URLhaus Database

You are currently viewing the URLhaus database entry for http://elrofanfoods.com/buvlj/sites/otm4l66c493/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:558423
URL: http://elrofanfoods.com/buvlj/sites/otm4l66c493/
URL Status:Offline
Host: elrofanfoods.com
Date added:2020-09-18 17:33:19 UTC
Last online:2020-10-01 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 17:34:47 UTC to DCAbuse{at}zayo[dot]com)
Takedown time:12 days, 13 hours, 57 minutes Bad (down since 2020-10-01 07:32:46 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19DOC_874497058340257698218.docdoc e9325a711e0f6f605b85898c5b507d4320e1f1dc672c68172b06cda359b5107en/aHeodo
2020-09-19G_2EP0H1VO1T7I.docdoc f4914cbba852a170c0da8d021e223ecd72be23357cf6dfaaac21d926ab043885n/aHeodo
2020-09-19FF3INLKYYGKTZ.docdoc e94370a66b084c6e99c0a16d5b777ba5d77c0e9a63ff4c237635ea1b37281072Virustotal results 38.98%Heodo
2020-09-19BAL_GEBNNCI9LH55F.docdoc e1e9afb5bbc575dbf36a065e3f986bdd46ddb7a3282b2d41a5fd8259520c1cfeVirustotal results 36.21%Heodo
2020-09-19T_038G45RKI97GDMVM.docdoc a17adf48e5d1001ed87a1af31344545ee83df584126c6ade083cdec6fd158105n/aHeodo
2020-09-19DOC_PO_09192020EX.docdoc 2bdb231a4e071c32f3734fa0ac5a13e5463ad6aea21e4a089fe1a1c69a56d372Virustotal results 36.84%Heodo
2020-09-1974946789.docdoc 0fad7aa076137ca0eea07801301e4a9799bfe63d5f5ac04aa449db6fa4201512Virustotal results 41.67%Heodo
2020-09-19T_746D3DL7IC.docdoc c8fc2ffef7922459d1144fe2ea5973e62255d0256394126a4cb635bcaa107fben/aHeodo
2020-09-19INV_52324295.docdoc 1e3e668d4d9f8596fbdeca274a5e9ca43d2f36b0f3a620d40dcf65dc8e4cd599Virustotal results 34.48%Heodo
2020-09-19REP_YE4959253928AP.docdoc 75f538b2ff372af6854b172dc78aea754ea64afc283c47f6c1b5bba657e9cac9n/aHeodo
2020-09-19XSN_090120_WFC_091920.docdoc 6da6b99d1e7334c2df666c15e596c4fb9cca58c3f3891e9cc6676580e5b1dcbfVirustotal results 35.09%Heodo
2020-09-19PO_09192020EX.docdoc b37ef41801c298349f3b8d0e7f0bf41fb621f4925fecc934cf95f84c7ee19782Virustotal results 49.15%Heodo
2020-09-19A_02750625.docdoc c066bc4500ead9e0889bdaa4bc27671470aaed708c36824216e519d2b9325dfeVirustotal results 36.21%Heodo
2020-09-19BAL_EN4796911003RH.docdoc c48a51d8de6403e9edfbd7add130002b895655dfbe014581e64d0fd7bee83155Virustotal results 36.21%Heodo
2020-09-19REP_UK0537375637QK.docdoc 1963ec47acb4c6d57b2e6d75de7d45de3b479c9f24760d5a0456a3accc66ddb0Virustotal results 42.37%Heodo
2020-09-19MDE_090120_QEI_091920.docdoc f324ce3dda20edd6a8a964eb14fe89ea1df9a7bfad867dc0abba653b22534357n/aHeodo
2020-09-19REP_PO_09192020EX.docdoc fff500c894e8ce1ddc024ef40ece32c51ed45d3d85eee507a81a1c2d0115db85n/aHeodo
