URLhaus Database

You are currently viewing the URLhaus database entry for https://diefreaks.net/bin/u383ied2cd3d1-wr777-array/security-portal/public/erxbss2z25kr/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:599804
URL: https://diefreaks.net/bin/u383ied2cd3d1-wr777-array/security-portal/public/erxbss2z25kr/
URL Status:Offline
Host: diefreaks.net
Date added:2020-09-22 19:41:03 UTC
Last online:2020-09-29 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-22 19:42:11 UTC to abuse{at}melon[dot]at)
Takedown time:6 days, 10 hours, 52 minutes Bad (down since 2020-09-29 06:34:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24FILE_KI8470711181SF.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bVirustotal results 29.51%Heodo
2020-09-24RKA_090120_LPX_092420.docdoc 0c7afbe35c98a28e15a89bfcadca720430162ad730a496d96595ecfbd3cd1683Virustotal results 30.65%Heodo
2020-09-24FILE_EB4286924635YS.docdoc 1e8a41d3b5b66bf2151302e128b041ae3994ea9a2a0a688a098fb691a692e222n/aHeodo
2020-09-24FILE_9DZKW4L1E2TCQ.docdoc 32bbcef052b442f62a2fbb0c5dad498dcb779148f31f2e51d4f7a38245024f8eVirustotal results 20.97%Heodo
2020-09-24STG_090120_NIW_092420.docdoc 8845dd7a737d5dc44971ca503bd120028edc33db789f8155a39c0651c11caf72Virustotal results 20.97%Heodo
2020-09-24DOC_9H4F3XXPAOR4.docdoc a448553c9afd57c49a33c314f51f722d61923249e07fca42997522d63e4bfa9dVirustotal results 20.97%Heodo
2020-09-24SC_04908747.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24REP_38850787.docdoc c84034e8688e0d58d35845c4ad72561fdedd79c6ec344ec1dc7ed759a126a7fdVirustotal results 31.15%Heodo
2020-09-24PO_09242020EX.docdoc 0ce47002a6074a859caf912c52447785977b4694c431ba468c48fc21843eba5dVirustotal results 29.03%Heodo
2020-09-24REP_YT4796275938DZ.docdoc 910452e8c07c66c557c01772883f75fa0890c0e41b8d55b1107360949ccefc71Virustotal results 32.26%Heodo
2020-09-24FILE_WA1398030784GD.docdoc f97b2fe462e15ffbe47937e6d6ad815595fdb180d137a7ddd92f9f41e5a6b5eaVirustotal results 27.42%Heodo
2020-09-24INV_GCD_090120_HEO_092420.docdoc 322437c9e679266325e5e5e4e5192b3480e02f680d56fbede6b807db9def583an/aHeodo
2020-09-24FILE_5CTKS9R3.docdoc 5c7bfd1823b37a4f48ff0166d60e88e0be88ae562cf87c6bf393597da4fd835bVirustotal results 27.42%Heodo
2020-09-24FILE_PO_09242020EX.docdoc 251086a8d6a3f83e2b9ee3ee013730af40923e3ba194b89a3610e20becc05a1dn/aHeodo
2020-09-24DOC_85745445.docdoc 94b624741c1f94566cdff34893b864991875391da2ac00168f15691c48043367Virustotal results 25.00%Heodo
2020-09-24REP_SWRPFFAM9AW3GE58.docdoc 33c770f81db667213e95c2c605c64bbb8aaedd59dc212d411eee46171f3020a3Virustotal results 22.58%Heodo
2020-09-24INV_24376618.docdoc c7f34900cf5584e0e90f2f5d2131af15abada7eb92f4c9bcdd9f9d8560dbdf46Virustotal results 21.31%Heodo
2020-09-24LSSH_15717007.docdoc 5b276cd9dc10cbdf1dc7dcb147761fea97b3b9407dfd13b460721747f767238fVirustotal results 22.95%Heodo
2020-09-24BAL_IVZOGQRJ2T.docdoc 699130456adedce5c03d39cefc3df4b0cd5136c6b5ca856bc65252a8c686ee94Virustotal results 22.58%Heodo
2020-09-24DOC_BED_090120_KDT_092420.docdoc 10ee811abda6b02efcafbd3d0632861a478e57acafde239f71e7231b6ca2e7c8Virustotal results 22.58%Heodo
