URLhaus Database

You are currently viewing the URLhaus database entry for http://overwatchboostpro.com/e46a70d24f4162901a5dfbc139b40d49/lm/37-2371894-54-3l6f-2cmce/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:288609
URL: http://overwatchboostpro.com/e46a70d24f4162901a5dfbc139b40d49/lm/37-2371894-54-3l6f-2cmce/
URL Status:Offline
Host: overwatchboostpro.com
Date added:2020-01-14 23:10:04 UTC
Last online:2020-01-28 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002245643 created on 2020-01-14 23:12:06 UTC)
Takedown time:13 days, 21 hours, 20 minutes Bad (down since 2020-01-28 20:32:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-17REP_26555379425619739773338.docdoc 2f5f02ab7c403bf7cabfde4543cd67c4baae4e07b00cc6896f94409a43ecda6eVirustotal results 36.07% Heodo
2020-01-16REP_26982480680797189827.docdoc ec7daa97138174c5878ea751f64fc280edd5c475f1ad353be67afe6c74b2e857Virustotal results 37.10% Heodo
2020-01-16INV_GLG_010120_BUF_011720.docdoc 8aa03e0069da2642cdf2b5951f6fc50e9bbdacd01a38e0e6c8d636a1afd522c7Virustotal results 38.33% Heodo
2020-01-1613942160.docdoc d13b7bb583d3175a5a66a45e56f859a8ad4f514b8461da2c589fd74c69bc4b3eVirustotal results 35.00% Heodo
2020-01-16MC6309768045DU.docdoc bf08f22796d9bd2305d29ef668a5b81ee6ef9d07b49827d05b88f97c74a4b249Virustotal results 32.26% Heodo
2020-01-16Y_81219750.docdoc 67e4ad463f707098e9dd3aa9ef44543687de41237cb6bd15500e428aa17c34c7Virustotal results 31.15% Heodo
2020-01-16W620TB47N.docdoc d2ce1838da599f490397183272a746696999155f408cdd5da5d82c3ae1df24faVirustotal results 29.51% Heodo
2020-01-16H_35561549.docdoc 3c99ebde95d760948c4ff5db925c0272ec89b8409d698aab26e5785a42c88243Virustotal results 26.83% 
2020-01-16RP_R8KK5FSIQJ1.docdoc 9aa8f08a047314cbf2c0a541131a486282da8e2657c69fd731624e2823ada6c2Virustotal results 27.87% Heodo
2020-01-16T_MHR_010120_GXS_011620.docdoc 3680aa11022e65dc0aa9498b0bacd2abf101723c775c04b4e5616eb8884b7ef7Virustotal results 25.42% 
2020-01-16RP_ER1997922619YW.docdoc 5ad80a1e76e0b9721143378d01e5d05b04126b5d13d73dccfc69c0f4ede0b7f3Virustotal results 26.32% Heodo
2020-01-16LBA_57100928.docdoc 8f7528de459c08404bb34b2b574940ad939445c0f2c6c701f5f220e4de5d7cd9Virustotal results 25.42% Heodo
2020-01-16DOC_UC1246789699HW.docdoc 149889ce5c8bb26fa5e97f596ef4a8b87614e01998f4bb57fb25c82ddd84453aVirustotal results 24.19% 
2020-01-16682921807086.docdoc c4d823db0828250eedf8e763728c2532d8b4320b79f9060ceba481dc8af37891Virustotal results 25.00% 
2020-01-16DOC_0801159445012057635530.docdoc 791dc93ca83900c29d93fc3641d199b853413a23d3899b119ed619f9223cb20dVirustotal results 22.95% Heodo
2020-01-164V6IXLZ8.docdoc 771ad3b2889d51eae42be0c3c53f7ab24667105d94fcd6e6dc93bca8ebbfcd85Virustotal results 44.26% Heodo
2020-01-16SW_RAC_010120_BSJ_011620.docdoc fc68dd9971f85e873151fa2dae765c3406a74e35a608879a7b46cc250986b63dVirustotal results 43.33% 
