URLhaus Database

You are currently viewing the URLhaus database entry for http://espaytakht.com/CcuFU-SmIeUXw8VTa3wGb_FfCDcBVfZ-We/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:96203
URL: http://espaytakht.com/CcuFU-SmIeUXw8VTa3wGb_FfCDcBVfZ-We/
URL Status:Offline
Host: espaytakht.com
Date added:2018-12-17 12:45:08 UTC
Last online:2018-12-20 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-12-17 12:46:09 UTC to it{at}bertina[dot]biz)
Takedown time:3 days, 4 hours, 5 minutes Bad (down since 2018-12-20 16:52:01 UTC)
Tags:doc emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-19this-site-is-virus.docdoc c2e393ff568f4a87ce48011f10664138e569710f56ddc0462aa7f36bdad5ecadVirustotal results 0.00%
2018-12-19PAY_21IBTUMQA_12_19_18.docdoc 1769e1efc48035d38eb3282fa0fa01b029a01039d2121d42f265e02b81816943Virustotal results 22.03% Heodo
2018-12-19ACH_73418GOPIVN_12_19_18.docdoc 15174de6bc71ed7595c066a85b11b8ce7d9e0fc21e5d97f22df7b7999c50beden/a Heodo
2018-12-19PAYROLL_7495795IUDLOQ_12_19_18.docdoc 245f11f0125b1abc10e6383636e6e165297b973547aed7e8a84729fb867ad2d0Virustotal results 27.12% Heodo
2018-12-19SWIFT_225RICHCUOA_12_19_18.docdoc 8b3d1f114272adae8789a669555a7e1ad3fa3ac5feaec52cdcd00d21a47cfe89Virustotal results 27.12% Heodo
2018-12-18PAYMENT_91XHULEY.docdoc 4de8fec6656eff908159d097421f5ee4d458b3cf43510f5fbd2bea8e6e702783Virustotal results 30.51% Heodo
2018-12-18SWIFT_516MLBGJPT.docdoc d221e96fc2b4f9616e92d3aef134de76b4752e511a41e0829590259163ea41d9Virustotal results 28.81% Heodo
2018-12-18SWIFT_0750DVAOFIIN.docdoc 7394d0e397ea510cfa767edc3a49e6bfba8ff4468034bd283e60c91a198f36ccVirustotal results 27.59% Heodo
2018-12-18PAYMENT_89PQIXUR.docdoc ddccad5fd03a3c620aabfffe8b8464e8b2beaf94954282d285e3850b0578dfa4Virustotal results 26.23% Heodo
2018-12-18PAYROLL_8812HFSOVAV.docdoc aa3ae644ba73b37215fc8ab45542fed927cf1d75cac1ea13ebea17fdfdb56939Virustotal results 27.59% Heodo
2018-12-18PAY_267TPIFLO_12_18_18.docdoc 8d5cba3cf293b607fa6aabfb18f68cbc3e87f6a66d886b04dc1a625854c3f4afVirustotal results 27.59% Heodo
2018-12-18PAYROLL_25216GOTYHO_12_18_18.docdoc b24a8bd25b2e9bc2d7875ca1a8f67fb3b9f6a8877ac065ae647b0f79131febf7Virustotal results 27.12% Heodo
2018-12-18PAYROLL_186198MCVXUREI.docdoc 091c710b1ac9c6f18e73d2fa60f8e9a4c76ed1649d9ee924818567c48465f541Virustotal results 28.81% Heodo
2018-12-18ACH_9669OAENGZQD.docdoc fecd25f64aaee40d1ae81f38e5265bf3ab3a7f40d8583a04086eb75a0a30a8a3Virustotal results 27.59% Heodo
2018-12-18PAYMENT_24755MHBVNNXM.docdoc ff3b1761553743b262a9fc9b7678b79cc22c6fffcd6d1ab880079cb0e7f02f86Virustotal results 27.59% Heodo
2018-12-18BIZ_920168EKBVMJEV_12_18_18.docdoc 7b53004d71dc0d1761029657d8e62fe58f9c58eb66dd1cb7e8a4e8aafbeff692Virustotal results 26.23% Heodo
2018-12-18PAYROLL_32414NXVVBYYK_12_18_18.docdoc 575fefacc3fe9ae7d318833411eeefd36b81b3e28141f42e10751c5ce9e49310Virustotal results 27.12% Heodo
2018-12-18BIZ_056MJDMAVNY_12_18_18.docdoc f3e861a6a0619bb391b501db7b1fe344877998903083501ace2b954b69d98c98n/a Heodo
