URLhaus Database

You are currently viewing the URLhaus database entry for http://samasamak.ir/sys-cache/browse/iu6hziqre4np/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:609330
URL: http://samasamak.ir/sys-cache/browse/iu6hziqre4np/
URL Status:Offline
Host: samasamak.ir
Date added:2020-09-24 06:27:13 UTC
Last online:2020-09-26 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 06:28:17 UTC to abuse{at}netmihan[dot]com)
Takedown time:2 days, 4 hours, 58 minutes Poor (down since 2020-09-26 11:27:11 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25UCN_PO_09252020EX.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25INV_PO_09252020EX.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 27.87% Heodo
2020-09-25FILE_PQH_090120_CJM_092520.docdoc 8737044355a98a9ffd49ece5bcd55b760fdd2e63b8b6b02d15028deb9d28ed36Virustotal results 24.59% Heodo
2020-09-25DOC_ZVH_090120_SFM_092520.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-24BAL_RCX5ZDXRIFT7UGL3.docdoc 89825271f1b18375f523320908826b553e9da21bce402e9844bd3d55446fb509n/aHeodo
2020-09-24DOC_79427496.docdoc fe2c4c0e8452ed6b2c6e644296e472af18a988e142404e89061f6cb8f2420593Virustotal results 30.65%Heodo
2020-09-24REP_8242885972481235406581424.docdoc 8e4be7abeafb997210d1c39bf851ab0c4cd097268cf3664f53c72abc3dcce92fn/aHeodo
2020-09-24L_41769006.docdoc c8e1fe8c16784222fdc737735ed29812a5f1721e61b75f3386fa6ea802c9b525Virustotal results 21.31%Heodo
2020-09-24VR_X2GO9FCOYAYW3C1.docdoc b77cd70861b08e97e103e926c367d38fb18c9588b70cce776fab3c7b9888c31cn/aHeodo
2020-09-24REP_TKT_090120_KEU_092520.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 32.26%Heodo
2020-09-24DOC_VI6693689524OG.docdoc 96d9b3d02df7aea418bb5629677cc35f0eaee5ea68e2373e23a730378f5f5297Virustotal results 29.51%Heodo
2020-09-2414989432.docdoc 2a3395e9459dc5f0fc72621c2299e98b4226e6b99cf6069d89004e3d430a219dVirustotal results 29.03%Heodo
2020-09-24FILE_31485848922461866.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41Virustotal results 30.00%Heodo
2020-09-24C_PO_09242020EX.docdoc 5bbcb03cbdf0fa9eb5854ee7d5c7d3669e469fbde2dd1cfe0b6c4767dd19d138Virustotal results 30.91%Heodo
2020-09-24INV_PO_09242020EX.docdoc 68d56a79c843b1b6a5d9937b5f98c3ecd25a60ebbffb348a9e08cde6dd1a98fdn/aHeodo
2020-09-24REP_PO_09242020EX.docdoc e065d7a8263671a9d5afd66e671dd1d8cb12ccadcde39686f63b37c411d977ddVirustotal results 30.00%Heodo
2020-09-24INV_P6E7HHMTH1NA.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bn/aHeodo
2020-09-24FILE_PO_09242020EX.docdoc 0043af7d182b9d6145aa3d75f6ced14fbddfab10b615e6997bd426d3a23da6a7n/aHeodo
2020-09-24PO_09242020EX.docdoc 8ffd33471d8e180b9ff498aaa84ef11bf50e846252c62e42e416fe68c1698d06Virustotal results 25.81%Heodo
2020-09-24REP_PO_09242020EX.docdoc 2a383eeb24d148e1343c8ac61522fdc8b79c8fe8c0f5f1079009ca43cfed93bfn/aHeodo
2020-09-24FILE_0845205933075976924362659.docdoc 29f8908fad78f532f3e53d23cd10d6289376b52c559e2398ab3a2ceb671ba1cbn/aHeodo
2020-09-24BAL_GXL_090120_JBI_092420.docdoc bc9273a8efb618cb9bb1842b7f8fabfa43e0038cc988c435a74308c0d2828955n/aHeodo
2020-09-24Z_XJ8975977004QH.docdoc 60b9c51a988490875a152231c3217de228b7406a1378ab07263aea7f02ecd3ccn/aHeodo
2020-09-24FILE_VDF_090120_KCV_092420.docdoc a448553c9afd57c49a33c314f51f722d61923249e07fca42997522d63e4bfa9dVirustotal results 20.97%Heodo
2020-09-24INV_JI6729274041VY.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24PO_09242020EX.docdoc f1d7646cf6abe9a746a6dab251be541e66a294060a1f32665b7e1c5d54de17dcVirustotal results 29.03%Heodo
2020-09-24PO_09242020EX.docdoc b8a9d5f54e75467b003cb37db317d9537fc49705aa3334531937929937b0eaaen/aHeodo
2020-09-24OT9FKNVJQIZ.docdoc 2e3f0cba76c76de6beb1d7782576c1913d7a5ec9e471a36bac04827d26b0185dVirustotal results 31.67%Heodo
2020-09-24IWER_SB8807979378XB.docdoc 0513605e1d28ab01152da25d30cb6762b95b79d8183cb775c505abc6f341e4f5Virustotal results 30.65%Heodo
2020-09-24J_RJD8SQL4K9YXPWCB.docdoc 673b66564bc293cc5e89a33f4b16692f12071b7984f57342f1e011ddd5cc96d0n/aHeodo
2020-09-24NKLMH9TCX017CD29.docdoc 3f0693ecde0d7c9983bda3bfa22fbb8243695bf8a48ae127e121813ae527334eVirustotal results 29.03%Heodo
2020-09-24INV_PO_09242020EX.docdoc c53bc4b67b9b49868bbb7d3a8323cbd2b411a41077e2b691eb9e66516dde0e4cVirustotal results 29.03%Heodo
2020-09-24DOC_PO_09242020EX.docdoc 11e3728d9ed2d0468dd44f01dda3611b75b1b9dd7645e9322036d913c43b138an/aHeodo
2020-09-24BAL_UMMMIRJTQ9CRK.docdoc 1c66ec5827934e0744220674a8ae91d47bfa027376d756dd4722ecc165f09878Virustotal results 22.95%Heodo
2020-09-24246426198699725356836.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-246670012130.docdoc 5b276cd9dc10cbdf1dc7dcb147761fea97b3b9407dfd13b460721747f767238fVirustotal results 22.95%Heodo
2020-09-24REP_51918515.docdoc 9530d202be6692b15721f936a6cd20a7319a5dc92e97e12b532ceb3d74641753Virustotal results 20.97%Heodo
2020-09-24FILE_XUO_090120_FCH_092420.docdoc 860994a6cb882e801a963f6e00a8bca34f28efaa71b690e5f77b8c2e644dafb6Virustotal results 21.31%Heodo
2020-09-24INV_PO_09242020EX.docdoc 22d0afad8f9bf09478e526450db6e58a140ff80ce34be8b6cab70ec7b9ad475eVirustotal results 20.97%Heodo
2020-09-24BAL_37767610273.docdoc 8b209e2d294b8c5b50bd83d9fd9184268ce21313f7d5876d74c7e10f48ac946eVirustotal results 18.87%Heodo