URLhaus Database

You are currently viewing the URLhaus database entry for http://zentera93.de/pXgZ-62XaJ2dbJ_ySOCxcg-gc/EXT/PaymentStatus/INFO/En/Past-Due-Invoice/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:97821
URL:http://zentera93.de/pXgZ-62XaJ2dbJ_ySOCxcg-gc/EXT/PaymentStatus/INFO/En/Past-Due-Invoice/
URL Status:Offline
Host:zentera93.de
Date added:2018-12-19 14:42:58 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-12-19 14:44:09 UTC to abuse{at}netcup[dot]de)
Takedown time:29 days, 1 hours, 59 minutes Bad
Tags:doc emotet heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-21ATT19237399731502.docdocb3a07fe6e8deec0a4bb72cd33320cd3e22f13d46fe4d2928dd439adcdebea3c7n/aHeodo
2018-12-21ATT79878432603505.docdoc35d69c999becbfbaf3563c934a851c9e90e1850e07506dc011f851447aa3dce1n/aHeodo
2018-12-21US230587806.docdocd9e32bb26bff81b53df36f9f48345895b2e2c06c30fd467f2c0c964243e5c3f9Virustotal results 12 / 60 (20.00)Heodo
2018-12-21ATT7876593185400990676.docdocbccddf643a7199aa666fae5d914cba3c86f31be9ed7828966d5d855b9e0ef104n/aHeodo
2018-12-20PAY05889797673.docdoc0e2a18b41184c5fe2f6d9e5205303252c7ae9dad15b1e50774f2e384eb527682n/aHeodo
2018-12-20ATT1669992787.docdoc13843568dc3110ae29d47b8be9617e00947ec81223863635e5056432062bbe1cn/aHeodo
2018-12-2080444772560036309.docdocef8cd8c96f4ce08a00b941b4fe9406f82e3f8cd086095b8dfb422ec882e14262Virustotal results 13 / 60 (21.67)Heodo
2018-12-20US6627336836144481102.docdoc90c8b32c4a85e61c97e87cf9387459ccf7061f3f6ecfc37fc003ef2650fe335eVirustotal results 13 / 60 (21.67)Heodo
2018-12-20PAY228902077855898229.docdoc39223a9cee974527c8538ff76f9df28d50218c4b080cde7249d2b3fee7e6710bVirustotal results 13 / 59 (22.03)Heodo
2018-12-20ATT3109008210027481.docdoc2dc727a19af157fddc015a1a4ea42abfc09dd7a70040a1da7965a4ce6b3baedfn/aHeodo
2018-12-20ATT726155110280326432.docdoc4d1a0829f456f4be6c5cf565ddd53106275453946eaedd061d83c7f082121742Virustotal results 12 / 60 (20.00)Heodo
2018-12-20PAY46085570138058300.docdoc9ed11279e4650bc7f72b554339510c611fe59003caf9ca90071bb82afa12341dVirustotal results 12 / 60 (20.00)Heodo
2018-12-20379498470952649.docdoc3eca7c19d9dce371da73440abaa0b049673097cf6dd9450cf827c0866e97b888Virustotal results 13 / 61 (21.31)Heodo
2018-12-20US653643995086430385.docdoc2bc19f1a55b61ebc203dbda2b2aab16e0b47508db2f868532c9b44e1555a9019Virustotal results 13 / 59 (22.03)Heodo
2018-12-20US53220055858.docdoc2cae7098baf7ba6b8ca1b9ec37e5a1391a1867b8ecd20cf47065cf40d1125c0dVirustotal results 16 / 60 (26.67)Heodo
2018-12-20US6266629965339.docdoc82c8667d9a8fc1e0b2e6544334f8783861edae4444125797edb1ca7c9d9b239cVirustotal results 16 / 59 (27.12)Heodo
2018-12-206881586744965.docdocff0bd259761812d0f4df0e2454e5cb6bd076fbf6d52a7896fc7d9224b12a610an/aHeodo
2018-12-20ATT36484310470437.docdoc2d4e3189de630a5c8e28a9f42e2d9559d2e82923b1a2aa8013e3659466186b7fVirustotal results 16 / 59 (27.12)Heodo
