URLhaus Database

You are currently viewing the URLhaus database entry for http://vaweb.ru/content/Htg3Ffw3jP5ddcqKm8nz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945706
URL: http://vaweb.ru/content/Htg3Ffw3jP5ddcqKm8nz/
URL Status:Offline
Host: vaweb.ru
Date added:2020-12-30 17:24:04 UTC
Last online:2020-12-31 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-30 17:26:04 UTC to abuse{at}reg[dot]ru)
Takedown time:19 hours, 14 minutes Good (down since 2020-12-31 12:40:57 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-31MXJG13J5EET7TPG5.docdoc 43af38ecd27585f00463abfee0ca7f492fb36fa862c8d215447d59be27652589Virustotal results 50.00%Heodo
2020-12-31KKZPAHMY34OQS.docdoc a19dbfe4090d5809a4e949d13a2812935f981a4f322c8665b6feaa908ebc33cen/aHeodo
2020-12-31QWGZMCRPJ0.docdoc 34ad021f12350af1a03416b20032f108ede23781e7d7d851810e65a97592097bn/aHeodo
2020-12-31SE68V251FHM.docdoc e43be8ecf4cbc6b3d85f07d75f2e9e4666b38fbe656d5179697bca7246a4d924n/aHeodo
2020-12-31WNK89LIFH4L66.docdoc 2aae32497917afd5a493a921d6bae0556badd6dc783eabf9b3322806281435f9n/aHeodo
2020-12-31ESCB2ORTFG8WA.docdoc c168664a75071253dfd62df7177913300976fc8a363af43e46997584d51669cbn/aHeodo
2020-12-316TA44HH3GY3L19RB.docdoc accd0141dbb5a3924866cfdbbdeca2edfd396cfbb611880588d8cfab0cd986c3Virustotal results 48.39%Heodo
2020-12-31OTN0Q4P4J5ZJ74P.docdoc fc43780841b9cf0e6fadf2ae64ef8e79e7308db86a931f976d550224e37a879aVirustotal results 41.94%Heodo
2020-12-31HHAUA9HO.docdoc f13634d2bd3bc1469174a0cb871c0d10bcd89c1431232838e1251c25ce568a0an/aHeodo
2020-12-31VQR8ETO68F.docdoc 5b4299a14a7a1bcac53b86176777b6fbe902fbb5a440e9040126b39743db254dVirustotal results 49.21%Heodo
2020-12-31CADK3TJT9.docdoc fcd4936265c3d59d43ed6c51658cafd788f22ab0e3601f832346c762c3d97c2bVirustotal results 47.62%Heodo
2020-12-31W0SMBJ22SYYWOB.docdoc 6c4a7652f59aa03c67961983f167f86eb3a64ba568f0c4629c5adf18c82e2ce8Virustotal results 42.86%Heodo
2020-12-315P32PV3Y.docdoc e05aadbe41028646840c187217377776330ff87cf0c0aad82cb1cf15236243cdVirustotal results 42.86%Heodo
2020-12-31UDB8IX0.docdoc 92f3ec8ddadbace9623d6af0c230b651775947b4da83ae9b5ab3ea42f866a62an/aHeodo
2020-12-3157W5J30.docdoc 6de848bddd35ca7b7da3c3a8df4b16ce8ce22cc257299320639ca2b4f1af01d5Virustotal results 49.21%Heodo
2020-12-312S6E67W.docdoc 22c9b454977f772e641fd2d5d4c08fb9e124cdc9ec47c69ed037fed87bbf1abbVirustotal results 44.26%Heodo
2020-12-31C1V61Y.docdoc 1945af426236644e59e05d740730d942c8b1f318aacf9f983a9f6e4bcbf55f37Virustotal results 44.26%Heodo
2020-12-31UNCIN8L0DDKNWGN0.docdoc 6aac95dd3f2a6b9cdc5ddfbda6e548ab8d93a61f48640d3a0a98a312fad42e56Virustotal results 42.86%Heodo
2020-12-31RTSZDG4YZ1Y5RI.docdoc 48242492ae400d1b2e95ed96ed2298bc76c87036b1f79e92d38a07e5cb14712bVirustotal results 41.67%Heodo
2020-12-31QCK4CDKKF4DKAG.docdoc 6b85d222fb12df6466d8b1dae31bb6e7706463ec73fd86f85e46ef7867183df1Virustotal results 43.55%Heodo
2020-12-31ZZYZGF0T.docdoc 14eef594729b6784626929323d1f4a040cf76e3774ad5b77a16c28449db182cfVirustotal results 43.55%Heodo
