URLhaus Database

You are currently viewing the URLhaus database entry for https://www.glamoroushairextension.com/redir_mail/Document/kShXMWxIJhRoELoUsEFRMo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:242400
URL: https://www.glamoroushairextension.com/redir_mail/Document/kShXMWxIJhRoELoUsEFRMo/
URL Status:Offline
Host: www.glamoroushairextension.com
Date added:2019-10-10 00:58:08 UTC
Last online:2019-10-11 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-10-10 01:00:08 UTC to abuse{at}linode[dot]com)
Takedown time:1 day, 8 hours, 50 minutes Poor (down since 2019-10-11 09:50:41 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-11PJ_FA2TEF6UZJLBOT_10112019.docdoc 069e184bae8a676d584ca8df23ea4ba998ffab0b067d031cdac1df7a041a6bbcn/a Heodo
2019-10-11INC_0391217775_PVK.docdoc c92ed8fad0f453c7460aadfd8bf687d5cf99560115dddacaad75833aa40e0b6eVirustotal results 17.50% Heodo
2019-10-11DOC_8SXSA75PT1XUT9_10112019.docdoc fce3cb5ebf184419ddfb0eec24a4a0eefa9b581366ac8a6ba9faa8308979e401Virustotal results 22.81% Heodo
2019-10-11FA_241310689286_10112019.docdoc 7bb9b68f8f2c198f14e3d91780d43c593393fe8034f433553c9f06af24c015c7Virustotal results 34.62% 
2019-10-11FA_9913874161.docdoc 4a913d6da563604d246a53c01a1652da032d6c6baf9fa1bfccf650635555f97fVirustotal results 33.90% Heodo
2019-10-11FT_ECQE6HMVCUBKB_10112019.docdoc bc6d39faad64e70a270ea4eb06fbcf05c459349b21ea6420f3a04ca23e3cfa3fVirustotal results 32.20% Heodo
2019-10-11BL_7504586045221321.docdoc 5abe8af115d25a49da2b007f9a0220518b72ce4b5ba70f6f243157b240c15182Virustotal results 34.48% Heodo
2019-10-11INC_SFO3CJMNX.docdoc edd0ab17a61f95c20b02d9c7b58ef29911fc287846fdd80d6804d7e325e6b4e5Virustotal results 32.20% Heodo
2019-10-11BL_49835595420_SI.docdoc 33bd1e5d97265753389685d400934b69456479b92137b4b4ff0457e83e7aa8cbVirustotal results 33.33% Heodo
2019-10-11FILE_9875208932.docdoc 803eb60e4df6ced789199f41674ab0e5521dbb469d32ad3a2adfff2a7a2da2d7Virustotal results 30.61% 
2019-10-10LLC_QRM02LXI3.docdoc 51de13d18a23740342f1c681de4cb6c2baf116f2a4df4730c5338439d05823e4Virustotal results 35.59% Heodo
2019-10-10KGNZQ322Q.docdoc 47cad341e26f67d00adaf1c4e3d0adf77eafd64d24999e35500e364f046361ddn/a Heodo
2019-10-10BL_747899554779870_IY_10102019.docdoc 7a8a800c29c6e9dbf732d98fd5eccb9e78078101fee30d287dc534e83e58a22dn/a Heodo
2019-10-102415687262212.docdoc 96d72d099703821a74e753df4760328a454da48615b5ace2be89e19607784a76Virustotal results 31.67% Heodo
2019-10-10AJC_6EZHCSYZSD04A5_FT_10102019.docdoc 2edaea083ea39aab08670d19867627d5516f1f78efff05973e3524c3f897a4c9Virustotal results 27.78%Heodo
2019-10-104457283313125_EW_10102019.docdoc cc4e1646b1d94db4dae3f14ca2a85a2c46fc3ed193833e0913959b4a07904e64Virustotal results 30.51% Heodo
2019-10-10INC_OQJH1ZIFUWJJ_FY.docdoc 8a55de0566e608798651dff59eaf776fc3a270c09091862fe1e0a089a9a68122Virustotal results 30.51% Heodo
2019-10-104749341094894507_BB_10102019.docdoc 705e55a252475b5ae7fa7258eb04be795347a8eeaa929dabe7660e33ed392264Virustotal results 30.51% Heodo
2019-10-10INC_K8TK62GCV.docdoc cc82bc7177f26107263871628ac0c38e385d8f26010182f0f7fd6352221fca33Virustotal results 26.32% 
2019-10-10FT_59416010260334_Q.docdoc a9c3dd24c5d7018ede1f2c2ed330ac15462510f7bffcaaf8badbdb5a4da623aen/a 
