URLhaus Database

You are currently viewing the URLhaus database entry for http://zagros-shahrekord.ir/antonomastical/Reporting/636804671/FtEAit/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:722935
URL: http://zagros-shahrekord.ir/antonomastical/Reporting/636804671/FtEAit/
URL Status:Offline
Host: zagros-shahrekord.ir
Date added:2020-10-20 10:22:06 UTC
Last online:2020-11-07 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 10:24:02 UTC to abuse{at}radcom[dot]co)
Takedown time:17 days, 23 hours, 35 minutes Bad (down since 2020-11-07 09:59:08 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-210048854.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21invoices 84704 & 99376.docdoc 2a603eb060abe8cf0ce5259b69da9cdd0e5c3015332a943828ef24212ae982e8Virustotal results 30.51%Heodo
2020-10-21October invoice.docdoc bce4a6fe31eb854ee0fc5fb9c17c81ee19922b93a2998de467fdd004aa3ddf37Virustotal results 34.04% Heodo
2020-10-21form.docdoc 7a71bbbd54d2b129ef434d1379aeaf528d643d1cabbbac8bde1666c9e5069994Virustotal results 33.96% Heodo
2020-10-21form.docdoc 12abe2772542ac1ffc94f0b0e88db86ca97976a83a371d0ce054b72a8ed1053fVirustotal results 29.03% Heodo
2020-10-21invoice #6822.docdoc 91035b90b049084cf646a402da658c7b597a1b91434700caf2078db72bddc492Virustotal results 29.09% Heodo
2020-10-21October Invoice.docdoc 887c3473aab94ff54bed0af87135fad58dcb435bcb5dd630ca49ebfc6d1b9a55n/a Heodo
2020-10-21Electronic form.docdoc 657afd533c3b3e60cb28b901496d7a4d42a96b0fbc931ca2630509aeaedda2bfVirustotal results 29.09%Heodo
2020-10-21Electronic form.docdoc 23fb1844a3cad0f727d5bf74d8ed76b134681db7486450782109d760f792863eVirustotal results 26.67%Heodo
2020-10-21Form - Oct 21, 2020.docdoc 335231c83fd73bed46bea76a81706d2348880433f130fd464e81381a81e8f301Virustotal results 29.09% Heodo
2020-10-21YC8074379127TY.docdoc 5ddd4814fd7f6793c23ae5d9593056b6b59b94a595441340a86375dfdb384b57n/a Heodo
2020-10-21Copy invoice #4833.docdoc 1c615910d79aa7763683cab844eb3542e60cdc0b9052bf2649a0fe8034ccaa51Virustotal results 26.23%Heodo
2020-10-21Copy invoice #1015.docdoc 264ef77d29a38b4995770f48b95eb69a80aacf1e12995fd1fba11cc9d6dac6d7Virustotal results 30.77% Heodo
2020-10-210848313.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21AQ09 invoicing.docdoc a32b8fc89045749411368894b5eb70012518a8d9d1703b940bcbc966c0e40bdfVirustotal results 50.94%Heodo
2020-10-21INV #33460 FOR PO #05508551.docdoc 31658c6055bda692c4a944b0dd23ef5f0ef7d312df172a1eafb6317a110f286bVirustotal results 48.39%Heodo
2020-10-21Invoice #42244.docdoc a9b5951976e5aebe82b1a18ef33e379ec5f3a36a04b89103649e54d7dc746aecVirustotal results 49.06%Heodo
2020-10-210474738.docdoc cbc98038cc0dab8d10dbfa4950f8228777c05eee346ce80ab1f2002c51939ac1Virustotal results 46.15%Heodo
2020-10-21Inv. 9740448.docdoc 58a681865ea454572eb661486c8e06854e90cc7cd2d5ab95ae331a724f5ce97dVirustotal results 45.90%Heodo
2020-10-21invoice #130822.docdoc 8d8971cd4eb8a2c26f5263e44299f9f468d43614dcccdcfae564420d264e0d29Virustotal results 43.55%Heodo
2020-10-21Invoice #200.docdoc a3bd9261b5a8844a6a6a77e06f0eabf6a21d998001e99718a42f8bfc8147762dVirustotal results 45.00%Heodo
2020-10-21UUS-100120 KYXF-102120.docdoc 15680f3d4397a2ea2191e960421dd8650642415c14be15b1495f859bc6b9d7cfVirustotal results 40.98%Heodo
2020-10-21W-100120 KEJD-102120.docdoc 106359e17594a3265349fbfc1a2fd1e2f19940ca5c4b2262c1d021bb8d74fe11Virustotal results 42.62%Heodo
2020-10-21S0768 invoicing.docdoc f75dfd9100b7fb7c93a95812e11a04f911e4ed1f61fafa8b73c747df9898a212Virustotal results 40.98%Heodo
2020-10-20Form - Oct 21, 2020.docdoc d590ed65aef80ecdc7f0a44755ee436937f30c0b05287ce6d177b654512940e8Virustotal results 40.98%Heodo