2018-12-20US23896682511035.docdocb98143e9cddef8410389d6e051f04290e049af16e616ad87b5174b9ad61ce7c4Virustotal results 16 / 60 (26.67)Heodo
2018-12-20PAY2021019820108.docdoc4d2ca7e989e7d083bdafae14d16c54e24ac5f2ffed365cd19520c67decf01e32Virustotal results 17 / 60 (28.33)Heodo
2018-12-20US066283318062081827.docdoca85098067d589fcadb9f184403b99ba2e4c078734bfd330669ac322a95ea6ca2n/aHeodo
2018-12-2072184987860029825.docdoc200e9f0ffaa1c07ee596212059e01280bbaccfa6c22d54414068c28d30a81160Virustotal results 16 / 60 (26.67)Heodo
2018-12-20ATT7994613831.docdocc27ba5b140ae7e7478b34ac78768c38ae157d7de33bc715a6213989471b309c9n/aHeodo
2018-12-20US4363576185832.docdoc03a85e11c44190d01ca2a7123195e82cfd67353d0763218abb349bd7024b6509n/aHeodo
2018-12-20127699355.docdoc867930f654e2761ee1433ca2effffaaf1e24adc57bd8faa9ba5a9fb1b54ebed5n/aHeodo
2018-12-20US8111640710479.docdoccb6cf978c042342d394d8e705ba911d35650262696b327c0c883d5727cd6b6efn/aHeodo
2018-12-20ATT242092591315480.docdocbbf2376308ed348e7543317867312e7b37f738a4ebbf53d388892eca6a2bc4a3n/aHeodo
2018-12-20PAY0764233174606041.docdoc22dc44bc26173f44e8e9ac5176e4402972602f340880133033ac827c3842066fn/aHeodo
2018-12-2093976347768.docdocce04fba3f5fe9ce231b6ca7e96d1c9e290c60baf433d01c6b7a96d2134743bffVirustotal results 13 / 58 (22.41)Heodo
2018-12-20US36072201536937.docdocd282285f7bd67062b6f63558d98ac97ddcbc3937b9918bb62d5ffc53baae094eVirustotal results 15 / 60 (25.00)Heodo
2018-12-20ATT21507337020.docdoc4707fd9eeb863dc4880da21f222d55acf0cd0284fed8e2d37d739bd66ba6b710Virustotal results 15 / 60 (25.00)Heodo
2018-12-20ATT1953238198.docdoc2e5b8609eb9d015478e8f587dfd24af32f8688666e12492f7653cdf5ab4c3c37n/aHeodo
2018-12-20ATT0761630862.docdoc05d52783b6abc37fdc0090e6ffe1a54bf55a51c6b1ce53fcb15a03e0da3f424an/aHeodo
2018-12-2032414793039217.docdoccfa2c34646508f0f6ee5941cf7052bd5cff2a13f3e300f01f1b136cdb2d66432Virustotal results 15 / 60 (25.00)Heodo
2018-12-20US2532297244697742443.docdoc0ccbe0962ac238438a0c37e5a05496bf83247aebf15da73976e0882680169a02Virustotal results 15 / 58 (25.86)Heodo
2018-12-20ATT92448938279.docdoc74d5fd8d413e3c39eb60c51081255b3a39b97829ac65402e057e8e2ca0816680Virustotal results 15 / 61 (24.59)Heodo
2018-12-20US0956016064579602.docdoc8ed63bc00f3942b1403786bf39952bc56863ca52611ab56645c1c73cb7da004en/aHeodo
2018-12-20PAY4416449481614.docdoc60789ac1566d544709e82f2a88ab7a739de2215ef724af6a449d9f9899c7dfc9n/aHeodo
2018-12-20607655775690.docdocc60162540de63711e4949e0b07ac3f8b1741f7d31280c79a37e19a9fee1fa14fn/aHeodo
2018-12-20ATT66144048589192939.docdocd1f700d393ae77462452e80890147f6874d75fbdc83874d2c2dc7a686062c1e3n/aHeodo
2018-12-20808464880431296150.docdoc329494a7e736cae4357c67b7af90547c56028a5f47df6d90fb5b577f33e01cafn/aHeodo
2018-12-20ATT90261991506753003582.docdoc96c616f321105d84ccd07c68d46b436cb0dd38d34174846b9d06c548dc5df076Virustotal results 19 / 59 (32.20)Heodo
2018-12-20ATT311562961.docdoc54ac7a1f7883dafa447da786e2515e3d38899c36c8ee1771b3cad28362e17f31n/a
