URLhaus Database

You are currently viewing the URLhaus database entry for http://dabesto.ir/digikala/Document/8Vt68obfzRCMi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:698688
URL: http://dabesto.ir/digikala/Document/8Vt68obfzRCMi/
URL Status:Offline
Host: dabesto.ir
Date added:2020-10-15 22:24:04 UTC
Last online:2020-10-16 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 22:26:03 UTC to abuse{at}asiatech[dot]ir)
Takedown time:9 hours, 1 minutes Good (down since 2020-10-16 07:27:37 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-16arc-2020_10_16.docdoc cd682e6d98ec2c8e71a88acdd8883a132f4f20d0eaf1f02b21e878482c181834n/aHeodo
2020-10-16mes 20201016 94086.docdoc 2f1309d8bb47ab6e05f61b0ba47876288b946708065197deb5d017a402cb6397n/aHeodo
2020-10-16List-20201016-AQ060.docdoc 23321ef2552ae21809b21f51b4380c31d17917222fe373a59d73500eedd99fdfn/aHeodo
2020-10-16FILE.docdoc 37c21f0f578d3c63515c63f95541e4b9415878dbcdd420e28a57ad221d118f2en/aHeodo
2020-10-16Inf 2020_10_16 0605254.docdoc 75465934273d4a95881d769e7055c61f64860d7f9e51f5251241615b2b620993n/aHeodo
2020-10-16mes_20201016_A7240.docdoc a47762c209b57d46904972127a1289ee6b304fad012783b113472df47b76d81fVirustotal results 50.00%Heodo
2020-10-16Attachment 324.docdoc f9d5124fa2f49422eaacc95990935571a667118bbdebac076de0f178e54e9ce3n/aHeodo
2020-10-16rep_20201016_AFL781.docdoc 5072f3218fa0300943629458afd87b56759783ef8776b3ca783f282ec185e33eVirustotal results 48.33%Heodo
2020-10-16Arc_BZU6631.docdoc ef15c47fd8dcd129ee3580f45ef2062281b18b7410002a2631200043b9d170aen/aHeodo
2020-10-16file_2020_10_16_KOT55648.docdoc 9254602e28d8cbcf21f9c2235f5dbb7deb8be9c6b331d735643b5892b2115cb9Virustotal results 41.94%Heodo
2020-10-16ARC_20201016_JBQ575.docdoc 878bb13d04d93f1209ba23990aef838329f86ff7fbd86d5bc6bd24da81dbf0f7Virustotal results 46.67%Heodo
2020-10-16mes_20201016_584.docdoc e1fa8ab1bc95406a6ca6938a72337e0b9206e90dcd5517bdcf36c487c5a92bd0Virustotal results 41.94%Heodo
2020-10-16File-7748.docdoc 40c27425399b1c51747bd4ecb6dbea00c530fdfc940f89bebc487d1cc2b810adVirustotal results 41.94%Heodo
2020-10-16list_20201016_789034.docdoc 0fc7c5948e396de87107663a180678d0eb591acf3e897fc39502c371fe9e17aaVirustotal results 40.00%Heodo
2020-10-160157733 2020_10_16 61708.docdoc 3be03cd4738ab3f977af3cfea372ba8def5e7c4515743292a9d45f7a39be67edVirustotal results 41.94%Heodo
2020-10-15List.docdoc b060160af00ceb90812eb219ac8e72258f487365866f64374c5786171cd6c947n/aHeodo
2020-10-15mes_7253.docdoc 4be03f6e2d9d995b0c327a02bb5c0dd41b90691a3da98e256f2defb4695ef311n/aHeodo
2020-10-15INF-2020_10_16-ULY27299.docdoc e9bb85a4542b6d954e0643d3a11e297ddd82611c26f5b20de5e92bbc0ca77418Virustotal results 38.71%Heodo
2020-10-15File_20201016_490.docdoc 9224f06c0199e984b9bc5e2cfc12af8d8ea1d1022db475a557a1e93221030f76Virustotal results 39.34%Heodo