2018-12-18PAYMENT_847777NMHPFVKA_12_18_18.docdoc 2705c94b79f93b596f8c87fbd08872daa07091dda26ef038fa3ca1c4808252a7n/a Heodo
2018-12-18SWIFT_736DRKADN.docdoc c7b8e8457f8e41937a59cce44d4cdf0710d8a368d0b0126af17ec83614546b36n/a Heodo
2018-12-18PAYROLL_549208ZNVMSHX.docdoc 7f73671b188db7dd05154be667bcdc5698b80d0a668fa2c16aec625b09fe95dan/a Heodo
2018-12-18PAYMENT_686NEJVLUQJ_12_18_18.docdoc 5c2d4ed46e476ba2d23eb96eb2dc30c96ff6415dec2e4353aef9e7cd167695b9n/a Heodo
2018-12-18SWIFT_91TTYOVZTC.docdoc 1639b9c22bc8a7f730a628a27dbcb03cd1684777c902c2d88d00cf81037bdf06Virustotal results 22.95% Heodo
2018-12-18PAY_4580SPQBXESI_12_18_18.docdoc 9bc017958890fd2e59a44c33e3a3d39775e6657b5a329d57f5e5399023846a64Virustotal results 44.07% Heodo
2018-12-18PAYMENT_434836FJOXHSS_12_17_18.docdoc 0c0a064aec1f04e4a03d50f98373b4f0e8e4da7e917f327a184aaa3f72f0ad1en/a Heodo
2018-12-17PAYROLL_8061WRYHCK.docdoc 1ee1edbddce8fca3bb334417974f7168d36918509338aa86d4fee64ca3d9c97aVirustotal results 43.10% Heodo
2018-12-17PAYROLL_13WTKKNFLD.docdoc 88884a08fbad4a9070adecc5d06f51f2c53e618acfae441013050c6b33d41eb3Virustotal results 40.68% Heodo
2018-12-17PAY_8405667AXSEXJ_12_17_18.docdoc 20c9ff6027b5b9412aa34ad73dd13df7c4bf5c8e305a79056ae6e84ba156c17dVirustotal results 38.33% Heodo
2018-12-17ACH_8010763MCAWBTO_12_17_18.docdoc 257608c1a0d6814ba892870b4ddc696c43aea835e059b4147cc5a67e88aebf9aVirustotal results 34.43% Heodo
2018-12-17PAYROLL_4GKFSVRX_12_17_18.docdoc d2d615b12b566c17d448baaf1e617bc50e3064fa59de66a46762ca0a11b5a96fVirustotal results 33.33% Heodo
2018-12-17PAYMENT_53HBPEIXX_12_17_18.docdoc cc3b596e29acdcd1d6689ce89b7534b36896a0dfb702bb62479b625950e68630Virustotal results 35.59% Heodo
2018-12-17PAYMENT_878221GPDTAXG_12_17_18.docdoc 1c11dd77fbec62acf960facbb86b74c5e83811ab2e59c9403b75258348539958Virustotal results 33.90% Heodo
2018-12-17SWIFT_17159IYUMJAL_12_17_18.docdoc 4b4b86cdb43020c87ebdba795b4daead7b3b1647ab81b5b2000c72707384015eVirustotal results 35.59% Heodo
2018-12-17PAY_97300PJXGEQY.docdoc d19148ce1eca0f37a7e1c4e7f637b6c740f7f05af5fcda7372917abdfa733788Virustotal results 35.00% Heodo
2018-12-17PAYROLL_5153185TUODLKYE.docdoc 17c7de70562a3cfbd00d2d96f30984a1768a6d4577936e0ef3f99418c55fc2fdVirustotal results 31.15% Heodo
2018-12-17PAYROLL_60MPIIYV.docdoc 52f1a0d6667ab1f0798b6124494b45d245e70c9fc477515664a83531eb22f668Virustotal results 31.03% Heodo
2018-12-17ACH_4317BPEIAPAE.docdoc c28eabedfa27dfa715a7093cbf0ba1532a74cf03936575cb668da8e3fc19879dVirustotal results 32.20% Heodo
2018-12-17ACH_584MPHHDZKQ.docdoc 35d6d874dbc7d727eb2443f82aca5dfebed72736c6f05aa0f5a5ed965e9f35e1n/a Heodo
2018-12-17SWIFT_29TVMLUY_12_17_18.docdoc dc6c630936d718d02d1d3d8c71da9847ab6fd9e79dc8695c5662793255f441b1Virustotal results 32.20% Heodo
2018-12-17SWIFT_7873SJBQINAM.docdoc 0379044b2d0cb693797c8adb5a5ff0991df7b767d5df6268536288214bb05377n/a Heodo
2018-12-17PAYMENT_833KOTCFLTM.docdoc c216a2a1e9f88f8889125d88d1875b1bb333d73a5f3df9f63d238c5396594d06Virustotal results 31.67% Heodo
