URLhaus Database

You are currently viewing the URLhaus database entry for http://alborzatashza.ir/wp-admin/attachments/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:535625
URL: http://alborzatashza.ir/wp-admin/attachments/
URL Status:Offline
Host: alborzatashza.ir
Date added:2020-09-16 18:28:33 UTC
Last online:2020-09-21 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-16 18:30:37 UTC to abuse{at}hetzner[dot]com)
Takedown time:4 days, 19 hours, 5 minutes Bad (down since 2020-09-21 13:36:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-18PO_09182020EX.docdoc 2be116761f944e13024bcdd5438723cefa835893e4fff5b6469836a25303c683Virustotal results 42.37%Heodo
2020-09-18KO2650584841DX.docdoc bf6932b93923279c279c706a6404ad93689fe61414ec24f87ca9eb85389c0bd6Virustotal results 40.68%Heodo
2020-09-18REP_805364635415773.docdoc 0411a8edd0fb791e01eeae0687331b988a6d3d32369d8ad9cca32229e4a4c931Virustotal results 42.37%Heodo
2020-09-18PO_09182020EX.docdoc 7b2741d8a1eefed939245c6e4fa381d3c3e0a2279397d4fb05f9f99c67a140f8Virustotal results 40.68%Heodo
2020-09-185236362273244089.docdoc 3becf7d3aed1e6a3483bdeb9eb4c6887e9eb13ed6f194315109eeb2f19ae9a07Virustotal results 40.68%Heodo
2020-09-18INV_404884695.docdoc efcd54dbe67c5c0dcbb01abfc3f21030c54a8834d7edcdfcf1144f0b49773000Virustotal results 41.38%Heodo
2020-09-18KVL_090120_NVH_091820.docdoc b525847655a58e746a7e416a39cab7b90b6a71a6228f915657e78f00799dddffVirustotal results 40.68%Heodo
2020-09-18JS1189994875YS.docdoc 8e6917775061726117ba0af2dc4c999bc58202d2841fe93554cbd5241a66c985Virustotal results 38.98%Heodo
2020-09-18INV_W5PP4KG306.docdoc 10324f7f83b2b4c0bfe54d94c21ff44cb1e840e5652621fcfc29cd6b9426606fVirustotal results 37.93%Heodo
2020-09-18REP_58380610.docdoc 8389b0d8b9f07eb8e55e2d7c3d6bad98dc5d0c37eb030652e43b799b0a5ee5b7Virustotal results 37.29%Heodo
2020-09-18REP_Z1SY5DYA7.docdoc 13aab947e9fdbb36ecff78349f1c9de33441db50e5de1f273a73ed0c2a539db8Virustotal results 24.14%Heodo
2020-09-1890047728349958868552183.docdoc 44d0c90d842430656bb499c996d721b16d4ef131f92e3443c478d37beb0d43f2Virustotal results 36.21%Heodo
2020-09-1847174914.docdoc 8e5ac6f2951e0bfdd5e7c036075f4f8706bdf1a1639c43372f38fc91047d0a4cVirustotal results 33.90%Heodo
2020-09-18PO_09182020EX.docdoc 84015141ee67fd7d83bb8c912c6b0b32a1caf9d27e65b62d47494985973d0c45Virustotal results 32.20%Heodo
2020-09-18DOC_00830303.docdoc 7c81019f932c35ff188d4260fe0b23ba6cb27363922cbb8265a8f3121e26c32fVirustotal results 24.56%Heodo
2020-09-18876869092507763.docdoc 59b07ee573d9567fe99ebe983b0641353a94c1584dbd8a330ce9a1b1ead621dfVirustotal results 30.00%Heodo
2020-09-18GF5353668942EE.docdoc 1bd22346068e0c3ebd43f84602033625137f3f35c3b3dc18473cd089834f4541Virustotal results 24.14%Heodo
2020-09-18REP_TJE_090120_JQC_091820.docdoc 37adedb2ef245a78142b80b0da888715d3abb817111e00ae9f6c2976a79136f4Virustotal results 25.00%Heodo
