URLhaus Database

You are currently viewing the URLhaus database entry for http://tz004.com/ad_files/vmbmtb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:621461
URL: http://tz004.com/ad_files/vmbmtb/
URL Status:Offline
Host: tz004.com
Date added:2020-09-29 07:08:10 UTC
Last online:2020-11-14 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 07:10:16 UTC to abuse{at}hopone[dot]net)
Takedown time:1 month, 16 days, 2 hours, 13 minutes Bad (down since 2020-11-14 09:23:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-3095XZ0ED7B.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 27.12%Heodo
2020-09-30BAL_98010563.docdoc e8a8b9fc12cfa3ee4f3cd91504cbf5b9af3281a25798c9c23c319044b39b551fn/aHeodo
2020-09-30FILE_7U6T8RB.docdoc 728b1a60c5af8cf394d48d6bc7a6a273117da463ab6316c2b43a2fe72b26709cVirustotal results 26.23%Heodo
2020-09-30FILE_6PFCWG7K6N.docdoc b131abadbdd99b90888c049f0e4ff59936adb011886d570d1652cef7c209c4d1n/aHeodo
2020-09-3084324691.docdoc 86f7e3cb36503bd4d36820857fa1cf349e4e14af26612ebbf4855fe68b2fde22Virustotal results 25.81%Heodo
2020-09-30INV_273769829.docdoc 05917a3d7daf2bc7de49c374fe7ec364e19f2aa1b60480a666ed224053f0fe1dVirustotal results 20.34%Heodo
2020-09-30DOC_52435440.docdoc e0598f2efbf03596b6fc2d73a58184b9a4d4277d2fc01322308e86a132582e2dVirustotal results 22.58%Heodo
2020-09-3052987219.docdoc d206f9b0e7b447444d1f5d592716186fac89b660509dc88efa51a5701e795a77Virustotal results 22.95%Heodo
2020-09-30BAL_HPI_090120_VMZ_093020.docdoc ea04aeb35f3ee924c978225fd95f2fa3df8a4847a761685ad79f96c82886f80dVirustotal results 22.95%Heodo
2020-09-30DOC_PO_09302020EX.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52Virustotal results 22.58%Heodo
2020-09-30INV_CM5027291165BT.docdoc a4764b420e55695dd9b02d5ca980f126958001ea30e96a74b2e9321661bf38ffVirustotal results 22.03%Heodo
2020-09-30REP_3745294419527077.docdoc a5bc68599f8ed3a4cdd8e4894aad9cd9fa0753278b8a44af04debb277960d44eVirustotal results 22.58%Heodo
2020-09-30C_FCC_090120_XQW_093020.docdoc a8dae6d86f2ae529335810a70a6f959f195bf9fd10f2ade7549334ff2767cd04n/aHeodo
2020-09-30PO_09302020EX.docdoc e001efbf2686566c49c1a6428a0d6574deeae2c830622f40f5cf6fd46c6d8654n/aHeodo
2020-09-30BAL_TIDJC21L.docdoc 19d2f19f8fb5285fb364123fb36a69d0bb65beb57b8bbf7d47364b53b6e60317n/aHeodo
2020-09-30B_PO_09302020EX.docdoc 3e6e31b97b51015205df9e5043f01adddd0e5cd8248bac5bb0a7e7d75b5684bfVirustotal results 22.58%Heodo
2020-09-30BAL_94915139.docdoc dae3de0260b268fd89734a96196759e0a878835e38a868db1ec44194c212e1f0Virustotal results 22.58%Heodo
2020-09-30REP_43057561460406.docdoc aa20d5b64ffd09ab64443f3159ab02394d97ae2baa93aa75de32fdbdf7f30e6bVirustotal results 20.97%Heodo
2020-09-30DOC_PO_09302020EX.docdoc 19377355e91331d5f2438275b1af46c6f266bd250c9e6a421feb6deaa86f7cadn/aHeodo
2020-09-30Q_MA0811959861AR.docdoc 8cc454cbd44284ac4a4b398e7fb7e8ef64466cb44537458d884f54fea7d6374dVirustotal results 21.31%Heodo
