URLhaus Database

You are currently viewing the URLhaus database entry for http://bercpro.be/contents/Reporting/mwy6f9k8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:610504
URL: http://bercpro.be/contents/Reporting/mwy6f9k8/
URL Status:Offline
Host: bercpro.be
Date added:2020-09-24 18:47:02 UTC
Last online:2020-09-29 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 18:48:03 UTC to support{at}ithagi[dot]be)
Takedown time:4 days, 17 hours, 47 minutes Bad (down since 2020-09-29 12:35:43 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25INV_533097902301.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-253061476382326619257441.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 27.87% Heodo
2020-09-25AT_30479052.docdoc 8737044355a98a9ffd49ece5bcd55b760fdd2e63b8b6b02d15028deb9d28ed36Virustotal results 24.59% Heodo
2020-09-256JZF0RP06YKAR.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 30.65% Heodo
2020-09-24YIID_QN4964331657JP.docdoc cb6066e63e21555c7c377b4cffcdb3372184cc0ebd90679b982724071507a67dVirustotal results 20.97%Heodo
2020-09-2415614179.docdoc d4aeeadcea8487c5cde690583d8fb442c9334208e54fd53d3714e0ec9bf0da91n/aHeodo
2020-09-24DOC_18648393.docdoc 356e4701cc94b7ffbf517afeef9f5c0bbe45782f861d51859f0bf099df96581bVirustotal results 32.26%Heodo
2020-09-2474329333.docdoc 7b6806b4e83dde2a32e4d3f04439478a2a28eff8c723179a141152aa89c0c8fcn/aHeodo
2020-09-24REP_EXW_090120_HVG_092520.docdoc d0d83818424904de50c76c45ef3c2bde9e3d7a9527fa2ad35524721ab65f0f2bVirustotal results 23.33%Heodo
2020-09-24INV_164209996901399.docdoc 9dd8a90d5bcddd1b1748a24fbb8c636601ce3a3d198b95e342958492db07fd98Virustotal results 29.03%Heodo
2020-09-24INV_QV4422355389BR.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 20.97%Heodo
2020-09-2472219473813902132630.docdoc 96d9b3d02df7aea418bb5629677cc35f0eaee5ea68e2373e23a730378f5f5297Virustotal results 29.51%Heodo
2020-09-24F_96721079957851.docdoc a57fc009ab0a20443a4b85deb2d976357ec107017cceda370de28f76897500a7Virustotal results 31.15%Heodo
2020-09-24DOC_45981802.docdoc b638a54fb8b1ae9d64723adeea13dfada5ef1ad4d4c606ed9a34370f4d216d09Virustotal results 30.65%Heodo
2020-09-24DB0604247565OD.docdoc e8920178a654a05f4d58c417ab5df624d778f70deb69ef450e79c6511c72e55bVirustotal results 21.31%Heodo
2020-09-24VFXN_PO_09242020EX.docdoc e01196c04524311bae1b2b2ab4a49a03bcd266c6ba9f9b5a2fdf3804e9bf71d6n/aHeodo
2020-09-24PO_09242020EX.docdoc 2c9f95721bca3535da3fda89ec8fe49002a06a7fe0aa92c9dee5ad34872c388eVirustotal results 19.35%Heodo
2020-09-24DOC_LX0814774811UR.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bn/aHeodo
2020-09-24BAL_66137556596.docdoc 35ef0a522e2f7f98db76cd53d203d6389d65b2c0337b598482f1ca0fcfe5953dVirustotal results 29.03%Heodo
2020-09-24X_86905219.docdoc 2a383eeb24d148e1343c8ac61522fdc8b79c8fe8c0f5f1079009ca43cfed93bfn/aHeodo