URLhaus Database

You are currently viewing the URLhaus database entry for https://www.vdvlugt.org/UJXLQT2997047/Rechnungs-docs/FORM/ which is or has been used to serve malware. Please consider that URLhaus does not differentiate between websites thats have been compromised by hackers and such that has been setup by hackers for serving malware.

Database Entry


ID:89189
URL:https://www.vdvlugt.org/UJXLQT2997047/Rechnungs-docs/FORM/
URL Status: Online
Host:www.vdvlugt.org
Date added:2018-12-05 06:31:17 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Abused domain (malware)
SURBL:Blacklisted
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-05 06:32:07 UTC to abuse{at}antagonist[dot]nl)
Tags:doc emotet epoch2 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-052018_12_2913285145.docdoc605dc179ed7d9aa525609a536635920adbe202786bcfe32d75650730f1b4682cVirustotal results 13 / 59 (22.03)Heodo
2018-12-052018_12.docdocc514ae9511cb235056b9a8e129c1d20a94ee385fbf9a1a8ee9403a7eb2531923Virustotal results 13 / 59 (22.03)
2018-12-05Rechnung_05_12_2018.docdocd0205b86cf1585fad5312e678cfa4a3fcf41e063b7a0c829d7a52fd1ceea5b66Virustotal results 13 / 59 (22.03)Heodo
2018-12-05Rechnungsbeilage_2018_12_3886565972.docdoca9ba99f24f9aedc09221fdd45655e8697d4ba4ec4a0a3f97480640a723185e91Virustotal results 13 / 58 (22.41)
2018-12-05Rechnung_2018_12_8905463449.docdoc45a628d0732e76ac8a93a809b52e55cf20cc21d1d2d8df2df8be24f3a6d6786fVirustotal results 13 / 58 (22.41)
2018-12-05Rechnungsbeilage_05_12_2018_1974977382.docdoc2450e73a232c6cbddf70add62265297de0c5f393b69fe28c8c684572fd0f8e3eVirustotal results 13 / 59 (22.03)Heodo
2018-12-05Rechnungsbeilage_2018_12_0636170435.docdoc9ecb85012773c23e4b03261ff4721cc3d2523e53bb3ace3f72f38e9b1d67fbb8Virustotal results 13 / 60 (21.67)Heodo
2018-12-05Rechnung_2018_12.docdoccaddf9887bdd711bd05bce8907765d4e5927af1e218be6c8f524be3cfef761c4Virustotal results 12 / 59 (20.34)Heodo
2018-12-05Rechnung_05_12_2018.docdoc7f90717c695ae45e1873478e2028a6b4f6773f75380644212729061d896306afn/aHeodo
2018-12-05Rechnung_2018_12_2007891412.docdoc7d17d6e9ca0e3c2798fca5f9370a3ca7a1f73b14305bfde914b33317a64ac2d1Virustotal results 23 / 59 (38.98)Heodo
2018-12-05Rechnung_05_12_2018.docdoc8b9d5b9de38bfaf6145baba12a67a1619b9f8ce763e0ec65c4548c19611b4848n/aHeodo
2018-12-05Rechnung_2018_12.docdoc8d7461a6fd99620563543c558f4bd64c063e454384956a6c96b3d3ce45b8f52cVirustotal results 23 / 60 (38.33)Heodo
2018-12-05Rechnungsbeilage_2018_12_9840217535.docdoc8a50345d8bef4cc3e948b2f70c5d8071036c13b7f3274cb92759ed856f0c6b7fVirustotal results 22 / 57 (38.60)Heodo