URLhaus Database

You are currently viewing the URLhaus database entry for http://support.servu.co.uk/behavior-goals/eTrac/g9beyek/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:725038
URL: http://support.servu.co.uk/behavior-goals/eTrac/g9beyek/
URL Status:Offline
Host: support.servu.co.uk
Date added:2020-10-20 19:02:04 UTC
Last online:2020-10-21 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 19:04:02 UTC to abuse{at}aware-soft[dot]com)
Takedown time:14 hours, 11 minutes Good (down since 2020-10-21 09:15:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-21DOC_TX1693337469LJ.docdoc efc52b61116de71a3b3191b7bf3d79f9152dd3d3fa3d34889a4f11ef178d9e68Virustotal results 50.00%Heodo
2020-10-21UIV_HB4L76B1NEWDM9W.docdoc ecf5ecbbe5e2904306de22bb28532af5b7e0cbadc8446cbb2fa456255683e972n/aHeodo
2020-10-21Z_PO_10212020EX.docdoc e7863e06fdf3830b0b5b4c8f97dac6420a04c0fae7f728aca4ebe046534b9b0dn/aHeodo
2020-10-21PG_A5M5JSYPD5QZA5.docdoc 389ad5d9d72b446e4ea03160b107fdc48402bcc7c9f664d73851ebe4d4c7b660Virustotal results 50.98%Heodo
2020-10-21INV_NRN_100120_QNE_102120.docdoc ffb659e12aeea991c1bca3702e7d3c01cb589251885cd53c4025994a5e3e1309Virustotal results 48.08%Heodo
2020-10-21FILE_PO_10212020EX.docdoc b886042bae6dcbb3ff1e2343630f7c873d2fedbc6b59147c40346b16f69c8603n/aHeodo
2020-10-21PO_10212020EX.docdoc 1996ba49c1e42e54c8cd2717756d00e05f3290d1be0d606dc11a3ae0f556ffc9Virustotal results 41.94%Heodo
2020-10-21INV_11359224.docdoc ec57f3677533e2cfecee42c14801e99d80ee3ef3bd8044c0b11040b1383fe435n/aHeodo
2020-10-2176785076.docdoc 71410da7fd254423681e9a41961a03bac9777fff1882cee09b6ddb785b38b923n/aHeodo
2020-10-2189067190628723642.docdoc fe1e5c66a4990cc515e5925db68def9f29f1893d9c6d3fa6b47e05f5c5f618ddVirustotal results 46.55%Heodo
2020-10-21N_21TVJGCYJD.docdoc d755c5281821fb9a1af024b9c6bd977a7da4c3aabe8999703525ece1767fdd13Virustotal results 46.67%Heodo
2020-10-21DOC_1XCVLAAZE9YWBB.docdoc 56074bdd23c71846faa6ab17e8fc8485ce763ae329af8573a9e877dd6ec6513cVirustotal results 48.39%Heodo
2020-10-21EGES_8JBCJ3D3E.docdoc a22d83a786eb7f5a04facaabb04117ecb5f8cdf09fcbb8405c0a70c97a51f225Virustotal results 43.40%Heodo
2020-10-2133850932541359990.docdoc 8ea38c51f8926ffa9ee61be53fc7ee3e4f968f2c7683bbc3b9320d14a2443067Virustotal results 42.31%Heodo
2020-10-21X_FZQ_100120_VQM_102120.docdoc 614bbd10017422522d46a734ed08de066834e449d5802b036b0231a39b0c043cVirustotal results 34.78%Heodo
2020-10-21FILE_94805908.docdoc 89e10dbffeb48b429f49468630b9b93f988c4ca3e6a7de17367b398447309bfeVirustotal results 39.66%Heodo
2020-10-21DOC_047555691190089899584.docdoc 6eb67022c07e3f32436afc6e89eddb132a4c5d34d733c824ab3dabf51b7c712aVirustotal results 39.62%Heodo
2020-10-21FILE_YUO_100120_QER_102120.docdoc 7b59e4314d2b1bbefd045815d54be5bd19315bcd13e3de6816a36bfd0930e032Virustotal results 39.62%Heodo
2020-10-21BAL_GM8634735978VQ.docdoc a78451771b5a8e66fd912d10f9b621e52239473334785ec68755db5e60594ecbn/aHeodo
2020-10-216724612923315543929241549.docdoc 7bf2ce4dd307b31f8b2eeff8a5ca658f7a680a9bb132d54d6182c711504b0ac3n/aHeodo
2020-10-20Z_10651591.docdoc a65e7b5a4d99582f1ec1c608eea4d21fd29d1c23bed2b8dd8ec8062f23d90e40Virustotal results 39.34%Heodo
2020-10-2039549925.docdoc 8cadf5fc31643a1acc9b991d110e039e7e0520e94783c61d9caf5ccb2481915eVirustotal results 44.64%Heodo
2020-10-20Q_48394049.docdoc 8ebe3eb8f2fc91787e217da76d31b3108744220f6cd2a5b74fc6b57c9c681317Virustotal results 45.16%Heodo
2020-10-20DOC_YW2017647895MY.docdoc 73b1ecd0729d4a6776f63d5ec7943f5914ff080311e5f670ab38a4991795d29dn/aHeodo
2020-10-20DOC_YH3XDSW.docdoc bab707f338d98b9ae46b7775dfe552e80b39498b2703f95077f0ff3b2b622790Virustotal results 40.00%Heodo
2020-10-20FILE_IUS_100120_DPY_102020.docdoc 621a14c4ff1196a5f40b5abd1aa47738a2855dcb1ac4f16c7e577d6f53935c08Virustotal results 39.62%Heodo
2020-10-20LTDNNO0NURIO53O.docdoc 2e98bef98194397d9ed6991c80f5625893a60603057c532ce9f24cec16a58f9dVirustotal results 38.89%Heodo