URLhaus Database

You are currently viewing the URLhaus database entry for http://findingnewideas.org.uk/cgi-bin/Document/BaLhDOzDEE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:233139
URL: http://findingnewideas.org.uk/cgi-bin/Document/BaLhDOzDEE/
URL Status:Offline
Host: findingnewideas.org.uk
Date added:2019-09-19 10:28:06 UTC
Last online:2019-10-04 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-09-19 10:30:03 UTC to abuse{at}aware-soft[dot]com)
Takedown time:15 days, 10 hours, 50 minutes Bad (down since 2019-10-04 21:20:42 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-09-195RJ5OXMT3M5.docdoc e1dc527ddd01751685ffd31b0ee88702bf085fe0e8239581a47a8ac5d33bd3e7Virustotal results 43.10% Heodo
2019-09-19AG_3663803746113697.docdoc c6bb2b187b930ae3e1961cca21da0cd7c45a1e951e41bb9e6eda662fa8108c79Virustotal results 43.10% Heodo
2019-09-19LLC_ZNKU4DFQK5Y6PE_A.docdoc de3f9d1cc7868c3012eb3694e5b8f2f266f8af3b009e901b7b5fa0212402b5b7n/a Heodo
2019-09-1999811977772908.docdoc 3cd85db96c49c7927e9f16a4f4997708a0c39a96627ca0766f709b552b7013e7n/a Heodo
2019-09-19IHHLSNN9F_XWG.docdoc 9f55055c4464a99618993210f9e008ecd03e9326f072273d42671a98be4b0b2dVirustotal results 40.68% Heodo
2019-09-19LLC_Q4MTE5PGO048X_WSG.docdoc a86f294dea22fe24f4104ea3473e11ba4f6436191597ad7c215801c770652e7an/a Heodo
2019-09-19INC_NWFBP4LJKDJU_PB.docdoc 2f9d4124d7bc0d5128bfb1ae19ec1655cfa759134e8e58aca79dcf137daa6a4fVirustotal results 41.07% Heodo
2019-09-19FT_68932682277873.docdoc 59d4c4c3d020a67452de6478627b3b929b072eeb1bb3cfa62d155ccde9589e88Virustotal results 37.93% Heodo
2019-09-19LLC_934098183406.docdoc 6cccbd8ff9398e0386de72be85dcd6c8518fa9ca2b0edb59ccde784df278ca6eVirustotal results 37.93% Heodo
2019-09-19SCAN_75DTQGZIZI49.docdoc 5f1d9413e25914d450a291cb6fac4d190d90a8b0338cc5b89a03eea3161d82fbn/a Heodo
2019-09-19INC_403633876076752_S.docdoc 0c5fc7cdd0bb3e771a04fbea044f30a10a4ba7faeccf968a90a0df59cc296bb3Virustotal results 32.76% 
2019-09-19SCAN_5948739994126575_09192019.docdoc b4039280d422b5967b0bd65d0e6c6e14779a96107db95f743e6ed22bb3431e1an/a Heodo
2019-09-19RT82BG67WTMYU8I.docdoc 4adef1a86dc5698daac2cc4fdfa055fe1f627baefa2da7cab9963cbc63cab0adn/a 
2019-09-19LLC_1006232444452_OX_09192019.docdoc d7db938ad87a941db1ae116587e8e4c6cb54efc048e3a0691cd5fc83718e8258Virustotal results 38.98% 
2019-09-19FT_339224191333411_R_09192019.docdoc 742f1c5332407b762e59e80cf669f82e4f52d1fc7d8b325b2032349cbf15df58Virustotal results 25.86% 
2019-09-19RE_7T4ZFUQA5_AIX.docdoc 05340fc48c62bcc01ac5af76cf6318f8998d474a4fe7b084d89afc1e2c55ae9eVirustotal results 27.59% Heodo
2019-09-19BL_2LFCD8KG7A9KS_09192019.docdoc bfa6d60215ee3a2d405dac8113821270edb2c9f905606be6619212f2e3d6a9baVirustotal results 24.14% Heodo
2019-09-19BL_0138076763000409.docdoc 7966a29a6ce29618612b8f0b33fdc1ff135591856d0d3e18b551beb7abab28b8Virustotal results 25.42% Heodo
2019-09-19DOC_FCXEVU8H2GE_S_09192019.docdoc 203d6ad628c33aa18728ecfc19cbd2679b59095480c8a87af6a7f640da6ab15eVirustotal results 26.32% Heodo
2019-09-19SCAN_N9L9UT276A.docdoc 06c0ec716991d480b71433ccacea9eae43f03e334a7efdc709e68ebd8b19956fVirustotal results 23.73% Heodo
2019-09-19JO_ETJMKLYBPR.docdoc 4c696a748f8cf0b944d8491fdea838b8a360caf80254529b3e5dc906a0b855a0Virustotal results 25.86% Heodo
2019-09-19FA_DAUBBUXA76KF.docdoc 6de6944b379ba7346d5a119aa7c25c46a439746822d01ca89c822c11206ce7c0Virustotal results 28.81% Heodo
2019-09-19RE_5KEGEVEWGTF1B_09192019.docdoc c3ff86a60fcc72f9c85570dd5a46178ac1024eec523976b3dbcfe633b2325d11Virustotal results 27.59% Heodo
2019-09-19LLC_1JI8DIS0UO2.docdoc 9d5b7b91926883f68db46fc8b525e8ac6238edb841cc04d4c9a08e9bd6c6e509Virustotal results 31.03% Heodo
2019-09-19SCAN_0943058783_J.docdoc f7adc55aefc419ecd17e66583ae04a075c290d5e1ea9de1e5915ecaa67759a5bn/a 
2019-09-19998872487475736_09192019.docdoc d551e8abe087de961c70694a751c39ebef48c4868d0435f266e2b81f418a0f62Virustotal results 23.73% Heodo
2019-09-19SCAN_75846323053911_09192019.docdoc 0b78d373dfc45563910974a47cfc39cd41d3729b80483638e056e9d99fea71d4Virustotal results 22.41% 
2019-09-19INC_O5H4WUQ1QDLH_XM.docdoc 831385b22855d1d331f37bb9d7edbfcd008cebdd1fb51b63b993103950141ff9Virustotal results 22.41% Heodo
2019-09-19SCAN_49405285411635563.docdoc b6f9a2ce267311c1f197215fc9fcd791b0cd53d5d82a5f9ab4c167b427e3079bn/a Heodo
2019-09-19I54MRCI8FE4_09192019.docdoc 7072c9e45facf56b99407af7b5bd125273dd64ad7315cd186e57afb1a70c2500Virustotal results 23.73% Heodo
2019-09-19RE_9345793033583715.docdoc f1640462674493674d17d96f0e320952124fbc9a3cb386dce5bba6af0a446cf2Virustotal results 25.86% Heodo
2019-09-19INC_OT6DPZ3OWF0KCV_SHK_09192019.docdoc 47c0adbb3e78aa5317ba38ca2dca6182c468cecd3bc868cfcdc24d3f5434d1caVirustotal results 27.59% Heodo