URLhaus Database

You are currently viewing the URLhaus database entry for http://joba-mikasch.de/Engel-Dateien/eTrac/zdce11604430729rhshtxev76ck21/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453500
URL: http://joba-mikasch.de/Engel-Dateien/eTrac/zdce11604430729rhshtxev76ck21/
URL Status:Offline
Host: joba-mikasch.de
Date added:2020-09-04 19:52:33 UTC
Last online:2021-01-11 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 19:54:02 UTC to abuse{at}strato[dot]de)
Takedown time:4 months, 8 days, 14 hours, 14 minutes Bad (down since 2021-01-11 10:08:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05PO_09052020EX.docdoc 8b23e164f16ba0caed21611db9782895ac3a6a1f5b30a16e7cff6a2f8e3c3008Virustotal results 44.07%Heodo
2020-09-05XGAD_BNP_090120_FLK_090520.docdoc 7af3dc909adeb725c75008edbf92a3dd653ffcb75119c693aa432873568080cbVirustotal results 43.33%Heodo
2020-09-05FILE_PO_09052020EX.docdoc 1e52c0f38822abee6f044ad1cadcd997d709163955787be931b19bdadab0b376n/aHeodo
2020-09-05REP_675726263307234462.docdoc d83081d1b25e45eb05f1adfa2a4cb89811fab54011eac620b3d3d83b6e59b451n/aHeodo
2020-09-05L_8YH2FUOQM8JN.docdoc b47773387ceae19a77df17722ac76711cd26f753da32fb7f1a43302d5523bf59Virustotal results 42.37%Heodo
2020-09-0542772987.docdoc bb9c837b1bd4fe34cf3377a063261449907bae9ffec1af75dcfbe5fd01ec9a7fVirustotal results 22.03%Heodo
2020-09-05BAL_AM2864611742ZX.docdoc f2c72c50487b631344d96edddf586d9e99c4685edb37450bade175f676504f32n/aHeodo
2020-09-05XT4D1SC141F66X.docdoc 52dc2d3655da2e0bec58667337f8c1b82e08d7eeb4a73341345f236d3321e9d7Virustotal results 35.59%Heodo
2020-09-05CK4386842357JL.docdoc 5391bbb94eaab89d4864ca7408da299a029611928be8cb4e99c97eabc0b46e4cVirustotal results 33.90%Heodo
2020-09-05DOC_PO_09052020EX.docdoc 7a30501200d16da77107068379331700e901268be067ce701617b4df11238b75Virustotal results 21.67%Heodo
2020-09-05BAL_KT0699944370OK.docdoc c409cd7639c969f0ed59d092f2ae2232a491fda76e08a4abbf011a59a648258bVirustotal results 21.31%Heodo
2020-09-05FILE_69183371047411.docdoc ebc24ae3a35b97e088396a839e1b94a2a71fc528915607e809c1d56780cdf030Virustotal results 31.67%Heodo
2020-09-05FILE_15943998597589739084201.docdoc 5da552ae322580d7638f987c1c33d95ddf6ce5515f9b5c96ce75ef88111fd5f8Virustotal results 22.03%Heodo
2020-09-05FILE_PSENV3YGAVOFX.docdoc 8c2da9079e400f97c3679a4f138c565c32493719b8c611f772f31c9781cc90a9n/aHeodo
2020-09-05OVCT_09665405358703698.docdoc 916a9fdb4940cd7596a9604a95e7af177de4c28e90bfa8c2c98d836e82aab78cVirustotal results 31.15%Heodo
2020-09-05BAL_20610470.docdoc 9d71de685c2563ad92db03b5326737a9022c9acc2a3d4ea671e1f96d297d7c88Virustotal results 32.20%Heodo
2020-09-05BAL_RGIAO6347FKRI1WI.docdoc 7332b5582ed72e5d0f8ddd61b24b1329f4a0e3b5083cbe586c00e49f88e04b46Virustotal results 22.03%Heodo
2020-09-0537REI1JPHDV74UB.docdoc 2daef50067ff024747efbaed1394d5c4a1bdfa1e31fd9fccca6c4274b9c32fe6Virustotal results 31.67%Heodo
2020-09-05IB4517322516WV.docdoc 3c0391237b2adda4499615dc19541883ee3a71e7c2db9eb3b3eb02f1b15d8578Virustotal results 31.67%Heodo
2020-09-05PO_09052020EX.docdoc f6dbabd3bbe35e52a24bdc676ac827f6631ddbe77e52afd53bdf3204b02f97c6Virustotal results 31.67%Heodo
2020-09-05BAL_VW2645151487BA.docdoc c8d78cc721fc65847af26b2fc252992ee923418a82a18595d52a3aa1aaa75061Virustotal results 31.67%Heodo
2020-09-05FILE_JSX_090120_CVD_090520.docdoc 6289f2e9039d8290e8166b5e1251bcd8d8317a3c458b4d21b7e210f113245c7fVirustotal results 31.67%Heodo
2020-09-05BVY_090120_IBE_090520.docdoc d64c1bb1fbb978e265b3ee51e8e289cb4df8fe6727077731485022eb968ff3ffVirustotal results 30.51%Heodo
