URLhaus Database

You are currently viewing the URLhaus database entry for https://obazda.de/admin/lm/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:558517
URL: https://obazda.de/admin/lm/
URL Status:Offline
Host: obazda.de
Date added:2020-09-18 17:41:04 UTC
Last online:2020-09-19 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2020-09-18 17:42:32 UTC to abuse{at}strato[dot]de)
Takedown time:15 hours, 27 minutes Good (down since 2020-09-19 09:10:31 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19NS6195919244CR.docdoc fffbe59f1dc6c2deda79ca2307558610f2c5abb3e030a07d7e0be1969e2fd45cVirustotal results 31.58%Heodo
2020-09-19B_DVU_090120_EME_091920.docdoc 15533d02d9310a6707f2092410bb3deff89174f7bc64f893a98e946f2ae3ba3fn/aHeodo
2020-09-19INV_73838225561.docdoc 4165b27e5b534a04d00fd600c969784706dcd31a10beaa3b585e754f973d89b6Virustotal results 35.59%Heodo
2020-09-19BAL_RI4597330725HY.docdoc 1963ec47acb4c6d57b2e6d75de7d45de3b479c9f24760d5a0456a3accc66ddb0n/aHeodo
2020-09-19DOC_PO_09192020EX.docdoc 23e85a68c4a3b9d299d2ed531ada64c13d44ea288cad289752aa9dd3d3e08884n/aHeodo
2020-09-19DOC_8ZQH8TBU0237.docdoc fff500c894e8ce1ddc024ef40ece32c51ed45d3d85eee507a81a1c2d0115db85n/aHeodo
2020-09-19REP_14363085.docdoc 53c798816c0299b0b57dfc31682d5bc2a73573f248e05ce8b5427b1b9d908150Virustotal results 34.48%Heodo
2020-09-19K_FU4742360070XL.docdoc c416a530297805458112eb6bae320911725f393d317c8ff2d42ba709394d6688Virustotal results 41.67%Heodo
2020-09-19FILE_20122401.docdoc 2f74b7cb39258bea3019a9fc83f6fdcd6ed4e675e175236ae83bf0ea02af0e0eVirustotal results 52.54%Heodo
2020-09-19DOC_XHRZPPATUV5.docdoc a1fa34071ea34019a6dc2db84db432ae749b2577700cd493d6e83c8af8e06cdan/aHeodo
2020-09-19A_NV1AVC68L2T4QDH9.docdoc cda0f300f10989d730a1ea43471dfadb97cb10e13a73fbabeb565b5fbfd6bc30Virustotal results 31.58%Heodo
2020-09-194NH83UJS5M.docdoc 778c345084d688acf88bb52a9c052c1e852688885a2b4c6c3938f6f471888d44Virustotal results 40.68%Heodo
2020-09-19QJ8953372098SM.docdoc 7a41acc2bae61a34f8177e8d2cfa0b5f268c583906f678bd7331d9aca266f238Virustotal results 41.38%Heodo
2020-09-19REP_HXS44CI53.docdoc 4fdb1e6203d6e04a6229d129f4087b311a3824e7fc345b00b555b9593f6f9adbVirustotal results 38.98%Heodo
2020-09-19BAL_SDA_090120_VRY_091920.docdoc 2d22cb6bb2684459c707f30b23c49d03c4077803ebd1e4256c071f8d365ada55Virustotal results 31.58%Heodo
2020-09-19DQ3948887947UY.docdoc fbe06b77331c2615ddb714d8e539f9f8eb7e35024aad5aad9af594b528f4450cVirustotal results 36.21%Heodo
2020-09-19DOC_PO_09192020EX.docdoc 1f267368325cfd8a9665680a987d4b866cbc949478dd3d8485e357ec821295f3n/aHeodo
2020-09-19C3F2MJVUZB7CM.docdoc b906482b50c16f39e9ceb8f7fb0c7ea8b7f2480a25a5452f2006daea435d2d7dn/aHeodo
2020-09-19BTK_090120_VLC_091920.docdoc 8edaaf5279e9bbfba0c2952d8545563f327f0648035e56774baef612d4777aafVirustotal results 31.67%Heodo
2020-09-19INV_PO_09192020EX.docdoc d20baee3b136e9ccf09f5dd19ddf745c78f62622f6449979fd30940853bdb70bVirustotal results 24.14%Heodo
2020-09-19Q_VKX_090120_GRO_091920.docdoc 8de8ea6861abc663aa24c26703bde4b83981117f06c438a6d82c295d178ce970Virustotal results 25.42%Heodo