2020-09-19DOC_96017350.docdoc 918a64048af4a066fdd935050729fcc70f074457f2943f59469ee5f3bdb0a70dVirustotal results 35.59%Heodo
2020-09-19P_36AL2Z2UB.docdoc b8818fbdeecde51adf7270365592b9812f1e323c4cdbf81f12885c590727d3f2n/aHeodo
2020-09-19DOC_3921751765073560827.docdoc 9075458c2a7a9b59a7e7f9e575757a3069952452198a9c17ce3211d3de14eadbn/aHeodo
2020-09-19INV_MA1689478237WA.docdoc 2f74b7cb39258bea3019a9fc83f6fdcd6ed4e675e175236ae83bf0ea02af0e0eVirustotal results 52.54%Heodo
2020-09-19INV_1563706667.docdoc a1fa34071ea34019a6dc2db84db432ae749b2577700cd493d6e83c8af8e06cdan/aHeodo
2020-09-19REP_93236697.docdoc cde71f33068605eabce06bc83bd39ab037b0c00a1fcf116de871a44328981e08Virustotal results 35.59%Heodo
2020-09-19DOC_FKBR70VRJ6VVH4.docdoc 778c345084d688acf88bb52a9c052c1e852688885a2b4c6c3938f6f471888d44Virustotal results 29.31%Heodo
2020-09-19A_HPC_090120_BVY_091920.docdoc 7a41acc2bae61a34f8177e8d2cfa0b5f268c583906f678bd7331d9aca266f238n/aHeodo
2020-09-19BAL_34280658.docdoc 4fdb1e6203d6e04a6229d129f4087b311a3824e7fc345b00b555b9593f6f9adbn/aHeodo
2020-09-19FILE_EERLMEMD6U.docdoc e3917f2ed0855bcc9400817a19340a2e860e4235af3697c42483a6f2d69642b0Virustotal results 35.59%Heodo
2020-09-19INV_IXQ_090120_MFL_091920.docdoc 4b9de007a12dfbcc6b19f1bd5cf8d12f6ae9a7d2a3c3c04b1147e448974d9486Virustotal results 40.68%Heodo
2020-09-19DOC_20291315.docdoc 1f267368325cfd8a9665680a987d4b866cbc949478dd3d8485e357ec821295f3Virustotal results 50.85%Heodo
2020-09-1948859041135773.docdoc 375b8adece65a4d295e2b9104fb0e7fa3c3c7cc7ebb3dea4607776d050029316Virustotal results 27.59%Heodo
2020-09-19XC_I3EG1CXBOZGX4.docdoc 5cc754b56ea15b372576406cb73285d5c74e09ee434b62bb955e5c02caca6b68n/aHeodo
2020-09-19BAL_MQI_090120_EVS_091920.docdoc 8de8ea6861abc663aa24c26703bde4b83981117f06c438a6d82c295d178ce970Virustotal results 40.68%Heodo
2020-09-19F0VJIM4WEHIX.docdoc 283fa803d0bcd99ac43b6d04b267e8fe8de71ea98d41f73ff426fc27fcba6dc2n/aHeodo
2020-09-19BAL_92754590392358686.docdoc cfa732f080d66f4255202de5836aedb5332dbe226ea5ff3e49c926ee56519cddn/aHeodo
2020-09-19043469098456723348483.docdoc 0549a96b45be7693d38af5e4063355260635db3e33191b92e82e43c49eda7901Virustotal results 38.98%Heodo
2020-09-19FILE_PO_09192020EX.docdoc 9ccda2e6b37df2289f65dfac9606ad6b9a8638c5ee524ca0ed76e7db70bcba24Virustotal results 30.51%Heodo
2020-09-1975010334.docdoc cdb7ce8fb7effdc8c98c363838bd824c3fbcc6a08290601a0e6027f1c6faffddVirustotal results 25.86%Heodo
2020-09-18BAL_NSS_090120_NSL_091920.docdoc ec0a9a535ccb576248f4c7900428f2a898853aa83d6cdff165a23414125d8a68Virustotal results 25.42%Heodo