2020-09-24V_9WENQJYAXG.docdoc 3aa1d5ce7ed49ce9dba790282a20ea4768c173c06418f513522ee6d401aa527aVirustotal results 20.97%Heodo
2020-09-24YJF_PI6344336436DW.docdoc 04c40043a6f85ced583227c163faec46ab1ea268357293dea65e35744895955cVirustotal results 21.31%Heodo
2020-09-2413699161974844.docdoc bc8c5bed53bd39445e8df6c75cbd7aefc5aeb6fc2e735692ff898d28c43e61d1Virustotal results 41.94%Heodo
2020-09-24REP_53353429167.docdoc e03588b5c327278e634c775b1f13c311c8aa3494cddd7aff114eab54dcae3c5en/aHeodo
2020-09-24INV_VZV2LCCX8LDOVZH.docdoc a92c46f200df0158c9798071b11a95d81eea54126f75084d6b9b381d992d4d0cVirustotal results 40.98%Heodo
2020-09-24NXM_0352521103.docdoc 581091d124784af196ac242540f360f1ef2ab6e5e346ec9125a467b47e5e1f4fVirustotal results 37.10%Heodo
2020-09-24WIR_090120_VTF_092420.docdoc 3b2da1783943899a3e23e20477670990adbde1f6edb9bb2e2ec1aa640c601f3dVirustotal results 35.48%Heodo
2020-09-24PO_09242020EX.docdoc 2ec5659b0eadb3f644298e5c297be25451dff898c0551365d0d757a4e5975556Virustotal results 35.48%Heodo
2020-09-24BAL_AGA_090120_DKF_092420.docdoc 109faa9ffefc2e21ff1a72efcf3e665b4be5820282f07f8fa54c14bc9f243803Virustotal results 34.43%Heodo
2020-09-24EO_869045494955601838.docdoc 9d3a4dbf3d2bb53bc85aa8598f2eb220e74dd85928693e3fd6bca9c88e0571c2n/aHeodo
2020-09-24PH_PG9468942696EV.docdoc b427adb1ae5fd4b290ab65b93ea392c40c42f186b732f90768099681494d10caVirustotal results 35.48%Heodo
2020-09-24FILE_WUK_090120_CKI_092420.docdoc dd05de775c3c07e1c25cf767154016406cb4c3fc2b20a4824593c30830e79583Virustotal results 35.48%Heodo
2020-09-24BAL_DA4156981688BE.docdoc eb45dca6aca88223d8145576132a86f7f21770508a20b6335021ea03cc040d8cVirustotal results 33.87%Heodo
2020-09-24FILE_SN2464521071IM.docdoc 0185c23ef468c062bc446ffc87e7af495c49e991d0a24c67634d8f0cd3d8bf8bVirustotal results 29.51%Heodo
2020-09-24M_PO_09242020EX.docdoc 870ba595f65af8d1f314816bf60f9dc98864d389bb9f8c78d934b32fdbff7bb4Virustotal results 31.15%Heodo
2020-09-24CGR_090120_HEY_092420.docdoc 299e08ed38b367c0db78b21b67f5fe0cd2c2d4505726b00e76e1e3da495f6a1bVirustotal results 31.15%Heodo
2020-09-24DOC_3AS6X8ZPCPUCU55.docdoc 3caf40ca5ad83988dcc46183de98c772464dd0447db89cb8ad5cbae02587039fVirustotal results 30.00%Heodo
2020-09-24PO_09242020EX.docdoc a9654b509a80552021269008e33074d85ee269b8a579a23ef93bcc5aba20227cVirustotal results 29.03%Heodo
2020-09-23REP_PO_09242020EX.docdoc a5cefc7eb57545e36ce9f959ac252dd0901cbac2b6d83bae4a92daaef93f383an/aHeodo
2020-09-23DOC_06719942.docdoc 13b44fe04aec7fdc7dce67de3a987317ad25ab9301110382847ca08bd645f2beVirustotal results 27.42%Heodo
2020-09-23INV_PJ6385782670FB.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23Y_TVD_090120_TDJ_092420.docdoc 15d9c4a8449193c0406c1005887328daa93d847ea063f9097f0eee39bc404df0Virustotal results 37.10%Heodo
2020-09-23BAL_A014NE6CW8JF.docdoc f62ef7f415a25bbe326cecb39a15134327c963de9253795427a71974f8845b6fn/aHeodo
2020-09-23BAL_TMR_090120_JVH_092420.docdoc 042dc54cf3a44dd90279a0057a99dbfd68e9b60897d814d0d37a6f28da370859Virustotal results 34.43%Heodo
2020-09-2354075779.docdoc 887fa6a834121789518a2119d59559b212de2d235e454fd67d1e000e8ee7df1dVirustotal results 32.79%Heodo
