URLhaus Database

You are currently viewing the URLhaus database entry for http://hbsurfcity.com/cgi-bin/public/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:288741
URL: http://hbsurfcity.com/cgi-bin/public/
URL Status:Offline
Host: hbsurfcity.com
Date added:2020-01-15 04:06:06 UTC
Last online:2020-02-18 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-15 04:08:02 UTC to hostmaster{at}arin[dot]net)
Takedown time:1 month, 4 days, 0 hours, 56 minutes Bad (down since 2020-02-18 05:04:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-17REP_89419812646634117.docdoc 70b4dbed87a8be890a088d70057ce44413bf3a65df5c5c15d049de0b9c47ff8dVirustotal results 40.98% 
2020-01-17INV_81558240.docdoc f3f139df5bc086f20c3615226f506ba9b565e31921ad9184f0f9df71be52f78dVirustotal results 40.32% Heodo
2020-01-17RP_48497371.docdoc 3043a168a6f8c789c5ee4620047e06b338793136d2b2346dbfb4b03aab593baaVirustotal results 37.10% Heodo
2020-01-17PO_01172020EX.docdoc 48844b331c7b74aac980dd55bd8d8388d187e2d3041712303c59644ef3fa16b7Virustotal results 36.07% 
2020-01-16INV_PO_01172020EX.docdoc ec7daa97138174c5878ea751f64fc280edd5c475f1ad353be67afe6c74b2e857Virustotal results 37.10% Heodo
2020-01-16BAL_HUBW3O0.docdoc 8aa03e0069da2642cdf2b5951f6fc50e9bbdacd01a38e0e6c8d636a1afd522c7Virustotal results 38.33% Heodo
2020-01-16BAL_PO_01162020EX.docdoc d13b7bb583d3175a5a66a45e56f859a8ad4f514b8461da2c589fd74c69bc4b3eVirustotal results 35.00% Heodo
2020-01-16REP_FGO_010120_UCD_011620.docdoc e314c8b472db81404961016b49758c54595600e83fa2801d5cba0089cb8b2223Virustotal results 32.79% Heodo
2020-01-16E_AOA_010120_UGE_011620.docdoc bc85a963caeacf32943c486ace740c260a41b6f16d37de840fbd42f30c6e26f3Virustotal results 29.51% 
2020-01-16PK5762543762AF.docdoc 3c99ebde95d760948c4ff5db925c0272ec89b8409d698aab26e5785a42c88243Virustotal results 26.83% 
2020-01-16DOC_PO_01162020EX.docdoc 9aa8f08a047314cbf2c0a541131a486282da8e2657c69fd731624e2823ada6c2Virustotal results 27.87% Heodo
2020-01-16BAL_NL8530856535WU.docdoc 9f4da832f24c0e39b95877f4c80c90136213e57097a2c563c359c51721c4af35Virustotal results 26.67% Heodo
2020-01-16P_67336565.docdoc 743632f16eaf4dffd8109a5ea7c14e341db9af20a96f44838a046b9c6b183fdcVirustotal results 25.86% Heodo
2020-01-1627916794.docdoc 9d8dbba8a0e996de7449c8dfe3136a7eea73a02e9b6f67a095c53c54abb04111Virustotal results 24.59% 
2020-01-16PAY_IKH_010120_XYR_011620.docdoc 21222de7dc129cc2ceb960d884aab5660f053b0186d85f48f302257ae6075bd5Virustotal results 25.00% Heodo
2020-01-16RP_ZAM_010120_HMK_011620.docdoc a7d3f5474bdca4af088225b9280da969e8678960b6768ab6944a72866252c9dcVirustotal results 25.42% Heodo
2020-01-16ST_EL7432640701SO.docdoc 791dc93ca83900c29d93fc3641d199b853413a23d3899b119ed619f9223cb20dVirustotal results 22.95% Heodo