2020-09-18DOC_WAJ_090120_RQI_091820.docdoc 6abcae841dce14d172e12d2c27729756c194836844ccbba13a69617a31dbdd07Virustotal results 23.73%Heodo
2020-09-18A_TA1383598965YM.docdoc e2aa96c2ea0b7006d5694ffeb59a7f8e5e10c69a67546cdce25d765398b73a1dVirustotal results 22.41%Heodo
2020-09-18TO4216244026NR.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 49.15% Heodo
2020-09-1811135214.docdoc fe543bf25849e02f9c6cdbb37ffcf838eddcff1effb9dea466557fabb673bd20Virustotal results 50.00%Heodo
2020-09-1806850687.docdoc 1783b7210fc11d49c254e9d01607f32e9124044eebc736c34bf7d3fe06d7c0b0Virustotal results 49.15%Heodo
2020-09-18BHK_090120_LNK_091820.docdoc 0ee056bc50491229f8d2446fcc124112ae7ca2705f26aaa207e11537c0872e13Virustotal results 50.00%Heodo
2020-09-18INV_IULU9NHW2K3ZV.docdoc ed8d02dd9d1b6d234e7f3b15ac027fa3be85c471538996cf974d1934f0dbc9e9Virustotal results 49.15%Heodo
2020-09-18REP_43320499.docdoc 745b257e46ef158e2288faa30152afd8142646f1d7acec0a0c1e9424bbdab31fVirustotal results 50.00%Heodo
2020-09-18D_HPXJDCWTJL3A7.docdoc 95aa58c779d17b78ffab83759ad0e70fdf40edf24f573b20839e2da83896d55aVirustotal results 50.00%Heodo
2020-09-18MVIC_53827669.docdoc dc0b178d082fb9ef3479c57bb72a459f9129a9dec9ae09543e29610b27df1baaVirustotal results 48.28%Heodo
2020-09-18830245426.docdoc 6141c4ca354e41f195ad486becc30692e174fa890d504b80a5fde1d32f38ee3cVirustotal results 46.67%Heodo
2020-09-18INV_VZE_090120_WXQ_091820.docdoc 1121962d0a0d52780b13618c7cdcc2916ea8ffdcccb17ae0e54e0b9f8799c5eaVirustotal results 40.68%Heodo
2020-09-18INV_MR5804438059JU.docdoc 8de1f0bc21df74b36c7d23af7047d1e92050ec37ed0daef2adadb8dee5322488Virustotal results 40.68%Heodo
2020-09-18HORM5DGNSKDJG9UM.docdoc 88ef0981b06e7ac4b9df459d7c10edc857fcf9c170057b9220ef9ddfd550f06dVirustotal results 43.10%Heodo
2020-09-18DOC_395823475694840390267547.docdoc 7c59a227af18d0ce74f71bcd465aeb811332968c24b837a6d9761a61bf0b2abdVirustotal results 42.37%Heodo
2020-09-18BAL_2674124583653.docdoc 3c04b25b3db13173771d70f4aa9fd25006b34fc0c02f707f2dbd8f9b15938720n/aHeodo
2020-09-18P_VZ5136343674IM.docdoc d35c221d6da8fb62ac4d9b14ed2a8112b1d26af20f8f82a0ee4b60fcaa759903Virustotal results 43.10%Heodo
2020-09-18BAL_UP8VWR3WGL5FAD.docdoc 57c17b60cd1c361ac69813484b6a4f453aa7cf993c0ec2338665a320341e496bVirustotal results 39.66%Heodo
2020-09-18INV_PKPDC4Z4S.docdoc fd659c59f931854b96e0428e622a370da964253713c66c1b28343011322629dan/aHeodo
2020-09-1887892062988494156.docdoc 6e221be1094865f6f92e91e222da06c0cfb67ce691d0bd25afb4b4324bb05714n/aHeodo
2020-09-18INV_09726264.docdoc 230fa7a324c31b742bc3e78cd724d571d7a462ba188b8e6dfc9f7060cb24fbc6Virustotal results 35.00%Heodo
2020-09-18REP_XPD_090120_RWM_091820.docdoc 344be8e47a1c334ca0f6e8d6383c509d62ca9004f050e5a368e064e87e2e947fVirustotal results 36.67%Heodo
2020-09-18O_80039520.docdoc 6098ea8b508e01b7b777f7e9ae9b62e69f4e95a1bf8342c4d7ad98e5559d70d1n/aHeodo