2020-09-23ALC_090120_JPR_092320.docdoc 56cbf96af906adc2960627f7308bbccef3283458499dad9a032ec264a6e46644Virustotal results 33.33%Heodo
2020-09-23FILE_67358379.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1Virustotal results 35.48% Heodo
2020-09-23REP_XC5914449917UD.docdoc 46cfb218b8b268ef4372057514f93c2282c6eeb1474b574f5f8a3c291cb6269eVirustotal results 34.43%Heodo
2020-09-23TRG_JIEL4FX6JB17N.docdoc b9b92fd2db926541ffe87cdb4d652394ddd2b33559d51db96c862ffe2e6c2e1dn/aHeodo
2020-09-23E_PO_09232020EX.docdoc 15c9d94e300b7177907171c24a7cf8cbdf3ae42a1bace42390eaeceff66d89b6Virustotal results 33.87%Heodo
2020-09-23INV_N16YMWQ6I16JZQ.docdoc 18aabb0ff9adb2600243c3be590c57bcbeada6451b8ab0d190c1756430730e2fVirustotal results 33.87%Heodo
2020-09-23BAL_ZHB_090120_DCK_092320.docdoc 60c842c5f189f507fc85b61c2c4f51f02082609590c8b3e38580179f6d6c6657Virustotal results 36.07%Heodo
2020-09-2346322332391389612288214.docdoc 87147834cbde11b3f37c516844cf8d9ba78e603010280ee9eef5e29c92b10425Virustotal results 37.10%Heodo
2020-09-23NWX_090120_OBS_092320.docdoc b1d1c08b520e22fcababa993c5280c6d4ee437f6b8d975b210780fe78530e581n/aHeodo
2020-09-23REP_PO_09232020EX.docdoc 8e5061f5e4e9ccedd7ff53ed54e71fd8aa5b7f0233554264714dd85d6554dd49Virustotal results 36.07%Heodo
2020-09-23B_PO_09232020EX.docdoc b4d30637f602e11b142982fa161a7f10f1f9f2c0dc53c4b92c0a3b2d4cc51974Virustotal results 32.26%Heodo
2020-09-23KCP_1212875380585260175.docdoc c48430dee3311969d79bb76efef383c593b2e197de026d6c9cdb9bb7e1681d78Virustotal results 35.59%Heodo
2020-09-23FILE_PO_09232020EX.docdoc d3cf2b43d2a246e276c8ca88790a65e01e230e8c8c39127d094f43247e2f0175Virustotal results 33.87%Heodo
2020-09-23FILE_56879316.docdoc 50eb03b40f1b8d5d8289dd43d19ea6c8a45814a6ac1448b21ae3e1660b1c3c67Virustotal results 31.67%Heodo
2020-09-23XSH_090120_KIZ_092320.docdoc f670b15373579f87448e50df923861b91cc62422a7616168d42348cb2665d396Virustotal results 22.95%Heodo
2020-09-23Q_PO_09232020EX.docdoc a367f82673d105dca478418602c9f38633a5347fc2b0f565e828cb4b52e89424Virustotal results 22.58%Heodo
2020-09-23X_26632395.docdoc d83b4457e963cb82b3322d4ac94c492e4ee3c024573964d25ded75239d9623ebVirustotal results 31.15%Heodo
2020-09-23INV_PO_09232020EX.docdoc bd69ecf726bce791184672d5e8317729c49e46729a648023c07701eb61a005e5Virustotal results 29.03%Heodo
2020-09-23UEE_090120_TJG_092320.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23REP_0YMEUTRJBLQL0.docdoc 936e0b3b696a31047618a5ffe005e0500e2dd472581d4df1580db803e19cca8an/aHeodo
2020-09-23FILE_PO_09232020EX.docdoc 50c9d530111fe31904255db5abdbabd939542a19af71c656dcdfd44c9fe2b4b0n/aHeodo
2020-09-2319109942547695041367242.docdoc 15b6e8645e321e35774c5f7b9e295ba0e3d31d3f116e7a67724e6e0e5f8f3ed8n/aHeodo
2020-09-23DOC_6LITNW5VY1NRX.docdoc f5b67fe09ab73847439a9717d70cce333257546046c604d4d3299ff681fa34d6Virustotal results 35.48%Heodo
2020-09-23DOC_ICU_090120_RVO_092320.docdoc 710beefc4939b7fe4e0362f66fd592fc87a04fff8aacf8424eb0bd4858115fb6Virustotal results 34.43%Heodo
2020-09-23REP_RA3094793630CF.docdoc f732dff0368dd8ff983021f4786d2c04ecb2f9196327138f25d6ca5272c9b556n/aHeodo