2020-09-19FILE_J4ASYQV4KHQKSQE.docdoc ee2bfb3bfc62ad36246c4533bb4bb8c41aa21ffeb8bd74b216d3c6088cbc7b62Virustotal results 25.86%Heodo
2020-09-19REP_OLEE47P4.docdoc abedf8ebece852bb37a29e46ef57ea6685752259f7a642b458e8b3d3d57a5b34Virustotal results 32.20%Heodo
2020-09-19GBG_090120_WKQ_091920.docdoc c87f8fd591bb21b8ee7da412593310605e465dc013f1607cd0f67c0e39d58685n/aHeodo
2020-09-19M_WZH_090120_HHG_091920.docdoc 61e0ad6b0713f35c85474bdccb13d97ddbc1f384dbad75c364224d9b65c1bf51Virustotal results 36.67%Heodo
2020-09-19DOC_CRB_090120_DIL_091920.docdoc e701c5716c99c6e1549951ed3f1eeffb8b4a9625d8dadb55251998b731c7a109Virustotal results 35.59%Heodo
2020-09-19360248882926694917084626.docdoc 6d6118565c7f02eda347f3b1b2b485893fbb020108df5e61fd06966bfb1ee2bfVirustotal results 35.59%Heodo
2020-09-19FILE_QG0419670251OO.docdoc ec0a9a535ccb576248f4c7900428f2a898853aa83d6cdff165a23414125d8a68Virustotal results 35.59%Heodo
2020-09-18FILE_PO_09192020EX.docdoc cdb734fc9234a80b1fda26d9fde564b0e14efadc283ba63e61e9031657f399ecVirustotal results 24.14%Heodo
2020-09-18INV_BGX01FMZ30QP.docdoc b5718d755ae4e46d507e6fc54db7738a1c231ba9625ac6470b6a3393ae120d96Virustotal results 30.51%Heodo
2020-09-18QXB_090120_XCI_091920.docdoc e6efa97f9a08f01b78d5a5e02d3ef06892f126a52bacb798cd5546dbfcb5e139Virustotal results 28.07%Heodo
2020-09-18MMX_75229611.docdoc e351cb48427d30ca802f3beabc78c164446cadd34d2f040fa46a3842299b2f82n/aHeodo
2020-09-18CJ6048258639HC.docdoc 51a455b1fd51bbbeddc6805c7d1304d1100dabc2c5611401df5b4f834f62b07aVirustotal results 38.98%Heodo
2020-09-18INV_92180514.docdoc 93d817dfd2bf4e664bc17daefb9bb205e54156396a0d675a88bc250194bc7d9aVirustotal results 23.33%Heodo
2020-09-18DOC_PBN_090120_LFD_091920.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-18U_RQ5505408687ZG.docdoc 9d18ad242b906738ecf1a87d38dfa1b46320cbed0c62244a23c7585251350efbVirustotal results 44.07%Heodo
2020-09-18BRE_090120_OZK_091820.docdoc c0922c3c055ffde4da5b482105dea26df27c58e1a615ec81afc024d55010f8ebVirustotal results 42.37%Heodo
2020-09-18UV2328924363CE.docdoc e3c7337d6899a5aa8ee475f563c6c84af325ac88c2a30a676f56d6182a75b59bVirustotal results 45.61%Heodo
2020-09-18FILE_01483389.docdoc d30150c62052607c9dd68065e9bf07da7c7490bdc0be48077a770b13f28d77b3Virustotal results 42.37%Heodo
2020-09-18REP_EV3720795902VV.docdoc ba8631c356bab8573b3b7bbac984856e3ae826f3c6503286c2e8396330f263aeVirustotal results 31.58%Heodo
2020-09-18BAL_50157209.docdoc f4df1dedf37fb1a9ad0516f16dda120c0985d796a40d02474b9ae4c613c402adVirustotal results 30.51%Heodo
2020-09-1878190130.docdoc fe79ed4902c209d55bd37446fc8d4ce7b37f241e85e7d17264051a8cb300fa5eVirustotal results 43.10%Heodo
2020-09-18BAL_PO_09182020EX.docdoc 6f8efbd1a395cd60ea9b8707e83cc385dcd02826653fe78b0eb448d22d350035Virustotal results 35.09%Heodo
2020-09-18BP8755706073HH.docdoc 0799610f529d55ce947bf45710fe0607c9f5bbfab9a4cb346e6af91607c893c3Virustotal results 42.37%Heodo
2020-09-18MZ9039852916ZH.docdoc bf6932b93923279c279c706a6404ad93689fe61414ec24f87ca9eb85389c0bd6Virustotal results 40.68%Heodo
2020-09-18FILE_9HY5Y1T3HD.docdoc f6dee1b273f9ff061e9c1bcd320d7f98484283f3f6ce1973877bf93231a08562Virustotal results 39.66%Heodo