URLhaus Database

You are currently viewing the URLhaus database entry for http://topigra1.ru/2020/Documentation/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:516962
URL: http://topigra1.ru/2020/Documentation/
URL Status:Offline
Host: topigra1.ru
Date added:2020-09-15 16:14:03 UTC
Last online:2020-09-18 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-15 16:16:19 UTC to abuse{at}hostinger[dot]com)
Takedown time:2 days, 23 hours, 36 minutes Poor (down since 2020-09-18 15:53:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17DOC_69950994.docdoc 0c92438923e00f86c72398ce224b1da5b328f73bd3cc1fd267475a31ca0a8b53Virustotal results 48.28%Heodo
2020-09-17QZ_PO_09172020EX.docdoc b0fdd6bc85ccfb2d9e1eddb4f79f8dc13ae60ca8e27e00e0ddc0e89389dd67d5Virustotal results 48.28%Heodo
2020-09-17WD2527649674LY.docdoc b99a784e8e870636fa298de56b04b6b1768c85f52bf6a93574728c3bd2e9cc52Virustotal results 42.37%Heodo
2020-09-17UR1880329008NY.docdoc 06d9b578344c156e8ad071f393393ddb23427ac4c5f2ade6b3fc90ef34da7031Virustotal results 43.10%Heodo
2020-09-17BAL_WES_090120_OFC_091720.docdoc 55f67049f14332814d65bbc5690f2538dd7fe24edb943627e039a7ff43ab1fb8Virustotal results 41.38%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 266182936e91bf387900a37c29c044541d8646676cd85790aa27214e6f210848Virustotal results 35.59%Heodo
2020-09-17W_PO_09172020EX.docdoc c734155a7d45258d87e326297918ab16dd9bb34fcb44ba624b606b5d55ce54acVirustotal results 35.59%Heodo
2020-09-17BTB_090120_BQT_091720.docdoc fcc75ba7d4acb2ad490a81c60786cbc02465a0ede00deb9002980beb85a4b317Virustotal results 35.59%Heodo
2020-09-17DOC_2964050921.docdoc 17dab688841a1d907eb36a0850b082eac66fa7d5d3ce3d213033c08b3613e60aVirustotal results 35.00%Heodo
2020-09-1730YO8WSHJSMLLPG.docdoc 24c7551200e919fc0bdce151aef784c0c324c81a337a8bf70e67cfebf1abae0dn/aHeodo
2020-09-17DOC_FI0439278137EW.docdoc 6274d6fc5f58fb23f021e998ce3ba08addb461bc1403267302e7e7a2abc376d4Virustotal results 32.76%Heodo
2020-09-17DOC_TYLMXCKP0J2BR.docdoc 1da1190d2c7472ff429ae35611b7120698dca55175d1c298e68f24f33fc4caecVirustotal results 32.20%Heodo
2020-09-1791618641.docdoc 8b081a09069960c73f3ed3a1535f10fc2f69885e61ff050e9a22b2d471bca7deVirustotal results 32.76%Heodo
2020-09-17R_EFL_090120_WHM_091720.docdoc 4108b12f718477be2b40d56e715cbd628f3dc502e7a479810d88397f872994a9Virustotal results 32.20%Heodo
2020-09-17DOC_FY8729919903WW.docdoc ed4658f123918fc2a7fec141a0efd053ed8016aa8e8d779abd6377646fb04ad5Virustotal results 32.76%Heodo
2020-09-17JN_297AQQNIT.docdoc cd11340f54374039a82b315dc4084c5a2f7f8ee0fa6c1960de673c0a400f86f0Virustotal results 32.20%Heodo
2020-09-17YU5077404411YP.docdoc ce6399120ee307992b13733489078810f36a8a5dbd5e7eabaf399d95216b7f48Virustotal results 35.59%Heodo
2020-09-17REP_PO_09172020EX.docdoc 46b9776b6dcbbc272429563afe8cbf980019b5a57e1a4625c5495dd553ef439fVirustotal results 35.59%Heodo
2020-09-17REP_KM7700576660NZ.docdoc ff89c1fbff53a20e37f95ba53c554cc3e185ffea3af08c722c963aced19af949Virustotal results 37.93%Heodo
2020-09-178395649560.docdoc c3398d0143d68598160025f752138b7d986b35d277e83d05c6afeca8f7cced55Virustotal results 36.67%Heodo