2020-09-30BAL_OO3142437301FF.docdoc 5bd1dec77e268f1da221047d95d57981748b9f359c04a76b1b80de3a2144c67dVirustotal results 21.31%Heodo
2020-09-30REP_36852857.docdoc 786c646aec87e25c98dfbac09f886f13f05a1e6690baf9974f99f1b37b6f3713Virustotal results 20.97%Heodo
2020-09-30P_16090820.docdoc 070fa7b00421948236bfb6bd84797e0ffa8f842cf034d0086b4d9f3fb5391649Virustotal results 21.31%Heodo
2020-09-30FILE_SKT_090120_FSV_093020.docdoc 0c169d8b50436ffcfc67dc75e5a8534829a932697bf5e79107b4ecc423e227f9Virustotal results 20.34%Heodo
2020-09-30BAL_K6AUV7KENVT8O.docdoc 0a2e10583a6c70298eb3c353e0a15ebd98c8a9ae09db8e6cc9cef513e39c95dcVirustotal results 21.31%Heodo
2020-09-30REP_SY3079015869NE.docdoc 5535272f513a3009b7bfb9a6614f96d6d4ed1c65fcfd7c416583ff2f35173267n/aHeodo
2020-09-30INV_PO_09302020EX.docdoc 24e3ba16d86892e3c786b97123151b7a2294602a61bafd3c546475d0597a2a37Virustotal results 45.90%Heodo
2020-09-30LU1542627463GO.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081Virustotal results 44.26%Heodo
2020-09-30FILE_16751463480604229.docdoc c648f66670c65dcb17a1ec6a90617481190da0ff1eced41135b2435893b66c22Virustotal results 43.55%Heodo
2020-09-30FILE_PO_09302020EX.docdoc 6ade151a37ef13bb683d1be47f8223f2c15ce7e77165fd2e9797e7af35a40ae9Virustotal results 45.90%Heodo
2020-09-30ZV_9CNL9UYENL.docdoc 267635371e8ce155728f5a57ac788f36284669033c41d39c1bd6f1168b3c469fn/aHeodo
2020-09-30DOC_FRV_090120_PLG_093020.docdoc 42c1f3bb9e1fae138c02e1447a93ea34c9c4859fca0078bdd3ea01145c4ed12bVirustotal results 37.10%Heodo
2020-09-30IH3953996443IO.docdoc d8f8b40e6c0fff5344fce0199e4fd683f50bc846af26963d53ea1554aa202e61n/aHeodo
2020-09-30QXI_090120_WCN_093020.docdoc 8d0311de9248f3fc0efd38e822a2d51fb26ec893e9cef6a0f81a2c2b2ea62bd6Virustotal results 36.07%Heodo
2020-09-30NJ5755382116TY.docdoc cf47fcf596bf3abee5508f311666cec1399ab7e9b1f1632056db94a3e3a54468n/aHeodo
2020-09-30PO_09302020EX.docdoc 020aeaa470dfa7a4e9fc3e8d88db9d7f89b1bd64df67a963467490068a6f3d6dVirustotal results 32.79%Heodo
2020-09-30ESI_090120_EUF_093020.docdoc b3e10600287dfaee56f53325acb38c44c75d92fdda24bce58c9d231eebc0bd06n/aHeodo
2020-09-30OQSY_D4VZ0FTFAAR3R4WX.docdoc 48e23cb77f6629ddf1c1b70ff1af00789fe9ed39014db2e97b4be24c2e13a168Virustotal results 30.65%Heodo
2020-09-30BAL_PO_09302020EX.docdoc 4a9f3550003b6a5732c04dafb0112c4a68a0e1b9b00f0244bbf65efc7561823en/aHeodo
2020-09-30F_PO_09302020EX.docdoc bbbd4c73bc383a0187533459a3e99105ef733893b116bda7aebf13a371dba532Virustotal results 32.26%Heodo
2020-09-29FILE_PO_09302020EX.docdoc 5bc9314961b874f09854775cf9f6bce09cc9c8106200074edb961cd544efb675Virustotal results 30.65%Heodo
2020-09-29LCOYE0PN9S9.docdoc 5d9881c8900498814ca049d263ca3339b113198bfe781ccb5e5ffbc2b23eb325Virustotal results 30.65%Heodo
2020-09-29FILE_HXK_090120_JDH_093020.docdoc a0269d67f007490795637a732bf26ce5976a2b4039df3d784930ef9109697365Virustotal results 27.42%Heodo
