URLhaus Database

You are currently viewing the URLhaus database entry for https://airriteappliancerepairs.co.za/cgi-bin/rq0CFF7z0aynZ9vYaaZZCk696EYn0YF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:760884
URL: https://airriteappliancerepairs.co.za/cgi-bin/rq0CFF7z0aynZ9vYaaZZCk696EYn0YF/
URL Status:Offline
Host: airriteappliancerepairs.co.za
Date added:2020-10-28 12:45:11 UTC
Last online:2020-11-09 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 12:46:02 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:12 days, 1 hours, 48 minutes Bad (down since 2020-11-09 14:34:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30Arc_66823113.docdoc f22c7ee8f3ce55dbab2a2636dc155d39ae98cb927962f0f88fe3f85bd28c44f6Virustotal results 25.86%Heodo
2020-10-30Arc_PO_10302020EX.docdoc 39991605b314bb39a573ea29a1b1cd2904615afe76292c0f3b6afac181a0d6d0Virustotal results 26.56%Heodo
2020-10-30Inf_14272816.docdoc 665ca5b6b8e24008d94bd73e8fc3862a558d2074f35ab952eb016e2ecfb2c125Virustotal results 26.56%Heodo
2020-10-30Attachment_973966822725150086.docdoc 07b3f8c72f07dca70496f6c792df7c12b6b782090056851ccfa67620fe7a27bbn/aHeodo
2020-10-30Arc_XI1851644402EU.docdoc e9b3a372797bd2c4b3b4a43d2d3920c52c30f35e2cee94a34ad17f16cb5c5eacn/aHeodo
2020-10-30inf_PO_10302020EX.docdoc 78bd1c6e03aab90ba0350183bb9aba52148938c5c4384fb2695473c6540e139an/aHeodo
2020-10-30FILE_UH7733379451OR.docdoc 0df4e83145becd16b2074bb93563596b613e43856bbd653b98a316f5d92ab817n/aHeodo
2020-10-30Untitled_PO_10302020EX.docdoc 90d39ca6bdaf9c010fd7f3a5d3c8588f1c777498f544ec5ad64329b6c06621b9n/aHeodo
2020-10-30Inf_13078164.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068Virustotal results 23.44%Heodo
2020-10-30MES_MN1024903048UE.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948n/aHeodo
2020-10-30DOC_25989192.docdoc a120ab7f12256c4b260034ecf26910f2eb405bb2c41ea9d1d78fcd2f529d2debVirustotal results 36.54%Heodo
2020-10-30DAT_PO_10302020EX.docdoc 3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7n/aHeodo
2020-10-30dat_50406067860777231.docdoc f16118ebe3dbd05212ed3e350e3d509e02c403cacf34497532c50e1be09b7e16Virustotal results 39.68%Heodo
2020-10-30DAT_5893088528626931328.docdoc a9e9b3f8a28330089d36e3ace6c5aa5ce2a38204767293a05e9c407ad2c4da4en/aHeodo
2020-10-30REP_D6PPMRQ5DUE2.docdoc aa8406666061a35462984a7c54b1a10151ec769f30040dc02931bb87fa2f1335Virustotal results 31.25%Heodo
2020-10-30TD_32610011.docdoc 9ec6dfabb77a693a4f8dc14949b501ff62b76b6f77f3078b900c7add3a5dd590n/aHeodo
2020-10-30357452707394742218.docdoc d938809af2f315ccb3059ebdb60f135d1a78267221ebe954f6ece48ad1c4851an/aHeodo
2020-10-30doc_4762367902874107030.docdoc b2312b8854268bd1ca23427d7f7aaf8b3013aa1c4ef1d7676e73a5667418b9e3n/aHeodo
2020-10-30Attachment_80821781.docdoc e4c4aa874feb371209199ddd6b159ed4a677b94568dfe6b09351807263dbef9bVirustotal results 29.69%Heodo
2020-10-3034690398951380793763.docdoc 3f80d6a9b857cead0fb4b3e62572865a798d440a23fab61898596828031204f1n/aHeodo
2020-10-30MES_PO_10302020EX.docdoc a51d194ff7cccab7defe2f64127934a4ff3699de37c60019b40dd62d631baf04Virustotal results 34.92%Heodo