2020-09-18563097732.docdoc c63f6783c00a837e235c2c2405fccfe135bf4358704dad7525b4660588e6ed3aVirustotal results 33.90%Heodo
2020-09-17PO_09182020EX.docdoc 36d46656d6969e3946e5b7d590c3f84bee9577d16dc333b05a115c41760636b7n/aHeodo
2020-09-17TVT_090120_FDC_091820.docdoc 5735f038fc7e1b58a8e434b1b4e5080173709bb93463e49005fef016349811b8n/aHeodo
2020-09-17REP_80547037116.docdoc edee77f468412b29903ec095de648b2214e471174deffc438b41cb18fed1058bVirustotal results 33.90%Heodo
2020-09-1716614910774161.docdoc 3d0e327579a0412b41e40642776caf0be54df0872df9e9ce553e048802249ac0Virustotal results 33.90%Heodo
2020-09-17REP_AM2150223259EE.docdoc 18921283b9df87bfd574d3b19108c1b987dc19729196d6d54235ec8c102b4e1fVirustotal results 33.90%Heodo
2020-09-17BAL_PO_09182020EX.docdoc 12d6b38f752ecea5e77fa8c3623f322427bd77fbe3070efe165d432a739f4bd1Virustotal results 33.90%Heodo
2020-09-17BAL_QLX_090120_LBJ_091720.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17BO_2399434322367482367694.docdoc 339016f3d85e1e43b24fe0c43e85be15801e5268905882fd77f11c3b70d3ded7n/aHeodo
2020-09-1728531328.docdoc 06d9b578344c156e8ad071f393393ddb23427ac4c5f2ade6b3fc90ef34da7031Virustotal results 43.10%Heodo
2020-09-17FILE_90435323969943003806.docdoc 55f67049f14332814d65bbc5690f2538dd7fe24edb943627e039a7ff43ab1fb8n/aHeodo
2020-09-17L_WRL_090120_OOE_091720.docdoc b38d528441ae53b3ee333f8a7b335e5f9b9093086cd3072c649eb570aeb430dan/aHeodo
2020-09-17REP_PO_09172020EX.docdoc 28e0ec9faec8fb63dd3210568b84e14423b5bfe6e353859a2da0fadc23b3e8ddn/aHeodo
2020-09-17INV_SX2403567642FF.docdoc b1c4f3f033c7084b7df61be8340d0190e40a7ed5742d46dccb477e27ee853c96Virustotal results 35.09%Heodo
2020-09-17FILE_YK2962018970SU.docdoc 14650f22ccd9ac8f4effcb6415afc3ee21a1a681e0d621888dd3e28a30e9e237n/aHeodo
2020-09-17BAL_42020303606695060.docdoc 4988159f7deee6fa12b723aa0158f06c3e3b77034a97827b39e69ffa5c2b8d16n/aHeodo
2020-09-17INV_1SHQ811.docdoc 53dda9daf6fa01985279e8148de1c182bb9957da8b396b100bc5b6f1aa67f983Virustotal results 32.76%Heodo
2020-09-17U_PO_09172020EX.docdoc 33c51d58c2e4bbbfceeedd8f100ddadf9be5354f98a497c5d5a0db849a51562bVirustotal results 31.58%Heodo
2020-09-17O_27635170.docdoc 8a5dcb1a781b1aecdeb4b5bc5c104015615abd1cedba229575f95ca95fd766fen/aHeodo
2020-09-17DOC_82484434.docdoc 1da1190d2c7472ff429ae35611b7120698dca55175d1c298e68f24f33fc4caecVirustotal results 32.76%Heodo
2020-09-17ZSU_090120_HYX_091720.docdoc 4108b12f718477be2b40d56e715cbd628f3dc502e7a479810d88397f872994a9Virustotal results 32.20%Heodo
2020-09-17E_16289348.docdoc 9858faec65e0756d0003cfd8bcf4e322ebb83c537243e039ae6e43b4893c514dVirustotal results 31.67%Heodo
2020-09-1709222065.docdoc bf95f266d40b4617876e2f284b989c5b6b809072925ffcc1f3e8e0aa94310b82n/aHeodo
2020-09-17O_33837656.docdoc 594c81be9be769fefbfc0df02c470a9ef138fac68992f136b55532e736d0e93an/aHeodo
2020-09-17SE0976743442WS.docdoc dcd3e00d8637a9ba1d0bd4b50e2895294c67b06017af07497a032472d7ade91aVirustotal results 35.59%Heodo
