URLhaus Database

You are currently viewing the URLhaus database entry for https://dj.4zido.de/i/612BRNn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:938877
URL: https://dj.4zido.de/i/612BRNn/
URL Status:Offline
Host: dj.4zido.de
Date added:2020-12-22 17:25:04 UTC
Last online:2020-12-23 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 17:44:02 UTC to abuse{at}webgo[dot]de)
Takedown time:22 hours, 24 minutes Good (down since 2020-12-23 16:08:10 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-23DSAX76YO3.docdoc 15231bea81bede2d3149669c6501c6a8ee8338cdd374c53eb34c9737249b040fVirustotal results 22.58%Heodo
2020-12-23V184CQ5FC.docdoc d5231db757615d38ce982ea1272ef281efc93dc8105418c890e8f9e59d76ef0dVirustotal results 22.58%Heodo
2020-12-23HEGUYXHQG8XGAC66.docdoc 1b7862cdd7e11129f0b2efba625efa4a4298cc9610881f0e2ecfef4299a10afaVirustotal results 22.22%Heodo
2020-12-23Z7JMB4MM33ODOQWY.docdoc f989bb90fd752549af52988b47a9cf55638f97c26ea723457efd21cdab409da5n/aHeodo
2020-12-23VAY2PDF8W3H7.docdoc 49b57af908f1e6a1383dd5b05ff24cc5208663b87a405e1e35828689f7c9cdd3Virustotal results 22.22%Heodo
2020-12-23CA67P68KXLGRDM.docdoc a8a5d52ccfe6f7bcc1ef7c99087ec90083ea7e3851e760b0653bd4189d54bc9en/aHeodo
2020-12-2322ILES89DHKQU.docdoc 383bbcf6e40f5db6ccf0a07f33eb55614c381daaae647ebf0ed8db148d4ab7fbVirustotal results 19.35%Heodo
2020-12-23IDR90F6.docdoc c31a2ac228c882d72c112ad120473d012e0ba62c8d157e83cb7738293120eb15Virustotal results 20.63%Heodo
2020-12-23P4ZSXIF2.docdoc 60029fa95c17ba479a9ed424abc3a3f684111997424360741b67de478d0bcd4dn/aHeodo
2020-12-23F8KAPRE35UKQ3IND.docdoc 56355a08b488d103b9a4d6226e1cf2cac8bfdc7381febb47feec6b0eff3ac332Virustotal results 41.27%Heodo
2020-12-23WN15YZ0LZ.docdoc 77476e25aa9034df5f54eb93a92ea7144c57945b92eed68b1956044666957d33n/aHeodo
2020-12-23L9H4SI8ZGLSATZ.docdoc 93901d975d0df11ab32c4eaf841b43684882ce002e1222696c629076b1b81792n/aHeodo
2020-12-23RKPRXU32ATYDCF.docdoc e269c87f3edd655d2fa4f379bac4ddee2c652386ccd598daf260157b1b9c033cVirustotal results 41.27%Heodo
2020-12-23Q3BO6RG1MLX73V2.docdoc 2bed788f0ae4910b2b76b0d6a72af5f76811598705f59de52684ab9f99ca1fa3Virustotal results 41.27%Heodo
2020-12-233ZORH2UPL1GTC.docdoc cf2b33d88046f8e39c8299718c9132fc22247ef02bfe6ae6d404b0ca1c7c6119n/aHeodo
2020-12-23A2NPTNOD9W5P.docdoc 70cd2d38d41ecad15addac25c6e09641cce2f946161ecf261e639a09576ecb8bn/aHeodo
2020-12-23962GL1T3.docdoc b534c439ac7a89c6af82331ebd70e5b5ce5e13a2e871bb7ab122b00004605e97Virustotal results 36.51%Heodo
2020-12-23U09AOYCAX.docdoc 14b878d7208fdf92d601e33a77f38b05f586c568ff44cf3e7e73b8b2e1dadad6Virustotal results 31.75%Heodo
2020-12-23E6GOBB3Z.docdoc 2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101bVirustotal results 32.26%Heodo
2020-12-23GNKE91L6DIAPCY.docdoc 0351492c5d95a607178dc17826f59c46ee6ed33afaec7f54ad50d4e3935112cbVirustotal results 28.57%Heodo
2020-12-23LUATZRTQK2EONV.docdoc 810ffc95c449b426c6bfc03c98c5e10cfbecbfff7858f10cd9c1c5ec29e2216en/aHeodo
2020-12-23XQ833UG.docdoc e9c79c389f9e0132834f2da34cf19158e44330446302146e5636b0516d65ed51n/aHeodo
2020-12-23TGRRE14TNSF72P2.docdoc 32485683a42778008538745c1475cd3abc5d9ec4f8cbb3210100d448b9eec74eVirustotal results 30.16%Heodo
2020-12-239O4LXNUE99O.docdoc 168fe6ffe9e78f01a7f784833ba9306ef1edad3ccea334df35937424ef0220bcn/aHeodo
2020-12-239LYRIDXJX0FF51N.docdoc 1f0dd0263393040d067ed555d604d764634263e4eb014755feb5d319af9db68dn/aHeodo
2020-12-23C5OA7CZ.docdoc 64df2f4241becefb0876d62be5908b4d62620e2aeb97828cb2819d952d106f11n/aHeodo