2020-10-30Rep_3810292729338421625701.docdoc 2fe61550011a52e12cb324aa8cd06faeece3d1f05ae42f1c51bb7e055a647877Virustotal results 30.16%Heodo
2020-10-30Dat_OSY_100120_TYG_103020.docdoc b33622a59cee3ca443a74701f86f58ee524e9901c05d359270575f52d7d37380Virustotal results 31.25%Heodo
2020-10-30FILE_8135903142399.docdoc 87582434c0b62f10bd24d5f8fe2636dcef3e0046373b8e05dadb27942be901f0n/aHeodo
2020-10-30inf_PO_10302020EX.docdoc b3f4e1b87633e71363d9e97c4f845e09d36e833b8d170f184946c8764cfc8f12Virustotal results 29.69%Heodo
2020-10-30JO1TGNIMJZ3.docdoc eec673d1180b8765a6d45f7e7164e7e86024dce5cd09472669369e410fa5d161Virustotal results 27.42%Heodo
2020-10-29REP_42393609.docdoc 5eb2cd7fd89bc000cab80454ba0da8cb954a960d3b415bc26039832a7f6f7544n/aHeodo
2020-10-29LIST_63795520.docdoc b716fa67c934451161c1be78e1587b3c68a53b5e219dc5452e9ea883d32a274cVirustotal results 27.42%Heodo
2020-10-29REP_EHH_100120_JMV_103020.docdoc fafa3f90775c5c6e8670f2ac2f7602e60d30f1f8ad279f220686e2eac91c25d5Virustotal results 27.87%Heodo
2020-10-29REP_12865879793303504783.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 26.56%Heodo
2020-10-29UNTITLED_IQ0776150987WF.docdoc 785ca4b8a3e573d7bb977a2f180d8c717b9867bbf38583aa08b4a96fa4803c8dn/aHeodo
2020-10-29dat_13325945395350937755876.docdoc 30afb0ba6cad7d0adca2d6200ecc891e79a8901808aa35a78dc2e03b6b1b3fean/aHeodo
2020-10-29PO_10292020EX.docdoc e100b5d71867c3b5968c32b026533a0ff7cb8ece201cced23b63fc7c65bb2cb5Virustotal results 34.38%Heodo
2020-10-29DTZR_OHN_100120_TIG_102920.docdoc 970feee22d30c517c525e36b3327903c843552de7138215c5fec184444b56e19Virustotal results 34.92%Heodo
2020-10-29dat_EMD_100120_FYZ_102920.docdoc 6f9552836a90ddea2d599b100ecf6a8cda08714d1f8f7f848cf6684ab9ff6b78n/a Heodo
2020-10-29List_53170470880.docdoc 2751d59d7f5d6861ffb622c3456b70ccbbf70fada26f49f7f12e4937d90495ebVirustotal results 31.25% 
2020-10-29UNTITLED_2YA2J2EV70SMU2YR.docdoc 060a5c65a7cc6ecfa1290f84d608e94a147a447e1dd75ceedd3490ab079b6e74Virustotal results 31.25%Heodo
2020-10-29arc_PO_10292020EX.docdoc 8767bc3debff2695a4cb7dbd39f82b3c021888d7e244ffdc79af9883ce6f3449Virustotal results 31.25%Heodo
2020-10-29DAT_PO_10292020EX.docdoc 72795d86c0dff6adb123dad6b3a9b9c23d725d275a28e5fc69d10b701169ce29Virustotal results 31.75%Heodo
2020-10-29DAT_PO_10292020EX.docdoc af09d9b10580277dc290b458dfb6b85501ce39d6e430f87ee3fd349c3f672860Virustotal results 31.25%Heodo
2020-10-29INF_PO_10292020EX.docdoc 1cfbaf38e833a8dcab12a6f7a0c42e5b5033bc4f188f022607c0e3853f92a6eeVirustotal results 31.75%Heodo
2020-10-29WVCJ_PO_10292020EX.docdoc 66f21ad9f94f3926c870736b3a33af58b00eea538ae8da9b7cd71ad1eb5614d6n/aHeodo
2020-10-29List_VQ9IY0U61WNLP.docdoc e6a7e6b13c6bf9156c51ce46213a68a27ed5da4c01903cc86465ac63c073fd7dVirustotal results 26.98%Heodo
2020-10-29DOC_PO_10292020EX.docdoc cc18834ee43070da990675aa77ca54b1f00e3af5bb607464447c3ebdcd2cb356n/aHeodo
2020-10-29list_WYJ_100120_OZB_102920.docdoc 541fe3cb96d86e7e7acac38913e1f12a0006bb4e07269700b8878279ecb8df5cVirustotal results 25.00%Heodo
2020-10-29FILE_GW2733907907NS.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29List_H341NFSIV3OQQ.docdoc 62a00d40cc12aa508ac276663bcf8a77077e394977dd3682be09139582ac29c2Virustotal results 28.12%Heodo
