URLhaus Database

You are currently viewing the URLhaus database entry for http://dentomach.com/u6fa/7qj904r5g/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:606780
URL: http://dentomach.com/u6fa/7qj904r5g/
URL Status:Offline
Host: dentomach.com
Date added:2020-09-23 19:12:06 UTC
Last online:2020-09-26 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-23 19:14:15 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:2 days, 12 hours, 24 minutes Poor (down since 2020-09-26 07:39:07 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25MO_88068030.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 57.38%Heodo
2020-09-24BAL_GBR_090120_XUK_092420.docdoc 00fbe37855be5d55bc265f0e5e3f284ede6342549349e4b33cf2511347b3fc13n/aHeodo
2020-09-24FILE_M1VOPXPKVN9E.docdoc ce2603e03a1742baf5735e994899aecaa1075b7d6a3a811070455dc802e8df15n/aHeodo
2020-09-24XI2HLYJHT6.docdoc 29f8908fad78f532f3e53d23cd10d6289376b52c559e2398ab3a2ceb671ba1cbn/aHeodo
2020-09-24ET7703018056EA.docdoc 60b9c51a988490875a152231c3217de228b7406a1378ab07263aea7f02ecd3ccVirustotal results 20.97%Heodo
2020-09-24GCB_SO5217430775YE.docdoc 7e78d353bf29cfd042c3741647fea216a70d735df0b286f87383bc7732e6ff23n/aHeodo
2020-09-2494918569.docdoc a448553c9afd57c49a33c314f51f722d61923249e07fca42997522d63e4bfa9dVirustotal results 20.97%Heodo
2020-09-24FILE_G0YA7WYGVRDTO.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-2424455126.docdoc f1d7646cf6abe9a746a6dab251be541e66a294060a1f32665b7e1c5d54de17dcVirustotal results 29.03%Heodo
2020-09-24BAL_JNF_090120_PTI_092420.docdoc bf6caeac64ebd3eca96f936635d26ea90e62f1093b72146a98a20623a13688cbVirustotal results 27.87%Heodo
2020-09-24DOC_OSN_090120_CJS_092420.docdoc da886aa9c4cf9af28406c6c6b2bd1a84fdca0dd1861259185aba9da512264acfVirustotal results 29.03%Heodo
2020-09-24FILE_GLN_090120_HVR_092420.docdoc 896f6e1b9eb9656cfc68db252241fc7087192661175a0604505742223f0ef016Virustotal results 29.03%Heodo
2020-09-24JNO_090120_IOS_092420.docdoc 69ff6eb0a71090b17e21b2829b6108b2eebf8bd12b92fe587ce103a4c5cc0f3dVirustotal results 21.31%Heodo
2020-09-24PO_09242020EX.docdoc 04c40043a6f85ced583227c163faec46ab1ea268357293dea65e35744895955cVirustotal results 21.31%Heodo
2020-09-24Q_39410300546034.docdoc e2dffd7e2a3663a738dac21fd590dec2cce14df9ccf7aebcc5944258a827bc04Virustotal results 20.00%Heodo
2020-09-24BAL_PO_09242020EX.docdoc e03588b5c327278e634c775b1f13c311c8aa3494cddd7aff114eab54dcae3c5eVirustotal results 40.32%Heodo
2020-09-24FILE_SYG_090120_SYF_092420.docdoc d0ef85eed2f1afb6cfdbb09ccad7eb677bb731e080ebd4975734a2e996f08581Virustotal results 38.71%Heodo
2020-09-24DOC_TZ2482678995HO.docdoc 21d6462af9e28cac11c5b8bc20c9f07e953c7af99c15966175e8b8cfc8ee9363n/aHeodo
2020-09-24UJW_090120_JIC_092420.docdoc 353903d7b90942b9e45059e7a1ea56eea91c412f5cf0864982870f55f9e61e98n/aHeodo
