URLhaus Database

You are currently viewing the URLhaus database entry for http://nabludatel2020.org/wp-content/TjkLkzOWx51qdt0JuL3jgMVRs2HYXB/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949625
URL: http://nabludatel2020.org/wp-content/TjkLkzOWx51qdt0JuL3jgMVRs2HYXB/
URL Status:Offline
Host: nabludatel2020.org
Date added:2021-01-05 19:21:03 UTC
Last online:2021-01-05 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-05 19:22:02 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 15 minutes Good (down since 2021-01-05 21:37:48 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-05SC85B92YUEP.docdoc db13b0bb816476742e2920b6a33274082f378ab0538824d8027c8a2b9947d102Virustotal results 42.86%Heodo
2021-01-059K726607WBR5K17.docdoc 8c829198897d8ba3dd5a5b1f86741c5e5295a0eafb900bfa440802d1c622c469Virustotal results 42.86%Heodo
2021-01-05KSV8CWY0YS1RP2SG.docdoc 122c549f9e875116b46ecdbce80ee12845bb24c40a4c703be57b4270731f7f28Virustotal results 44.44%Heodo
2021-01-05L39L3PGN.docdoc 961a80ccd1b1e38897c5003ee920895e6fc6cbb1799b7b68c4429d8f5b5f9c64Virustotal results 43.55%Heodo
2021-01-05TZ1HST.docdoc 7f9e6b9183a6a254ffcd68100012d645a5fb91caaf3b727bbbd76f4262595bb7n/aHeodo
2021-01-05SQCFM3J704NXZ1.docdoc 53968a89fd9c1d34d45403fc7882d3e15a8c8b832a2cdbf5f6d5b0967d777fd2Virustotal results 41.94%Heodo
2021-01-05LWEUWDJ.docdoc 9989dfbbd3669ca3164a605c485ac6a06d5c27ebf7357bf76968e81d2068d3c2n/aHeodo
2021-01-05LU3DC0NYAO3DBMFG.docdoc d37f415a2cf63bb8ee10f26fcb4b74ac54becccae3d6114d852c170765e8d45bn/aHeodo
2021-01-05KIWM9GFYJG6BNI.docdoc ab56a195c1632fff8ba092e7dc73858048b1fc67e6242ecc2c78612ae3e224afn/aHeodo
2021-01-055W8UL2ZMXKG.docdoc 203f16a0313a65b940a054b564acd009dfd1d1737b41ed8fa081f8c1f1c53fc7Virustotal results 42.86%Heodo
2021-01-05U3A5TJ.docdoc 1d7c91c4d2f76c54f4e0732030817ab00b79b727688be8a00122bc2a9387ea9bn/aHeodo
2021-01-055E7U1AV4J3L.docdoc c2a6153157de0da1987225400eb7e32c87f9574e825320466772d6804cf8d3b0Virustotal results 42.86%Heodo