URLhaus Database

You are currently viewing the URLhaus database entry for https://rezvankosar.ir/dpqbUXK3el/jMk8jBlFFmx/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:626135
URL: https://rezvankosar.ir/dpqbUXK3el/jMk8jBlFFmx/
URL Status:Offline
Host: rezvankosar.ir
Date added:2020-09-30 02:02:07 UTC
Last online:2020-09-30 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 02:02:25 UTC to ripe-abuse{at}0-1[dot]ir)
Takedown time:20 hours, 46 minutes Good (down since 2020-09-30 22:48:48 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30file-2020_10_01.docdoc 59218dd633aa6e55d901c1a8227ace241e21d80c34af6fbd4dd99400832ef122Virustotal results 25.81%Heodo
2020-09-30INF_20201001.docdoc bc5bbfab7bd6b38fd204b4c31d13dcdb6cc6e1712b448d5c2e6ff31e858b26ceVirustotal results 25.81%Heodo
2020-09-30arc-70010.docdoc 024d41e6829c4934db673c8c999026101957149432f935a6f24412fd9d6e52d7Virustotal results 25.81%Heodo
2020-09-30515732_W07748.docdoc 32a1991f3cccd7f0d787d1fd9ef745328cefd8d134d25a6a2e12d49808143952Virustotal results 25.81%Heodo
2020-09-30828-20200930-2636819.docdoc 3e87e713b3b74622e46543c10a46031741eb96ef243d34bcac8dde7c4a7e5686n/aHeodo
2020-09-30dat GRM276968.docdoc ff3315b87d2b2765a5e026ae9583280025aedf196ffd9d83606cfc049d9cc800Virustotal results 22.95%Heodo
2020-09-30Dat_20200930_WH4757.docdoc 45440a139d3d0c4952dda574501e86db04790d2f61ce83371b2946ea2d25d8a5Virustotal results 24.19%Heodo
2020-09-30LIST 20200930 YBA24458.docdoc 9d324dca782f0c31fabf90945e2299934a2a4a5f08c328100843fa3c06380300n/aHeodo
2020-09-30dat OHP012.docdoc 6660c9467c8a00bf94702fb2f3887f078c41c6f662507e7c780dc6567759b33an/aHeodo
2020-09-30DAT_20200930.docdoc 5f1b7ea2789bf23bdbd87c87daded72bb53aad07fc776bd6622709482c002b33n/aHeodo
2020-09-30rep-HX86064.docdoc 98a129783214c4f848182d4ee393f9778ea81fad1808c5d1e589afa4738e38adVirustotal results 24.19%Heodo
2020-09-30Rep 2020_09_30 8827.docdoc 65d551c2b6ba46c4924531e27369d13bf4cf40ca1b27de0beeb1f4ff27534705n/aHeodo
2020-09-30Attachment_444582.docdoc 044dcd75928b3bd4271fd410fa7dcbaa9deaa4c5a726acd63adce5efe43daf0an/aHeodo
2020-09-30MES_20200930_BT818.docdoc f6ebeb959a9c21b3b223984baeeb720c187190538242879925d8c5b284dc74c1n/aHeodo
2020-09-30LIST_2020_09_30_5912.docdoc 23929af7e2725266933c2cafc657a7a095d42ee57beaa65c45d573614720a51en/aHeodo
2020-09-30Doc_20200930_YD90693.docdoc 45e1f883fdc6cad4f635eaef749c53e835d79fc175cc58e46113473d6c93d76bn/aHeodo
2020-09-30Inf-20200930-VQ445.docdoc 070f607b4f349149ac149bbafca3314d4fdc3db65a0a3fc158b564f77d9ee460n/aHeodo
2020-09-30Untitled 2020_09_30 T6960.docdoc efb4167bc0cff354c12bf008da6ffdd636d608141a89d9c77f85c40b28dcd31fn/aHeodo
2020-09-30Q835_2020_09_30_B8403.docdoc 028661b4068147b441bb85f54020e1a03290adf9a56a2fe4407e68509ec7a812n/aHeodo
2020-09-30ARC-2020_09_30-R01542.docdoc 9ac40a72e7924e44c504e25d64e72256f0b7003d884c6dd0e77eacdca2cc10a1n/aHeodo
2020-09-30Mes.docdoc db2b025dc619e2cd0f919615e8bd6ec498c72225e0f54b9f95196d8ce78f9703n/aHeodo
2020-09-30078-2020_09_30.docdoc 6c775f2e53176b776bb73bfd6c6a98f652a94ae4fb0b74b29f56aff911c3de0an/aHeodo
2020-09-30LIST 20200930 806.docdoc 2e596652391370bfcf5e776a4379dd5061fcb4441200889c726c34ea6207ee9bn/aHeodo
2020-09-30Dat_BX430388.docdoc dca2f3f5cd4fc577315e8bd9fcb344afb5cdc0726cd6349dd3698c48cc0542d4n/aHeodo
2020-09-30dat-20200930-OBX80962.docdoc 2d158b82266fb5987ab0649eb0377da2ef6a3520af76e1096e6e8f48a714085dVirustotal results 23.33%Heodo
