URLhaus Database

You are currently viewing the URLhaus database entry for http://atmosfera-uyta.ru/wp-content/LLC/rlbkybj0/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:624915
URL: http://atmosfera-uyta.ru/wp-content/LLC/rlbkybj0/
URL Status:Offline
Host: atmosfera-uyta.ru
Date added:2020-09-29 20:45:05 UTC
Last online:2020-09-30 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 20:46:03 UTC to abuse{at}internet-evolution[dot]ru)
Takedown time:12 hours, 4 minutes Good (down since 2020-09-30 08:50:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30FG3445184762YN.docdoc 950f9c4f6561a52ab6850b63b0551b2e75c7232b28c11aa0e470001d770dd194Virustotal results 21.31%Heodo
2020-09-30T_82507982.docdoc 19377355e91331d5f2438275b1af46c6f266bd250c9e6a421feb6deaa86f7cadVirustotal results 20.97%Heodo
2020-09-30DOC_PFA_090120_PER_093020.docdoc c5d3f7beeec8a157185d5c01ac991e0357cb0d55f5b4335f3846792136692714n/aHeodo
2020-09-30FILE_DPY_090120_MDD_093020.docdoc 897b5043fa3f5453de07db0c956147c5a3eedaa6c2d83bd50b5da2b033da51deVirustotal results 21.31%Heodo
2020-09-30INV_3718145166692929061577.docdoc 420c99cf0d5ca3e0ddb053ffa31741bebe9dd69fb61224c8c741b7ec01e85e96Virustotal results 20.97%Heodo
2020-09-30YX0934388627ZD.docdoc 7f4bb0819805fa0971334e3d8eca32699464c4fece26826d78d8df5a6441c071Virustotal results 21.31%Heodo
2020-09-30INV_YON_090120_HQQ_093020.docdoc 605f71e5062dc6452e0f427294e6d436a184d7cebd4d4600c98d0a5542c30addn/aHeodo
2020-09-30LQ2U7AN.docdoc 5535272f513a3009b7bfb9a6614f96d6d4ed1c65fcfd7c416583ff2f35173267Virustotal results 21.31%Heodo
2020-09-30DOC_531635075336406726953.docdoc e9a9d7c87ef767357d0019c6185d27bec8449b2abd340b93b54b6621c426fc14n/aHeodo
2020-09-30INV_ENT_090120_SMK_093020.docdoc a9b4569007c2822d7d717a8ea3a4e3a496c52a3f2011519ca3c4dd5e42011465Virustotal results 43.55%Heodo
2020-09-30E_YQZ_090120_URU_093020.docdoc c648f66670c65dcb17a1ec6a90617481190da0ff1eced41135b2435893b66c22n/aHeodo
2020-09-30IN7524241797AR.docdoc f69c957e912e4eb54ca00ba379a5808d47ebcb4667393b4b986d2d50ee35e7b6n/aHeodo
2020-09-30REP_65125784.docdoc 3d322e72fd831b7624674c0a9ed650c75bf0cf2d05e5c2dcf7746ee4187260b3Virustotal results 45.16%Heodo
2020-09-30T_19658042.docdoc 010d313ef5a6680acc6fcdaca0eed3e19f256a23cac861684466d6e7f7138030Virustotal results 41.94%Heodo
2020-09-30DOC_62680037597128642866.docdoc 1a2856f6dfce0f239bb89c2fa41ba26f9d1761dd09caa8312e58c26aa1411369Virustotal results 38.71%Heodo
2020-09-30OM_59892716597827269047.docdoc e2689c227ea6d5424060e6fce6deab414a52c4d27719a2a2f4a2b9eb635d4f9an/aHeodo
2020-09-30REP_40701033.docdoc 8d0311de9248f3fc0efd38e822a2d51fb26ec893e9cef6a0f81a2c2b2ea62bd6Virustotal results 36.07%Heodo
2020-09-30DOC_99824595.docdoc aabd54aa244d3a19daa025d685a63495581f02a35c44e11bdb76ea7bbf7360baVirustotal results 32.26%Heodo
2020-09-305305111740674116.docdoc 8649c9f23563646d5b0033bb729307388ddb4396da639cbf0385c08ec0a01cffVirustotal results 32.26%Heodo
2020-09-30INV_LB353483QK6.docdoc d56585c6e4a0ede125061be754c5a0c9b45728232d4c61937ffbc047df3aae30n/aHeodo
2020-09-30DOC_HUWY0WEP71XA.docdoc 48e23cb77f6629ddf1c1b70ff1af00789fe9ed39014db2e97b4be24c2e13a168Virustotal results 30.65%Heodo
2020-09-30BAL_380336619.docdoc 9503120eff8e09bde10d7341fc02b19428bf024bfa48b4db12e902ce9895be55n/aHeodo
2020-09-30WZ_OW3897271001CW.docdoc bbbd4c73bc383a0187533459a3e99105ef733893b116bda7aebf13a371dba532n/aHeodo
2020-09-29O_V0VMGIDYJ7XIFVPR.docdoc b11de73e98459e676a482af2c4e52dbbaf7d6cc9fe43b57ab758f3ffed754223n/aHeodo
2020-09-29INV_17082690.docdoc d6baf92252e2e3e673077f1cea8fc4bf0e240f4383dffc91c53d88857ba5fdf7Virustotal results 30.65%Heodo
2020-09-292743419459.docdoc defbca721d5850239ce954155a629ed1728ce578781b3e387d8c6305144f0838n/aHeodo
2020-09-2958546297336088158762.docdoc fbdacf9e30368d59414b52f459d935964b7833d6d8467bf0eb4ccfa97f71e4d6Virustotal results 29.03%Heodo
2020-09-29PO_09302020EX.docdoc 91d4d101c3e8a665106bb48847dbee3791e2a9a04c0adb2f363ae7767e463337n/a Heodo
2020-09-29BAL_HJ8052249772JM.docdoc 16b031e38044afa7252dbfb56c762b3723de1cb4b3535a8c76bd5d4f10a2819bn/aHeodo
2020-09-29PO_09302020EX.docdoc 14e6ea40cc1e124fe353ed7aeb27490dad58d6a116bfddc62aacaa02921c5d88Virustotal results 32.26%Heodo
2020-09-29REP_22171657.docdoc 1034ffb4a76ffe915977c54f8e473a307da7c7bd3ae9d2a0e36628e23ebd3986n/a Heodo
2020-09-29PO_09302020EX.docdoc b84c2da4ab10a702decf8a1bd04eee1ccd250b8b792bd32957cd1bcac6c50861n/aHeodo
2020-09-29INV_DPH_090120_NCW_093020.docdoc 0242549ebc92f3e40e21ec852316e2a5e84ac870bf1a1a571ba2dee66ecb2128n/aHeodo
2020-09-29BAL_NV0335612563MY.docdoc e8bc44088ba55cb58a8611c777ab11528143331cfc47bbb9dfcb92342f70696bn/aHeodo