URLhaus Database

You are currently viewing the URLhaus database entry for http://itrust.com.ro/0gzn01/FILE/a9ztr9aw// which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:589825
URL: http://itrust.com.ro/0gzn01/FILE/a9ztr9aw//
URL Status:Offline
Host: itrust.com.ro
Date added:2020-09-21 20:51:08 UTC
Last online:2020-09-29 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 20:52:35 UTC to abuse{at}ip[dot]ro)
Takedown time:7 days, 14 hours, 31 minutes Bad (down since 2020-09-29 11:24:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-23PO_09232020EX.docdoc 18aabb0ff9adb2600243c3be590c57bcbeada6451b8ab0d190c1756430730e2fVirustotal results 33.87%Heodo
2020-09-23Z_THQLSXMNRN82UGM.docdoc 87147834cbde11b3f37c516844cf8d9ba78e603010280ee9eef5e29c92b10425Virustotal results 37.10%Heodo
2020-09-23B_ZULZL9B5TINGMGEV.docdoc 914b8769a89b16d3231958e8a03e2af289e32de76df9839de1c4ab3c2679f9f4Virustotal results 36.07%Heodo
2020-09-23INV_PO_09232020EX.docdoc 93376fc8dbfe2e11658564d1aa1e9088e6f7ad6a61d1ff146651df3d275c839dVirustotal results 37.10%Heodo
2020-09-23DOC_3Q7MV4V9VOJAHO.docdoc bbb6d73f3985fbf140b54d8d677505a103c94a9bb2c084c3fb92dc9c80e06a80Virustotal results 37.10%Heodo
2020-09-23PO_09232020EX.docdoc f97b08dd6d80bfd7e29abef0823103070c8629716d0497a6a20fc77398e115eaVirustotal results 35.00%Heodo
2020-09-23SWY_090120_HBI_092320.docdoc bb8142568de9017ef615f6eb92b63a11795c3d48f30b36957efb191f225ee49bn/aHeodo
2020-09-23IA2997202962SZ.docdoc 48fb9960d4880303b9ac71ab8d6d52f5853ad6b0520aa8a6ebc470ddcbd3085fn/aHeodo
2020-09-23WLN_890292354119816206275.docdoc 1cf04ce2088e4668862b236ff64c927dabb94b87783eacd8cb0818cdd35bd6b4Virustotal results 34.43%Heodo
2020-09-23INV_W3IUZSE2HJ3RD.docdoc abac1b85fef1b60626e2d74a8f0888a7b908c222303b742556a2226994ddcd39Virustotal results 33.87%Heodo
2020-09-23UK5411755725YM.docdoc 837c550fff034632d2b0963b5cbef7f23f932fb6439d9ec26b324655c31b1320Virustotal results 32.26%Heodo
2020-09-23INV_243271554089.docdoc 27913bedf548875b064d7c6316b3afad4aaaaa8998e4d9640f179a7a11da73c5Virustotal results 22.95%Heodo
2020-09-23J_D0B5UCXU86C.docdoc d83b4457e963cb82b3322d4ac94c492e4ee3c024573964d25ded75239d9623ebVirustotal results 31.15%Heodo
2020-09-23IYJ_090120_OVM_092320.docdoc bd69ecf726bce791184672d5e8317729c49e46729a648023c07701eb61a005e5Virustotal results 29.03%Heodo
2020-09-23INV_FJG_090120_IBE_092320.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 35.48%Heodo
2020-09-23DOC_14944563.docdoc 0e75f83d188cce264243b1d4f3674c4772e6aeb39415aeba5a32b20362127e33Virustotal results 35.48%Heodo