2020-09-17INV_21670391.docdoc 425cf69c1c8cf4327ace3bad807a83df91fcc0692bd45dca12e840eb562931d9Virustotal results 36.21%Heodo
2020-09-17INV_MIH_090120_GQW_091720.docdoc 8a208192487ebae685a63017664df013b885234a7104db17ec13514b4b9ced41n/aHeodo
2020-09-173AFTOS59I76XLAA5.docdoc fe6c61d58e613b1737dd42c11ceb421b40f8f854324adeecb71245e245ed3a34Virustotal results 36.21%Heodo
2020-09-17UXB_BDH_090120_ELI_091720.docdoc a3efdad2ea2076e2a90cd4c401817a6d4e0dcffca6f825af796416755a6fb7e2Virustotal results 31.03%Heodo
2020-09-16Y_NSO_090120_ELL_091620.docdoc fcb293cfa69d4cbbc6afa71ad0a6456746863f91a54c2af300ca91c088f9c2f4Virustotal results 25.42%Heodo
2020-09-16FILE_C3LE905MQCIOTI0H.docdoc b2bfefad5d4d6a3dff230f61a9c4b055d5ae4b37b8fecca5550317c89f615504Virustotal results 25.42%Heodo
2020-09-16IYOO_2614GMORZ.docdoc b3f921be965718a9741b8f63d9b29dba0345f98cdfda7a0cabae90ffabc8043an/a Heodo
2020-09-16JP6YD0LJAYBKZ9NW.docdoc e247f4f69c1be4c95bdf6687e2ae1adbd1635c126ace3b544ad989024da5fb3cn/aHeodo
2020-09-16N_6954131358706960579.docdoc ef3f65e79357e42b0a2783f79e3a8c53a2b789aa8960e3927d59be3a509f9250Virustotal results 41.38% Heodo
2020-09-16FILE_76671723785755653.docdoc 9ca5390e9af21757dc77575f56e9d0528c527843951ae719c3aedd2d8680ce7aVirustotal results 39.66% Heodo
2020-09-16WGH_QZW_090120_ZWU_091620.docdoc d4d482bd99e2f75b977c3fe22ee3df44c1e3758bd61f0636d31c1e35c2d38be6n/a Heodo
2020-09-16REP_PO_09162020EX.docdoc 7b1127e502c3d59ec345e24f48984ba9a6e5ccb5667e317f7c3f5a8ffef69004Virustotal results 38.98% Heodo
2020-09-16DOC_PO_09162020EX.docdoc 1e5ed60832baaf0e362870373615cff90279bbbc4e544c76224f7528687276eeVirustotal results 37.29% Heodo
2020-09-16IR_PO_09162020EX.docdoc c94ba7222039884690f7049f607f0059bc3e2f965a11e75f937cfe271bfd96e9Virustotal results 38.98% Heodo
2020-09-16REP_KU9871452168UP.docdoc 89e280d00eba5184867b52270ea583f8bda9161dcb52921411e456747741e571n/a Heodo
2020-09-1683403554.docdoc 4254483388cd90e041291de79b3a3d26456908113cb0b2957401b5838c949c38Virustotal results 38.98% Heodo
2020-09-16E_459247941375269677628.docdoc 02451c13f63ed93c6ed0c0e4a3025100834fd59eeaa78acff45d726c056b2293Virustotal results 38.98%Heodo
2020-09-16YXFH_BXL_090120_SNX_091620.docdoc babaf8e764b3bc4f5fef74de7d819fa533ebf675d69174df27c5e0ae20174ecaVirustotal results 38.98%Heodo
2020-09-16DOC_PO_09162020EX.docdoc 6820256b4c1c4c5b50146126f828d2317ef12e023043a390611fe9b036cfe638Virustotal results 36.67%Heodo
2020-09-16D_ZKV_090120_MIV_091620.docdoc 3cf9e2dbe6b1d8c1900b0af337159915f15ed317ee76d553df5999d0f7ba6e9cVirustotal results 33.90%Heodo
2020-09-16BAL_OAC1BMBVIX0E90E.docdoc 54f3ff0a6c12843bdb1b448362320aac7421e7a1c1a210779dbb9c57ede15a75Virustotal results 32.20%Heodo
2020-09-16PO_09162020EX.docdoc 4de4f40c0e62b58b0257dacf98877c1696f65b286b060ec097e98177e3bd7a7aVirustotal results 31.03%Heodo
2020-09-1639898598842521847598641.docdoc 361d848b59beb5b40b7839f66735d926f31725d38136435f01499fb0e4a66463Virustotal results 32.20%Heodo
2020-09-16FILE_ZYO_090120_PLV_091620.docdoc 5aa5a3b76812b8b3edc3768f494fd3550f5088d44872ac9f4bbabb99137427f1Virustotal results 31.03%Heodo
