URLhaus Database

You are currently viewing the URLhaus database entry for http://berith.nl/scan/EN_en/Question/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:54342
URL: http://berith.nl/scan/EN_en/Question/
URL Status:Offline
Host: berith.nl
Date added:2018-09-11 05:01:05 UTC
Last online:2018-10-10 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-09-11 05:02:29 UTC to abuse{at}axc[dot]eu)
Takedown time:29 days, 6 hours, 56 minutes Bad (down since 2018-10-10 11:58:59 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-12Accounts - Invoice.docdoc 8ef9d93170ffa2038bf90f10704e6a6f4f6e7b11442ae6a19c668196aaa1d0b3Virustotal results 21.67% Heodo
2018-09-12Latest invoice - 239531.docdoc eeb70ff1aa4477c325260f569e35fb22cb0cf1fa2da11d1508db12f4f84987b8n/a Heodo
2018-09-12Month notice.docdoc d4482c6be7b3208e3668f55f40b2207dfe7acd33c26f93e7100757827eafe66fn/a Heodo
2018-09-12Invoice Confirmation O132378.docdoc a1cbeb26b1fc114888a3bc7bb0f5b20cbfc5176d05cf6f558e64ebd222f7f779Virustotal results 29.51% Heodo
2018-09-12Invoice.docdoc b916b14fde0e06e50cacca99605db7008f90b01ad4203b396abf717cc3fbeaefn/a Heodo
2018-09-12Inv. no. 3S6H591492.docdoc 28ddfb66016f4afaa3c5b6747d72aa74a1f656ffcf005afad189224612fd7a5cn/a Heodo
2018-09-12Latest invoice - 228426.docdoc e44ad7d54c33963149c77ee31940482540e8ec955cd9077aefdf938ba5c6c933n/a Heodo
2018-09-12Invoice # 52KX69327.docdoc f1e3ddd28a2200347dd2d366ac744affdd44178624e8ea0b9f893403faa03407Virustotal results 28.33% Heodo
2018-09-12Customer No 9826167.docdoc 055db0508235a00ecc6986f08b083dbd713bfcb53aa215f992523875acb831fbn/a Heodo
2018-09-12Statement as at 12.09.2018.docdoc eaaad8afbef1ee4ff3504f7600e05b96ecaf6243a7f84b9275ccc2d614029508Virustotal results 27.87% Heodo
2018-09-12Latest invoice - 286810.docdoc 837b1bab4d16e230828f00777601104c39e7ada681d446ed8665323ade4d349bVirustotal results 27.87% Heodo
2018-09-12Latest invoice - 632607.docdoc 834d2c131a08577c53405dfccfa2f79d14cc1423a2ca55eb708c7e7876bd0872Virustotal results 28.33% Heodo
2018-09-12Invoice Query.docdoc fb79164ee252899c5a3b973a2c9255e70b8c45b456d97d417e901991b2c502b4n/a Heodo
2018-09-11Customer No 192957.docdoc db960c5df69ed5957af827b49783a74fb6cb13ef84107cd0a594f70cafa4f7dfVirustotal results 37.29% Heodo
2018-09-11Invoice Confirmation 1E883183.docdoc b9a1fd3df1308972767d89dddad29a4248f90634c32dcabcf61e89f4ef9cb8f8n/a Heodo
2018-09-11Customer No 5367406.docdoc 09d2774d10a7b1151b6ebc72461c75efa1fe763d058192427fa300a063fb11deVirustotal results 33.33% Heodo
2018-09-11Invoice.docdoc 5586e5cc630f53effe5a62b0dd54a67a55f1a70503c175cfc65b8431abfb44a3Virustotal results 33.33% Heodo
2018-09-11New invoice 0O141454.docdoc 0c9eb04883f16b5aaef9c5ccf6f5f228cad669b4e72bec003a85e2c4d31d8d4bn/a Heodo
2018-09-11Accounts - Invoice.docdoc 642a286f88c074d74273e904f340eacbfa41201b1286642313f73befeb5be19dVirustotal results 29.51% Heodo
2018-09-11Customer No 147748.docdoc 9df84d2f145b7137baea4a8e9fa1a6cc2eb8a453dac91c62deec4736817fbb82n/a Heodo
2018-09-11Invoice # 62ED4842.docdoc bbf9889343a5967881a51fc2d60b611f0ada2096cd7071eb32e1ed9334554880Virustotal results 30.00% Heodo
2018-09-11Invoice Confirmation G78879.docdoc 3961b3338513540d2fcb2c01219f0d5f4ad44970a7d72244889684bdf5ba3ec6n/a Heodo
2018-09-11Inv. no. 2FE7501056.docdoc a82503fe73aecaa8c2f84941ceb921a4d7b75287b4f7ec77efe63c3464d10154Virustotal results 28.33% Heodo
2018-09-11Customer No 810053.docdoc 49158022825cd7518187ba183ff5bacc26dc02b16ba05bc4f66f8483ec569562Virustotal results 26.67% Heodo
2018-09-11Statement as at 11.09.2018.docdoc c48b5ea1a1967361190cd828fa166d49ecf6e238de917f2bcd5f1bd524bdd499n/a Heodo
2018-09-11Customer No 2490470.docdoc 5119c9d768073261fa3e639197ea6400d0761e8a9bfe8d21134d3631250da748Virustotal results 32.08% Heodo