2020-09-1777692296.docdoc 2544f7f03bcb606491b39f0f8cba55899e5e9dd8871128a268329dd6a539f5bfVirustotal results 33.90%Heodo
2020-09-1740801341726230658052.docdoc 27eba47f653b19797edea37d8dbf75215328081ca3b6abb42719eb226a877a5dVirustotal results 30.51%Heodo
2020-09-17LVL_10470735.docdoc c3398d0143d68598160025f752138b7d986b35d277e83d05c6afeca8f7cced55Virustotal results 35.59%Heodo
2020-09-17INV_TUQ_090120_THH_091720.docdoc dd730a186b979cc083c88419bd457f1ad9a0c235f8ac5c7552b4b9d24fb9db2dn/aHeodo
2020-09-17Y_58231587.docdoc 79d28b1f906f26beea84fa259a3953fa6fedf70176ec6a5bcd77e724f4d326abVirustotal results 37.29%Heodo
2020-09-17BAL_6017642160093142344997077.docdoc 00f42d9a9acefed89581ed82845dd70bf86cca472f771ac1f7ca4bf48e7b2274n/aHeodo
2020-09-17BAL_8Z0IXOAXARCR318.docdoc e0e9dac7a50485ca1030fc7dd02b0654cdb97f93294d975d06d9d8b8317d8e6eVirustotal results 29.82%Heodo
2020-09-17W_45530662.docdoc 803c6c54c4ebc1733d67a3a13191e80339304b93da85bfd7945fe48a0bc95fefVirustotal results 30.51%Heodo
2020-09-17DOC_PO_09172020EX.docdoc 24b838aac8e817a378d69923bc4457869372cebb8b6db06af6eff5f41110c700n/aHeodo
2020-09-17ZN_MB2126731320AS.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17I_JT6312858006RE.docdoc 0ed1adf222903a5b3335427d554d4a74c05a27cfd1a438788c04f3b3d720c002n/aHeodo
2020-09-17DOC_PO_09172020EX.docdoc 3fc9e1303ad2b93db95a11ed49156bfcaff2b986b739b1f4ec66485445548ed8Virustotal results 39.66%Heodo
2020-09-17BAL_74446173.docdoc a447525577ebe9462e1f3c514c317bdc4f1a1ddfdcff9e781d6a1fa8c4c3935dVirustotal results 38.98%Heodo
2020-09-17INV_KU8326579931MH.docdoc 73ad18478fb2dc515c21ae65ae67658d0bf5c43e86ab24685f4f5d71a592f78eVirustotal results 38.98%Heodo
2020-09-17DOC_8BN4HQ20VAII.docdoc 0c2e3b86f744311a9e0cfeff0f0a7c22284b08cde0cc7437289d9c416eaf4f69Virustotal results 38.98%Heodo
2020-09-17140416740479.docdoc 8d1ff2bacfbda66fbafa8dd2c05aa1912c32f694f2d0aaac4ac43897edcb677fVirustotal results 35.59%Heodo
2020-09-17EK3451275849TG.docdoc 163a09323a2678ec297914024703f458b53d81470967ee69eb352bb51a5d4f92Virustotal results 33.90%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 8bed6a4e027b38076c316eb5378c9d60d8fd9305217dba0e315e93974091667cVirustotal results 34.48%Heodo
2020-09-17BAL_3DU6MCUYW5R5IR43.docdoc b4306a30afe6746f29ea38b3e2dca0704d5d3d18107aa1b8ca555bd35fa918f7Virustotal results 27.12%Heodo
2020-09-17HNNHYRT8G6VI8LV4.docdoc 1a945df2c4c5399840e2cdcc623c15e12451e66db694d71f26bd718dc8628993Virustotal results 33.33%Heodo
2020-09-17J_IEA_090120_CIH_091720.docdoc 430ef6af760d2105f3c14655f66ff5dc191916c938a26256085965a4a536c827Virustotal results 32.20%Heodo
2020-09-17REP_75108730.docdoc 57e1942e529266771688a423f03e005f8ed47584381f2a38e92e4045550d657cVirustotal results 33.33%Heodo
2020-09-17H_IE55A50X8RJGI524.docdoc 665e45861c718dbcda0e3f7473479a62187f5248b4d99ec7d63ff91dd4eed98eVirustotal results 27.12%Heodo
