URLhaus Database

You are currently viewing the URLhaus database entry for https://zonadeenvios.com/wp-content/GhbdvlmE11aSbCGTRXB67CLp2EtzuBeUR1Q6uDDBgHkIac4ddgGIUyI4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:758835
URL: https://zonadeenvios.com/wp-content/GhbdvlmE11aSbCGTRXB67CLp2EtzuBeUR1Q6uDDBgHkIac4ddgGIUyI4/
URL Status:Offline
Host: zonadeenvios.com
Date added:2020-10-28 01:34:17 UTC
Last online:2020-11-11 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 01:36:30 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:14 days, 7 hours, 41 minutes Bad (down since 2020-11-11 09:18:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30INF_RSU_100120_OOS_103020.docdoc d9f62ae0da88141e32925b2e9973aab2c0f9cfb72fc3e1d78700263b2fc928d9Virustotal results 31.25%Heodo
2020-10-30doc_HQUZJUPXSDGNR1KQ.docdoc 38ca20f2aeb5bde0d23de8c284f5f9b6eefadf3e2bfe1d44526548f434478f2eVirustotal results 29.69%Heodo
2020-10-30inf_BCV_100120_PEG_103020.docdoc eec673d1180b8765a6d45f7e7164e7e86024dce5cd09472669369e410fa5d161Virustotal results 27.42%Heodo
2020-10-29DZC_100120_YUH_103020.docdoc 57a23ee50bad094280feb716af4f6917dcf92157f899a609736ead07c82e6432Virustotal results 26.56%Heodo
2020-10-29FBVM_KN2311043805HG.docdoc b716fa67c934451161c1be78e1587b3c68a53b5e219dc5452e9ea883d32a274cn/aHeodo
2020-10-29UNTITLED_PO_10302020EX.docdoc f4d2f6dbbb53d79cccef95feda58515350e863a1f1522bf60c830c0230754866n/aHeodo
2020-10-29Rep_57862286610.docdoc 77b9310b55e2267372f1458cc4c01a27f95067e8d1dad41137ee348a9dccaa32Virustotal results 28.12%Heodo
2020-10-29X_PO_10302020EX.docdoc 168c46a9b7c3c72ceb572a447f6317e5b66aca4735ea8e096bc92f0d03628879Virustotal results 34.38%Heodo
2020-10-29Attachment_07855248.docdoc 88f7d3cfd21b28cab6cac1289a7b2365e0f18c89f5510713244d083fee7ee769Virustotal results 32.81%Heodo
2020-10-29MES_KXZ_100120_ZOF_102920.docdoc c61fca273223598ec29bcc70b0f716f3cb0ff9d9e293a02c8e0328dcf0011153n/aHeodo
2020-10-294642177125.docdoc 37ce904c25d97f1199866c304c053e85219d0b201d3015981963506a9a65e327n/a 
2020-10-29Attachments_PO_10292020EX.docdoc 4c38ead6f597c1bccaf5148980c46599eedc2615ee7f3378247b8333718a0afdVirustotal results 31.67%Heodo
2020-10-29doc_64164128.docdoc 5f1e824d934b11f7e7a92d426e5083d30f51fee6471908f3a6c0a065d46d752bVirustotal results 30.16%Heodo
2020-10-29doc_18657585.docdoc 0b5277c050ee4714b138f9c9a8f1b1b0a3193f3cadb6d61a5037172d4bd11c54Virustotal results 31.75% 
2020-10-29Mes_48498723.docdoc 3cc938a9acddafc3e794e45e9e82d1c24efc3d811739899713c21d96ca510711Virustotal results 31.25%Heodo
2020-10-29Attachment_LR8593597554LJ.docdoc 16d27526d0453d93110c60d19d8a4680f2ae783858a4ec2093a235fcb819556dVirustotal results 31.75% Heodo
2020-10-29Doc_12685791.docdoc c9bee872802f41154444cf83a87057e1caa72888e8b2c3901933201b9aa6312an/aHeodo
2020-10-29Attachment_08179240.docdoc fc4b0c2848ce1fe20231a9d9845d36fbe6a7661c8f4a1463ca33be3019d3e0cbVirustotal results 31.75%Heodo
