URLhaus Database

You are currently viewing the URLhaus database entry for http://bimland.info/inoxl28kgldf/WOmeZ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:264679
URL: http://bimland.info/inoxl28kgldf/WOmeZ/
URL Status:Offline
Host: bimland.info
Date added:2019-12-07 01:41:41 UTC
Last online:2019-12-09 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-12-07 01:42:34 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 days, 8 hours, 41 minutes Poor (down since 2019-12-09 10:24:11 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-07Invoice_URG12_56.docdoc e4d7d49e9ef80bc034115f9c6bf145e8970266cb42641ec07f3bdeac913f83f6Virustotal results 29.51% 
2019-12-07INVOICE_OLS91_4007.docdoc 65ba2c4d3011c71bce4c383b85c4954e3559fb60c3f24c64a13ef9a0a2432b12Virustotal results 29.51% Heodo
2019-12-07INVOICE_LF465_149.docdoc d647d1e25676f5988634d5871f393f92082227370a36a693840987c1533f848fVirustotal results 29.03% Heodo
2019-12-07INVOICE-IB33_70.docdoc 656e8d34bc3b80becdfd222548aa204d6236a8a8784ce0539f5ff959cfcbe71cVirustotal results 29.03% Heodo
2019-12-07INVOICE LH875_15734.docdoc 313b489b12ace9896c695a26e88f891345bf80e196b11b2f0599cb4fcd7a7641Virustotal results 29.51% Heodo
2019-12-07Inv UT508_29881.docdoc 450fd1bbf14d8d4e48dadb9f784618395a08f88633a160129899058ddc19a1e9Virustotal results 30.00% Heodo
2019-12-07INVOICE-SDE48_20982.docdoc 819273b637aa3d7db7f8e436d37513443d2eb96b7d449bf11cdd3f1fc221d2b6Virustotal results 33.87% Heodo
2019-12-07INVOICE DZH89_178.docdoc 7a743f758e06530c4d7aaa024ccef94eb93f201138417160a6937d28b26dce17Virustotal results 29.51% 
2019-12-07INVOICE-PA992_66381.docdoc b054d5c24000a5522efd15548f94898649578e30626e6d23c160d78c8bbd2b95n/a Heodo