2018-12-209148261282048689447.docdocc1f6092805c75d956bc46360f7a83c1a7e09775f36670a7a59acf5d229c45de7n/aHeodo
2018-12-20US68334743461619986302.docdoc28559b64089e5e96cbb2df9281d93f6d1e296b808809d466d021b143ea134cden/aHeodo
2018-12-20ATT03794200863811275654.docdocf60a83c0d7504d45fb2a142be3cee2168c5580e0dc1cf4f25a18f98c5b76792an/aHeodo
2018-12-20379987508107586.docdoc048c88143ab1f2be57af3ae1e83e72ac5187402554a2a4205c471879dfb4dc89n/a
2018-12-20ATT5048195363378484.docdocf170a4cb0f7f8bde8084cde3a538b54b1f5e497a60c192b3b03eecd6a7f468d6Virustotal results 16 / 58 (27.59)Heodo
2018-12-20PAY62191490096069153533.docdoc473afedf9a265f8a21780c8171a9a6376b69e9be0e458a5c5ec1e557960519a8n/aHeodo
2018-12-20ATT2108179957374296.docdoc1f35933dddd94297f1d5950c56cfe7721980e6852bfa7cb5bfcc89db67fbce90n/aHeodo
2018-12-20316732851342133.docdoc25d978be43da4852e2e30be4695aa979756b648e79ff1abd5ece05c023fb3935n/aHeodo
2018-12-20ATT9949686762710872.docdoc2c7f66896be89629ec812b27ce7e2a37320d04b9c6669ec2b11fa63ac1615ed9n/aHeodo
2018-12-20US14759261309336259827.docdoc5422fcd6587573adfe722f31846969096eb819cd64197cd6e3eb1164ab4edfa6n/aHeodo
2018-12-204371477133141520276.docdoc3c03e769486f2c79eaa7e599df900015ffb18587a8dc596a933313034bb8cbffn/aHeodo
2018-12-2001720877253997.docdoc346dcbc99820690fc0665a0c4076dab8df55b3c1e2430820353a2e87b0c38fd8n/aHeodo
2018-12-20240641131732075.docdoca5b7bb8e5fed53fe2f1f96d8f8e36caf7a5611852e55209bc54a43287222f075n/aHeodo
2018-12-20PAY79290398801353290.docdoc58ceb5f7fd6f71eef8b8aeb0b226a91f49041d1ad67025a8d5083facb55bbd7fn/aHeodo
2018-12-20ATT3839481575346.docdocde7871ad870e48f1dbbb8caf1396ff568f9a9f21b56940255279ef004c3dc747Virustotal results 15 / 59 (25.42)
2018-12-20ATT53760921567751866800.docdoca99b84469cc4f9c76eabd80ac0985f6b4c9cf898a91d5538fd43223d24f7c699n/aHeodo
2018-12-19US650878029.docdoc602f0166f2978578fe63709018464d5d04f1c87cf852b7dbe17616ee839190bfVirustotal results 14 / 60 (23.33)
2018-12-19ATT294939037283.docdoc1d79af859a391823a797f6da301a4b6ce7dad9af0c906ed2bd98d259bcf27012Virustotal results 14 / 58 (24.14)Heodo
2018-12-19ATT16456877159.docdoc3a9037168a2fb85124dc05cf766dcceb8afc4a13f96a2751ffaf0d1c56ba2023Virustotal results 15 / 59 (25.42)Heodo
2018-12-19US26918272521.docdoc769eff69e55f94c409330a4365b802fa1a589515d318d938ebe1f451eb865609Virustotal results 14 / 58 (24.14)
2018-12-19US4231595619271062.docdoc91ca63acf98acf0f3a9cbbc6ad3d88eb48b4be48369a550598cc55899c494894n/aHeodo
2018-12-19US3748161370999.docdoc3b8e206a410ff373c77d5370defb08fe6ad2ee77378fa6f26d24d5a1cf94779fVirustotal results 14 / 59 (23.73)Heodo
2018-12-19PAY37702848009359658.docdoc0129de4caebd4c7d1b8ba3f4f63330b1b17fe2154eaacd9aa76845d181586748Virustotal results 14 / 60 (23.33)
2018-12-19PAY445447459.docdocbe7c77050fb3a5b864ca5c3b329934866b0023b50970095d8859ffc11ab95e24Virustotal results 15 / 59 (25.42)Heodo
2018-12-19ATT1240348488726156.docdoc9c490b82184bdcf76a7086ab78f0a265ae77fa01ffbb01fd16bf75261eae3688Virustotal results 14 / 59 (23.73)