2020-09-29FILE_ZSVQ93ZSPO.docdoc 91d4d101c3e8a665106bb48847dbee3791e2a9a04c0adb2f363ae7767e463337Virustotal results 29.03% Heodo
2020-09-2989297569.docdoc 0a9fb69a602d43df0ec8d95c2efc4363bba8536cb03debf2b59c809e88e8f86fVirustotal results 29.03%Heodo
2020-09-29BAL_COU_090120_WBH_093020.docdoc 76d3bae4ebe683a5d3ff0d90971119c287a3acbab073e28b979ad7eaa60e37bfVirustotal results 27.87%Heodo
2020-09-29INV_8UZYQE2JN.docdoc 0581f0969b158a86c635f6c5a3931c57571aaaae1eb93475efeb0fcb6a99d1f9n/aHeodo
2020-09-29PO_09302020EX.docdoc caf29a4582381903da75e44b0f49b541a32d7ad9a08db356c0bf6d0873c479f0Virustotal results 32.26%Heodo
2020-09-29PO_09302020EX.docdoc 5ec415733e64c05854cc229c0978d9da72b7615bb092d7cfab7f2b36059af466Virustotal results 32.26%Heodo
2020-09-29REP_12340946583128.docdoc a095afd7c5b07a957a1d143f7546b88f867b12a2d7ecd78c22c68f7db4f75e4aVirustotal results 34.48%Heodo
2020-09-294974049613364946423980.docdoc cb9fa076c152b43bf6144934c0db90d82803057013a15d526acbec0b6144e979Virustotal results 30.65%Heodo
2020-09-29INV_HVP_090120_BEZ_092920.docdoc a1253f0c82192b38181f843a781405d76f3c2c50d1bf6e2c90957bca35a2495bn/aHeodo
2020-09-29INV_G04F3QHDJIAUK5.docdoc c51069870e0a5926da1f1b822e7678ecf85f23d2eba628ebc098e177375ee155n/a Heodo
2020-09-29REP_2846760553762272.docdoc 3aaf9d87f200afabb589944540ab256fe76be08830881af24d5c40dd48cef8f7Virustotal results 32.79%Heodo
2020-09-29FILE_GJ3YURTT.docdoc 9243618e3533ddf75d1106555b3aad908b5a34d8ae7a1065a683bf73e6b21a4dVirustotal results 31.15%Heodo
2020-09-29V_AB1750058212SD.docdoc c990dee21761a8d47380f5723bded194277cbdda478ea5c65704ba7bdd575e59Virustotal results 30.65%Heodo
2020-09-2915G7HGL.docdoc d61c94700e11dc1403447594b7f872aa897b6c504694e1fa839173b309e4db89Virustotal results 30.00%Heodo
2020-09-29INV_VK0MQ2LSLG.docdoc 1a5c6149c4447267a0c56f3333aa587c52c6e3b0aff4f5a2df9b4d8b33ea1af2n/aHeodo
2020-09-29FILE_BG4LPIH6UVWMO.docdoc c69c21e4a5c5a3aab97f8686c02ea866d7334da7c2d7d5509ad1b4ebc56ec006n/aHeodo
2020-09-29DOC_PO_09292020EX.docdoc 521b43b0a4013e7b1407116f9896d153d7401ea8eda3b29b63b64b744596a651n/a Heodo
2020-09-29YP9145409328WK.docdoc 086f8c38c6ec75cda72b92d3fafa0c59202ddb75c328ccd8767bef77cb910823Virustotal results 31.15%Heodo
2020-09-29REP_7299322084673694341855019.docdoc 844dc7bc8eab502d43f5eb0a7501fc0b97ed3192fe06e4e2f33d69dd28fb63f5Virustotal results 34.43%Heodo
2020-09-29E_LN9830600131QJ.docdoc 6d00d6451661d40ba68a9650bead442eecae2c92266613dd9577e380f31f9644n/aHeodo
2020-09-29BAL_99936064111582109804465.docdoc af66021f5673c71460b46b35f0d09a751b24676c36e0a9524e18841c4c4dcb80Virustotal results 34.43%Heodo
2020-09-29BAL_VA7KKVUOY4G5XPL6.docdoc 3bf884e5ad0e7ae1e5bda8efd025ebe7502e8446e0675345a83138de1f052c2bVirustotal results 35.00%Heodo
2020-09-29530305079911.docdoc a24ff1a3bee9fa6a1feb6a52c64d85af2811d52e9bccaeb05a7abd72b2687120n/aHeodo
2020-09-2965955082.docdoc cc633359c9ead5109a405c7198a5d2459585c688f6e42c72ed529e48012ecfc1n/aHeodo
