URLhaus Database

You are currently viewing the URLhaus database entry for https://www.progymrd.com/b0f45aec027284c2ee5cd3940b040b12/balance/j6btz9xm3/rrs-73960-64903-krrw2i-udum26m67/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:289679
URL: https://www.progymrd.com/b0f45aec027284c2ee5cd3940b040b12/balance/j6btz9xm3/rrs-73960-64903-krrw2i-udum26m67/
URL Status:Offline
Host: www.progymrd.com
Date added:2020-01-16 04:02:05 UTC
Last online:2020-01-21 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002249730 created on 2020-01-16 04:04:05 UTC)
Takedown time:5 days, 16 hours, 44 minutes Bad (down since 2020-01-21 20:48:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-18REP_25991835.docdoc 1b87dca51d54dc96b3647834290fe8eb26dea4d903394055ae0afecb207e1197Virustotal results 26.23% Heodo
2020-01-18PAY_TYP_010120_FWC_011820.docdoc 9ba523a49280a5213dbdd7832ba69bbfed94fe8c05f269bb8319c05003a1a1b0Virustotal results 19.67% Heodo
2020-01-18M3LDAOGTT2EN.docdoc a4b002f0eb008e944757b8bb96621624b36474ce06b5674bfcc7e43affc0b919Virustotal results 18.03% Heodo
2020-01-18PAY_PO_01182020EX.docdoc 910cf54e7950d880c8bc459c76df3dfa906226ac6eaa41adc218c83a0bf03078Virustotal results 19.35% Heodo
2020-01-18REP_DCT_010120_EGN_011820.docdoc d74eceb575bd923a2830c611d8cb087cb1c02fb5a4650236b6f67ab80b1609f8Virustotal results 18.03% 
2020-01-17FILE_61630932.docdoc de952748c6ec69af07599737adcc6f274bd8c73dc723cb218c14b290d2ed6600Virustotal results 22.22% Heodo
2020-01-17FILE_65918639.docdoc 46e6a6ef604b33772391a0e93998b795f147ebac0df49fcd398acfa468000e64Virustotal results 19.35% Heodo
2020-01-17FILE_UZ8578723746DD.docdoc 7de2404e9638e8fab7b324d2df37fdce114f9de3bd3d24d923bba09efde0853eVirustotal results 19.67% Heodo
2020-01-17P_PO_01172020EX.docdoc dc39f6329f9d5e3ffb4bdb5c07b09c998df175286575e1859da2fa4d3e30fa76Virustotal results 18.03% Heodo
2020-01-17ST_TI0147884828OA.docdoc 77a0a8de225a0e6c5933bbf470c5ddc67e19d5ded59985a1e7a1b2316241ccabVirustotal results 22.95% Heodo
2020-01-17DOC_95698363.docdoc 2dcd7158664b730a2b88ed5e36ff5fc8da8a49a3668ce6f3bea6a364bb4ccca2Virustotal results 19.67% Heodo
2020-01-17INV_PO_01172020EX.docdoc 5adadeaaa1059838cc3e87dbe95d95cc37a4699a94fa1ebb2f4e85e67aae6d3fVirustotal results 20.97% Heodo
2020-01-17INV_72803474.docdoc 7bb5fdc2f055e22227b6471aa23ea22c95fa0235bc96bb40893513d1fc6e6d76Virustotal results 18.03% Heodo
2020-01-17231277650401116423.docdoc f1569c025b21d44c68867d142ebb944c3550240673430dceaed626e80acf386dVirustotal results 22.58% Heodo
2020-01-17DOC_PO_01172020EX.docdoc f551cce962d17fa9a9a26927436adcd8505c5a675436833b8c386606fc612434Virustotal results 21.31% Heodo
2020-01-17INV_PO_01172020EX.docdoc b0e00f2c53eff02aaee7134670676339aab802de2cd8af0bdacb94262e79f777Virustotal results 19.67% 
2020-01-17REP_LZI_010120_SZE_011720.docdoc b341338022811ab111de218e305ca99facf3a53ac083bc122255f0c2c9b8fd79Virustotal results 19.35% Heodo