2020-10-29inf_QZ4491087222SR.docdoc d1bdf6bef20bd15e60ba06f47202d3acf38a54acfc6962578993d6ca7437a95dn/aHeodo
2020-10-29File_J4NSRUP08EJGNKP.docdoc 44fd0e531f131ec3393dcbb90c1ac8baee6d5c4438afa02d458e67436af9a1b9Virustotal results 28.12%Heodo
2020-10-29LIST_66912194.docdoc c0ed3a0650c71fa45b196ae3af361c4b91d38f00db69b912eaf14f2aeb543affVirustotal results 26.56%Heodo
2020-10-29rep_58464167.docdoc cc18834ee43070da990675aa77ca54b1f00e3af5bb607464447c3ebdcd2cb356n/aHeodo
2020-10-29File_IO6026872683DG.docdoc 541fe3cb96d86e7e7acac38913e1f12a0006bb4e07269700b8878279ecb8df5cVirustotal results 25.00%Heodo
2020-10-29Inf_H04414R0AG97TN.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29inf_PO_10292020EX.docdoc be618ac705727cdda9e24768ea029114053b42e8d111433524e3b4f36ecc6f88Virustotal results 28.12%Heodo
2020-10-29Rep_MQ5282965027ZZ.docdoc 62a00d40cc12aa508ac276663bcf8a77077e394977dd3682be09139582ac29c2Virustotal results 28.12%Heodo
2020-10-29rep_UYW_100120_HIB_102920.docdoc 777f2166c1b82de635874052d889fa727eba91067fe544d279a8699a2e89529eVirustotal results 28.57%Heodo
2020-10-29ME_21666848.docdoc 9fe969fee626debd81e116bda0f8fba99a6adf05e1a8265e3e9d93df703da84bVirustotal results 26.56%Heodo
2020-10-29FILE_90077988.docdoc 405fadefb4061d6af8c5857c120bb843c94b11edd508facc87ddc8c95c45081aVirustotal results 26.98%Heodo
2020-10-29FILE_797634818.docdoc 553bed36f9d70dbc9c4115585166a4fd7543ddbb7cc98f8d3a5b1a41d2ca5369Virustotal results 24.19%Heodo
2020-10-29File_AXP_100120_KLI_102920.docdoc a536a1efba18ff7db257286623904f5d131c7e933b0af1302fec81dfca157b65Virustotal results 20.97%Heodo
2020-10-29DOC_01494023237935641419.docdoc 9dc022a6d94a428fb2f095b0ecb4572e6b60e7b59a3ba584a8c4a04cddbf3251Virustotal results 20.31%Heodo
2020-10-29ARC_HY1974487538ZN.docdoc 8b4afb8076a68f93b44032c82700252f8971b853903b31fd0eaf50671f7c3cd7Virustotal results 20.31%Heodo
2020-10-29FILE_BGE7OWUG8.docdoc 854dd0441e71fcb4f3237e94d7a738e26a8f320c3e5becd6b94aedcf7237eb09Virustotal results 19.05%Heodo
2020-10-29Attachment_016810267754727.docdoc f679622b39b3a0f7e21e8cfad7010f742f0a5f0803d671fa01c2e01b8cbd01b2Virustotal results 20.97%Heodo
2020-10-2945494007.docdoc e631c078dc0639fe8db3a1c45b1e38da8a369c37f69511f6458de6d8809f9732Virustotal results 20.63%Heodo
2020-10-29TWXQ_81466018.docdoc e774f5958547ef05060879d507586d22ab8e651bccd1b45eef5770a2a2e404e9n/aHeodo
2020-10-29mes_59049907777142955019871.docdoc 371a442d56b47bd24ec601a710beb116a75f09be269d0a2e18b29d6fe0927bc1n/aHeodo
2020-10-29inf_PO_10292020EX.docdoc 5caf4fac63b4007116c090e6db0db81ad250d822e1fc251885c10d80d24b861eVirustotal results 19.35%Heodo
2020-10-29File_05121482.docdoc 0e53051dbf546a108fa426f2bcb29572190b7a210e906b9e2c5464e85d23cdaaVirustotal results 41.27%Heodo