2020-09-24J_SFQ_090120_LCZ_092420.docdoc 2ec5659b0eadb3f644298e5c297be25451dff898c0551365d0d757a4e5975556Virustotal results 35.48%Heodo
2020-09-24MOM_090120_QQM_092420.docdoc 7aed739ebb48064d94fa17f51816a7d3f4414ec8d578a6bde0830e844055e971n/aHeodo
2020-09-246UANFTR.docdoc 8f054924ac0e3a72b2725a18206bf1e2faaa327460d2e7199b1152126241d054Virustotal results 35.48%Heodo
2020-09-24INV_PII_090120_EVS_092420.docdoc b427adb1ae5fd4b290ab65b93ea392c40c42f186b732f90768099681494d10caVirustotal results 35.48%Heodo
2020-09-24REP_MWK_090120_LRY_092420.docdoc dd05de775c3c07e1c25cf767154016406cb4c3fc2b20a4824593c30830e79583Virustotal results 35.48%Heodo
2020-09-24FFZ_090120_UYN_092420.docdoc 80bbc6addbc3d97abecb341c4441b7963d70a2a863d25cf0d35137632a841fa4n/aHeodo
2020-09-24ZLX_090120_WUW_092420.docdoc a26964e2d826f555642d9dac0e19c5bf685767b5a0cb12d9a83e6d332251b17dVirustotal results 29.03%Heodo
2020-09-24HZEK_KLQ_090120_CDH_092420.docdoc 9ca8f66ca174af2d6d9944b2cfda4685bd8710217610c24b6332ae5436c52405Virustotal results 30.00%Heodo
2020-09-2442469296.docdoc a6bdea3758ccb519e3736628a467290a74b47562f8a489e89346642276c9f177n/aHeodo
2020-09-24TV_X1TX5MO.docdoc 3caf40ca5ad83988dcc46183de98c772464dd0447db89cb8ad5cbae02587039fVirustotal results 30.00%Heodo
2020-09-23REP_JZW_090120_HQR_092420.docdoc 324337642923507f95f8882431a523b118e670bec80dc82ea989321c6abd2e37Virustotal results 29.03%Heodo
2020-09-23JTG_090120_XNB_092420.docdoc d74a0a2af76d37b9621074bc15dee942c972ea0fe761110f8767c1b836dec555Virustotal results 29.03%Heodo
2020-09-23LS9097692786UU.docdoc 1c5a69e8a8d964a5898cedf16872a9903fcf2ec9f08ce3ecd9510f8d4453c4b9n/aHeodo
2020-09-23INV_PO_09242020EX.docdoc 904d90bfbc81471348f882ff514202163724e2e016e942a659e5e7cacfe5c9fen/aHeodo
2020-09-23FILE_539355020.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23PO_09242020EX.docdoc 15d9c4a8449193c0406c1005887328daa93d847ea063f9097f0eee39bc404df0Virustotal results 37.10%Heodo
2020-09-23REP_KXHJ3IFOQ5.docdoc 5d7354671a544c392039f3b512158f3505f576f34e4942109e8a7adf19bd07b0n/aHeodo
2020-09-23WUH_49517575.docdoc 1564b58731e911bff6e6da3fd6f973730406a155c372f7da226cf5c2e53f295bVirustotal results 36.67%Heodo
2020-09-23JQ1594678519FT.docdoc af30fde0408423890089732bcbfdcaceafef7e956d54f04df162a7bb72e7a673Virustotal results 33.87% Heodo
2020-09-23BAL_HV3819613555GT.docdoc 290acb8283dcc203c5d57c8e536774a4abe065f3492eeae71724059fe17f789eVirustotal results 35.48%Heodo
2020-09-23INV_9M5CQ2D.docdoc 3d0062b20db4e52a4f9612964699a06f8920aa931e2126424d8190273b7eb948Virustotal results 35.48%Heodo
2020-09-23PO_09232020EX.docdoc c987b077ae0b47cf29fddf96a9339df37f08fc068fc536cd8728d5e75c827ecan/aHeodo
2020-09-23YUCF_PO_09232020EX.docdoc 6bb96965fcd7c4acb3b22a1c3f1459a042c13a92860c474997aadfb217a905bcVirustotal results 33.87%Heodo