URLhaus Database

You are currently viewing the URLhaus database entry for https://arqdesignconstruct.com/cgi-bin/Document/z3i6dd45/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:268207
URL: https://arqdesignconstruct.com/cgi-bin/Document/z3i6dd45/
URL Status:Offline
Host: arqdesignconstruct.com
Date added:2019-12-13 09:56:12 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?):No
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-14345037427975664.docdoc f33f53e47be8d145ac9cee1935abf849206375ba4e6f80013e3d2861c17a45ddVirustotal results 32.20% 
2019-12-14REP_AP7083020194LG.docdoc 7d7711be4c0a6b37c778a7b60fa904511f0891166d88dc4ae6ec48367d3a5f61Virustotal results 31.67% Heodo
2019-12-1431565323.docdoc 7cb2ce004956c533a28d83695e20fd6b02564df6ff33ea74de3d7b6729d54151Virustotal results 31.15% Heodo
2019-12-1430662091.docdoc 7e1c5673c56ecdac1d8680eda112c2fa815373a9431c240ceee34803b37c5941Virustotal results 32.20% Heodo
2019-12-14R_GP6036311627LA.docdoc fcba535746c8fa21eb1f9c498f35e9df3c1afe9251f6f8657ef2bdcc3d3f972eVirustotal results 31.67% Heodo
2019-12-14PO_ 12142019EX.docdoc 02f800e5fccbe66d6563a9c6ff9c5246849a724263676a653e91e98de3c48e0eVirustotal results 30.51% Heodo
2019-12-14PVQ_120119_IYX_121419.docdoc 77f5a886073c551c2159a1b8cd505464c46f3f5108f91c6976b92a2e6c2fcac9n/a Heodo
2019-12-13DOC_40541275.docdoc 177485095e3a0c626b7d05e86d8a9cde1f2d5a9448e9f1f65393cd5282bd936bVirustotal results 31.67% Heodo
2019-12-13E_894784812059.docdoc 0760211996fc0cc9fa393e5f30f10051c9fc773288027167e6131ce26e12aa5eVirustotal results 31.15% Heodo
2019-12-13XRS_DQ8335727889BP.docdoc bb14b2b318d9fa3adcc85909296d1b516d2e60b73b4c3347cfcf2bbb2448aaf4n/a Heodo
2019-12-13Z_CPS_120119_BGT_121319.docdoc a5609fd7ceaf1a37082aa9daa1062c06900e55018662eb97fc66035dd0536575Virustotal results 26.67% Heodo
2019-12-13J_PO_ 12132019EX.docdoc 18e65bfb2168b7789ca9f5019cdc0d619f0c2fbfe63bab22f112721bf335aeceVirustotal results 28.07% Heodo
2019-12-13REP_PO_ 12132019EX.docdoc f89538264a7e22ccebc45894ff55f363d10a82e0c70ab9cffab2758cf787ebb3n/a Heodo
2019-12-13DOC_OL1738055449VT.docdoc 7672328d284205d3ae9dd68d3842b671ea8393227ca046cfe3bc2f2b37ebc99fVirustotal results 27.87% Heodo
2019-12-13REP_606984028463240.docdoc dd0d6ee5d8038e136406532ba5ba86427b9637b3518b2a4cf26b5d4f058daecan/a Heodo
2019-12-13DOC_PSHGREG3XDI.docdoc 4640a1f47cdfb050fa7690ad2369a986641ae5d7b0072441060a7e099629cc43n/a Heodo
2019-12-13C_PO_ 12132019EX.docdoc e6c50efbc57df66b0be7c45a8c043db17ce0c404570c3b2fafbe6ffa46d9f0d0Virustotal results 27.59% Heodo