2020-09-18LL6619509393PT.docdoc a89a3fb97be7cefc4d26bbdfb463943abc4b7a4ad8f448b559cabed432592458n/aHeodo
2020-09-18REP_12459800518713.docdoc b5718d755ae4e46d507e6fc54db7738a1c231ba9625ac6470b6a3393ae120d96Virustotal results 30.51%Heodo
2020-09-18BAL_PO_09192020EX.docdoc afc7650429d1bb92b43bc1bae9ac07c7e3ff7d34b10949e03b97c1a43cab0930Virustotal results 30.51%Heodo
2020-09-18MI51OUWLEEM8N6.docdoc e6efa97f9a08f01b78d5a5e02d3ef06892f126a52bacb798cd5546dbfcb5e139Virustotal results 28.07%Heodo
2020-09-18Y_HPE_090120_CKC_091920.docdoc e351cb48427d30ca802f3beabc78c164446cadd34d2f040fa46a3842299b2f82n/aHeodo
2020-09-18PO_09192020EX.docdoc 51a455b1fd51bbbeddc6805c7d1304d1100dabc2c5611401df5b4f834f62b07aVirustotal results 22.41%Heodo
2020-09-18PO_09192020EX.docdoc 93d817dfd2bf4e664bc17daefb9bb205e54156396a0d675a88bc250194bc7d9aVirustotal results 37.93%Heodo
2020-09-18BAL_3646756374215995358.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-1870505240884828810256.docdoc 9d18ad242b906738ecf1a87d38dfa1b46320cbed0c62244a23c7585251350efbVirustotal results 44.07%Heodo
2020-09-18NE0088846511TJ.docdoc 83ef8a546c7ee56fc9fdd0a7cfe3651582d97a1e63ac0d51ea91786703752e48Virustotal results 42.37%Heodo
2020-09-18BR_22937944.docdoc e2f56917b3d099c1181df4dca64371a0f7bf81e02f1ce666637390ea0c95c18dVirustotal results 42.37%Heodo
2020-09-18121561441.docdoc 9dfc5f3534fddaef93d3e5325dce0d96515081d07eb941bf97bb852de21b8d05Virustotal results 44.07%Heodo
2020-09-18DOC_XDL_090120_BQS_091820.docdoc 33099cd71cd92838445b2b6beaab0d5f29220c7866510e1a83dd32c0779c91a8Virustotal results 36.21%Heodo
2020-09-18W5BM607RNZS93R.docdoc e6c59aa272b0319132af611954aba4331117e24c05ed652fdbf58c0ff36e991dn/aHeodo
2020-09-18FILE_4035858585.docdoc fbb0768a54c96daabef7659e5ec321d26211a023027f8beb9b9b5bf49f36d583n/aHeodo
2020-09-18FCR_090120_CDK_091820.docdoc a41a3280f7e5710c654132cf7c3dc95d3411e4c7ae29028b10a25e5c2798fb9bVirustotal results 42.37%Heodo
2020-09-18INV_PO_09182020EX.docdoc 6f8efbd1a395cd60ea9b8707e83cc385dcd02826653fe78b0eb448d22d350035Virustotal results 44.07%Heodo
2020-09-1808294245.docdoc 0799610f529d55ce947bf45710fe0607c9f5bbfab9a4cb346e6af91607c893c3Virustotal results 42.37%Heodo
2020-09-18BAL_306700114544717750496003.docdoc bf6932b93923279c279c706a6404ad93689fe61414ec24f87ca9eb85389c0bd6Virustotal results 40.68%Heodo
2020-09-18577764849991599308279213.docdoc e95b010a8ff840d370f7b1443ff23aecb562b6a5eafe6c28a393798046565870Virustotal results 40.00%Heodo
2020-09-18BAL_EPC_090120_NXM_091820.docdoc f6dee1b273f9ff061e9c1bcd320d7f98484283f3f6ce1973877bf93231a08562n/aHeodo