2019-10-1051202516309091_10102019.docdoc 7e5c45cc547d770601dd7dcc29186fcc8ad1e00dd7d36ac9d58b9dd279998dedVirustotal results 26.42% 
2019-10-1013336089504_K.docdoc 6be777f2b8c34feaf939fe6e2732936d1b70f7e8a72ef9ad07bb38b42fb68551n/a Heodo
2019-10-10BL_6575114924106.docdoc 86b8b4f6962aeb0aa7ec20cb11c345340fcbfa394b651a238e989de896065584n/a Heodo
2019-10-10DOC_5743451581481128_JZ.docdoc b95fe809d7d628b0f222e07defab508432feaf10b7793dbf665671987ddda6e6Virustotal results 25.53% 
2019-10-10BL_Z4VOQ20XDU.docdoc 361b9eb186d6b5b0cb035335a8b2ed19979af4d7f407455891188860f1b82fdeVirustotal results 25.42% 
2019-10-10FILE_TZ8OYGPAHLIZ53C_R.docdoc d6ba47dba7a4b5d3edbc954990704573281e71239ffd59490f13290d2f19694bVirustotal results 25.42% Heodo
2019-10-10FT_0930555155499925_ISL.docdoc 861d17c81ca38671d9c3e1aca61ac0e839d18c12f206a5c1f414f7f85c310cfen/a Heodo
2019-10-10RE_2255776712220715_L_10102019.docdoc 559caa2233ddc0f6cddc50ba23ed9556cda00af17c9154d7222f839f04022bf3Virustotal results 25.42% Heodo
2019-10-100353845467181.docdoc 6d12ec981fc193f0f70e1396c9b5d1c687a0f922e8d3abef29aea87a92c97603Virustotal results 35.59% 
2019-10-102007726958937338_10102019.docdoc a62b9fe2845005b9d6c3a84b44e7553f810b5ec1080b4598789ce4cfdc314e3cn/a Heodo
2019-10-10LLC_699273841783848_S_10102019.docdoc 3f90a20aa7c21e5d785814d6521649e9b99c8dffe61a910e5ed63f8a70bac08eVirustotal results 37.29% 
2019-10-10SCAN_56415356503.docdoc 7344c6d38f46a38419082b72d7ee3d622be05dc86c93e87f55600942b8da470en/a Heodo
2019-10-102934806759605_10102019.docdoc 0c421092cfe868bfc29d2e6f007bf424f8d02edf05fda335f832f5d67fa57d27Virustotal results 33.93% 
2019-10-10FA_25732145215358_N.docdoc f9cdaed775eb3635df2b10e792da181de1c0fd3e9a5f01f5b7ead25ebfc9bb9eVirustotal results 36.21% Heodo
2019-10-10VOCYZ87TGQKS_10102019.docdoc 13deb16765cfd9f4316397848bb834def766955e5c37a1056732e6df278ee646Virustotal results 30.51% 
2019-10-10FILE_899108444371.docdoc f0229f9d03be90dd3424637d9832125d43a75e6f65a4aa5ce92fcc192b303111n/a Heodo
2019-10-10SCAN_91595041116.docdoc 6da107e20a4bde15076e46114cd08f53e2a082c6afd30a36b05de9b97fa66474Virustotal results 34.48% Heodo
2019-10-10LLC_7540877044340802.docdoc b4dd04c27697f3b87422d720c09d3a81af3823ba993e20e05de8a285932f047cVirustotal results 30.00% Heodo
2019-10-1010667696207_UQT.docdoc 144d03ea075288b15252acf044fc37f946c00e044fe29ede864507d477c3129dVirustotal results 30.00% Heodo
2019-10-10513718161065.docdoc 16aa536e17f9eae3fabff4fc9a99ee6112aa82c6bdc58dea62d7c0a44f9899faVirustotal results 30.51% Heodo
2019-10-10FA_67580595467_10102019.docdoc fc13915dcf6948edbe4bb35e72d68abc124fd2703b6d7cb8e54901b490010a75Virustotal results 30.51% Heodo
2019-10-10RE_KNWDPWL16.docdoc 6cadae1df63f52f3abcb5a95d3d4fe31b90f238da742e61e8edc716373a52375Virustotal results 29.82% Heodo
2019-10-10FILE_RM0TJNQR5632VE6.docdoc 4fc7f7b3f725c62a8cbc0ebdb3ce31b92406bd9fd895823d08e478c5440d3e36Virustotal results 30.51% Heodo
2019-10-10FT_3QQ35V6F63.docdoc e333768e423c4aa3e8d064045ab3245ce04700293b0ea520ebf5e5475ebf8da4Virustotal results 27.12% Heodo
2019-10-10BL_6PT6HIYOZ4WIK.docdoc 15d5d87f6ba3c6aee2c9a3f3bc9c4f83f6c42ed0ea305eec19c678160d6d15b3Virustotal results 27.59%