URLhaus Database

You are currently viewing the URLhaus database entry for http://markantes.com/jason/browse/pOB81IGMTIoOOykX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:547842
URL: http://markantes.com/jason/browse/pOB81IGMTIoOOykX/
URL Status:Offline
Host: markantes.com
Date added:2020-09-17 19:20:07 UTC
Last online:2020-09-18 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-17 19:22:25 UTC to abuse{at}networkredux[dot]com)
Takedown time:8 hours, 38 minutes Good (down since 2020-09-18 04:00:28 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-18LIST_4686394.docdoc 1cba542ea755572052ee0ee05629e5f1a0b3161fc11106ad6e2679fc5ee2a6f4Virustotal results 41.38%Heodo
2020-09-18Mes_7943117.docdoc 2c884afcd8cbdb6504dc36a8d6f0e78415d4de142b7c977fcbaadbfdbe667479Virustotal results 40.68%Heodo
2020-09-18Attachment 2020_09_18 SEJ8910.docdoc 2f6bcc8d01f408e93b5ceb4641aea994c287e5d5cd751e454d6f2dcf7c7041e7n/aHeodo
2020-09-18File_20200918.docdoc fed5e7580640c07c65d8f7dc61525cec900564c60b608e59670491b4e82d8e8cVirustotal results 38.98%Heodo
2020-09-18Untitled-20200918-441288.docdoc afec45f4897df0117cbcbec6972de56bd81af8ee3e6b1cf88507764596a9f927Virustotal results 39.66%Heodo
2020-09-18mes_2020_09_18_601563.docdoc 8669123b64918b7f8a0706453cdfb5886208f5e31dcf5d89e598b2ecd0dc025fn/aHeodo
2020-09-18DAT 4978782.docdoc ad4eb965cb471c7a137b9037c732d53cae47f7d73467cddddf88cfee5b615744Virustotal results 36.21%Heodo
2020-09-18arc_2020_09_18_C025757.docdoc 0fa784f6a6eaad808c6f9037d5515f435da8c204edba06b50d4839499bccd481Virustotal results 35.09%Heodo
2020-09-18UNTITLED_20200918_Z090.docdoc 6d7657e6644c4ace4f65f6639704f74c9f7dd6d2e7e3e3be74c0651d5fc7346an/aHeodo
2020-09-18List-20200918-N396999.docdoc 09e50d506aa9487e90283df7675b3f77f2d6ea20c8cfc8df842e34184ecde239n/aHeodo
2020-09-18Mes 20200918 21000.docdoc c386868e3f526e0cd5d9093ae760761ebadb17cf74591886e56d8de0d3097f1cn/aHeodo
2020-09-18file 20200918 35876.docdoc 562c1a653b94bfc9219306d06089d0621f9f3fd9712476d1e543828e67d1eb83Virustotal results 33.90%Heodo
2020-09-18ARC 26587.docdoc 68a6ee3668a51859a1ccabe683a3d6148c90ec6cab3ed3e4cbf58e3dbfbb5ceeVirustotal results 35.00%Heodo
2020-09-18REP-4366704.docdoc f9a9596b06fd6053fd9fe2f73a3cc010078c12423f3e963d553675df3a02b77bVirustotal results 34.48%Heodo
2020-09-17doc_JW4868.docdoc fac05b7ef1455e22097b936c48496ba95620364be0aea7125fce483d1bcd7849n/aHeodo
2020-09-17file_2020_09_18_195.docdoc a799324029ea75b6b4a71f02bce59d976fd0926ce98d134c071d39e892f1da2fVirustotal results 33.90%Heodo
2020-09-17Dat 20200918.docdoc 7f8b0c4424e7380c14127e52a14ff6e672914b9b042fd9e899702e09bef69484Virustotal results 33.90%Heodo
2020-09-17UNTITLED-Z098181.docdoc b2333c8d2f6d1bddce72b7f65bb31a0ffc83dc7d933e262391377410c1655b7bVirustotal results 33.90%Heodo
2020-09-17DAT 20200918.docdoc 4d24738568acaa4cb1874eb562dc8868c8097922ed0cedbb56f60f21135f5b93Virustotal results 33.90%Heodo
2020-09-17MES-2020_09_18-C42557.docdoc dc33cb6f700e7453aa332b8ca55dfac6a7ad1473c496bc183ec73c84b8ea538dVirustotal results 32.76%Heodo
2020-09-17list.docdoc 50d8f251a1416934c45a1792ac80b2e6ccde91ddfa6e6d89e5cabc851c0a7e20n/aHeodo
2020-09-17Mes-20200917-B30960.docdoc 1bc4a47d0fe2369993ff6f11e93075f7e441de5d443e88719a9787c43f6a277aVirustotal results 32.76%Heodo
2020-09-17Attachments-7186.docdoc 69b92a13de9bc9189abf0d3e05336bc19c4d2aed4299571a7bd3537567279461Virustotal results 32.20%Heodo
2020-09-17Mes-20200917-3380123.docdoc 7e5fabcd329b22bdf9699c7d00cb1659f838826669429c9d0e7ec0e7be76f001Virustotal results 31.67%Heodo
2020-09-17FILE-20200917-JOX93998.docdoc d90be023c084db96e93bf06790391fc4800affc006ff542b7521978d5385b8dan/aHeodo
2020-09-1770597361-20200917-PX893183.docdoc 89581e3b0f0418b128d76769f816538ee7bc8aeae7a499ce355041e987092d16Virustotal results 31.67%Heodo
2020-09-17rep-20200917-76902.docdoc ee3d9beddb37d34ac9153c4bf717005b5922b64eafc401378621594713ec5bddVirustotal results 33.90%Heodo
2020-09-17Inf 2020_09_17 5504239.docdoc e5c379900d7e18c7eee5477d6e7172e592542bc6f638b4ec96dc09e0b3ed1110Virustotal results 32.79%Heodo