URLhaus Database

You are currently viewing the URLhaus database entry for https://andam88.com/izvej/https://sites/pqmwpiF2Xu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:499308
URL: https://andam88.com/izvej/https://sites/pqmwpiF2Xu/
URL Status:Offline
Host: andam88.com
Date added:2020-09-14 16:34:16 UTC
Last online:2020-09-15 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-14 16:36:40 UTC to abuse{at}choopa[dot]com)
Takedown time:22 hours, 40 minutes Good (down since 2020-09-15 15:17:16 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-15DAT 2020_09_15 B382504.docdoc 2a4cc83ad99ad88c6b5fa1765caa6fa73556a95b7804bce90a30eb324da08b9fVirustotal results 25.42% Heodo
2020-09-15Inf 20200915.docdoc c047f9d1998c9fa46c601dda1322b6040cf7ec915e10c0009e787e1eba465867Virustotal results 26.67%Heodo
2020-09-15DAT-2020_09_15-7096.docdoc 41a83d4f450961c0ff076f3368c122da8d1d5d59d51722c8988b223029a47587Virustotal results 25.42%Heodo
2020-09-15doc 20200915 EHR292789.docdoc 92004fdfd845395f59b03e025722db7fbe54c0425e07e389df08769dc0b7a695n/aHeodo
2020-09-15list J47643.docdoc a54a399d9a047d56f0b33e904a7da2852376ed8a5211d14e4c3e225f992ac859Virustotal results 22.81%Heodo
2020-09-15REP-20200915-Z663.docdoc 03eba8f767391edb3306b17a1db4e48bc59f582db8f6adb1bda9ed56329f9755Virustotal results 24.14%Heodo
2020-09-15Attachments-20200915-XT5264.docdoc 60cc7889d4bca6658e884f969b130358a8911b73a5fecaabdf207e4880aee458n/aHeodo
2020-09-150328513 2020_09_15 94201.docdoc 738282eb7cc063af9334cbb625bf13105ed6f56a48a6bbd0d39a937500087844Virustotal results 22.41%Heodo
2020-09-15REP_2020_09_15_515805.docdoc d6a6ba1726014c272a4be4d8867b85739b700790d83f97c25845567b63783796n/aHeodo
2020-09-15file-20200915-293.docdoc f821d9a95241b6f5d1bb45ba001828945417d3dc229bb05c6cb72f3bc0306c45Virustotal results 25.42%Heodo
2020-09-15Mes-2020_09_15-LT3693.docdoc 6880d2e79190370d40b0b27d9a18e34142fab5a99a6e94aac94e5e32c8cbfe84Virustotal results 26.67%Heodo
2020-09-15Untitled_20200915_8970.docdoc 412596dec4fa04e74c59e47719fc060637ab56ffa9ff1429ce9c9e5b109d8d29Virustotal results 25.00%Heodo
2020-09-15DAT.docdoc 0cb05acf641f3f12f0d2f43a62786cdb1847eeafff45920ac8d2a2d155f0c12fVirustotal results 27.12% Heodo
2020-09-15dat-2020_09_15-WW02763.docdoc 912f814cd232a1ae07b0d25556e359a64527974b26e464d85c80827d3a56264bVirustotal results 26.67%Heodo
2020-09-15Mes_20200915_2559.docdoc e1d474385505f5c0b0a6b005067719debb1e80091ad7e78b035c2a8652835582Virustotal results 27.12%Heodo
2020-09-15list-2020_09_15-QL832.docdoc 6fc669fc25d476c3d7c2cf9ea003a9db92b87a070d75bf30546e5642c1437d9fVirustotal results 24.56%Heodo
2020-09-15List-2020_09_15.docdoc 902e5816768b247deeb5d20ecffa933fbc7c1bdca49516c283b9ab39a0ba4041Virustotal results 24.14%Heodo
2020-09-15REP_2020_09_15_LJI4051.docdoc d022c59589a2ad650fad1bdac12c5e303dfa3fc7061019607c538bcc35222fcfVirustotal results 23.73%Heodo
2020-09-15001-20200915.docdoc b7372e339c51d62d859b4429089461d1add3b4122efa78eac13eeca3833df21en/aHeodo
2020-09-15FILE 2020_09_15 444.docdoc baa25136c70746911803ab432f2d12233f3bfef22e77d8b61e03467adf48123an/aHeodo
2020-09-15file 2109475.docdoc f316eecb674c54a4ec894a5a65237568bb94007f2ba66421a23ff37df4916fc6n/aHeodo
2020-09-15FILE-OJ6582.docdoc a3384ba577af296b4baa8ce02d0b093741cb76e47914a6f2a21dc1fcaafa2eccn/aHeodo