2020-01-17REP_MT35L7DI.docdoc 496e82b4aac77a47fcb312c63e8f4061b480c523124f87e037522a5ecec5aa5bVirustotal results 18.33% Heodo
2020-01-17DOC_585621962608421.docdoc 541cafe691e8266f1c35a6b075b44aef3accad6dc2024f8bb0c11717dfc54788Virustotal results 19.67% 
2020-01-176SY3NFXA6.docdoc b5ac425bbd42f1b2ed152ff5780b068beed93876115fb53c98f459235d0543acVirustotal results 41.94% Heodo
2020-01-17FILE_P0M1FWZ8T4050HAG.docdoc cab5a457395c329bad38f329fe4d098cc23a094dd70ab7f4af0d5a34f6643349n/a Heodo
2020-01-17REP_CO5564221883VX.docdoc 534d37a11e695ad6fd5b23ac1a8cb87571a5865e5651f954e3fefbf355ac737aVirustotal results 40.32% Heodo
2020-01-17BAL_NDT_010120_LXB_011720.docdoc ab93bc28a4a2dba3db6e1c25750476a6691de8988744db041f23d9d5c16e03a5Virustotal results 37.70% Heodo
2020-01-178RV0Z1W.docdoc 2ef30359fa19b8295e05830296af78c6c2326d58fa4425b89cc5fad87b12cd45n/a Heodo
2020-01-1672455070.docdoc d23312405180de696dddfd239bd35ddbf03ed7f9daa621df1345be180d9f8517Virustotal results 37.10% Heodo
2020-01-16JNJQ_JL2969867881QY.docdoc a1a7bf3c673d0f16683303b44ae4f3aac3b77e1d419397ea09fc45b3a5b9dd77Virustotal results 35.00% Heodo
2020-01-16PAY_33379631.docdoc 86cbc728df6a04a246a877012acd772a8880f516d4dd8a9bd746a3298af1be0eVirustotal results 33.33% 
2020-01-16FILE_553833230419.docdoc 6dc7f5025f0a9ba2abeb82a8db9a479f41a3a3ec8b558455b930d54029108638Virustotal results 30.65% Heodo
2020-01-16DOC_AELIDBVWJAA72.docdoc 67e4ad463f707098e9dd3aa9ef44543687de41237cb6bd15500e428aa17c34c7Virustotal results 31.15% Heodo
2020-01-16BAL_52961380.docdoc 8bf5586fdf5c09bd987b2246b8a60988842d2b3ca683a4fdd6f0a698d17909b0Virustotal results 26.67% Heodo
2020-01-16HM4690670216XG.docdoc 0e0dcd97d94a05bf1cf56067a564fe6ba5666bc00fbb808c44bb4c17a5bd81a8Virustotal results 26.67% Heodo
2020-01-16RH158AFC800F75D.docdoc 1126c643bff1cbc4e48db0e96c1bb7522d89a64e31bccdf10629cc5402a5bdc6Virustotal results 26.23% Heodo
2020-01-16VCV_6110739161582.docdoc 14aea8de9f3177801134498a4f81de17f490b3cd087fb826e8383a2b1f1e7049Virustotal results 26.67% Heodo
2020-01-16BAL_PO_01162020EX.docdoc e01f0d1e2f3493dd4ae4dce4cb3f9756c92ad2d7d28ffa495fd8abe649418e4cn/a Heodo
2020-01-16FILE_YMO_010120_DJK_011620.docdoc 2fab2f5e3f28d6a81ba72956df8ac00de3d7dbea09496ae791fd20a7954fe1ecn/a Heodo
2020-01-16ZH7384473817UH.docdoc 9b114f67484468604da8e6d028500f9e0fb32be159dc5dba550cd295be425b1eVirustotal results 24.59% Heodo
2020-01-16REP_OFFXSO4Q2872KN.docdoc 0380f6335cd6139d31d45caa6a9fb8b005cacf5c7e59ffacace9958c98a7ce2fVirustotal results 21.31% Heodo
2020-01-16OQ_PO_01162020EX.docdoc ac455a9a5066d38bf2bb7cfa95c60a34959edc18804a3f43c1751943aecb2777n/a Heodo
2020-01-16JAS_010120_ZGY_011620.docdoc 703b07275efea992224279b516f2910a007ce6c71217c6c00557d10fd68cac74Virustotal results 41.94% 
2020-01-16BAL_RI7003180613LH.docdoc 34811f0fdf2229b5da68d8b86b89a4eff60d73cbaa50fb91799fd51adec800dbVirustotal results 42.62% Heodo