URLhaus Database

You are currently viewing the URLhaus database entry for http://am-concepts.ca/edithluc/wR/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:290520
URL: http://am-concepts.ca/edithluc/wR/
URL Status:Offline
Host: am-concepts.ca
Date added:2020-01-17 01:23:08 UTC
Last online:2020-01-27 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-17 01:24:03 UTC to abuse{at}continent8[dot]com)
Takedown time:10 days, 13 hours, 50 minutes Bad (down since 2020-01-27 15:14:42 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-18INVOICE_J5_7214874.docdoc 2f90590da13be020cab94f6054224224af5d674bb07964796cbb051cef5dde3aVirustotal results 27.87% Heodo
2020-01-18Invoice V37_434917.docdoc c0ddf7ec4f4905aaafd9371d7d00d8bd21bf9f5d9d49403591e1cfbde36925ebVirustotal results 24.59% Heodo
2020-01-18invoice SWCG15_1063682.docdoc db670e32ccf692c3e85cf5a07e047bb337af24ad3de408d8894a3c0ca2b8c505Virustotal results 21.67% Heodo
2020-01-17INVOICE_IE523_822212.docdoc f95984ef535315242fca3fc45cb952c5918ca8fecb789f8a803e4e1471a25c94Virustotal results 22.95% Heodo
2020-01-17Inv-7_13267400.docdoc a8c4e3f1c16e9ff3857699615d8f6bd392a4d88dfdc6f9dd9b43b523ac3158ebVirustotal results 19.35% Heodo
2020-01-17INVOICE_XR91_0773507.docdoc c1773292833e3d31b42687618328bfc2e893bc2262b9d3ddeda0dd585eb5446aVirustotal results 19.67% Heodo
2020-01-17Inv-SKB757_9856972.docdoc 3f227c11e8835a6cb877438bf4628c9b105553fa1fc681389fcf5bd5574dcfa0Virustotal results 19.35% 
2020-01-17invoice_OCCC071_7499596.docdoc 44a7800af970884939e0d1e420aa3f140610c62a0a1e7d207cc020b9971c6c2aVirustotal results 21.31% 
2020-01-17Inv U3_9263731.docdoc 5b5d276c15b051d7bd90d0a94065b9989ff8678436c073df253abb3dc9d5f2c1Virustotal results 22.58% Heodo
2020-01-17invoice_GBJ193_23181151.docdoc 018cc6963adf64407368f4665b5886285f6f5682ef215eaebbb3d117ff327d66Virustotal results 22.95% Heodo
2020-01-17invoice-4_98125824.docdoc 298a10ce8a9fe8dcc5947d02585a549d1c9d0609c7d11473ff4c8dfbb3a9f801Virustotal results 21.31% 
2020-01-17Invoice-TID445_034138.docdoc 52a35085b05a7fac898644b7e69c83730e819e568480c29301e09e9a19dc2578Virustotal results 21.31% Heodo
2020-01-17Inv_HJG68_05632426.docdoc 6ea8be369da94860d9527db3416a7abc777e4a9c653d313aae08ed33082e603cn/a Heodo
2020-01-17Invoice_593_61550044.docdoc 1779c3feb91fa26bb312d90acfb4a4638f6c19436efc7da51d6ae616b512aaaaVirustotal results 18.33% Heodo
2020-01-17Inv-H55_971111350.docdoc 73d84770b9d67293fc05f7ecc0a3b786460733830a371c72da8f40bd81efeb71Virustotal results 16.67% Heodo
2020-01-17INVOICE-FXFF5_5139132.docdoc efef469ac7e82a2301e3e2da0c734792182828663bd6d178f0d773bb4c37f07aVirustotal results 19.35% Heodo
2020-01-17Inv-FSB5_419128697.docdoc 705c0fe4297531835d50b0458ac82dd33ecc2372332fa70d25d6f723ee898671Virustotal results 19.35% Heodo
2020-01-17INVOICE_H427_233996070.docdoc 30c567c6efb9fbfe69f1689efbf61d25a4e8eb9c44018602a7bbbb699505ddb1Virustotal results 19.35% 
2020-01-17Invoice-HI659_15356908.docdoc e54979318c06a7cc3d8fb5f00d32d0fa2a169f8447a224ec8822749071c550f6Virustotal results 37.10% Heodo