URLhaus Database

You are currently viewing the URLhaus database entry for http://htecgroup.in/3x_cps/closed_sector/dk0xtlw8qv22_a8sf2w4_nqonroe0qu7_v8w02pe1w475/DomEXNk1_65xMfq5pe/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:294233
URL: http://htecgroup.in/3x_cps/closed_sector/dk0xtlw8qv22_a8sf2w4_nqonroe0qu7_v8w02pe1w475/DomEXNk1_65xMfq5pe/
URL Status:Offline
Host: htecgroup.in
Date added:2020-01-21 23:11:07 UTC
Last online:2020-01-27 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002265228 created on 2020-01-21 23:12:05 UTC)
Takedown time:5 days, 10 hours, 52 minutes Bad (down since 2020-01-27 10:04:39 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-23INF 2020_01_24 116974.docdoc b5c7c50861e3e803626d6a125180124ca5772d7fed623c55a68b9d927541743dVirustotal results 37.10% Heodo
2020-01-23File-710138.docdoc 7abb3e4c83b02572677e4ec2c0fb9b815830bea5eeaa515a50fb999016abd7cbVirustotal results 38.71% 
2020-01-23inf 2020_01_23.docdoc 8d24a8ecfc76b7d708a048bf50179beccdec4f6912c0721c177fa420edf0aaabVirustotal results 31.15% Heodo
2020-01-23ARC-20200123-X865174.docdoc 93bb9d052dae7e7965182fcd79c48c1e7e88e30f37ebf761462d4c5c5c629049Virustotal results 30.16% Heodo
2020-01-23list PRN90477.docdoc f72e74ea61f7b7a18e525ffa6453d67872f898f2be8def76d3ec300684b9be38Virustotal results 33.33% Heodo
2020-01-23dat-2020_01_23-S9484.docdoc 6cfb6058d1b0f8aa7927a40680c7fcd88e0c3f67cdfc2b271af7823dd89754a3Virustotal results 34.92% Heodo
2020-01-23File-20200123-EDY339082.docdoc ca7b1a3d7db2feeb5548928ff6adb85fdb993b11795f88fed56ec7649beef850Virustotal results 31.25% Heodo
2020-01-23Doc 5205027.docdoc e64e311b594718ab849cdf6a3379d11774932a94c3498135f107d659174adb40Virustotal results 28.12% Heodo
2020-01-23LIST_P845.docdoc 935442d00e5e51d838e5a2a3651c249aa15fc5ffc106b3fa9414973e11dd8d08Virustotal results 27.42% 
2020-01-23DAT_2020_01_23_0274.docdoc afe09e292b9823a2d28f0c6b6c795b2e3f9d1758d53e30d1eaafd8dd29b2d0a4Virustotal results 26.23% Heodo
2020-01-23File 2020_01_23 317.docdoc 8854c592155c1bd835e9edee147c7fa3714ba319ad138943dae4aa94a01d2adfVirustotal results 27.42% Heodo
2020-01-23Arc_AEG325705.docdoc 7aad6646929e3d37983073134ffba0e2735588c43e8f23d1249845c4da1ad410Virustotal results 29.03% Heodo
2020-01-23file_20200123.docdoc b63585f5efab051c9a793dac78be7af0a7bb002f803b2d67a828065ee6ce54fdVirustotal results 27.42% Heodo
2020-01-23arc_2020_01_23_PO60652.docdoc aaade832c86b767e64ac370ec468133b1b0f777316fc22d37a85c2254ad1d752Virustotal results 20.63% Heodo
2020-01-23rep_C3903.docdoc 2ed537c3f16c932316239ece8a27394b2f340ff86131277a08b29853ddb8ea0cVirustotal results 21.88% Heodo
2020-01-23Dat 20200123.docdoc 0602a260f7babf69b17ea0c106902e0aa1210f18240011382c3d1b89cbf2a78fn/a 
2020-01-23MES 2020_01_23 R873.docdoc cb8f7b473f1c200a59f57ff19de1171c4931c3264b691ac05aa63c3d33f37fb6Virustotal results 21.88% Heodo
2020-01-23List 20076.docdoc dd46168d7017d454d5b01dcb489a4fefe457957a8b0ea67e4bec9678a91cff94Virustotal results 32.81% Heodo