2020-09-23REP_NID_090120_TTN_092320.docdoc 50c9d530111fe31904255db5abdbabd939542a19af71c656dcdfd44c9fe2b4b0Virustotal results 36.07%Heodo
2020-09-23BAL_GGI_090120_FMV_092320.docdoc 128899ba979bf0b5b07a74f82789e723583f279e2163a0e6b6cfb5de09c0f0d1Virustotal results 35.48%Heodo
2020-09-23G_33907301.docdoc 5a6efe389fc1530d950fe7f4032d8f0c585eb3c4ccd412e20bcae526b12691b6Virustotal results 36.07%Heodo
2020-09-23TKQ_ZN1451261320QW.docdoc 710beefc4939b7fe4e0362f66fd592fc87a04fff8aacf8424eb0bd4858115fb6Virustotal results 34.43%Heodo
2020-09-2364JKO162M7AIM6M.docdoc 5f0d373b1aefd0bf4a4b8942b87a71025cb90011a5633caf9258d975e90edfc3n/aHeodo
2020-09-23BAL_HQ1952169487VT.docdoc 23228721f30ca78a87d92bafd441f784d43b35778a46e3fb21fcca990fdc778dVirustotal results 35.48%Heodo
2020-09-23REP_4912296965546.docdoc 567a979b7f1a51639017799b8645535f97627dcdf0a707d8daf974cc776f8ed3Virustotal results 40.32%Heodo
2020-09-23PO_09232020EX.docdoc 6d73594fd12ced84821a81b0917e31c3e1f2881c0cb5168fbab81aab82e12eebVirustotal results 38.71%Heodo
2020-09-23INV_MAK_090120_ZTM_092320.docdoc f06641ee9e6b743cb2edbd1898982be6d7ea50c042b93330a7bb869df86fb945Virustotal results 38.71%Heodo
2020-09-23VI8166359153KH.docdoc 93fb00cace65d90b02ab79f949887b3eaa5b0a0bca1e4a9d7c20576f8ad18deeVirustotal results 33.87%Heodo
2020-09-23REP_07631859313445565.docdoc eec6b346639f5aa9208c2fbc57161a281b1f72b3902a41ffdfe3a3a5b1ae3a3aVirustotal results 35.48%Heodo
2020-09-23FILE_PO_09232020EX.docdoc e757a53e573f1584dd56ed851acc303473be8922e8f879bd1dd8f9b8dbec4eadVirustotal results 31.15%Heodo
2020-09-23DOC_NNV_090120_ZXB_092320.docdoc a7305cf8e088408136fdfd5deadd230a7d00a03b1cc3fc12fc0705a30b4e0ae7Virustotal results 30.65%Heodo
2020-09-23BAL_00Q66QJMGUIAG.docdoc f81dc1dd571c29424756de4b14efa593fdea619f32694846535c4820c9acf375Virustotal results 37.10%Heodo
2020-09-231510400802393.docdoc be8eff5238b1b4c55eaf6bf5399d71b18bc093dbf2344c41e86f192173e1a5efVirustotal results 33.87%Heodo
2020-09-2380036052.docdoc b9230204a6b5bb648c78437d34a9350a40aa179243813ecef19402cd1f319b96Virustotal results 27.42%Heodo
2020-09-23BAL_483460423972005689.docdoc f8f2dc63225fa38d16de547469f9c418f3093385a270836e7431aad8bf52eebfVirustotal results 28.81%Heodo
2020-09-23YG3520808100WG.docdoc 04648ce7223361494ad5620c674be88a869710007f672d05721b77af59be70fdVirustotal results 30.65% Heodo
2020-09-22PO_09232020EX.docdoc 698748ed65c5d697095b866208160f8b4142e8d3e66a8cf826de1601fb3b080bVirustotal results 29.51%Heodo
2020-09-22INV_GP2QE84O0XITR4A.docdoc 158dba6d537edd9c1fb56cc2c1307f00634cf5188667321946c2247e02eb6c40Virustotal results 29.03%Heodo