2020-10-29mes_5559487016077380.docdoc 72e4ad0a1b83a8af4bffff0b32b6f8b9fe9680a323457b9ae5b866c9cf789ca1Virustotal results 41.27%Heodo
2020-10-29Arc_IE2431185181FL.docdoc 613bf944597cf7f2300dcd8a24394ca5de6c6f85ae7e41d98b2a3b4fe59b6779n/aHeodo
2020-10-29UNTITLED_OT6535097695XI.docdoc 6e9c088cbe83fb2b0f6c959df9f72eb6faa3316c7eaf8e1690f590a91e56974fVirustotal results 40.68%Heodo
2020-10-29REP_RC8525060678WD.docdoc 8d2d6adef59a01ef18694e5a3d506ce951137f27e28405c64bb16fbb915266d2Virustotal results 41.27%Heodo
2020-10-29INF_942398461448.docdoc 99e51b37403045ddf233e0cb386646fd8113f346206f33dc28e6f8cf667f3dd4Virustotal results 38.10%Heodo
2020-10-29doc_15594989.docdoc 6a727c9f4dd9cbd0b46dfbe10424610f304eed108280c8e6bed80618b45fa65eVirustotal results 38.10%Heodo
2020-10-29file_MUW_100120_KEF_102920.docdoc 6d8ce1a7fac9fd46d61f2fe0e3dff607971c0a6e830f3eac90a4b3145f06280aVirustotal results 38.10%Heodo
2020-10-29Dat_KDGCX55D.docdoc 391bfc40b692a1742119596041c13976318ba374a5f74e5e441a2df28ad57fb8n/aHeodo
2020-10-29Attachment_39644784.docdoc 393cb1523cfa3f9dc1d2a45e467810be8447ea0f58435edf5bfd1e0938e293e0Virustotal results 38.10%Heodo
2020-10-29dat_502474980.docdoc 2ce6ab8ee89411f1463ed6831f078e930f121aaa93880728734efa7d25503623n/aHeodo
2020-10-29rep_47815132.docdoc ae5eb8b4425c48ca52483b971f62906afb81dbcd5cd174096ef72b33177236beVirustotal results 38.10%Heodo
2020-10-29REP_70801787.docdoc c353f3d728d9ff052a3ee47d7dd1c5e8bcd8813238a8e20f2f2d0a97fe5bd8e0Virustotal results 38.33%Heodo
2020-10-29Dat_BFL_100120_KJI_102920.docdoc 46e6c0f62d299a4510ce400f90d5f8e2280b0ffa5e465ce7433624327bc07c0bVirustotal results 36.51%Heodo
2020-10-28UNTITLED_V5O6F97N.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28mes_BUX_100120_CEP_102920.docdoc f22f6b796d73cadef21281fb4120d425395b7c6457e38524dde128830ccfc02dVirustotal results 25.40%Heodo
2020-10-28Untitled_PO_10292020EX.docdoc 6e663577a7ba709bc7fb008addc85b8177361cb8fe92f3c79ab88bcecd10783aVirustotal results 24.59%Heodo
2020-10-28REP_LB8151769438IX.docdoc 146747a5fe14e9c8f3de53906c757ebbcd932487aa7e6e1da69baf9ebca99e58Virustotal results 23.81%Heodo
2020-10-28Doc_ZMG_100120_MID_102820.docdoc b371296f8fbf9abe8b4b7ea3534ea790f2931a49ece8ad2437ddd22e1d03625an/aHeodo
2020-10-28Attachment_TMU_100120_NTQ_102820.docdoc 7cb230434682c7f50064491058f14b2cc7c0fa43bb3814ced071afe04df01df5Virustotal results 19.35%Heodo
2020-10-28K_PO_10282020EX.docdoc eae43aeb02650178d0fd02ed1c824f36d89c2a2950399621c4a7c29ecb8d7e73Virustotal results 19.05%Heodo
2020-10-28DAT_QS2712494420BK.docdoc 74bb58aee05391c699fefedb79da019fc9e7b0d6d81d068d0ce1d192cc9e4556Virustotal results 16.13%Heodo
2020-10-28FILE_YMU_100120_VGS_102820.docdoc 290d99668c637b392210c43c77b9672357db0df908a2cee8c6c84399c0f3dc55Virustotal results 19.05%Heodo
2020-10-28Untitled_NK8ZNFE6H3C5GZM.docdoc 6f587af9bf1d3fd4e20091fbeeff179d6280cc928c2e02857eb954aa37c7de98Virustotal results 17.74%Heodo