2020-09-15LIST-20200915-7884.docdoc 8b2013ca811304eb6da971681eb1329b0442436f50f2931ca034fb3671b63af6Virustotal results 23.73%Heodo
2020-09-15REP 631.docdoc 117ff974263e5ba8d7be16655458ab34722982734adac8b03d62ba9c0f8b6078Virustotal results 24.14%Heodo
2020-09-15100_20200915_01790.docdoc 477c395b9e8ff0dbc9e1be2bc00fc237cd22130edf50168630af4a01c2bfde34n/aHeodo
2020-09-15FILE AGW83772.docdoc e93305d9e0353b2bee392690b34ff857e6888e3e7fba9e45955620ed30de57adVirustotal results 23.73%Heodo
2020-09-15DAT-20200915-QEI853.docdoc 6c6225685c94dc3731580b64ecab9c502b1a89defe6a0ac2c3d3ddb2726f9a65Virustotal results 47.46%Heodo
2020-09-15ARC 20200915 3036.docdoc 43cc769c9e7ba0210e0a9c3b22707a1500245a04efb7e3d1faa76536bafba217n/aHeodo
2020-09-15LIST-2020_09_15.docdoc cf00026bf61471406d94a2ed4f58ba5c40cd51ce11251ee4e9699e8705915253Virustotal results 49.12%Heodo
2020-09-15REP 2020_09_15 II50970.docdoc 5af61c86d1ad6fb398e7834fac732b5ea97a00818295e8af9f427df058e64fbdVirustotal results 49.12%Heodo
2020-09-15arc 617.docdoc 5232782344d9fb61d8b9941128433de2425b6bff52e429db30b45eef8e6c1c9bVirustotal results 47.37%Heodo
2020-09-15Dat.docdoc e6886185d8fca1585bdc84a753479ddfa5c91e129422a964e2510238293b5192Virustotal results 45.76%Heodo
2020-09-15REP DSG642348.docdoc 5ce44d83a41eb185f956666c77f22aabf955616d25fac283a491f9451fe7ba52Virustotal results 45.76%Heodo
2020-09-15Arc 2020_09_15 31644.docdoc e203577dadb325bd364b0a6609b5aa2b4df457ba261810b3e5416950dff54c8fVirustotal results 45.76%Heodo
2020-09-15ARC-20200915-3419.docdoc 351db71f7f86ca34a34d77dd20dad996d2edb06567520169f89c2172a487af18n/aHeodo
2020-09-15arc_2020_09_15_36851.docdoc 6284608a75bd2f21cce00c2c3453353c83b146947f173dc53013c0919178a4c7Virustotal results 46.55%Heodo
2020-09-15Inf_20200915_L85988.docdoc f15af8515126fa73c26c783a07b7b8102603af53319a2148b073ceefed8de267Virustotal results 46.55%Heodo
2020-09-15mes 20200915 GK8701.docdoc 8656695ef3e73212f1da1f7c552c57c9f43e5b9e46fe1f3aec227b1700baf555Virustotal results 45.76%Heodo
2020-09-15doc_20200915_67915.docdoc ced3e5fdf4b4632f136fe21e7a32deedb1bada34b697b4daf4fecc7063ab961bVirustotal results 44.07%Heodo
2020-09-15file 20200915 MAR314.docdoc f17e30fcbb606a053ce0672cdff6f8b3402fb01346e7753abfd3add6f6fdfca4Virustotal results 42.37%Heodo
2020-09-15list 7802656.docdoc a5fe34f4f59c550793d6e628deeb7b0e77273be63dd3d68f950edcbbb2cc0d5cVirustotal results 43.33%Heodo
2020-09-15rep 61249.docdoc 3d3ce21eb20a5c3ea022e9f6e9fd3a339ed2c4cb22c26bbc83e88d0cf7ab6ceeVirustotal results 40.68%Heodo
2020-09-15Inf-2020_09_15-72029.docdoc 2bced1a8302d817af06cc07010a27345146769b3d9ad0e86d246ca93e4dc8e69Virustotal results 38.98%Heodo
2020-09-15Mes.docdoc 9ce006bb0e752354b2374803060115dedb3f8239567d4bfa6a2a027a74bd9b9bVirustotal results 38.98%Heodo
2020-09-15dat_20200915_AEV4089.docdoc d36e581bed8944aef6af541b9190cd831cce7bca80d03de8a2017b9614bf0bd0Virustotal results 38.98%Heodo
2020-09-15doc 20200915 6708.docdoc ca62501fd8a132340a63f97e4547ee1384a7744ab8c7e1afe4e69a008b2c3602n/aHeodo
2020-09-15doc 2020_09_15.docdoc 86fe6a2de23f84e3e8c7f33155c293f7eda6517b7f0fd88c47b4430fc98fd431Virustotal results 38.98%Heodo
2020-09-15MES-20200915-03361.docdoc c247ddf966fd2c2df2ffec2956e4798990741e8b0f7d121639bdd06fa98053den/aHeodo