2020-10-29list_MF0205821479FO.docdoc a3aba18f164b5c210ef16ea9fb2afaa20707a268cb84c43518dae121b7518614Virustotal results 28.12%Heodo
2020-10-29QTE_100120_YZR_102920.docdoc 9fe969fee626debd81e116bda0f8fba99a6adf05e1a8265e3e9d93df703da84bVirustotal results 26.56%Heodo
2020-10-29Arc_7P3OTLPCQCJZ4.docdoc 5db58ed4308eeb76f9c66c885d4f1b53530d6c42eac9d755e67bf41989094087n/a Heodo
2020-10-29inf_OOQ_100120_TMY_102920.docdoc b770e53d7a44c680b7ce2fc81e13b5de570dce0b57c587442874b3c5f6f94d83Virustotal results 26.56%Heodo
2020-10-29doc_36409433.docdoc d7edab7749baa696b995be184437050a249c40992deb7cbd3472cf93fd8a154fn/aHeodo
2020-10-29JW8891483914GO.docdoc 66f64a0a15e1684f79b32847abcb12b76ab1c2e5223c4acd8d994beaff32d39bn/aHeodo
2020-10-29arc_PXK_100120_ENR_102920.docdoc 12c570f649005ea1ae77c36167843e3e87252075b68b652c5f05b0d8e54b2ad0Virustotal results 20.31%Heodo
2020-10-29DAT_AVH2BJWLG.docdoc af8373a05bb4ac069cb45da6f676db803e252cb4c3e378c3fe25375323c74db8n/aHeodo
2020-10-29REP_PO_10292020EX.docdoc b3fa2642d482abe33fb06c5480db8883954bb076b663c838f67dc4966b89f71dn/aHeodo
2020-10-295426292653336751.docdoc e631c078dc0639fe8db3a1c45b1e38da8a369c37f69511f6458de6d8809f9732Virustotal results 20.63%Heodo
2020-10-29MES_TKT_100120_OBV_102920.docdoc 2427ee3cc0798fcee02c718a1fb58d735d9cf3b0ebd9bb10c14cb9326bb5e489Virustotal results 20.31%Heodo
2020-10-29INF_QWI_100120_QLP_102920.docdoc 371a442d56b47bd24ec601a710beb116a75f09be269d0a2e18b29d6fe0927bc1n/aHeodo
2020-10-29HFZHVJD3CJU.docdoc a943a1b78c2ddb8ea536ad08b2eaaec624c324079322f272f1e1a319b5603a28Virustotal results 20.63%Heodo
2020-10-29ARC_42Q29GY9.docdoc a68e38ba80539aaa99e4624f37df31a53410de47b3a76df0fbced21744a74d0bVirustotal results 40.32%Heodo
2020-10-29rep_6H3XBU6FIX28QOT.docdoc 72e4ad0a1b83a8af4bffff0b32b6f8b9fe9680a323457b9ae5b866c9cf789ca1n/aHeodo
2020-10-29Attachment_7BMV2IPOGO1K.docdoc 48f5efeee13fcdbe837223ddd4c1de97dd87be397e6f99bb95ebfd19af5aaf86n/aHeodo
2020-10-29Untitled_19446332.docdoc 6e9c088cbe83fb2b0f6c959df9f72eb6faa3316c7eaf8e1690f590a91e56974fVirustotal results 40.68%Heodo
2020-10-29Mes_WQ6165643911GH.docdoc 4b6b29d5c14a6ed0524d46202796bf0f9bd18650fa3f44dc5d01e1ab93652600n/aHeodo
2020-10-293XH5ITVIJZ6.docdoc 4a64cdcef15cb3314d81486a5c6c1fc590e6579da756365b73c08c8adae77b95n/aHeodo
2020-10-29MES_PO_10292020EX.docdoc 4bfdf04e63422e1f2b89b19ccdd74439826ca27342cac0f98e259109043cb251n/aHeodo
2020-10-29Inf_LXZPL0A2ZQZD.docdoc d82100bdd4168d98cf565f1b0d002d3c2c480cc6e350b09dd8484507384aef75Virustotal results 38.10%Heodo
2020-10-29doc_64613697.docdoc c848e58e6eda265a519b7b901623769948e5bba84d9d240638af3bb235587028Virustotal results 39.68%Heodo
2020-10-29VPI_100120_WBV_102920.docdoc b89f3ae4badac97fc44a153bfb215de77641bff4cbcbe7ddc321af38e097f2beVirustotal results 37.10%Heodo
2020-10-29dat_522679944618603626.docdoc 2ddd69d637bb813f74ae33be71c1cf20fd61be5a25f0bd5e69c296136a8d1813Virustotal results 39.34%Heodo
2020-10-29rep_PO_10292020EX.docdoc 16593eef39e8c04fdbb6390954522fcbb430e3d131921c0b5f4e9477ebd794f9n/aHeodo