2020-10-28Doc_0WECD0E8ZNVZSU31.docdoc 78e751cac2d36740d34f5137f239e1966d34a62e63cb14bf6d6fb1ad7fe5deecVirustotal results 17.74%Heodo
2020-10-28DAT_9795132776379938094521040.docdoc b764a906f404eacb88f0ea963d1c2a00402af7f29a340c7aa95b911892be6b30n/aHeodo
2020-10-28FILE_MJVF5PE5.docdoc 8abc1a41fddc4a3a107138900b0401334fddf0298fa9fe0ec4e7e1f4fede979an/aHeodo
2020-10-28FILE_PO_10282020EX.docdoc b6a96390b242aa0846471f4e8be2000c6d0a46330c8a838c25b95c0dd7874378n/aHeodo
2020-10-28UNTITLED_BFJ_100120_KUH_102820.docdoc aa825d666a2394dad05c014830cd132ecdbabfe1dcfd7e7eba18ed43bda6de33n/aHeodo
2020-10-28inf_YH0495504474PC.docdoc 463241e6a0960fd095261611fd7c0192520ec5ef493dac9c695b7c0ab74f43fbn/a Heodo
2020-10-28File_DCN_100120_KJK_102820.docdoc 7d1c30660aa059eeca56d1c898483074e1bcaf59f922458e37e7155380a5d9b3n/aHeodo
2020-10-28Mes_5202909211937845887403.docdoc 0285b11153063e88e38a1f507f0bc7da9d0cd443a93a28f5d029fb201910f212n/aHeodo
2020-10-28DAT_NK6HNUG8N.docdoc 3731935385f3f9940df18e1fe2a5efb5ff5dc256f1a9fd33882b58ba8b50589dn/aHeodo
2020-10-28V_PO_10282020EX.docdoc 92a3589e1b3fd70341f8bf112b36413666415cdd61c4c49564ec228ef12fb723n/aHeodo
2020-10-28REP_531631447341411.docdoc 558c61e9709e06aa045d7ba7933b35b9fb9c125734e3c4e8955a573a31cba52en/aHeodo
2020-10-28File_VWH_100120_FPK_102820.docdoc ae264639594117f77da175c96741827cc7ecee91be8eeb65c10f207c26a2e800Virustotal results 17.46%Heodo
2020-10-28FILE_97869354595.docdoc a2a1fb0e34755eda063fd82d7fe452eb979f87b8cf484cd8fa59a45df5adb29dVirustotal results 17.46%Heodo
2020-10-28file_CJJ_100120_KVC_102820.docdoc 3d35425c0243bcacb09bd4a67640d70e492da4f0a81abc46dc0af3d6bb4c2818n/aHeodo
2020-10-28DAT_T43J6JP6.docdoc 6f09e12af88b8c2ae45c021409c707ca0afc0b65be38c119d8a7ecaa72355ac7n/aHeodo
2020-10-28rep_24707989.docdoc 1133a03122cec0b03c3cf2b52c1b1737d103ec16050bc4deeb5914bd339a4900n/aHeodo
2020-10-28List_PO_10282020EX.docdoc e225005a6da2c501109a5d73599e7697179f449c42e91f675b4fcb81e49bda29Virustotal results 17.46%Heodo
2020-10-28UNTITLED_14049326.docdoc c52d8de4c0df2d3039b4e550b081b8386bf713ff22749065c331fd9c03bfa88dn/aHeodo
2020-10-28arc_795259981.docdoc 6a3681628d5e90051c68dd3bf6855abcdff9d8b6e25447bad58745cc5406d4e2n/aHeodo
2020-10-2881564966.docdoc 362dc59ca77c1bafa2f6ac163566994c9a8fed193b5285b3eff678bf8588eab1Virustotal results 17.46%Heodo
2020-10-28file_7892833108658632005490.docdoc c88a8bfd26b88fe11810b85a6ced566f6ecd9c06b535f98d8c7451c66c1716d2Virustotal results 28.57%Heodo
2020-10-28LIST_YBWL5JS.docdoc b2fd50c9b74180bf57162267feec075ce16b9d37ead25cca5f97840e44e61a1en/aHeodo
2020-10-28mes_QZM_100120_MXY_102820.docdoc 3b2703a8136146bb26f76cf8aeb05e347c77170c548c652fdc716a1df532a920n/aHeodo
2020-10-28FILE_62826758.docdoc 971349194e2895c67d792f09a40990e6754e2ce4fa00b738c17c34cbb88cc6e2n/aHeodo
2020-10-28File_66387070477706117275.docdoc 430cbffbdc5d6ef1494df4bf0b8ca22a4e95fcc129261a53ee799778b2ef644dVirustotal results 28.57%Heodo
