URLhaus Database

You are currently viewing the URLhaus database entry for http://ussvictory.org/owncloud/63449374100/GnSY-uiCq_gxsid-7R/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:168674
URL: http://ussvictory.org/owncloud/63449374100/GnSY-uiCq_gxsid-7R/
URL Status:Offline
Host: ussvictory.org
Date added:2019-03-29 20:44:11 UTC
Last online:2019-03-30 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-03-29 20:46:02 UTC to abuse{at}unifiedlayer[dot]com,ipadmin{at}websitewelcome[dot]com,abuse{at}hostgator[dot]com)
Takedown time:17 hours, 23 minutes Good (down since 2019-03-30 14:09:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-302019_03_US_ACC25970353485021673___9565668113035.zipzip 9e41ce126e366195edf56bdc485378bb083a80a8e04390876575b456836476f8n/a 
2019-03-302019_03_US_0464875501900___94324607387758.zipzip 6de97f8217265085252f2906ef26ddfe82ee5e809f33640f8339905027ce3cben/a 
2019-03-302019_03_US_ACC6103204690554___049203317418412.zipzip 437b514c0dfeacb7b2b83e097e8ecb27286e1459d991c42ff6d2db7cab0727f7n/a 
2019-03-302019_03_US_US44252950805521942479___19287402549921107.zipzip 72fa80ac88b6b520c09b7d291f48dad77497f40b23aa97eb25a7d68100df7226n/a 
2019-03-302019_03_US_ACC12258673315330___28965168260547.zipzip 2afd219d696f35e3ab07ec8828818b4152f6baf3cbcf933b2193c53b7c674154n/a 
2019-03-302019_03_US_NLGBA04478635735927421367___4865903356264698090.zipzip 6b694316a0a4de149f89f5711e68ecb746ca20023a1c18e1d51bcc1cacb2a26an/a 
2019-03-302019_03_US_PAY9844434780589900156___416618933184727.zipzip 961c7c93dbe2e63952c917c745a476b5f37e8511daed79604f54558a06b27429n/a 
2019-03-302019_03_US_INSTR53291943328361___037507559730553.zipzip c0c1ced3a91cd5717c6d8ec7d6b01161343cf5e74b65405983d01da7d25d4f43n/a 
2019-03-302019_03_US_INSTR53155351963837___9347882066460.zipzip 78e50f8c434b5eeb7b6bf85e01cb861859794c1894a6021cb991d9bbd4066af4n/a 
2019-03-302019_03_US_US9358222865921211060___681521765348793.zipzip 51c59d830e28e744f7f2b836ad10dc32f20d2d1fdd734a60a1bb301b0441fe77n/a 
2019-03-302019_03_US_PAY4687443595534639852___080507729343852322.zipzip f8493961cb88252b6ec9395bec913efce3ad65a8a563473cc7fbcc57a8378982n/a 
2019-03-302019_03_US_OQW18192559574100___41117179027703.zipzip cccf4e7d4f096ea0b35bac0e68501db462e92501d4cf3afee0453cc21462740an/a 
2019-03-302019_03_US_78088831762438680979___611570618.zipzip 9fc79111576b671c1c37b092c3ab37d7d44c45470faaf27f5c2922a3992a0b7fn/a 
2019-03-302019_03_US_8705036181131704___452137070.zipzip 92d45f2baf5aafaba95f6b66bd1d30daf4b8d782c5a049a2b86ec56eb2c0aee7n/a 
2019-03-302019_03_US_0712727662665952___04626341584.zipzip 3a8bf121b0c976d12ea88f94656db00cb52b9c616b0d75816944887472305e70n/a 
2019-03-302019_03_US_INSTR076900082907___6773545136.zipzip 3ba846312370ed331dacff4dd89e9fff1c8bbb635059de80c843367aedb19be8n/a 
