URLhaus Database

You are currently viewing the URLhaus database entry for http://sasystemsuk.com/index_files/parts_service/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:610599
URL: http://sasystemsuk.com/index_files/parts_service/
URL Status:Offline
Host: sasystemsuk.com
Date added:2020-09-24 19:52:03 UTC
Last online:2021-10-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-10-08 06:46:29 UTC to abuse{at}123-reg[dot]co[dot]uk)
Takedown time:1 year, 2 month, 21 days, 20 hours, 32 minutes Bad (down since 2021-12-10 16:26:33 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25PO_09252020EX.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25BAL_JWG_090120_WTI_092520.docdoc 32e608f5734fcb68970d54ede47ece4cf463eced4316ce2fd04fb7869d2072d3Virustotal results 29.51%Heodo
2020-09-25INV_75583236.docdoc fe2ee906d8d8678d7ec22ed99ec97b47b6bc55850eefac61f9ec622f2a049bb1Virustotal results 25.81%Heodo
2020-09-25DVC_BWM4YVF6LVUIX.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-25YTKI_42750046.docdoc 89825271f1b18375f523320908826b553e9da21bce402e9844bd3d55446fb509Virustotal results 31.03%Heodo
2020-09-24WC_SM7353655020WO.docdoc 7732eb513243e6e3a764a526f3e87061885357e7adc6901e3ff647b039b4bda0n/aHeodo
2020-09-24INV_YE0726838665QD.docdoc 8e4be7abeafb997210d1c39bf851ab0c4cd097268cf3664f53c72abc3dcce92fVirustotal results 30.65%Heodo
2020-09-24A_PO_09252020EX.docdoc 029de7c595a68b46233e28bbff65f065f8baf48178b6998928ebadafb8d3368cn/aHeodo
2020-09-244CYPIIYHNA.docdoc d0d83818424904de50c76c45ef3c2bde9e3d7a9527fa2ad35524721ab65f0f2bVirustotal results 23.33%Heodo
2020-09-24INV_MK3281324932SZ.docdoc dcd26d0a6efa5d5e5d222fb2514b682c86ffb540ef7defc9f034278cc7857adaVirustotal results 29.03%Heodo
2020-09-24PO_09252020EX.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 32.26%Heodo
2020-09-24HUXI_PO_09252020EX.docdoc 96d9b3d02df7aea418bb5629677cc35f0eaee5ea68e2373e23a730378f5f5297Virustotal results 29.51%Heodo
2020-09-24REP_PO_09252020EX.docdoc 27e7e0f85c78285a86b3f66a5594a39f650bb2fc35c1aadafcb56b4f475ff7a4n/aHeodo
2020-09-24BAL_PO_09242020EX.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41n/aHeodo
2020-09-24DOC_14037623.docdoc a72430246d4ff63a287ccdb3d3eb1eea24af39ec67b6452658454f115f5a146cn/aHeodo
2020-09-24BAL_PO_09242020EX.docdoc 49cb977b6bc82a34e7733da5b4a34862f85b5afd2c8a0691c79d9e2b86dca29en/aHeodo
2020-09-24F_G237LWVGL.docdoc f558184120407b98a2f1473322ca913b07ff58cd20d06ae924a355e11821dc9bVirustotal results 29.03%Heodo