2020-09-16QOXK_64717635.docdoc 39031955d734e86e67664eee812819b699a9bc4f869cfb4d28db7f4c99cbdceeVirustotal results 30.51%Heodo
2020-09-16REP_WDQ_090120_KWZ_091620.docdoc cfd2873377699ee9677793786de5f4e61b92743b992a3514810515fbb759d724Virustotal results 26.67%Heodo
2020-09-16FILE_2465443086.docdoc e04f91fce52b82ec7b1d0b6c78767a725e28cf4ddb1044dfbf301bbd4cd14ddaVirustotal results 28.07%Heodo
2020-09-16REP_XBI_090120_VJV_091620.docdoc a8dab829058b2200575ec6773790780a48c8d38587dcd02bc094c9084cd57eb1Virustotal results 28.07%Heodo
2020-09-16474177868760527932694.docdoc 0e0913f7c913e70406fdc7b5e47f2455d7152c4e461770cc1b9bee581491fab9n/aHeodo
2020-09-16XNWW_MY2838330508PB.docdoc 4f21e25c362b1dc72f9dd3b2b0910516918a46a4016a631a2ee276493d7d160dVirustotal results 20.34%Heodo
2020-09-16BAL_CEK_090120_HND_091620.docdoc 8d23dd0aa60ef4332c6cee379e7719bb7275f27b1d8be36f48bc0c2e77a4a95eVirustotal results 28.57%Heodo
2020-09-16I_PO_09162020EX.docdoc b3f649438cba7dc8f34dbdea69bb67a356906ead944752b8abcc4fcc23b737e6Virustotal results 28.81%Heodo
2020-09-16BY0505693679PX.docdoc 1e89a5f9dafcd1d66bcda4eb3a8e391448606ae28a808d4f723c1decc91292c4n/aHeodo
2020-09-1690662083.docdoc 4127d459a04c32375faea92c1b93077f9a79c1c7ffff36dd050303fe2c295bccVirustotal results 20.00%Heodo
2020-09-16T_KZ2476353276DR.docdoc 6578fea012e69eb51d9527777ef8c0a05c0e125586536d0f865a2e0ca949f57bVirustotal results 20.34%Heodo
2020-09-16REP_28204614.docdoc b7d7c443145be4e2543b2786517f68cfef114f06e7c276368a6046c98963b766Virustotal results 22.03%Heodo
2020-09-16INV_TER_090120_BBE_091620.docdoc 09c3f3aad8f9bc8f65a86d581ecb23b0a6262a9e28d5c5e19750e6770aa5e40fn/aHeodo
2020-09-16BAL_PO_09162020EX.docdoc 5927e1050bff0bafdd3d27911f79db68592ead3752725e920c682910c76a8eafVirustotal results 20.69%Heodo
2020-09-16PO_09162020EX.docdoc 8b8af9ba9bacf4def64c2e201f101cf7682ad791c1d170e1571b05a144a2e1a7Virustotal results 33.90%Heodo
2020-09-16TSFV_JM1776507265SS.docdoc fa8627da107f5b8e635cab97b056ed7a22bbe8dec6b3f2343fe001138ea2680bVirustotal results 33.90%Heodo
2020-09-16BAL_474354142.docdoc 4925033a50cdf185c0bf7ca724be9b934b182fb4052da144b80a85f5f58bfef4Virustotal results 30.51%Heodo
2020-09-16FILE_AVY_090120_LQH_091620.docdoc 63179447814d11c06c79d802adbf84daa1d758ac37a1591e280194ac6db52e16n/aHeodo
2020-09-16REP_H5WQH4QUVN.docdoc c2a32a81ceb22f1d6dc99adbe9cefaf4591129c09124544e3ac46ddc0a19caecVirustotal results 33.90%Heodo
2020-09-16BAL_CV6656219005FI.docdoc 62fd09a1ff4be50f0ef342f12c9551165d6f9743f510cadc096752e52e0b296eVirustotal results 33.90%Heodo
2020-09-16FILE_05116394.docdoc f875df5ff3a0ae34e7f9c96c6d419326c5411a29964693ced9a875ab952484d2Virustotal results 32.20%Heodo
2020-09-16DOC_PO_09162020EX.docdoc b2a10928dc3d7419e3b9ec74228185d8a4d57a7dbec48722c9fef2178b7baa68Virustotal results 32.20%Heodo
2020-09-16VFY_090120_HKG_091620.docdoc 20843d0cdd4530871779caa7abdd86286747cf5422074a5f981d499aed8d19d3Virustotal results 32.20%Heodo
2020-09-1634791555.docdoc f6aeaefccc4efba1167df73a2a3ba80a76c030c8278f7e8466c4d3dc7cf0084fVirustotal results 30.51%Heodo