2019-03-302019_03_US_ACC7234924002316___3942471503.zipzip da1cdd1ae89c1b07071a39457994aa2c636151fa70b88429a0801ac1bc572facn/a 
2019-03-302019_03_US_177664837___35872512058.zipzip 5f200ccfffebf276b406b2c22d31065133f9f86f6824b734fa6dccc8839e8fd4n/a 
2019-03-302019_03_US_8197952732033097984___3138456654547.zipzip b1e07da463e82b43036a0433ce6c2ea567b44f35348adef4846e123f224830d0n/a 
2019-03-302019_03_US_INSTR6442692444866254921___3794495359.zipzip 4214ff376db57b6e7204c9ea51de9027192945927102d6e8fc2187eae3dc5115n/a 
2019-03-302019_03_US_ACC1222821376453728797___4312450584473902394.zipzip 6f85395515a12d72d879dcfc9839f8b575f04476b95355f4d7afc6106ea5311cn/a 
2019-03-302019_03_US_INSTR678372687101___374718495299113632.zipzip d29a8a8038c938827f06c2aff7f193cc50efc14ab0c51821aeafcaaa89867752n/a 
2019-03-302019_03_US_88059205954194598___8154947832567608750.zipzip 619b286daac595d61df163e1c9269bc73f61f5d6e48a286b96bcaf11d5d9604an/a 
2019-03-302019_03_US_ACC42494966925892910___68092208569.zipzip 4f9a523f8b58700fcf910b76a3066aae4a400cdcfa2785264609484a8f4daacen/a 
2019-03-302019_03_US_PAY9757815811723___9268725244541.zipzip 1847039353765fbe6cadb8662c5e741c8ce3622e21555ec722a344365de5c915n/a 
2019-03-302019_03_US_ACC543371869459___83588340704.zipzip 2621e6ad09c80d78bb6921358536ce6656ac1d383d239ed49f563bcca33f4d55n/a 
2019-03-302019_03_US_5393883276742___310030233.zipzip 4b49ad1256dbd612d244548b158f1c6e04e801c243c7a09c5377a79eb3203c00n/a 
2019-03-302019_03_US_INSTR9092203901274555592___212171287618433259.zipzip 447ea4afc3360ea5e52828cf704e44e4f5283d2a67f3be2652907a99094f31f0n/a 
2019-03-292019_03_US_INSTR71906552617428752301___362737720203743400.zipzip c1db0dc8f2c8b45af0a62aa4ca1a92624e75e2edfcde5911c5182da0a0d0b0a3n/a 
2019-03-292019_03_US_US2614069681333808___92475835551175774127.zipzip 1cac04972378dd3a7fb36244609df2b7fe45e2227c38005cf49e124e10eba98fVirustotal results 14.04% 
2019-03-292019_03_US_INSTR1721461479037658930___489338410726425405.zipzip d8507962a2ed40bd02ae3eca0f099db30ead17a79f4c75356e7b632521a737c3n/a 
2019-03-292019_03_PAY0486385370469738671___1419806400134.docdoc 30e2f0be8888710bafb29f3f625d2858a3d7444dd1a905d8df7c49a0fd27310dVirustotal results 23.33% Heodo
2019-03-292019_03_ACC62371321108296___470169877.docdoc 57c17086a904186c27f64cb31165cf53879b95b02fa768597ce2c7722d217f48Virustotal results 25.86% Heodo
2019-03-292019_03_INSTR441923481638___538770089925.docdoc 6677c67824937db081f2760f9982c59c74f4addb2feeb6b43f984ce1333c5400Virustotal results 21.05% Heodo
2019-03-292019_03_PAY1993949291510298___3125394553254594835.docdoc 53c90d993545d80aa3817ed875889d903c4be7144883e079904b1793c0a46d18Virustotal results 21.67% Heodo
2019-03-292019_03_INSTR7084603737___155476487944411251.docdoc 58afaf1fdc2e3a055002f063652397668f50402d056f86b59209b33e279a42d2Virustotal results 24.14% Heodo