URLhaus Database

You are currently viewing the URLhaus database entry for http://www.fiftyonewaregem.be/DE/UGUQDG5423584/GER/Zahlung/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:98238
URL: http://www.fiftyonewaregem.be/DE/UGUQDG5423584/GER/Zahlung/
URL Status:Offline
Host: www.fiftyonewaregem.be
Date added:2018-12-20 11:46:20 UTC
Last online:2018-12-21 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-20 11:48:20 UTC to abuse{at}openminds[dot]be)
Takedown time:21 hours, 18 minutes Good (down since 2018-12-21 09:07:08 UTC)
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-20this-site-is-virus.docdoc c2e393ff568f4a87ce48011f10664138e569710f56ddc0462aa7f36bdad5ecadVirustotal results 1.79%
2018-12-202018_Dezember.docdoc 39cf05ae23047c8e27e403e7d00f48501055782ae9207faac7bb72416be8dad8n/a Heodo
2018-12-2020_Dezember_2018.docdoc a26f660ca616dc12f094261b02be1b4d70dff1fa2c1d15eb3f7b8b590e1b3754Virustotal results 25.42% Heodo
2018-12-2020_Dezember_2018_14_56_47_Uhr.docdoc 74d5fd8d413e3c39eb60c51081255b3a39b97829ac65402e057e8e2ca0816680Virustotal results 24.59% Heodo
2018-12-2020_Dezember_2018.docdoc 3784d9ca2ad2a8e9de322edddca0f153ceef2207337001383d276646b6f75136Virustotal results 25.86% Heodo
2018-12-2020_Dezember_2018.docdoc 8a117a8dfa6f66d1796bfa7b7cda9d433647b01430e60646799a7c31de64cbabVirustotal results 25.00% Heodo
2018-12-202018_Dezember_0867359670.docdoc a5fd98a875cadb20c281ce6fe36a8c84f9b286feb4583fe6ff35a52245bef6e9Virustotal results 25.00% Heodo
2018-12-202018_Dezember.docdoc 4cb8f0d8cd3349a25bc8fd6703b8d7d2092e2354dd71d04f6cce46033902f3f3Virustotal results 25.42% Heodo
2018-12-202018_Dezember.docdoc 4b980be36fd3227dde92fa9793da100159b14b7568158bb3cc172496a10bbc5cVirustotal results 26.32% Heodo
2018-12-2020_Dezember_2018.docdoc 2d563b2b755324cad78b6093974105941cb8298187b7ecdb617725082fc18527Virustotal results 25.86% Heodo
2018-12-2020_Dezember_2018_3910989719.docdoc 50bfc1fa82b892d663fe87bb2c1dc16c1d87cf443a5d458b42d2efba50edac0fVirustotal results 26.23% Heodo