2018-12-17BIZ_7MERMID_12_17_18.docdoc 216c7c9300632a99d808ac6c2ba26a53402ac584504bb7eac3cbe35b56994d93Virustotal results 31.67% Heodo
2018-12-17PAY_0651KNBOXRT_12_17_18.docdoc 653f234baee70f8280e05720d0335b5dc898e6b0aa2dc6a04b6a278f51326441Virustotal results 32.20% Heodo
2018-12-17PAYMENT_140NMGDQR.docdoc af8a59bc575309e2dddb45dec73f0c37b82c72752b6627b235ecc88302238a46Virustotal results 31.67% Heodo
2018-12-17BIZ_81107EVFAICKS.docdoc 50db407755a40929b5b6b5dc19cab0fff94b855d471797f5b7246d2fa6c3a280Virustotal results 30.00% Heodo
2018-12-17PAY_29750YOOFFW_12_17_18.docdoc 1246ba64abfdec50f3e566a2291b3fc0e96a7b3969fc97ed57d01236c5084259Virustotal results 31.67% Heodo
2018-12-17BIZ_0ZHZLUJ_12_17_18.docdoc 4a6bd78488989e57f837c67e0439a4e4a276b8bf339aef5dfb177a4d03e89f33Virustotal results 32.76% Heodo
2018-12-17BIZ_53446DLZXPCF_12_17_18.docdoc a62f9b138b9ef335233e2f25c1682a516632671334a969fdc15c32558cb6fd5cVirustotal results 27.12% Heodo
2018-12-17PAYMENT_4453UDODVLC_12_17_18.docdoc 496d0777c7954af7bff66209fc768a23a129e313b19c3ff509149a74963c9470Virustotal results 25.00% Heodo
2018-12-17ACH_8329VJHVXXGB.docdoc 4030d19135210c191d7761a432b295314588519a0d3497bea401f6488c7de445Virustotal results 28.81% Heodo
2018-12-17PAYMENT_990YJBNHEXU_12_17_18.docdoc aeb831420f4784da6d463131d145f004e69e04042279afe3b14bc4f2df5cbefdVirustotal results 29.31% Heodo
2018-12-17BIZ_590ISUZQDAU_12_17_18.docdoc 3efe254d06d8c8635d2c6858ccdf23d13dcb79c7382cc5b446a59a3cf24412e0Virustotal results 30.36% Heodo
2018-12-17SWIFT_81041KFTQGQO.docdoc dbe1a87b8a5b3b2e5bf279fb920fe88525d2548f461415cc28476b6e0911e6a0Virustotal results 28.81% Heodo
2018-12-17PAYROLL_34519SGPLUAV.docdoc f4d9c1e45849b189548f2fcb45126b008cfa6254cfe2fabb789ec0f096672ecaVirustotal results 29.31% Heodo
2018-12-17PAYMENT_7263720UAEDHX.docdoc cd52db5b0315179d6ae072dd17e07117db05edac616386b3201cad753c7ccc8aVirustotal results 29.82% Heodo
2018-12-17PAYROLL_927LHQCPDFP_12_17_18.docdoc 01e3049c2339cc896ab3aeea1bdc36a9fbd2c0553ee14f19c2c371d2ff2788afn/a Heodo
2018-12-17PAYMENT_18XWDUYJ.docdoc 859c0871dec9be9405a8c0df1af51b01fd561a0a3c8a5ba67bb6acc5775f1e03n/a Heodo
2018-12-17ACH_5413393VQPPYJZC.docdoc 9a85aa53f0e351eb155f924056a339793b01999c199c8cea58aacfb68804f6feVirustotal results 31.67% Heodo
2018-12-17PAYROLL_11TFDSSE.docdoc 5f3acad4198baeaef23ab971632a229d7316c29e7cf188be96aa0f82932495e9Virustotal results 32.76% Heodo
2018-12-17BIZ_424244EQLMQKB.docdoc 5f777684b8da45736bcd35828a63e826970edd3307af2f2b150e33779f563374Virustotal results 32.20% Heodo
2018-12-17SWIFT_6939DZOCDJN.docdoc 4962b11ab76f9e76ed18875f62341d4bf30b3169fcda51704d7ab91c72bcbaa4Virustotal results 30.00% Heodo
2018-12-17BIZ_54532ZLQTHW.docdoc 378f7b5825b5cdecb2916800c17f7012967a0cd1f6258c80ca803e7d4794eca7Virustotal results 30.51% Heodo
2018-12-17PAY_6721UUHABIC_12_17_18.docdoc ddab96b4fa0b2db7f94cb63c5fdfbc164706f7bb074234c7393948f67ea3bdd9Virustotal results 32.20% Heodo