2020-10-20Electronic form.docdoc b07a48ca7d09a730829f65f399a5f0496e4c14989705d83a73630dc2a67f80f0Virustotal results 40.98%Heodo
2020-10-20Invoice 067912.docdoc 9be377b592614918b5f4aa295f73afeb586e3e386f7bec12cf04637f31433d7bVirustotal results 40.38%Heodo
2020-10-20Form - Oct 21, 2020.docdoc 4b4c3539bff4d5461f5c5a5ceae568c2e301a62f273ac881508f6deaaea89835Virustotal results 40.32%Heodo
2020-10-20Form - Oct 21, 2020.docdoc a8e92bb15ad9bcd8e93e71644a570c2aeb6d030e2b496412500deb4ee2a23889Virustotal results 37.10%Heodo
2020-10-20Inv. 215685.docdoc 864eeb47c83f4648f5c3a22de6c34559c24f871adfe7490af5c932ee7fbd52f4Virustotal results 32.26%Heodo
2020-10-2060026.docdoc 80112c9d5f76aa1687aa0df70c0d7f1d96f1b7524da942b87480ff37231091e8Virustotal results 32.26%Heodo
2020-10-20PO# 10202020.docdoc 1949d127f8cad19649adb5f4534e1b6eff752a31d5ea73e427d0ef8c90511ceeVirustotal results 32.26%Heodo
2020-10-200535567.docdoc 9de27d2156aa1a500c8317a999704637a436bc162590ccb63344d7930b438826Virustotal results 33.33%Heodo
2020-10-20Form.docdoc 943cf94b0b03d8b04c8a0e977e955ae48b3713bfddd6a3f00f37618bb410f201Virustotal results 34.00% Heodo
2020-10-20invoice #3789.docdoc 3bc3a1ea24bd194a23d6c8493b9754de9a41127025a14052754eba04dd1dda70Virustotal results 33.96% Heodo
2020-10-20form.docdoc d71d5d04020304ab739545240d25684b106882802e265a64cba2af565ca6c8efVirustotal results 32.26% Heodo
2020-10-20invoice.docdoc 306d01912045e266a9fe2015a5ef474be9768263f196550ab49052a0c676cef5Virustotal results 33.96% Heodo
2020-10-20Invoice 00266516.docdoc c2e0abb771dafb0cf8c4088d611fcf2ce0236107ddecb7a2dc28d86ac019b779Virustotal results 34.43% Heodo
2020-10-20October Invoice.docdoc 7e136d3bc68a6578cdb157624c2783f78b48a13944133de3d0f5b0d34ce6ffa2Virustotal results 30.00% Heodo
2020-10-2021846.docdoc 18286f51c980997e07241a170822a950f101cfa264c232edbfcb4d67694d5b45Virustotal results 31.15% Heodo
2020-10-20invoice #336278.docdoc f64d1d64e95cb52e8ac1e43c619b165f65e0a882fb8d0e8314f2e82271425089Virustotal results 30.51% Heodo
2020-10-20October Invoice.docdoc e59ffb1d8684c5f593de0d953edca68b56546935b4c9eb2bfc7b55958865826fVirustotal results 31.03% Heodo
2020-10-20Inv_59162.docdoc 589c7b11cb037b2183fcee493e98930358a15693532b1340c7f4cf1d2f50c636Virustotal results 32.20% Heodo
2020-10-20971521.docdoc 0c826456d4bf7da7aaf36377a19de56cb2712b94c047a86518ff7745d252479cVirustotal results 32.26% Heodo
2020-10-20October invoice.docdoc 47914da6e4ee4b6892b42cdb0076cc23a9887a862a7b366434d7c77c0a21123dVirustotal results 32.26% Heodo
2020-10-20PO# 10202020.docdoc 8bec43e2d05761c02be362fef3cf9b6f0f4963f122c275c7c7686e3cea6fd5b1Virustotal results 51.61% Heodo
2020-10-206349546882UW.docdoc 302086907da36d9af34abfae68ae96815cfd530e20bf3e4d40d520fd6816fe5aVirustotal results 51.85% Heodo
2020-10-20Inv. 296974617.docdoc c31795e9d2a3b7bf6e19d054a2574f0ea3eef997e49bd9318316efd609cada94Virustotal results 50.00% Heodo
2020-10-20NA-100120 KODG-102020.docdoc 79fe11a895e4e6d9945022d70da2ea0c06927b3b91d7947564e610377117ee72Virustotal results 48.33% Heodo
2020-10-20Payment.docdoc 34ae925782aec36a2008c0f78a3146b37a46d20270cbf8dd142a0b03b3770d00n/a Heodo
2020-10-20Form - Oct 20, 2020.docdoc 60ac2df8c0a56c198ce34633dc5af133c4fda800a85383a2ea9e6da298e77904Virustotal results 48.21% Heodo
2020-10-20October Invoice.docdoc aea562896196459f11e274751fcc92aad6234db3e78088c86bda7f2b31be9b4aVirustotal results 53.33% Heodo
2020-10-20invoice.docdoc a67d3d825a05eae828eb68703949b29ce211f2873a8c91c7875b89ea9577a817Virustotal results 49.06% Heodo
2020-10-200031974502.docdoc 57a45649e3387c510777b38ff477ae656b14f355d95f35ba83e8ec2e3cf3773cn/a Heodo