2020-10-28DOC_328479083.docdoc 783e3178de387969ad58cadd83de2b88c6cffa406063d2f66e5ee8b67db11b4aVirustotal results 28.57%Heodo
2020-10-28Inf_780068585631344958765988.docdoc 6943776fbe689678555633732e42b105c955535193d5a7b05eba01cf9c5d3780Virustotal results 28.57%Heodo
2020-10-28Arc_PO_10282020EX.docdoc b5967d8f6f4eff72fd314911e828c2376081aa4d190afacbbbfa0fb390f13e4an/aHeodo
2020-10-28Attachments_04818011.docdoc af7a1932766cf0a2a6bc07298751e49a47f81b2b7f255579bcc6d1a93f335af4Virustotal results 29.03%Heodo
2020-10-28UN0524728799HO.docdoc a67871eaa10790dfc0459026fe390127f88e0e7ef794ca29ca3ef501bf0bbc98Virustotal results 28.57%Heodo
2020-10-28DAT_06120772.docdoc 4da551741b2fdd1985b8f8dd865cbc2ee100a8d82d80a39e33f56dbda25b4f1en/aHeodo
2020-10-28inf_TE2073873564IJ.docdoc e2f58ed91009de4f156ecdfb6fb04401ce82b2281242941e3a80fa9fe451cfcdn/aHeodo
2020-10-28file_BQ8363588549PJ.docdoc 69d342710f557d68f3efba1b4e44414efb43af9868dd7953f88bf8b49522456fn/aHeodo
2020-10-28LIST_663452180726.docdoc 087c51a90ce1975819e515fd65ce7583219cb9a7eecfe2c20191cf2d1196eac9Virustotal results 29.03%Heodo
2020-10-28MES_E3AR3SWVDMZ.docdoc 101fcc93c33f4a28332bd09291db3501b3d13ef433719cbf7750e9f6a73b88f2n/aHeodo
2020-10-28Dat_80447850.docdoc 1d6286cbe99db0f75e74a7ce7e77a50699b075af54aca64f8d2fb9c235f5d094n/aHeodo
2020-10-28Untitled_PXV_100120_FTS_102820.docdoc 0b62b154422aa927a6906a75fdc8edfd4c143365e4b5e4a8ffd58badd6fdb0d4Virustotal results 38.89%Heodo
2020-10-28569885735551637249312922.docdoc 2a46f3f595f2eea533b556a67f2558d85d955f1784d1d48cbe78b2e5fae35f34n/aHeodo
2020-10-28dat_AMJ_100120_TRC_102820.docdoc fe13971c49c4731ae4fdc32c49bbb6796383a27db3ca2340642ed9d0c1753880Virustotal results 31.48%Heodo
2020-10-28inf_TE6228294108FJ.docdoc 1371c2d34a1e3ad727d60804b08ef021e7568a841acc95ce5cf1773149657ea7Virustotal results 29.41%Heodo
2020-10-28doc_ZG8070686734DY.docdoc d3e4041b0325e0794fe6a1b0a78783b8c05b595f0631c24d7d8e11c53fa5e8e4n/aHeodo
2020-10-28DOC_TMG_100120_VNF_102820.docdoc f3caca68ae462481d5bac777996fa838a0dce95c7eb782713404fa5e3712a2abn/aHeodo
2020-10-28Arc_16103532.docdoc 56bac923cdfd4440f1cb05f87560995bd487d31fb83f16ba23e935825657a7feVirustotal results 23.81%Heodo
2020-10-28List_0554585183929436075.docdoc 25578de149cb4dddcde0db6ab49f1ef760faf659fee06a0b86d0fe095cc438e6Virustotal results 24.14%Heodo
2020-10-28Untitled_PO_10282020EX.docdoc b7ee22f0341587e221b8a80c3caf8fe78b8d8ba06220d4cc28641f82d0d32bb0n/aHeodo
2020-10-28doc_NZ6147404725XC.docdoc e809029e144d585294881c1cc21836d527c1547b45b9f97446ca6bc9987c3ee8Virustotal results 25.00%Heodo
2020-10-28INF_BW4473863308RO.docdoc 5e692d0f6341638d540a0dd0458062a4852cdc65dd6551956aaa28c4d417416an/aHeodo
2020-10-28FILE_XXE_100120_KIX_102820.docdoc 42437dded751c17d78164701713e5a181726b5fa47472556a1eaede5aac86c17n/aHeodo