2020-09-0559485034694.docdoc 3cc5c61f7f38e6a0d0826bfef88b5579f3f31e5577e95625977df303da6e7e7eVirustotal results 25.42%Heodo
2020-09-05INV_PO_09052020EX.docdoc 5600e9c28bb38a742f7c07ac798dea247fd6b3211b1d06b8d47a192711da8674Virustotal results 25.00%Heodo
2020-09-05VXIH2YYM.docdoc ebfcd70ebff55e62fec45d3a0788f6e8c9c17580d337ada36af00299b4fc89f6Virustotal results 23.33%Heodo
2020-09-051H1YSUF6Y83YRPA.docdoc de2503e4fb1d6a3ffc85f8c066f1573bdc8ae0aec1a0dedeae271c96d1b558ebVirustotal results 25.00%Heodo
2020-09-05J_88430539.docdoc 06bba3841bce09d816852e07db1632f9afdade1c5f7080d4da62953bc2c6b5b5Virustotal results 24.59%Heodo
2020-09-05DOC_67571122.docdoc cf6719f39578634ece9de98d7e1fae9627af684f706d094e9f022876dbf8e9baVirustotal results 25.00%Heodo
2020-09-0506940989.docdoc 8d5986085cd34ff48a11330bc6fdb74cfb01bc4f473cbdde5f7d4e8ca5cf637aVirustotal results 24.59%Heodo
2020-09-05INV_UN3517946075FY.docdoc f5e6ad0516a3f70ed62a7438c65b244bd72454c0f7edc4983497790750c085d5Virustotal results 25.86%Heodo
2020-09-05BAL_PO_09052020EX.docdoc 4a09b8410533e58450903480f4bda8f6857774c7c0a4e157418e8c3bb716202dVirustotal results 18.97%Heodo
2020-09-05DOC_873249609722.docdoc 4bf44bd8a61f253d3dd3abfe8029d51fb70f2d7f75d5ae48c50cdf53a813121cVirustotal results 25.42%Heodo
2020-09-04997898197464.docdoc 5d0a19a1fe7969a9950c8d711f2e80d7203cce5287c039937b593fd098938701Virustotal results 18.33%Heodo
2020-09-04DOC_MYH_090120_TFH_090520.docdoc 2f43042095548e57c08e93e9da55256337e669662c48bcae3ebc01a9b3113cbcn/aHeodo
2020-09-04REP_AFEI37UIF08FA.docdoc 37322ab2ee3b3076399bb4b5969b90c2ee555f63ab2ca6ee03ea929e0aea1f37Virustotal results 25.42%Heodo
2020-09-04A_PO_09052020EX.docdoc f4ed99cccf3436ccf82ee81f454adc4b8f7a7d2aecc14226aa8675e95f42b0e5Virustotal results 25.00%Heodo
2020-09-04PO_09052020EX.docdoc 8b862cd5cece96f37514b0d188f8c210426e88f591e867c618df952152c7ff5bVirustotal results 22.95%Heodo
2020-09-04DOC_QCI_090120_DWR_090520.docdoc e3dc535e0f5a45859e8c323deeb9865a9d02594ce15fc062b0a65984ff34023an/aHeodo
2020-09-04DOC_WVM_090120_HSH_090520.docdoc fab2e15b24926b36896f0aae619e19001af9577998f0e99344f1326faf43d174Virustotal results 23.73%Heodo
2020-09-040FI27AKGF8.docdoc b5533222607313c1e5318c308f318224a53034815f0c64c398f7a47c3a022efdVirustotal results 37.29%Heodo
2020-09-04FILE_PO_09052020EX.docdoc 76169ff374a9346a75d77ab68b5e4d9565aae56d2b73736ddde1a02bd95dd5f2n/aHeodo
2020-09-04BAL_DB5505386220TS.docdoc bd40eb02dfb6582a0297389d221e0c4e0438e0e49084f6b38a362f9e0ed59d0fn/aHeodo
2020-09-04O_71Z6RKDSEQZ.docdoc b68a67814fb5dc91945cdd229252bd373e46dc667e3f5c91e37f1ffe0fb546d3n/aHeodo
2020-09-04HL1522671376ND.docdoc a7680798d59287fd95857a80ad4476ee4e1a98ed04c97a6afcfa5f523ab1ecccVirustotal results 37.29%Heodo
2020-09-04BAL_TM7321031802BY.docdoc 0fc7be2a9f6e2bd7d080d5d7f6f609dc5281c52980e7d2871d6c8658a9980e83Virustotal results 36.67%Heodo
2020-09-04REP_YCGSFM1KIP.docdoc e7b7be72edf9cf0cba4c20c1ec7200523f770ca222733b0162cad70bd7ade444Virustotal results 37.29%Heodo
2020-09-04BAL_XM8676414278EF.docdoc 0ccc2086f49d393bf08092469d40a557d9b68c3653500e5826e7479b69b84c6aVirustotal results 37.29%Heodo
2020-09-04B_79752287.docdoc f8a398d3de41f9168cb0da770bf87c578c800d80be14d824aa4ec8eb682cdd56Virustotal results 36.07%Heodo
2020-09-04DOC_247535209838892.docdoc f6176c22c0dedb27565ce220ac7b9815469179392bb92fbe785be55cd43400cen/aHeodo
2020-09-04FILE_2319322676.docdoc fbd8470b180c9fd6fb38a881fc1a42abc34fade3e3dd008244ca9b64a1504103n/aHeodo