URLhaus Database

You are currently viewing the URLhaus database entry for http://villatera.com/cgi-bin/eTrac/7Sg61xJuszid/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:561638
URL: http://villatera.com/cgi-bin/eTrac/7Sg61xJuszid/
URL Status:Offline
Host: villatera.com
Date added:2020-09-18 23:20:36 UTC
Last online:2022-10-02 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 23:22:27 UTC to abuse{at}strato[dot]de)
Takedown time:2 years, 0 months, 23 days, 0 hours, 38 minutes Bad (down since 2022-10-02 00:00:37 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-07-24ARC_20200921_FBZ158399.docdoc bf64d3f04975117ef52e360537da0cc40e50f3bbeaba0e6475a721d5bf4b2fc3n/a Heodo
2020-09-19doc_20200919_512.docdoc 7914bb6c3d6664a065cdb3f06cfc21a7f85fd7423e3b5af3468245d1f03edf5cn/aHeodo
2020-09-1946085143_PL0303.docdoc 32f41a25d60eecd90e5e66e0ac2850bd6fbe4f97ddb2dd1e1c3998ab3089f391Virustotal results 31.67%Heodo
2020-09-19REP_2020_09_19_4226.docdoc 034a97e7614fadaf9552e4fbc5992139431bbc6bc905b9af8adea4d60b741f3eVirustotal results 27.12%Heodo
2020-09-19Attachments-2020_09_19-502.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19LIST 2020_09_19 E0381.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2Virustotal results 23.73%Heodo
2020-09-1973744731_8951.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7Virustotal results 22.03%Heodo
2020-09-19LIST_2020_09_19_DC173265.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47Virustotal results 22.03%Heodo
2020-09-1943120290_20200919_GI64288.docdoc f5ca634bdeacd64ccc52ea932bd221762cc68524fcef2df96c77ecd777d16670Virustotal results 22.03%Heodo
2020-09-19List-2020_09_19-424.docdoc 9a89421741b56db1e2d97d925176d40fae890abdefd3e136a24afb0589d4371eVirustotal results 22.81%Heodo
2020-09-19File_2020_09_19_6618265.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 24.14%Heodo
2020-09-19arc 2020_09_19 SL051.docdoc 3eb7679ffcb5eb0cd537545d2e28ad49fdb4bc89366476f731659703b6707ff5Virustotal results 22.41%Heodo
2020-09-19Rep_20200919_Y18995.docdoc 28507b923fd0244f91298f75b8c588b4a5fdff53a29d81177bcbfdfd741f9b82Virustotal results 23.73%Heodo
2020-09-19Untitled 20200919 F1349.docdoc 33bab5da95407fde0ab439aa5942622a7e1286cb5ad74d4e55689fa5c59f8559Virustotal results 22.03%Heodo
2020-09-19dat 2020_09_19 HQ93177.docdoc 906eb841dd00ed7c09bdb5dc7c0d3722f6313536e45201301a2db07d0fe04beaVirustotal results 23.73%Heodo
2020-09-19rep_20200919_2525.docdoc 33ce6293593a02d1b88213d5e0bd0fcc3667491733ce5009426e8fd5c2e6dc50Virustotal results 22.81%Heodo
2020-09-19dat-2020_09_19-DZ870.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19dat JL74004.docdoc 8750d49fc1ba34c16ce392d088b1843101a6669f5407b567c2dff708351b81ccVirustotal results 23.73%Heodo
2020-09-19MES_0783.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2eVirustotal results 23.73%Heodo
2020-09-19Doc_20200919.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19mes_2020_09_19_529.docdoc f4f8fa4ea75cb101a9f02af6bbf8448e6f4450ff695e1f62f2adf110409ab85fn/aHeodo
2020-09-19mes 20200919 EOB5876.docdoc 5a0c4c40fea422907e85ce8348431c8365731e13690a0df7ded61ac480bd6137Virustotal results 31.03%Heodo
2020-09-19ARC 20200919 482150.docdoc 9f038a3f8faa7d88948648de22b5ab1fdd3cc1d598fc1125ff950daa9fadc4b1n/aHeodo
2020-09-19Doc O68729.docdoc 0f8726a2e1ed31116d9cf065548921ba480bafb9467bbbccc96ec094859734e7n/aHeodo
2020-09-19LIST_XG907516.docdoc 4c294575dcf08d7b4946e3d8d883d7a62ab36dd5170bf983df08adf59d7414dcn/aHeodo
2020-09-19Dat-2020_09_19.docdoc 5c9595da8f021c0eb6c4da08ddfff0b280e4b1f2c7b0c9a1908f8c5bd98163e4n/aHeodo
2020-09-1947671881_1184.docdoc 17b333cc6c291651161d6bab9f62df4f89a31b13b8b8db8722c6e6d069d1bc30n/aHeodo
2020-09-19arc-1494784.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9n/aHeodo
2020-09-19rep_20200919_1398956.docdoc 75e37e5c3591743af109482748f2a48e550f1a9d767316a8cece66fb4fe8c222n/aHeodo
2020-09-19233BLZ_20200919_X46247.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfn/aHeodo
2020-09-19Attachment-20200919-NTO0173.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcn/aHeodo
2020-09-19doc_20200919.docdoc 0b58ba1859d47221ab95122240157d9d4bc885723fb94b700f1c36cb28edf3c6n/aHeodo
2020-09-19Inf-2020_09_19-V9856.docdoc a6d4e72568e642cf4b7ebface0d1efd59bb14b348af845c74bd132af71733f53Virustotal results 20.69%Heodo
2020-09-18inf 2020_09_19 122.docdoc 000dd08101567f408a0ee2b7d095d3baa02f532ed3839f66b60b9d64ce065d17Virustotal results 22.41%Heodo
2020-09-18208U-2020_09_19-SOP5072.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28n/aHeodo