2020-12-31SUA9J2Z3ZJ.docdoc 0b9ad72f95097098c7273fc3e89e96d14537deadfe1570a2e36b8ec40bf241a7Virustotal results 41.94%Heodo
2020-12-31BUE1OQ4IUK.docdoc 712989be681e3a6e8cd47b84ce5feb957d2cfb47367d96bbc7dcd6551bef1f51Virustotal results 38.71%Heodo
2020-12-3129ECMR6KB836G5X.docdoc d6dae3570b800a4a54bbb661e945c2870952058174a0ac704127c7cfe8330bcdVirustotal results 39.34%Heodo
2020-12-311YI1SUOA6XY669.docdoc ba426959bbcb861ba653335a7abd168e7d3ce8a426fb805f7e8748fcbdcc8de6Virustotal results 37.70%Heodo
2020-12-312TTL42R4AOY4W2.docdoc 14b98f981681ea78e6511ba3a68c28a85fee9696158358876cd49a9ac1110bb2Virustotal results 34.92%Heodo
2020-12-3018XL6S32F7Y.docdoc 48cbbf0f9680ad78df8965f1b76d756f88912c653711968364b7f7eb3f5795b0Virustotal results 31.75%Heodo
2020-12-3087LQNEC73KEBZ.docdoc 8c39bdef7f9491fc985afb40906aa1f0d4427bb9cb2299ebacd5511b442e9982Virustotal results 30.16%Heodo
2020-12-30VQD0BBY.docdoc 315dce173e7c32092cf4b83b7d27b520156225dc90d11322b56244ac2b61810eVirustotal results 41.27%Heodo
2020-12-30JY585KSSA0Q.docdoc 58e9689587eedb1e893c93baa299ea296c05222359dbe281306ec12304d3a8c2Virustotal results 27.42%Heodo
2020-12-30LBXC3DXDTGC0I7S1.docdoc 12648728174c80a68b9992c8759df7e021f27fef6bbee5bed8af71b18a7fadd5Virustotal results 41.27%Heodo
2020-12-30GZN1HC9QO.docdoc a076dfb0f7e5a9217dd1cde4b003fd8714d6693b990f2ac4fd1b70fdbea38296n/aHeodo
2020-12-30MYFTQ8ZT2AX450D.docdoc 3d426817cb9506ac02f7d7ae3cebe38e2125efde6eb7ee4af0251a6afdfa2d26Virustotal results 40.68%Heodo
2020-12-30AOVT7BK9FDI0D.docdoc d6704fdc1942538d16ddedbe3eff3c429e462d4378b33040597c5a218c0e852fn/aHeodo
2020-12-30C7BF18BKRB2A5C7.docdoc 78e18b5279a9e9e08617037cb17947743cba176c3d815b3e4b01872ba3a6b9bcVirustotal results 41.94%Heodo
2020-12-30XRUJ0H.docdoc 214c118a6ea6243f11f97d6a83c14ce0efa696dcf534eb46de221d4199cb7c88Virustotal results 37.10%Heodo
2020-12-306BNL4AA98A.docdoc d2178edbfb636aa2baf306d59be6a8c651aa2167f67893e6ee70469cc13de307Virustotal results 34.92%Heodo
2020-12-300VKSDNWE6B29UT0S.docdoc fa91406d32a92c06644f1089b3184110a7e7238b70dbbb86098e77f7ce82ff5en/aHeodo
2020-12-30C37J2P07CX.docdoc d700110437e868378fd668cf27a7df7611da72d285f7b9d7edfd2d08475a47b5n/aHeodo
2020-12-30DZS8W2W22RWL8.docdoc a2bee4290712595f0afb87e5a247cafe694d279fb7350e43bc163630e926aaa4Virustotal results 27.42%Heodo
2020-12-30NWOZTH7.docdoc b21d6dba7ef69a03e2c39155448c6f6972958b8c0ad4008d96d2ab523b4733ffn/aHeodo
2020-12-30RDX90HREAQA.docdoc 74aa8c23f8dd77cacfebbdb1173e5dc164f1f441bbfc2a3045a3936ff133e007n/aHeodo
2020-12-30NLJ02V1H3.docdoc 5f6b7c56f5a98721b71d91dcd9a177298006b37c11ca8dc6b0bacae198e17feen/aHeodo
2020-12-30HCMRGCM535WH5PTX.docdoc 6dca5a2a6230eff6ce29c5dfebd77bb4eb68e4c6d774f8b9e2bc95c013cbded3Virustotal results 28.57%Heodo
2020-12-304EQN6NORVAGF.docdoc 8186fe52d421d13e8e0eec79edc7310813af24a6d27eaefa886fbbe5fb05da6fVirustotal results 28.57%Heodo
2020-12-30K94S8Y5BBKE.docdoc d34dfac031661724abb4626c78172927bd98aec10118ac0117285d1ee6be8cc8Virustotal results 28.57%Heodo