cbbe82900ff2e8e589d9184f91da7dVirustotal results 36.67%Heodo
2020-09-04FILE_PO_09052020EX.docdoc 59fdddd7d14174695b3060a24099fb534d15016cfee986d9a0ab15d779102b66n/aHeodo
2020-09-04DOC_136570920.docdoc 35a4b27dc346f8c9b47dab76cc43a413a42eecc0968f3e773feae4980fa34456Virustotal results 36.67%Heodo
2020-09-04INV_UUH_090120_QWK_090420.docdoc b71d3ce293b081d491b3ba9de486a93bba7064927ffb7ca4578925f18f319785Virustotal results 36.07%Heodo
2020-09-04DOC_TE9744224782TB.docdoc 4ef546f286f47adeb1332f3d817a9aaf39d7ecc531a022b9791eb14fc9de79acn/aHeodo
2020-09-04INV_98835203.docdoc 203b5367b3bf06f1b801c1c3321976fe1fcf2702a2413773b492878d541ebff2n/aHeodo
2020-09-04S_6976965152095.docdoc d23faf09d666b06ecc0248933f0050591863e4e0eca630cb4c1be7f58512fb3bVirustotal results 36.07%Heodo
2020-09-04DD_VR1353554501WW.docdoc 07389e60fd9ae8ed3322e4d0d71325e58d8beabc1b3a0e18bbcfc7984505e598Virustotal results 36.67%Heodo
2020-09-04Y_PO_09042020EX.docdoc 43af1c1a7217bdf25ca13e05da10ae43fba636ce003e77e41f31fec75eacaf1dVirustotal results 36.21%Heodo
2020-09-04FILE_BNT_090120_KLM_090420.docdoc be7359d5f34e145487cc45d11a463a8826b0aabbf7a8da0bcd9b4498bd6d3974Virustotal results 32.20%Heodo
2020-09-04FILE_069579839617928146009.docdoc c0ebd4f4800e02d34a1683ffd2a8cc258fab1c366128b0d215a0e202c09c41beVirustotal results 34.48%Heodo
2020-09-04IDK_PO_09042020EX.docdoc b704f4df9369996d3f77982e46cd1d4b080de1817ffbd8d68f5f4a82e16b1993n/aHeodo
2020-09-0450161108.docdoc f2bcc6d8340a374e5ab78dc34f0ee3466bf303f6f77532bf94033595f3fff21bVirustotal results 33.33%Heodo
2020-09-04WCLPRT0XY2LPTNHD.docdoc c791268b0a93500d2bf73e476d673bb2f139cbe63c7cdc5fe1f0da8bbfa86f17Virustotal results 32.79%Heodo
2020-09-04DOC_DPD_090120_MVX_090420.docdoc cfe4b358946c9eef325f5aa66f80f7db38ac84fbd985117f1bbf039bba8a3d9fn/aHeodo
2020-09-04SNS_59884050.docdoc 3212bb6c80b78835f1e18093791987c2ad8b31e57c295a67264ca87c4edb0ad2n/aHeodo
2020-09-04HHK_TY4211905976PX.docdoc e518aef76084cd1d89c2f34eb4960ee623c0f2f87dd31121f0f4f70c376753f3Virustotal results 33.33%Heodo
2020-09-04REP_MDP_090120_VLG_090420.docdoc e627d5445b586181f22e9b1c5890b35c8ec027b86c72566fb2b9a685c10727ebVirustotal results 33.33%Heodo