2020-09-16REP_PO_09162020EX.docdoc adbca35477fb3a09c475fd0866dc9150946d2e4bd9b05650f9f066118659df26Virustotal results 30.51%Heodo
2020-09-16FILE_PO_09162020EX.docdoc eba11506102b0d17ade3dd25ef88614226a2faa5c3710af2a89b5588f49844a2Virustotal results 28.81%Heodo
2020-09-16TJC_090120_PZS_091620.docdoc ede79cad6b8517c5d9a8ce2fa49a478bf40491b3295b2d348c418589f100e877Virustotal results 33.90%Heodo
2020-09-16AUSXORYKHZJZW.docdoc ed810a173660499c4d9356a3183b890ec5f2d2c6dba475ff95a77ac09d81378aVirustotal results 25.86%Heodo
2020-09-16INV_YJ6129871158XM.docdoc aff9c4fbadddf0c2b4c80320ddb1809027d157508adbf5e5f12d88db367c782fVirustotal results 24.14%Heodo
2020-09-16REP_QXC_090120_UHT_091620.docdoc 57f88105c170f6a9c0718d37fc98fc60ebc7eecbd83b74780b5284d5412ff8adVirustotal results 25.42%Heodo
2020-09-16XCX_090120_GNY_091620.docdoc c22a92c3f9f72a3ac154573621c47a61ea04bc8df6fbd72a14f55b0ac858f385Virustotal results 25.86%Heodo
2020-09-16X_7664348033146453891165.docdoc 4d6b056c7bab909b0af3f0a3a24f5b7fbc4453e31746d29c0c3d60122def5705Virustotal results 25.42%Heodo
2020-09-16BAL_PO_09162020EX.docdoc 6783ef413f3dc640c8c9accbac37c09de5db05eee45604f5334cd90e7bbc109eVirustotal results 25.00%Heodo
2020-09-161867298426855325.docdoc 231d8f32ef0ff8e1a2b69db9bf1bf6c665c0cdff42bb4e3407cf7fe579304994Virustotal results 25.86%Heodo
2020-09-16FILE_HY5838030665QL.docdoc 5184e08e6c595ddbb60b6ac4030286b2e70fa5ee7567cb0360b2a66ec04f8d89Virustotal results 25.86%Heodo
2020-09-16L_12961004.docdoc 607bf68103d9158e576beb6c3a4b287bc5f5283c5871075a532d44efa448b9a0Virustotal results 25.86%Heodo
2020-09-160240366082.docdoc 9a29066aa3490e60be3e563dadcd9f7ef75e6eef752abd1bd40ab5323a57a83eVirustotal results 25.86%Heodo
2020-09-16K_0213761277950.docdoc f8a35f4ee5b56117d206ece5cd25afb33aba58cbfb3c32748018d4424f212bddVirustotal results 25.42%Heodo
2020-09-15G_KZ3193698641JB.docdoc d2939ee7042da0a88a76cc4e60e5a8cfbc83e5b4fad03c547ffb13bb006a2c5fVirustotal results 24.14%Heodo
2020-09-15G_OT8097778167PQ.docdoc 8869192957c4d226cae4679243a3a7ac5a193866a2e1048e37ca60f29d9af28aVirustotal results 26.32%Heodo
2020-09-15D_V472I76X8A59C5.docdoc fca275c16aa901a7fff33e9ab6ef4a73787f1020eabc602bfdd18bb08c4e78fcn/aHeodo
2020-09-15INV_PO_09162020EX.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360Virustotal results 27.59%Heodo
2020-09-15391126055189635.docdoc 3089debb78ac55d321badf41239a3010dcf1577c1cdc4f69cfa09f2c90affb22Virustotal results 33.90%Heodo
2020-09-15PO_09152020EX.docdoc 82c25613755c7a3a9737fe08cbc7fae6d75faa2807218b65d6b5a6dfb1bbff67Virustotal results 32.20%Heodo
2020-09-15F_60318950541380941760.docdoc c8410c8dd820bc1e8805ba93260cd2fb0f7707d75573915bdb97ea2a01b66ea8Virustotal results 33.90%Heodo
2020-09-15BAL_BJZ_090120_URD_091520.docdoc 99cd329144ecd59f0a395fb6b78ebc0e16c295cbb98369baad836540e2037af9Virustotal results 28.07%Heodo
2020-09-15FILE_PO_09152020EX.docdoc 84a3218db211f14f6afaf90ced3a518193158b80bbbf43bbf82a955d6064fa2dVirustotal results 30.00%Heodo
2020-09-15INV_JU5210254693CZ.docdoc 444ecd76408121efb70dedd5886e0d2042b0afcd9ad85a940eb6e027f7651082Virustotal results 30.00%Heodo