2020-09-14ARC C4768.docdoc 8fde50ac02ec113d4f245e1d02838e3c6b77fb272db5b21eca5afe012f663f8dVirustotal results 39.66% Heodo
2020-09-14Attachment-2020_09_15-175371.docdoc a37f74acd4e0dae148467f7004339fc3ddd54e34eb6bb7c3dca20a13edd09b41n/aHeodo
2020-09-14Arc GW236201.docdoc 353654c4a8d65e5878b00c7943ee5d2e19e6438c31bd949ad16452496ca627e0Virustotal results 37.93% Heodo
2020-09-14file_TN144.docdoc 659eee918658caf613efe868209fc51ff054b39f70d699c5474e5f6ad4684d76Virustotal results 37.29% Heodo
2020-09-14Mes 2020_09_15 0679.docdoc b842862b97e1bb3bf480e0edfa445124eb165f8b8c6208cdc3b40a25acd5c103Virustotal results 33.90%Heodo
2020-09-14List-20200915-226422.docdoc a3a4f5d06a54aa6e83e1cbb72c3f5d88950eb21fbf597d45bfb817fad8282f4bVirustotal results 32.20%Heodo
2020-09-14UNTITLED_20200915_1932164.docdoc a0fbbf6d90db762b113e5a37d79d574800eecd5ee6ae058b260917eaa521d62bn/a Heodo
2020-09-14inf_20200915_83434.docdoc ee5bd3d048be89cda7b21ccc887b9a31bd338b0d97a8d34569b26619d759b3b7Virustotal results 27.59%Heodo
2020-09-14dat-F1091.docdoc 35999c8f653e6bbd10bf305fb984cc3497ffdf8b26af7b53f83dbf7e385f737fn/aHeodo
2020-09-14file_LU75887.docdoc 6c58e04ac46f5f16a638f4f54998b9f162745897f0f79940736c2b572235a2d5Virustotal results 25.42% Heodo
2020-09-145372 20200914 SA1141.docdoc 06548426e927d2d19596c75a58b3dcd9cb31e0fe1090b0b24fa7d01870db5683Virustotal results 25.42%Heodo
2020-09-14list PIF038952.docdoc 6d05fd0835601d3f58f7c6d342cd98e5fe3a9f4a1c2ccbc91fa80fb44c61eec9Virustotal results 24.56%Heodo
2020-09-14List 20200914 FY559.docdoc fe0adfcbe96e41a03d65dd47514b5db3b216690ca8d3c1680a913e6927e27195Virustotal results 25.42%Heodo
2020-09-14DAT 20200914 1972.docdoc f15c1fb0ec48fcd1c8071b42da76037089d88aadb78c7fcd64ce6fa845c0e765Virustotal results 25.42% Heodo
2020-09-14UNTITLED-2020_09_14-8831968.docdoc c04d53318d6727682e77638d17a7d9563f9040c46a9a426576349dba7acec4ddVirustotal results 25.42% Heodo
2020-09-14MES TVA87668.docdoc de5ff2a86b9b97821a627ee23d91fecfc32dcb3d5db129604ca5c47f4feb102bn/aHeodo
2020-09-14448961-20200914-14438.docdoc 5171e0e602e27c4122239e9c7833c603beebb69bea148c5d29341990af469f55Virustotal results 25.86%Heodo
2020-09-14772XIC 2020_09_14.docdoc 9071af554116b7e5e92cbd63922f2d577d1fd912ed4fd121ab0762aa8b2dd589Virustotal results 24.56%Heodo
2020-09-14File-20200914-303449.docdoc 04c3ce2f282ed4ed9c831c5caff0edc29324dbd2eb39817fc6ed53683c5e0933n/aHeodo
2020-09-14Doc_P0840.docdoc 30c24452fe4cbae0d507fcd57055a6172174abbb6ecdec68304f244d67a152aan/aHeodo
2020-09-14Mes-DI24811.docdoc 1b861fc89bf8e49013023f4458519f13803bfabb2b4eff3e63cb209f31406192Virustotal results 21.43%Heodo
2020-09-14list 742790.docdoc 63ab439cb5788c279996c35d7e41341081f97dadb4b255653cb11194a9368465Virustotal results 20.34%Heodo
2020-09-14154_20200914_1275049.docdoc c0d7a02d33e12631b692222d46bf3ea21a3a4e6c0964e5508bdb25148af88689Virustotal results 20.34%Worm.Ramnit
2020-09-14File_2020_09_14_2257466.docdoc 3dc5285bec0496d0a4993cc2a0d80e534010b345115320b8b96343b8ab9b10e3Virustotal results 20.34%Heodo
2020-09-14inf_852580.docdoc 85b941aa2dfcdb8316fad92e43fdb207d52a3f4429b7bc59134fa759931284c8Virustotal results 20.69%Heodo
2020-09-14ARC.docdoc badc0629a46cda79757842da527965473e157005d05fe710070410d1128da0e5n/aHeodo