2018-12-19PAY8278481116407104793.docdoc2d9bb33772f7e121c8f674beb52a36297870bd2389f7247efcf01750a9763a8dVirustotal results 15 / 60 (25.00)Heodo
2018-12-19PAY2090886102604824.docdoc7d6a8299b739b0adab7f7a7de68546f85d342c8d74bf600cdc5ba74cb23c6c78n/a
2018-12-19PAY5307873092020.docdoca005d0663551e2ed4490992fb23b12a075ce6582d49b2c012916986d30783d02n/a
2018-12-19ATT6915970879.docdoc4c5a5f7c46aa52d27f0d9a0b591980e8a34ffc2b1df7d09ba7438bec933e7975n/aHeodo
2018-12-19PAY08360450439242751.docdocd7dad079c927b2a813afb05a8ed63c96bd1fc51493211a333353190bd17364e3n/a
2018-12-19US5721787096.docdoc28e57977dce308dbc4cd0ad1798a0e474fa6799ffaeb08552c0007f11db2a076Virustotal results 12 / 58 (20.69)Heodo
2018-12-1997647919484716085.docdocb83c0865858bccbce5c01b0742388e42a0488eb30fcee7721976c5cdfed00d7bVirustotal results 13 / 57 (22.81)Heodo
2018-12-1917085672017693.docdoc9efdbd1634ef495f3ab7c4ec375a63561229cd525fad6c77de215151073b9d33Virustotal results 13 / 60 (21.67)Heodo
2018-12-19850952784360.docdoce7aab61d0b14783852d75ba3ca2c2ec3e492b9ea6d7690a4790a973c4cb605cdVirustotal results 13 / 58 (22.41)Heodo
2018-12-19US525113085.docdocaddab27f33edfb45cc2a8ace462420df86d61ae90429c2a31ee09c740b138d30Virustotal results 13 / 60 (21.67)Heodo
2018-12-19263742874766503717.docdocc951972178be25b76fed269d3031033cbb5a2e071c63f92728b555c50200436an/aHeodo
2018-12-19214231336.docdoc067ecee2043f00f9fb808345b1011e2ae27bc93819eec5a6b3cfc62ff7e22cf4Virustotal results 12 / 59 (20.34)
2018-12-19PAY12117494840420.docdocfebf7acef2c382493b17876c764161df9c9607b3cd4ae1ffd78b975d6f6432a3Virustotal results 13 / 59 (22.03)
2018-12-19PAY4592914733218193804.docdocd455431dcf2611aa094ec11abb74e456d9beeb0a43e15d9882de14df69affb0cn/aHeodo
2018-12-191910641738014111.docdoc9f2d35cf3f882eac45b6859bd076e25e9a7f0ac202d32c0818c485caf48bb431n/aHeodo
2018-12-19PAY682295473079.docdoc76697ffc14e4c6c1d7e3f010836fd9221414f29a3e7619091076e501dee20d31Virustotal results 13 / 59 (22.03)Heodo
2018-12-19PAY46230084936514.docdoc0aaf85dc89203908fe46acb4c437cc40a27042707eb5b126bc74f65a14503091Virustotal results 15 / 61 (24.59)Heodo
2018-12-19ATT9773464219.docdoc39f98e51bcd3696766ee8f0e7c7f7b5d87d75ed730a19ef63cbf88b74cf8f0cdVirustotal results 19 / 59 (32.20)Heodo
2018-12-19US0143638584.docdocb5f541fbb40c0d640d12be78d3216ee304eeef771284634835a1274ae0c01f89Virustotal results 21 / 58 (36.21)Heodo
2018-12-196800819453651863.docdoc496ce2697cd55557a8aff83e217e25b29c8ee4fdf0244840b8bd47e966338417Virustotal results 16 / 61 (26.23)Heodo
2018-12-19US5271714773986370676.docdocb1860aea8f9db8d2b56563cc583ff86d1614e9f0833630a6f66f71b01b4e99dbVirustotal results 15 / 61 (24.59)Heodo
2018-12-19ATT38203052362432236324.docdocac17f5bd46ca6bfa6459703b1cb3a425fffb75f70ad5ca614271e1324660a6ceVirustotal results 17 / 60 (28.33)Heodo
2018-12-19ATT92771750044386493612.docdoc84aafbf9d47a7a0ae083e19095bd77adbe89cbac7654a1b2e06287149630017cn/aHeodo