2020-01-16BAL_ZL7732104482WN.docdoc 54572874c5ba5d58e3c48380738c9001b672b0536489e2c9beeec54acdfb59a6Virustotal results 39.66% Heodo
2020-01-16BAL_MO5110262296QX.docdoc 13aa89755abbea10d5958e7b1d6d8440f1b6cb0d866e6ae70de9a7513e80e409Virustotal results 40.98% Heodo
2020-01-16REP_PO_01162020EX.docdoc 01d706d0a5e27c62abe9a72200925c5e23ed3c309ea88354dfcb55b36437c3eaVirustotal results 40.98% Heodo
2020-01-1596426344.docdoc 8a8e9cf03bf716afc717c9f37e86050a9d95c576836b48423d8c1b495831a54aVirustotal results 40.00% 
2020-01-15WSGB_449588079449.docdoc c1c7fc8ee76da4f1696fa2d918472cacd777e5fe281acbaec5d12a85d98fcab5Virustotal results 33.87% Heodo
2020-01-15RP_PO_01152020EX.docdoc 5cef7f012587358911420986b0a10b3afc376e71cbcb62ae2369409a2949e714Virustotal results 34.43% Heodo
2020-01-15SW_NY0849884269ZR.docdoc 60d2c8f3e62e237ab3c9d9f1e822485b7cb0751b9c389cb2230222adfd189a97Virustotal results 32.79% Heodo
2020-01-15JLV_78480744.docdoc 3bd995e4229e3d5adb81c3572c5278e730524b0774cc7a8c4ea710bc4be1ae33Virustotal results 32.20% Heodo
2020-01-15BAL_AIW_010120_QPL_011520.docdoc 2004c6f1abd300fa135b56f65c133ebad43e42aafae2b9b9726e3dd274424ea0Virustotal results 32.79% Heodo
2020-01-15RP_813189651956734.docdoc 1ed83f7ed0265fbb7fa1006f405773d31c4b7069ebfbbb6086f0196160f3d143n/a Heodo
2020-01-15SW_5245578640117287894045946.docdoc cd776c68266bdc9dc86cee87e3c792b2100546c13632f5404c8ab9016484c8feVirustotal results 25.00% Heodo
2020-01-15L_YOH_010120_PQD_011520.docdoc 04f04f3107a199ae3c5a4ffb960173fc3be31f5c86183d0cb27a23c927d6af45n/a Heodo
2020-01-15INV_SM250IOXC.docdoc 2d5822aff83315cc778085dcd69fd73f82a4cfe94592529b93dacb256fb97713Virustotal results 21.67% 
2020-01-15ST_HAH5B3JJLPVP2T.docdoc 0e0a399c81d33e87b7aab322fbf562d8c4aae27cc067a553ee092f13bc71221dVirustotal results 24.19% Heodo
2020-01-15SW_81225057.docdoc ae23c3284230d31527a8b2f8a4721cfa9d31535c93604fcd9be10894eeffc01bVirustotal results 18.33% Heodo
2020-01-15FILE_0ND55QMTC.docdoc 9982b18660c6aa9b8419bd84843d2d578fd2afb2516782ac69f0e7f8eee4efb9Virustotal results 18.33% 
2020-01-15INV_CZ9571376716ZY.docdoc e4fa19c4736ffb554aacdb6de08c4ad081fd55105dddc85b31eac5c6082e601bVirustotal results 18.33% 
2020-01-15DOC_D4FAN99T6GFTCV.docdoc d3edd09e8e4e9e89dbff176e69131f189175abf1a598c18593a3bb194fc45c2eVirustotal results 37.10% Heodo
2020-01-15INV_GJG_010120_XHZ_011520.docdoc 632e28a523c920e3035782ad086e6d3f0e39445486e86e7ce6a05c0e4f337292Virustotal results 31.03% Heodo
2020-01-15BWM_PO_01152020EX.docdoc 17cbb232fc64e8c775b7ed47a28ec7a2cfaf6cca790994fad3c41fb60a648062Virustotal results 33.90% Heodo
2020-01-15XCJ_65267410.docdoc 034990a391e5f5b4b78bbf31e212983fd1931af4612b462084fd622f1dcba68eVirustotal results 31.15% Heodo
2020-01-15SW_28325134.docdoc 64a7bbb5697dab97fb723824a2f3456c67f88435cb51e3be9f99b0b9c6652186Virustotal results 31.15% Heodo
2020-01-14SS0J3OODIASESNLK.docdoc a1baf5a0d42e54e55ca8951b6c1a58a9dce4268a95a768b7474c6f4a59e5e84bn/a Heodo