URLhaus Database

You are currently viewing the URLhaus database entry for https://medicharge.de/wp-admin/DOC/tkk3jc7g/q2iik0q744412642025bm6m4qgqx6z0lhi0nl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:591033
URL: https://medicharge.de/wp-admin/DOC/tkk3jc7g/q2iik0q744412642025bm6m4qgqx6z0lhi0nl/
URL Status:Offline
Host: medicharge.de
Date added:2020-09-21 23:18:03 UTC
Last online:2020-09-22 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 23:20:21 UTC to abuse{at}ovh[dot]net)
Takedown time:9 hours, 27 minutes Good (down since 2020-09-22 08:47:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-2213914472.docdoc fb4e14e21f1365ea52350be6471a86d0815a42e7352f71ef4e1953eb9b360086Virustotal results 50.88%Heodo
2020-09-22REP_RHA_090120_WKF_092220.docdoc b8e6b5565924ad53e699d8427be3bb48cccb78718ec4fe8ca55b994ff8a35328Virustotal results 47.46%Heodo
2020-09-22FILE_PO_09222020EX.docdoc e9fd5fc869a22a5f9b22333cbe9745985826875b2f62983c8e0964531dd9cd7fVirustotal results 50.00%Heodo
2020-09-2240719570.docdoc dfc0eeec857c03af491878b0b6e9a4fe2dd417135410856677216baf78681909Virustotal results 48.33%Heodo
2020-09-22INV_45707519.docdoc 5113e330fdea6c93e3ef5a610817655f04d59be9bb5fa3a4f4167f8ccbb01d48Virustotal results 44.07%Heodo
2020-09-22FILE_KCZ_090120_VEI_092220.docdoc 6b58f3d639dbfd3f04c2534bac10583c7e2d0ba1e88ef31ebe443fc18f409a76Virustotal results 46.30%Heodo
2020-09-22FILE_QZE_090120_OLK_092220.docdoc 8d49090e5ad1ca487645e8dad8b6e90d267b4a7f5d4cdf4d9c4441d969f088caVirustotal results 45.76%Heodo
2020-09-22FFI_090120_GSF_092220.docdoc fe1fbbade251f94508504fe8861a87b7c721755f8116854ec1497d79a8a84dc5n/aHeodo
2020-09-22DSI_VX7NUINECMHIMFI8.docdoc 61b104c81d6e07bc38102631a844c6247bfb16ff720fc134b3a95d601df23fabn/aHeodo
2020-09-22PO_09222020EX.docdoc 49a1ffaa1b08021d92dd0139fad4b585e8b601c2ca7c74eca69ea9f3ff06ad79Virustotal results 40.00%Heodo
2020-09-22REP_LA8427161584SI.docdoc 3329e54a271ff895664104546d9af52c00ce1284be48322d3ebf1cc34db74169Virustotal results 39.34%Heodo
2020-09-22PO_09222020EX.docdoc fb096cb018d3c66f22c322028f9e8f1f049e9a9eb3531f9e893c3d2522f35951n/aHeodo
2020-09-22PO_09222020EX.docdoc 718113e004b811df9d311a7edec1092b2aab2d9173d762022544a74b5ba02657Virustotal results 32.79%Heodo
2020-09-22FILE_LG1371141493EI.docdoc 3ed5e00e046ce19a840746219ff3efcd6fcc4ddd0b608e51203398bfe2360da2n/aHeodo
2020-09-22INV_888591610978.docdoc 58dca36db6814be3bc7016599693d84cc074f17451bebe7eb98baee99cef0ac9Virustotal results 32.79%Heodo
2020-09-22QK0386827141CD.docdoc 7cb0e900a796ae5c53375b1dca69897de5ffe140cb72224a428bcb8327937f23Virustotal results 28.81%Heodo
2020-09-22BAL_UP9993030409CN.docdoc 7aa7d38a55d5f7d01ee40a977a2df63d0cd4c938482a2fba3c73e1844405a0fcVirustotal results 31.67%Heodo
2020-09-22I_47248101.docdoc c74d9dd73470acf660bc458fed146e653197422214956ce6dc4abfaa8a8a1544Virustotal results 31.67%Heodo
2020-09-22BAL_48122744.docdoc ccc41f0194e3ea4cd0460cdb76391a4edf6732e895a600acaeb6099a6796c558n/aHeodo
2020-09-22BAL_M0LGMY3W5BKKD6.docdoc e524098185428b7b654e227e927a95c9c89d92f8c735079341529233b7f5ebe9Virustotal results 31.67%Heodo
2020-09-22052611128461634.docdoc 62f036b925c8b4c5c90b88eaf15e774481a952ac6e1c7596916e10054b82daceVirustotal results 30.00%Heodo
2020-09-21PS9409375498HU.docdoc a09dd0e095d93b68eb0713e31e92eb9caee82983e99ddccdb71177216cc52f30Virustotal results 30.51%Heodo
2020-09-21DOC_66241761474016005302.docdoc 61ba6999ffd23a0f22f6827b577e773e9d6a79ef366b3260a6b55a792c98d519Virustotal results 32.20%Heodo