2020-09-22DOC_DH7585479062UK.docdoc 7fc71d784c714360d684b4c25382fe807f04a3cbd861352f3c19fa0fd789e59dVirustotal results 27.42%Heodo
2020-09-22ZC8355011726GW.docdoc 096e7d0d8016a7efe13a6bcfe45e2b78d115eb681a6f855b639a9ca3c8db22c4Virustotal results 30.65%Heodo
2020-09-22Y_QU3118902490AR.docdoc 10fe3df8f6540696c8eaf649bc752e30d5533b0203869ec0839cf045227620baVirustotal results 27.87%Heodo
2020-09-22DOC_OH1726927561UN.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066en/aHeodo
2020-09-22BAL_ASKTYIDB1.docdoc 8f8f1029e9909427e27aa6d225db5eb6d8767560af23836c44a0abff203eae4bVirustotal results 27.42%Heodo
2020-09-22C_DR7937952446YH.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.42%Heodo
2020-09-2274548853.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 27.42%Heodo
2020-09-22INV_13672503.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405can/aHeodo
2020-09-22REP_DIL9VWY9XCYYM.docdoc 65da347c17ea74a9ddd129c6a7d05a42b72f4d4588b3d53e70ce9e96a118cd69Virustotal results 27.42%Heodo
2020-09-22AS7686305436ZG.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efn/aHeodo
2020-09-22INV_CV9463283609XZ.docdoc c12fac9cd3355e4f8d1f11015cd59fd3b476b20758d57988889bff4c5a352726Virustotal results 27.42%Heodo
2020-09-22HI9160087995FV.docdoc 0de0e21b2d6345de1cea6993fb9a6844eb12ca11686ea8c82a1792e030233557Virustotal results 30.00%Heodo
2020-09-22DOC_FHQ_090120_UQX_092220.docdoc 944e1d93b3a20dd3f16bcb0a36fafcfb833c3a86dccd514d812e830a9a78c6d5Virustotal results 26.23%Heodo
2020-09-22FILE_QW8309402735ZF.docdoc 5edac9eba4b9acb19c34761cd2f8631ea31814b300b760c31c1d42569fb7c50aVirustotal results 33.33%Heodo
2020-09-22X_TQD70486.docdoc 280a1aaaebe209d8b8f7a652fd2f9f9efbbb3a6731328ee3d5da4caff1bfb02aVirustotal results 23.33%Heodo
2020-09-22REP_23245044.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 46.77%Heodo
2020-09-22JBD_19881742.docdoc 16e58be61afe2d7b3d8b921e05f4e72ff5bd396480f6b904a915cabbd7985044Virustotal results 22.95%Heodo
2020-09-22REP_8227984596630491648528968.docdoc fd679813e3de5262b5b1bb4e046e63a87edeb9c7251d50613f7093bfc93d4989Virustotal results 24.19%Heodo
2020-09-22INV_512919223455662866518347.docdoc d2c138d20e5b01e5408d4026819c1369a562ca8eb3c75f0f965118e055595898Virustotal results 46.77%Heodo
2020-09-22GCR_090120_NMV_092220.docdoc deb600ac1ac3e5230085da737631928e9460610812ddec5ab166f830acd7a411n/aHeodo
2020-09-22JD8259140221VC.docdoc 5c4608b3b751fb1ca62b60e4ecf738b7363dfdd2c9d252c9cb91a8c12cccd26fVirustotal results 24.59%Heodo
2020-09-22BAL_DC6883552810WE.docdoc d53df17a2862036c676e8cf55a990bfec4505f016e117d0d93bb07c274b1c4c6Virustotal results 23.33%Heodo