2020-12-23IM7JBTP.docdoc e56e47b889fb43e8b9f183ee7abca3a349cede2826008e189de20df4b7bb481cn/aHeodo
2020-12-23K04MNY5YGVW1L1RO.docdoc 9a8b914d6bb8ae09a04b32fc897fdb9a9ffc073975b436b031ac837b7eeefb0bn/aHeodo
2020-12-238419OB13T63KHA3E.docdoc ec49319ad4b8ab163292c8a1332640a715616436de18d6b1124f4cc51b3cb4c4Virustotal results 26.98%Heodo
2020-12-23F7WGDVQ.docdoc 1a0263e1f86a9148e3b7434c12cc232b3a3c92df63c0aa48641c627e87949106Virustotal results 26.98%Heodo
2020-12-231UNADXIJB16.docdoc 31f327ab8307786ee50af20aaf5c4c2b6ecc974b69a584c78a2dce04fe5d327en/aHeodo
2020-12-23LVJ88G3910DSP.docdoc b1903f421885c0c1f5f9750dcdc985ec86a256298113e4c14360578feece4165n/aHeodo
2020-12-234VOLHEKOG0WQ.docdoc 9d2ad424f8d1a39e1cf83b8d64131bc94d8b8ecf787b626e1118e348fc967f10Virustotal results 25.40%Heodo
2020-12-23WEIMDU4WWR5T.docdoc 64e04bddf27b3d535ea895f4dc08267a98a4c401edadc68e3caf7f6f850c4f64Virustotal results 25.40%Heodo
2020-12-22FC4LCNLCKR.docdoc 000b049debe1595e96d46d2cb910795e269d9d3f1b3210bfa45901356b3b3b3aVirustotal results 25.81%Heodo
2020-12-224Q7651SLD64O.docdoc 32dbb92d892c9f50e99fc70db5b9f3efe0721a6464984a3f84e6592cda81684cn/aHeodo
2020-12-22RIUCHI.docdoc 05c57f48c8b1958bf16f64a292f9aa05a43f6185d02c54a0d8cf03b2fbc56ab5Virustotal results 25.40%Heodo
2020-12-22HKGXACDKZHXX.docdoc b88940065daeda56e1e49c0db60c1e275b39e435f83b785742242104d173a57an/aHeodo
2020-12-225URXOVB190PJ.docdoc bc80ebc602752fe60bc486b8620ac2692c2cf2f368e79cecd3a281ce807855e8Virustotal results 20.63%Heodo
2020-12-22IQHDC37KPXL.docdoc bdfab9675a34c6da34487f2c70f297960002e6c3c2a8e6fdc60ae7edbe67101en/aHeodo
2020-12-22ZY3DRJD8.docdoc 70325bb19664b06520c37b48c9b0deaa5232904551fa5d01a82ac5a6e735a626Virustotal results 22.22%Heodo
2020-12-2249MPL7VQ2L64V.docdoc f03c5a8d271acc63d9646bb77c30ddbb5fae5ad755449342e6c34b5ca71a6980Virustotal results 20.63%Heodo
2020-12-22WNN33B8QGK.docdoc ca5ed41e13462908c3e7441204044d8519693a667e88e9ffff1cc566247f915fVirustotal results 19.23%Heodo
2020-12-22BNR83ZK.docdoc 29d2dd0591e75e000a0c6b8b889a9a1cafe79ce1f5b6a3468d55e31d7a820490Virustotal results 20.63%Heodo
2020-12-22Y66PAU.docdoc 0afaf6e440bc0e03442ed8eb75f681526dd7f4c0fe9ac2f21b5e77401ea41960n/aHeodo
2020-12-22Y1RAVAVQ68XGTVLE.docdoc 0e0a8e32415a80ba95b8af747d13f3b6312498145d1677df7641ba3c9cf8e9b6Virustotal results 20.00%Heodo
2020-12-22EO02R00PINEROA2.docdoc 4f5599c715d0f5df48a422eccd4a26ea4241f806855c3ef36fcc7db874c976d6n/aHeodo
2020-12-22BB14FVVUGI.docdoc f7c7d960892c6eceda47d8b21609311323d84eee43e2d6fe065c9c770204941bn/aHeodo
2020-12-22SB9CH7BB8D3OT.docdoc 7202951f9a61583025149c17fbbfd11c028ddf3fb0c080886b3022f117c9b0e7Virustotal results 19.05%Heodo
2020-12-220ZIPL0BXTS6.docdoc bb809b30f35c4fd4500f5d4bdf886b079dd8b06b79f7a81ab2cca3ed9ac73af0n/aHeodo
2020-12-2235143Z1KJQ7.docdoc 73132ef9149825650cd15e4cc30adc5672a95f12f241a676c2887d1af9d205ecn/aHeodo
2020-12-2276TY7Z081KQ.docdoc 964002e25b6ff27acd3902a75ecc4293ba67968a23055e94748a0ba2c31c8d78n/aHeodo
2020-12-22EMS1W210GNG.docdoc 282e189a38374ce617073f353580971897a17a1eae677743234fa85c73cb5225Virustotal results 19.05%Heodo
2020-12-22KHIZX4Z34D.docdoc 8d0a380012f874d975499d45632b01438dc0e7a4d6bdf4791c400e375b02acb4n/aHeodo
2020-12-22HO0A0E.docdoc 53349be9f04bd91fc2896163434923295124f86d9f8cec1d0c6a244cc15bde9dn/aHeodo
2020-12-225H8HF1LXBGT86.docdoc fabd2798310f1b90dc1321bffbfa1ee8c41695839459d40fd6e32618d3df7ccbn/aHeodo
2020-12-22KGF6HIL1DWY56WE.docdoc d86732f28284b8dbef93bd8eeee3150fa2696a1ccc22d520bd82a2a53c58c32bn/aHeodo