2020-09-300144 JW871467.docdoc eb8dda76f5e153f5ea9f7c7471f55627870495f236134e3b0a6acb0ab4f067b4n/aHeodo
2020-09-30arc-2020_09_30.docdoc c4d36a8bed7042aa9abc38d0883bc4e7916b275ffb51147b6ca9572e5fb496f4Virustotal results 22.95%Heodo
2020-09-30Attachments_20200930.docdoc 6332f6b0886bc926911339247b72278894fc0667a705e120fa356efd3691962bn/aHeodo
2020-09-30rep.docdoc fd826f7ad1f1e372efdc57065d0bb9c4c29931529a7ec64c0cdc3fce95a4b547n/aHeodo
2020-09-30file_DKP883.docdoc 8499ca7bd03946d76958ade70190e439f10d822405083e41472af011d95445den/aHeodo
2020-09-30Dat_2020_09_30_835.docdoc 1c19fac3068aaf8a893e43175cf7304a5dc037ad05a31eaec72df3b1f9de9905n/aHeodo
2020-09-30Doc 20200930 NJA5746.docdoc 0dc8b5cefd0791007bbc51f60516c87fd6d938fe4d44c7f7249e47f38cc3c73an/aHeodo
2020-09-30MES 20200930 K441575.docdoc 7517322994d207e75f7e760a7797f433ed016d4d39d3b2cc257e6b05d158c0b8n/aHeodo
2020-09-30879824 20200930 AC1175.docdoc 540c085bf41d7ded925345f785582459e99ff1125a0400d9e6b151676fcc5f6dn/aHeodo
2020-09-30rep 8945.docdoc 9849bf91ef029b6a492bd6c1b39b888e264d7b14a1574d64502706cc65d51576n/aHeodo
2020-09-30FILE-63767.docdoc 4c25015ae6e259e42564c6b03066111433ae12f8488364a45ab1e6680d708350Virustotal results 21.31%Heodo
2020-09-30Dat JH68354.docdoc 85457cce94346f14602525c4c114a035aeff9de80b2d25f2cd7aee042c5477can/aHeodo
2020-09-30Mes OJ2594.docdoc 173d3683f3f267d179bd0a2861ce23edcef457430364fac577f89dea9c9950b0n/aHeodo
2020-09-30arc 20200930 HR054.docdoc 05674b023509b9764ea5b6a44beb92fc22f3e2c6ec3f1e8e96723fb0cf522056n/aHeodo
2020-09-30Attachments_863.docdoc 12ac85eae36cadb62fd9e5f907ddfb4be98326edce0e3e073622a1c87563cfa0Virustotal results 20.97%Heodo
2020-09-30Attachment_2020_09_30_2654203.docdoc bc1a1a8828821a74c104c0e49dc6a8456e2d89c4f2af71491ea5136f93460561n/aHeodo
2020-09-30Mes 20200930 720042.docdoc e4c0e12e6e90cabe22fab698bc2684a13e9719668942b682bfaa1ea0bd3336a4Virustotal results 20.97%Heodo
2020-09-30Doc 63361.docdoc 4b795f3870e608b6c61e4a7757d87deb5525949aadeb15393e2b83cb4b34e618n/aHeodo
2020-09-30Dat 4027533.docdoc 22f844a158ab002c4375f2234f5a539f0b1b5199f33b442d4869765ea22ca27aVirustotal results 47.54% Heodo
2020-09-30doc-2020_09_30-EJB8088.docdoc 9514f8559ebc3346ee2ad8a0dc066f680f456064bcb9dc07a2b528f14293d522Virustotal results 46.77%Heodo
2020-09-30doc_2020_09_30_ABH408887.docdoc 283272050a0c0d994dacc605e1d7009688c58c1f0998f8007647a9b92e8604e1Virustotal results 46.67%Heodo
2020-09-30UNTITLED-2020_09_30.docdoc 869911e995bc11a3a2e87a02de6611b59d26ddd5b21c6c77e72f327620f526c2n/aHeodo
2020-09-30file EX79247.docdoc 267561ab8d4856ba0064185a8d6269693f1c580b721f16db305b6a9299f5c41dVirustotal results 45.16%Heodo
2020-09-30doc_20200930_J936.docdoc 6f99b89e5bfde428715216d919a8e1dd87475900137dfbb2e07c5ba58bbb2954n/aHeodo
2020-09-30file_2020_09_30_DZ436071.docdoc 6dcb7e9d3ef574e032cf8d4f7da8e1ddefaea58991677a7e53be13723839e09dVirustotal results 45.16%Heodo
2020-09-30mes_C26706.docdoc 892d8f9cfb26bae3277304d3396027dd55d0899e78181a1431bb43e29dd3e857n/aHeodo
2020-09-30UNTITLED_2020_09_30_11499.docdoc f72f43e5d32d5bf4ab91a6e04550dbef93f82764320a7403d8b59952c208beadVirustotal results 40.32%Heodo
2020-09-30359UJU-NCQ464660.docdoc 67d283b362bfdbb0db8f7a103bd5c1c3c7fadbb22b0cccc5b0cea1b48d1bcd16Virustotal results 40.00%Heodo
2020-09-30list-N840061.docdoc f337a65984d1b07d592fa829984e4cb8f3a51e2005d02c82dbe1573a33d1b72an/aHeodo
2020-09-303174-1191.docdoc 12eacad71c2a295436f6909c437715e14ed8ab2c4c2417d845ee7e4155768b1bVirustotal results 33.87%Heodo