2020-09-22W_NZ0894658969DI.docdoc e67daa065f0f3b78765e2306fa6a76b1c8dd01247b9fabecd118aeb07c2d8e62Virustotal results 37.10%Heodo
2020-09-22EV_HZ2636958302NV.docdoc da0548eeda47746d14e3934cf38702cbfd1f17bed1e98db6170fc2194747ecd4Virustotal results 24.59%Heodo
2020-09-22H_IEQ_090120_TGE_092220.docdoc 9bf0d791ca4a4276d0eb75151a08b6c78c6859a87418de1441e628aa592bc365Virustotal results 27.12%Heodo
2020-09-22YFKW_YEN_090120_DDB_092220.docdoc 013f49af6f7f5e1e34116aa22e1bc2ba4babbb2c0b0f97bf4da287ce88b16a16Virustotal results 50.85%Heodo
2020-09-22INV_XU1A4JTB48I.docdoc 03ac2f43a8cfab1623e6755d1b2d217a20c8b2828a15756b39cc410421bf7fd4n/aHeodo
2020-09-22DOC_VO4182416320VV.docdoc 167a50633bd1e80ef6c145b0ad4f6142754304ba747eaf37f0dfb2599bf49876n/aHeodo
2020-09-22INV_HDG_090120_IDY_092220.docdoc 38f1b170bb971a130f88c65c81b00d2ef29a3e9acb9ef22cfdfd9be5555211d2Virustotal results 49.18%Heodo
2020-09-22UT9573287106JW.docdoc 217d5eecc298ade36d2d72125e1af3685ad38b4c4dfb8c1a289c97a33dd7c641n/aHeodo
2020-09-22TFP_PO_09222020EX.docdoc 926ffcd5c140ef8034bb02d721f27d8fca0608d456ab432803be89c0282501e7Virustotal results 51.72%Heodo
2020-09-22FILE_23688546.docdoc 04cabb338b7a3e94fdf32d4bc5677be8a6320b982cee3ea841041bdac66d1693n/aHeodo
2020-09-22BJXWZ8VM2HAF.docdoc eb41eb35d1ed5c564815f19ad38456d5e3d16d8e75a2e67a7faeec4eb63b7985Virustotal results 49.18%Heodo
2020-09-22BAL_YXX_090120_QJL_092220.docdoc c81a8e36fd35e1dc7a1630db51f84cf46292375453bc046cf68c9cfb25f99849Virustotal results 48.33%Heodo
2020-09-22PO_09222020EX.docdoc 9161eb0f66dbc1b087bae7c0872b86364a286e87d8dfdbd7d6e29812103d4c33Virustotal results 48.33%Heodo
2020-09-22BAL_93946813.docdoc 0c1cc5960132333aeb60b0be9cbebd1dd6111da0266048bab71719914353e512Virustotal results 48.33%Heodo
2020-09-22INV_MXPVU5B255ZX.docdoc 1381f92160b73b6c0bb7968095746ad79ca485ed8190e82e45a020dbb51772f5Virustotal results 44.26%Heodo
2020-09-22M_65682703.docdoc 2009f9056e90d2564b967fa225b898cbbdb0cd957efec3b1211b18925d410695Virustotal results 49.15%Heodo
2020-09-22F_PO_09222020EX.docdoc 6b58f3d639dbfd3f04c2534bac10583c7e2d0ba1e88ef31ebe443fc18f409a76Virustotal results 46.30%Heodo
2020-09-22I_KV3964955945SR.docdoc 8d49090e5ad1ca487645e8dad8b6e90d267b4a7f5d4cdf4d9c4441d969f088caVirustotal results 45.76%Heodo
2020-09-22INV_MK8IZN5LRRZ7AE.docdoc 61b104c81d6e07bc38102631a844c6247bfb16ff720fc134b3a95d601df23fabVirustotal results 42.62%Heodo
2020-09-22FILE_PO_09222020EX.docdoc 49a1ffaa1b08021d92dd0139fad4b585e8b601c2ca7c74eca69ea9f3ff06ad79Virustotal results 40.00%Heodo
2020-09-22BAL_TMMYNI6VUQZ4E.docdoc 8e8096345532892bc0b1ed5814672ac5c4e4cca7e1e60d8ffe087282d8c2aa6cVirustotal results 38.98%Heodo