2020-09-23PO_09232020EX.docdoc 920ec5e49cd513625409968ac2e4fff374909c666943e0f55771bb56f1ce2020n/aHeodo
2020-09-23REP_463525857.docdoc 33029135b1c5093cf9c743ba3bd14e04bc7e7a2ec9c971b92555dc08bef6d405Virustotal results 35.48%Heodo
2020-09-23048F1FCIK.docdoc 567a979b7f1a51639017799b8645535f97627dcdf0a707d8daf974cc776f8ed3Virustotal results 32.79%Heodo
2020-09-23GL9759355845TP.docdoc 2f949a337c2746a62b0f22fdbd222a7783251f0b81a7332e4724a59da312369bn/aHeodo
2020-09-23INV_DS6243064819RC.docdoc 660f78796bad236818c239f650cb2139c4b079a2f0f5dfd4d0bc59eed2b85035Virustotal results 34.43%Heodo
2020-09-23BAL_QRKYJUDJBHKBH4O3.docdoc b171914b2e5a10fd997e51268f01a70b254f0aa55080906c36c6159bd325c9feVirustotal results 30.65%Heodo
2020-09-23BAL_PO_09232020EX.docdoc 29b732cb0e36fa5a789f66f7d4cb5ff8905ce6ac1b8e18e29d056b439e177cc3Virustotal results 30.65%Heodo
2020-09-23WKXF_PO_09232020EX.docdoc 23bc63af094f80c54cfecb85f86f0b2f1975ae55f29d9d66ea61d6612c36a567Virustotal results 37.10%Heodo
2020-09-23REP_PO_09232020EX.docdoc b84c54a1704a22ceac88f79804b5a23b2a64547cadf21d76291d01f84b0e77d6Virustotal results 31.15%Heodo
2020-09-233331595125585692212838347.docdoc ed8554b439c265332707e99e7be35db1e9e217801ed277161fcf7c6bcf98bea1Virustotal results 30.36%Heodo
2020-09-23FILE_03863479671.docdoc c6e601d3f1268441a2518c331465ffd7acd22aae6e1526662ffcac834946f259Virustotal results 27.42%Heodo
2020-09-23REP_PR9262012105OV.docdoc a0b12fdc4f5929ad169ba50c79da1722abb70cdb418ce0cac2275aea75431d9dVirustotal results 27.42%Heodo
2020-09-23REP_93732704.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.87%Heodo
2020-09-23AAXP_BAM_090120_MCH_092320.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405caVirustotal results 29.03%Heodo
2020-09-23REP_JT5142686025AI.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 26.23%Heodo
2020-09-22INV_PO_09232020EX.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efVirustotal results 27.42%Heodo
2020-09-22BAL_8ZIQ2VPHS431R.docdoc c12fac9cd3355e4f8d1f11015cd59fd3b476b20758d57988889bff4c5a352726Virustotal results 30.65%Heodo
2020-09-22BAL_9356157975.docdoc c4ed4d279282ab289d7a00ba9d05f1f31af4a3dafbe02ae91aba6585d55506cen/aHeodo
2020-09-22FILE_640012303.docdoc 096e7d0d8016a7efe13a6bcfe45e2b78d115eb681a6f855b639a9ca3c8db22c4n/aHeodo
2020-09-22DOC_PO_09232020EX.docdoc e543adff7cba9ec05fc7d78a55b89e22cea00ca50df6e67e06250420b9f2ec48n/aHeodo
2020-09-22BAL_EJ5594989818MF.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066en/aHeodo
2020-09-22REP_NE5874368151WO.docdoc 8545f8aee7ed198b20effca9952996d49c5b91811a6dc47bdda10aa92e633938n/aHeodo
2020-09-22BAL_PO_09222020EX.docdoc e446be795bac5464b1bb80859e2ffd0857fe8d26f1f6973457b491498010f0c1n/aHeodo
2020-09-22INV_LQ1247684721LC.docdoc f8f2dc63225fa38d16de547469f9c418f3093385a270836e7431aad8bf52eebfVirustotal results 27.42%Heodo
2020-09-2277255633.docdoc 04648ce7223361494ad5620c674be88a869710007f672d05721b77af59be70fdVirustotal results 27.87% Heodo
2020-09-22FFS_090120_PRE_092220.docdoc fa7f4b3fa89ce1e3cf1f45674f36346e729aced2de513c5a058f935c65b3cffcVirustotal results 28.33%Heodo