2020-09-17INV_XBV_090120_UHT_091720.docdoc 528a62bc2a5bb42529a57abc0367b0a612ebe84f846906aa5a6737e759d6ae84Virustotal results 25.42%Heodo
2020-09-17INV_PBF_090120_EUU_091720.docdoc 11edbb83a5be58e02605322f9c28134420f1aafe0e30a23b264ef751657c70daVirustotal results 25.42%Heodo
2020-09-17REP_PO_09172020EX.docdoc 85ecc831aac84128028e315d8229777d99b91e6adba5a437b18e0f2a3c34e76eVirustotal results 25.86%Heodo
2020-09-17L_W72L7AY0AI.docdoc 6d27f5af653565630751a1ab0faa64d0c28949cfdceef04b4c543a0b4a7666f3Virustotal results 25.86%Heodo
2020-09-16PO_09172020EX.docdoc 1ecaceaeb20649c823b3a63accf639925ba8e4c350b2509496c04dbd622d5d4eVirustotal results 25.86% Heodo
2020-09-16DOC_446498033477187175301152.docdoc fd4fb3464a7f787ee4d5b1795fe7b4d8ffde4a1683fc6620602fb78ba52f52a9Virustotal results 26.32% Heodo
2020-09-16BAL_64223213.docdoc 7cad27b68df51d87f204a171a2f75a578b52e11f339a2bab138c6ada02b5a196Virustotal results 30.51%Heodo
2020-09-162253698743197576315.docdoc ca5204766a181d5961896a0f4c506ed00718fad078c3a951d9343e52ad7f16d4Virustotal results 25.86%Heodo
2020-09-16AAT_090120_IXG_091720.docdoc 76bf8d09a314a6ed1f11e8794d3027fcedcc3762677e37d8f7a304e4d370837cVirustotal results 28.81%Heodo
2020-09-16BAL_98624403779682423254653.docdoc ba46d0a65699ff5ec5670d31287ae8d04710450b5d267d9e4a2fdf0e94078194Virustotal results 25.42%Heodo
2020-09-16FILE_XW9697664334HX.docdoc 7a8024cf777ab45c5c969c5efff3dd4f289bc22baf1c91bd884fc2d29435c884Virustotal results 25.86%Heodo
2020-09-16XHHD_IPR6E9A2I24Y4P.docdoc 2d28945e5e6a8cb9f9e82d32bbff50d953e72e8f55c46e910c596d92bf646963Virustotal results 25.42%Heodo
2020-09-16L_OGC5VFAPRQA.docdoc d30169f108ec72fbaf16bb8726e798602988e1c42a7b3020b0ef0ad0572f9625Virustotal results 25.42%Heodo
2020-09-1656099682985002887956428.docdoc c0418ebecc711ff38d29eb29f832c78c462b0c3f55201223702aac43a15f8e1dVirustotal results 25.42%Heodo
2020-09-1620765177586137071.docdoc b2bfefad5d4d6a3dff230f61a9c4b055d5ae4b37b8fecca5550317c89f615504Virustotal results 25.42%Heodo
2020-09-16INV_PO_09162020EX.docdoc b88f5009f8b75ec0a35f549fa777d05a819b0ca478eedb65a7b0a9fd01d51e30Virustotal results 25.86% Heodo
2020-09-164393984654719123647002.docdoc e7631c5a69f76fea0835835a14a8e885f2f3b0c0dec2d577278e70d3776eb0a5n/a Heodo
2020-09-16DT_PO_09162020EX.docdoc e247f4f69c1be4c95bdf6687e2ae1adbd1635c126ace3b544ad989024da5fb3cn/aHeodo
2020-09-16OMTX_5359767310326730473550780.docdoc 7ad1bb86cc5ab4b2563548f2fc53faf9ed64e5216c895c9a425aea815a45b6b4Virustotal results 40.68% Heodo
2020-09-16PO_09162020EX.docdoc b4cce609ab6c293e6ad8ed80364498a96ac56579987b2aa30c0a6d05df102435Virustotal results 38.98% Heodo
2020-09-16INV_33816459474088088469884.docdoc 37af168ebcdcec12d2835ecc3a569839ed4660717927ae3ab0cc6a4b8a733012Virustotal results 38.98% Heodo
2020-09-16445571830076530.docdoc 1e5ed60832baaf0e362870373615cff90279bbbc4e544c76224f7528687276eeVirustotal results 37.29% Heodo