URLhaus Database

You are currently viewing the URLhaus database entry for http://praxis-leimbacher.ch/wp-content/Document/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:704126
URL: http://praxis-leimbacher.ch/wp-content/Document/
URL Status:Offline
Host: praxis-leimbacher.ch
Date added:2020-10-16 21:42:04 UTC
Last online:2020-10-20 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 21:44:28 UTC to abuse{at}ip-projects[dot]de)
Takedown time:3 days, 10 hours, 1 minutes Bad (down since 2020-10-20 07:46:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17INV_RCE_100120_CXX_101720.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134n/aHeodo
2020-10-17ZK3368544880QO.docdoc b0f945ed6afda303421f9501b2b2d1d2996a132eb27486911019cb9996538460Virustotal results 51.67%Heodo
2020-10-17351710726334.docdoc c5b951c65f67f1136dedc670dfa0cf0fe59abb9172a0fe5a6011e2882e129e8aVirustotal results 54.10%Heodo
2020-10-17YN4175697209IM.docdoc 83af4eee8013969fd28932937f24ed1bb6031013a525dcd161ed6914b41feba5Virustotal results 53.23%Heodo
2020-10-17DOC_PO_10172020EX.docdoc ab13f6f95154d0396465d9bb9d42e49708e2efdd49c259b7189ae2c7c7c2d389Virustotal results 53.23%Heodo
2020-10-174QDOX2W1M79FGAQ.docdoc 8eed16b7e0a64351cb06ea437eeae8f69b227cac04237187ed17cff470a3cb0dVirustotal results 58.18%Heodo
2020-10-17DOC_TJB_100120_DSK_101720.docdoc 9fddabb44e0d01bdc8e0886790e1e34059ac1aedbe3faf4cdfa66bf9dec923cbVirustotal results 53.23%Heodo
2020-10-17REP_PO_10172020EX.docdoc d6b61570ca15f09c5e9707aaa5658abb2ff3c1916805b287b31ceb75a95f4130Virustotal results 53.23%Heodo
2020-10-17BAL_AA6796432061XP.docdoc 8b422df815c80e86241a4670a69918c21bf0fbdde61aaa753f84e0af70d9f4a4Virustotal results 53.23%Heodo
2020-10-17BAL_A9JD82N4DV.docdoc cab952f8c6436054516b7fb9b6dc980a0921858a4a312229099f2817b9846340Virustotal results 54.84%Heodo
2020-10-17DOC_59197385.docdoc 7f7aaae8116f26c7d91c5c3d87ab7c7a752e628195c25563cc7c3074669e6c7aVirustotal results 54.84%Heodo
2020-10-17CJ8125612690II.docdoc 127e5f88e44a1886181820087f5a2d1bb09ecec7ca49c027c33c9cdead79c1acn/aHeodo
2020-10-17LU4198837180HF.docdoc 920a210b924453a21c734f46a853d5eefb835b8f7e33cc3402355037771648c6Virustotal results 50.82%Heodo
2020-10-17F_68954116899813664663139.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6n/aHeodo
2020-10-17BAL_57605563.docdoc ca5d768289c225dea34f82176591548fc03963cf653f0a8ea0b6e0f9f71ca3aaVirustotal results 54.84%Heodo
2020-10-17INV_7894496619925392955.docdoc 58a95bd14fdfe2c4e30b7bce237de2fa3351c1bcf0328c91c9333a29a8be15d0Virustotal results 51.61%Heodo
2020-10-17N_PO_10172020EX.docdoc 2a73fb122ea506f3c1e9b1ce6acf917b3fd3c38b886848986007c1a0e57a91b9n/aHeodo
2020-10-17S7GTL1YMJFG3QH.docdoc c85fe8825461de0503c8b9b612f01c88a1124e0c33ace58d20c22cf40c4bd03fVirustotal results 51.61%Heodo
2020-10-17JXOE_FJ3LZIRV.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1n/aHeodo
2020-10-17REP_PO_10172020EX.docdoc 61cf4ff84de3e35dd24e8df00464aa832912b8c378cbffc5da91abc576c809fdn/aHeodo
2020-10-17FILE_GFS_100120_BZN_101720.docdoc fd0ec2733cb7fc4d8f934cf81b56a9a6fd2dd7290c257cdf4c2a1b3da2bcfc10n/aHeodo
2020-10-1715686287797831267017049.docdoc 5990f98a0aeffb24181deb144a8519e54f7695794e545b9ba0cb52fe28e3f987n/aHeodo
2020-10-17REP_Z0Y5WWCJD69YC.docdoc 72bc6543f22de398e1374caed638e9a1d24ec0b37a5fa9b5ac10ade7559ab839n/aHeodo
2020-10-17P_89590172.docdoc c40e490d1149a43b982a7c65d5f04d36117a86623374f75bf8d47f31090f8b18n/aHeodo
2020-10-16BAL_0634742467.docdoc 3bae78182dad47ac43920171f44e275863e25a8cbdd07ac0b0279edb751dd12aVirustotal results 50.00%Heodo
2020-10-16QKK_YS6047280165LR.docdoc 70c3e11a1960c379e6be0215b70999623bb37cad12e932cf4d222f70f078c6d2Virustotal results 50.00%Heodo
2020-10-16DOC_308924217.docdoc bf79372e0c3a2b7a3b0df0f3994621206443404f5c382b8ad5e5c609c6b0e043n/aHeodo
2020-10-1665936977.docdoc c041d525830dc0931ba8595f644dd8464550c8e62933d48ba6801f11460b33a9Virustotal results 51.61%Heodo
2020-10-16P_8T9UJMG3CO.docdoc 6539d2ac4a847b3444866e22b642a335e3d8b92d40031a090fa315aef1af2930Virustotal results 51.61%Heodo
2020-10-1632209316.docdoc c829616c0d226e76bf936406e344c75c3abea9656fdf7b4b1d73934e6a853b3fVirustotal results 51.61%Heodo
2020-10-16D0OFTNNY9QZ.docdoc 7bc4797a66cfb8dbdc6f95c5568595d0229200838644a798b7228d1bde86b554Virustotal results 46.77%Heodo