2020-10-29MES_PO_10292020EX.docdoc ddff5ab1d127fa30a0f2353857d3ac72c8b28191737e15516420dc25abaa6784Virustotal results 37.70%Heodo
2020-10-28doc_21559539090101239717.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 26.98%Heodo
2020-10-28MW0193189288HM.docdoc ff451db73672e713a3b5a30084d42b5d09a39ca3651cbb1b3c15ce4b18234592n/aHeodo
2020-10-28Inf_HC0990396399EU.docdoc 6e663577a7ba709bc7fb008addc85b8177361cb8fe92f3c79ab88bcecd10783an/aHeodo
2020-10-28INF_PO_10282020EX.docdoc fc6ba0089f3355775a62f986bcdebe3bf7d58d1934d524e952f9279bb82cce68n/aHeodo
2020-10-28arc_17383377.docdoc 304314cb220d129f1eb18cc72da395146c2515aacaf0b81353667ddbf78413bcVirustotal results 22.22%Heodo
2020-10-28arc_VH67OYZ1.docdoc 11974ec5ce543646a57980f46943cb2a955f3d5a1e4732f3afdfd141df1cb76fn/aHeodo
2020-10-28DAT_63728594.docdoc aa4fa922d7e80e83494ebc5639c0549754860e3de9ffd6b8f4f455a8ef6f8a2fVirustotal results 19.35%Heodo
2020-10-28KNC5FWHH.docdoc 74bb58aee05391c699fefedb79da019fc9e7b0d6d81d068d0ce1d192cc9e4556n/aHeodo
2020-10-28Rep_JM6457001052WC.docdoc b37d06b7214bfe63791800e16b2589e81d2cebdd172b8d680fdf9e287f366674n/aHeodo
2020-10-28Mes_PYU_100120_WHG_102820.docdoc 72bb45f25da9afa46d5e326089675c0a79d3ffe30eade356cd8114e74b2e58e9Virustotal results 17.46%Heodo
2020-10-28MES_45338256.docdoc 11dd803e4e682105076fd2c1d86f54e36702074879acdd270b796dc604de12c3Virustotal results 17.74%Heodo
2020-10-28LIST_GMO_100120_HXG_102820.docdoc 93d882200983e8ea91da547916ade52e52c5f684c19434eb8e3312b4d4251bb1Virustotal results 17.74%Heodo
2020-10-2888756235.docdoc 028f51dbdfd44aa2c12928be40c8b34c1178a7b36c3aa2556596393a09409083n/aHeodo
2020-10-28Attachments_678211992100461891.docdoc a3f1465cf2e8a92e8d9f932ab8d561cd6a02e5f832b42bfa856a5cac7fb96566n/aHeodo
2020-10-28mes_ELD_100120_THC_102820.docdoc aa825d666a2394dad05c014830cd132ecdbabfe1dcfd7e7eba18ed43bda6de33n/aHeodo
2020-10-28mes_01360304.docdoc 560dfd8d4f9642e08df6182f046002538246919e100717f57b5f918211a7e95bn/aHeodo
2020-10-28MES_87995495.docdoc 7d1c30660aa059eeca56d1c898483074e1bcaf59f922458e37e7155380a5d9b3Virustotal results 22.22%Heodo
2020-10-28doc_08284765.docdoc a7c464eeb2745a70c0108df133c47695689e8205a9b36343bf6652b953700739n/aHeodo
2020-10-28IAH_IEAOEX55NHDE.docdoc 193422b30b299a52450704ddbc93cc49c2bf39fb28b197b01d27bb4ed99c09e7n/aHeodo
2020-10-28UNTITLED_XWU_100120_MKV_102820.docdoc 245da199877ac955b9c2640666afb19d13d640da90766a000f6fc8b2c909582en/aHeodo
2020-10-28Arc_FS9159619012OM.docdoc 558c61e9709e06aa045d7ba7933b35b9fb9c125734e3c4e8955a573a31cba52en/aHeodo
2020-10-28Rep_GAY_100120_LGW_102820.docdoc 8d7bfba7aa5d45dfacce4f1d01bd73c49ac08a57ca60560244f8e4d9220ca53en/aHeodo
2020-10-28dat_LC2059859333IX.docdoc 6059ce335049c1b4200290f042fabd903bf0081c4677138bf256636f82e81c9cn/aHeodo
2020-10-28doc_NL2603217989RE.docdoc 3d35425c0243bcacb09bd4a67640d70e492da4f0a81abc46dc0af3d6bb4c2818n/aHeodo
2020-10-28K_5734190933076610855403986.docdoc 6f09e12af88b8c2ae45c021409c707ca0afc0b65be38c119d8a7ecaa72355ac7n/aHeodo
2020-10-28Mes_PO_10282020EX.docdoc 9edf498a6066ff0e5be970253b4e90411ca4d164fbee2a688c65724a0a0dd403n/aHeodo