2020-09-22NY7418155462EC.docdoc 3329e54a271ff895664104546d9af52c00ce1284be48322d3ebf1cc34db74169Virustotal results 39.34%Heodo
2020-09-2287543609.docdoc fb096cb018d3c66f22c322028f9e8f1f049e9a9eb3531f9e893c3d2522f35951n/aHeodo
2020-09-22BAL_758090653119.docdoc 1641648fe63168cf2ed5116f47b0afc9684ef697c8f7506f952bdc909f915bd3n/aHeodo
2020-09-22FILE_46399931.docdoc 3ed5e00e046ce19a840746219ff3efcd6fcc4ddd0b608e51203398bfe2360da2n/aHeodo
2020-09-22FILE_55800503.docdoc d9f03fa12161b634159a69d97eaf66f6e621ecf8cea896527a14510f0c7e4ad4Virustotal results 33.33%Heodo
2020-09-22I4HGPZLQ5GOIV8.docdoc 7cb0e900a796ae5c53375b1dca69897de5ffe140cb72224a428bcb8327937f23Virustotal results 28.81%Heodo
2020-09-2289531227.docdoc b47a1743a01e5885f50abb8a2bb9ad539a52c6b38e1fe97ace7c7165c384a523Virustotal results 34.43%Heodo
2020-09-22FILE_99027918.docdoc c74d9dd73470acf660bc458fed146e653197422214956ce6dc4abfaa8a8a1544n/aHeodo
2020-09-22REP_55610939.docdoc 9addba96a219cf69e04822cf43a65d6b7da0f848ac179d2276ef2a448ca362cbVirustotal results 34.43%Heodo
2020-09-22DOC_82130577.docdoc 6f9bccda375580566f4824b5dad0662ea49be1f410eb2bd5c38f3561dbac29e4Virustotal results 33.33%Heodo
2020-09-22INV_55565333.docdoc 1f334e20b45cf7543e44000e09943a75200b0ede54423ea0d4b7b263f721fc3cVirustotal results 31.15%Heodo
2020-09-21DU0078861266ES.docdoc 6aaa5d1200a0ddb1900acfe0f5b79eac2ce5b928d30db37c4f21e43cea55d69eVirustotal results 30.51% Heodo
2020-09-21FILE_73167272.docdoc 3366930cc13338eb0661795bbde1d36e686105df071793c4080d1483b27d2d84Virustotal results 29.31%Heodo
2020-09-21SK_QW30L036QCT.docdoc 86a8ee1c5f1f5ce84a8f3b31c04f51e324a47d2de0936339357ee0e9a139e0c6Virustotal results 30.00%Heodo
2020-09-21REP_CMWQJ5NES147.docdoc 5bb3e05266ae1854d7bd5732eface0a2f45a896e99c1d0ae15f6e70423b2a2d1Virustotal results 32.20% Heodo
2020-09-21WZ7513548123SG.docdoc 04b6915557c386d4219e56049dca6eeef6f30b41f45fb525d36977e248fbf4ecVirustotal results 31.15%Heodo
2020-09-21PO_09222020EX.docdoc 1ee23bc9e2a3807499d0fd736a4503235cc2d46e14429f19ff423fb2095bc38bVirustotal results 30.00%Heodo
2020-09-21535391753659566344542.docdoc 9f3a5491d61d0e1c05f436639b20d24b38465f96aecdda836f9fe292d1af0b34Virustotal results 31.15% Heodo
2020-09-21N_ED9095663119HT.docdoc 5f48ec62b70130e2ebbdf504c0de8057499f87bcf6bda3462f498f3d2e08c22bn/aHeodo
2020-09-21DOC_HML_090120_OJY_092220.docdoc 38429e629d4112efe0a0932335bbe5288c920cc21fb98fe8b687c50083b0dbaaVirustotal results 27.87% Heodo
2020-09-2111685216.docdoc 292a48621b6f7863d1a7d04f25cd2c6ddbcbf5abac1282941d3ba20ae076b776Virustotal results 27.87%Heodo