2020-01-16SW_PVA_010120_SXY_011620.docdoc b56a6e25f16b75f974d90ac920bb38757ba86412909d0844c3195a7b0a04c757Virustotal results 43.55% 
2020-01-16LV6969440593JB.docdoc bbc7c13dbd64502c59d3890785c0a821310d29c04a915a23e62c31ed0756aea9Virustotal results 42.62% Heodo
2020-01-16BAL_06PVCL242RREWS.docdoc 95b02c0e112270751b5fe7a49866ed9d31594f0b8d26e823e2242bcc3b902b26Virustotal results 42.86% Heodo
2020-01-16DOC_RP9016645536TP.docdoc 13aa89755abbea10d5958e7b1d6d8440f1b6cb0d866e6ae70de9a7513e80e409Virustotal results 40.98% Heodo
2020-01-16272898993.docdoc 01d706d0a5e27c62abe9a72200925c5e23ed3c309ea88354dfcb55b36437c3eaVirustotal results 40.98% Heodo
2020-01-1554950418.docdoc 8a8e9cf03bf716afc717c9f37e86050a9d95c576836b48423d8c1b495831a54aVirustotal results 40.00% 
2020-01-15RP_21759394.docdoc c1c7fc8ee76da4f1696fa2d918472cacd777e5fe281acbaec5d12a85d98fcab5Virustotal results 33.87% Heodo
2020-01-15B_DSJ_010120_LWT_011520.docdoc 5cef7f012587358911420986b0a10b3afc376e71cbcb62ae2369409a2949e714Virustotal results 34.43% Heodo
2020-01-15FILE_3291005158946.docdoc 60d2c8f3e62e237ab3c9d9f1e822485b7cb0751b9c389cb2230222adfd189a97Virustotal results 32.79% Heodo
2020-01-15DOC_SC7YLLI0QC0.docdoc 93ab67a92f697263656aeaeb5f01d856f25f562772e46a1a486dfcc777667020Virustotal results 32.76% Heodo
2020-01-15EQWL_26532066.docdoc 287ae14e3b1562662edbf0da35eff337a49d911c07fb02c48b681dc3cb8aa7bbVirustotal results 33.33% 
2020-01-15PAY_29380269.docdoc 1ed83f7ed0265fbb7fa1006f405773d31c4b7069ebfbbb6086f0196160f3d143n/a Heodo
2020-01-15PAY_225550238824112.docdoc cd776c68266bdc9dc86cee87e3c792b2100546c13632f5404c8ab9016484c8feVirustotal results 25.00% Heodo
2020-01-15INV_DPCUVG4O.docdoc 04f04f3107a199ae3c5a4ffb960173fc3be31f5c86183d0cb27a23c927d6af45n/a Heodo
2020-01-15DOC_TT4321921760US.docdoc 2d5822aff83315cc778085dcd69fd73f82a4cfe94592529b93dacb256fb97713Virustotal results 21.67% 
2020-01-15SW_50168388.docdoc 0e0a399c81d33e87b7aab322fbf562d8c4aae27cc067a553ee092f13bc71221dVirustotal results 24.19% Heodo
2020-01-15FILE_5266668811.docdoc ae23c3284230d31527a8b2f8a4721cfa9d31535c93604fcd9be10894eeffc01bVirustotal results 18.33% Heodo
2020-01-15ST_WS1401632032ZT.docdoc b58af543a114f02eefa12324cd48a81e69239da04a6fd4bb9cec8b32fedc9cd2n/a 
2020-01-15O_PO_01152020EX.docdoc e4fa19c4736ffb554aacdb6de08c4ad081fd55105dddc85b31eac5c6082e601bVirustotal results 18.33% 
2020-01-15U_ZB0192154565ND.docdoc d3edd09e8e4e9e89dbff176e69131f189175abf1a598c18593a3bb194fc45c2eVirustotal results 37.10% Heodo
2020-01-15PAY_8753177800.docdoc 820f11901fead4aadbacab2f352f3ec7cd56b94f1ead705c5d48a465ac8f1c21n/a Heodo
2020-01-15C_29259178.docdoc f6ff60ba7fb068389af0228e4d9700f5af7c0720f1c12852ab0dcf5612244b8cVirustotal results 34.43% Heodo