2020-09-29FILE_20699630.docdoc 67453aa858ac24a5403b4bd5cc27a734bc73baed1a8d891fcbcf0dafaf280d53n/aHeodo
2020-09-29DOC_VK1909175915VV.docdoc b36bdec74fb8bb17b9719193ef5c04e4696e6b2bb02ddd5900d90dd52f2dda90Virustotal results 29.03%Heodo
2020-09-29INV_4973622813263643886560951.docdoc 745c43f7578cbd7dc997f5fcdb6f547c74055514e0120e14dbcdc4772babb5acn/aHeodo
2020-09-29WUF_090120_OZC_092920.docdoc 57786ab0f1a8c630859e7686fd0834839d7ed44b383276624c1502ffcfc9f3b1n/aHeodo
2020-09-2954596730.docdoc d286eeb463240cec38ca707bac6d0bab917ed05ed87cda5f42f3865dd2cbdc1dn/aHeodo
2020-09-29INV_JQEORE99VK7TZKS.docdoc eea701d39d78082b503779228c5870d61185b6173afe8df2779e26d8f2dea897n/aHeodo
2020-09-29VT_42756579.docdoc fd01fa376c49cf1089464faa2e699d3ca1d88c79ecfb5e0c8bf39c275ce846d9n/aHeodo
2020-09-29FILE_OZM_090120_QJG_092920.docdoc 05f1651c27d78b774cd2de8746ece22449b03816577af4b84582dd60ca81643an/aHeodo
2020-09-29FILE_TR6067744682UC.docdoc 5a9429440120c00fee91c358503fb93cfbacaad10575df1ff79b08850327a61bn/aHeodo
2020-09-29UUU_090120_VYM_092920.docdoc f88f318b208c9cf63ade09620492d6e3afe20ed72bf80023d5baf73003a33969Virustotal results 24.19%Heodo
2020-09-2908516874.docdoc 436730605ea5778074d11883f5ade96ea5af66e7acb281438b36aa3ec0680de7Virustotal results 24.59%Heodo
2020-09-29N_72875318704965817246.docdoc cf492ac392714f285fa0b842ab4721b3581c56da3171f28be3d10b7803c89c0fVirustotal results 24.19%Heodo
2020-09-29DOC_R0BXOO1MGIS0CRUK.docdoc a0d65313a8c5c4788cbe425f50f07f9a6ca0bacbfacc94abe3eab4edd1ac6d98n/aHeodo
2020-09-291565242354592075383750642.docdoc 772b6ae34874bb9877b71987f7cc0b72c450755e71af23bde0cdeb2263413c7dn/aHeodo
2020-09-29FILE_IIMAXQYSP2ELX.docdoc 68a9ee794307f9d9834945084a0412835b4b80754f558094acd6f3b5d6cafee2n/aHeodo
2020-09-2954832883.docdoc bf3d2dcd36ac834a2eed602f48d297d5cf4d5bc86cbcc62a7eb4929dd8fcda9dn/aHeodo
2020-09-29I_62HC53OS.docdoc f5013fbc3f4e685f68f19711624f55a63fc7ff5dfa0005f8c16803761c7d2788Virustotal results 22.95%Heodo
2020-09-29OIX_GQ4313855127EY.docdoc a916028a8065134286abed17393e55e315c9ba012558b7a0875e09ac2ff95e50n/aHeodo
2020-09-29W_IFP4L3EGKGN5LE.docdoc 7a8ea2d9dbf9d42c51d205f70b9c6cf430f6b6171b0587dc2d4b19d8319cb09cVirustotal results 46.77%Heodo
2020-09-29FILE_YZ2827726163EY.docdoc 4912920161a89e77767bb63e569fe20ad422dc4efb1d8f794fba70345f16be56n/aHeodo
2020-09-29INV_TWJCY8UZKJFKIE.docdoc c4a2703844af1952ca9c72121cd6a516f1ad595620d28d2a641507f7c7bea21aVirustotal results 48.33%Heodo
2020-09-29J_249595111181171.docdoc 93e49c537d860ec3dbcb23e79f1eb2c52610596ff0dc6e7fedd5e41ade84841fn/aHeodo
2020-09-29REP_44907225566691987419.docdoc 1b42960531845b815714f61fff4022939441d337491d719c2f2c3c08ba21cfdfn/aHeodo
2020-09-29DOC_PFB_090120_FLZ_092920.docdoc ddc1ecb18f1a135a6eb0a945ae16fb64993488cb32f8a23b9d0a01cf6524c6a7Virustotal results 46.77%Heodo
2020-09-29KVFI_4HK7L8YTWY6911.docdoc b3c92e625ad81c08bd28e1a45753ce045067ba19beb8cf1b8852bd0ecbd56628Virustotal results 45.16%Heodo