2020-01-23DAT_2020_01_23_39922.docdoc 391cdfda17669f8646d016ccbed5a280386e0ee0d329337ceea01aec817a30edVirustotal results 33.33% 
2020-01-23list-2020_01_23.docdoc a5b40116b0e7fcee6fbf05e3425ae17e7812e5a1bfa387e8588f0002fff8911eVirustotal results 35.48% Heodo
2020-01-23dat 2020_01_23 AG323171.docdoc 35e9ccfe2fb736ab494d113297f3c7069e131c28b9996efe0623d6f6fa2e2644Virustotal results 34.38% Heodo
2020-01-23mes-2020_01_23-WJ47178.docdoc 60577cf4f41ddd64eb84e77684f9c15171a6b4e10dcd6d47ef15864dee6e2211Virustotal results 29.69% Heodo
2020-01-23Arc-2020_01_23-6256034.docdoc 69b84b05ec0630dc6b8f253c178290fb5aa0dfbf319f03bff2ce5d49f84adc1fVirustotal results 30.65% 
2020-01-22Mes 20200123 HM699.docdoc 4f75ef9736ddc508f70ea5da489948d950de61b352fe2497e3c5c87e322597e6Virustotal results 29.69% Heodo
2020-01-22rep_7996665.docdoc 054097464a18a552af3b8b22367aba7e730d8e4d65de944f8a3414fcef815337Virustotal results 29.69% Heodo
2020-01-22Rep 20200122.docdoc 50999d99ad66e0b196084e0b6f483db32ba133c85e2a4ecb7065b5fdb4053e8an/a Heodo
2020-01-22Doc_041.docdoc 346b0ba9684b9fdc8dde08af0ab486c86cbea5347a32be77aaafb0dc9034f2e2Virustotal results 28.57% Heodo
2020-01-22Arc 2020_01_22 HDZ114.docdoc 09c16304c3e1aec3c34700ba9ccc3b60a96824e6f17b99ada9f1ddfc84e20d06Virustotal results 28.12% Heodo
2020-01-22arc-20200122.docdoc 6eb3a1de5779c87ba943671cbe8f29213ae390f189e8bd35f9520393e1edf6deVirustotal results 26.56% Heodo
2020-01-22Dat 20200122 7329521.docdoc 15a0d8db0be33d9ad3472545eb007ef434d43a1b726faf8fa0513f5f55b70218Virustotal results 28.57% Heodo
2020-01-22ARC-2020_01_22-F484.docdoc 2ad3eac84cebb1c035141e43e0b9a5cf7ef8defb6dc62580737446cc39f9f7f7Virustotal results 30.65% Heodo
2020-01-22Pay-20200122-BWD292.docdoc 6dab6d9bdad5fb8c6564493c3c06f10835f916e3980e4937d8c55f4c2f1f1a01Virustotal results 30.16% Heodo
2020-01-22DOC 2020_01_22.docdoc d51bc288487e5fdcfc17a5ec6e0fa384a022cb77f0474947a0d2059faa19446bn/a Heodo
2020-01-22Pay 2020_01_22 MVP04909.docdoc d5d9a7450867f6c951b33c65e5c363becf43297041b078e61259006714be9da2n/a Heodo
2020-01-22Arc_20200122_3861.docdoc 63e4f747e3e1e3b0013d5e079ba505deee4fac664d83b0e250297677230bd592n/a Heodo
2020-01-22list_2020_01_22_618.docdoc 90855aa3bc7cbb5168ba1ec9ce13d058fb143e67f3cbd23c64e816868c837b59Virustotal results 27.42% Heodo
2020-01-22Inf_2020_01_22_522.docdoc 27a95f049070cadbefa3c02a756a3b031f62b48a3fd6b2deadc601e88c1e2defVirustotal results 27.12% 
2020-01-22bl_2020_01_22_7787.docdoc 234cba08fc425f95447f2c72a2dae3ffbc5b47f1d14013c13cdcecad60ce1802n/a Heodo
2020-01-22st-20200122-076.docdoc f215874c38b91208764829b0950f3658cbed0e5931060ec4d658ff212f019642Virustotal results 19.67% Heodo
2020-01-22ARC-20200122-8249.docdoc f57549b2d5b329a8c83b05e2a6ea4f288e4215882c24d2650cc818e65fcd6239n/a Heodo
2020-01-22St_2020_01_22_4881.docdoc e32b84c7d967bd21ca4def6c66ed1441afca25b720e896b926f4c01906891918Virustotal results 19.67% Heodo
2020-01-22inv-2020_01_22-71401.docdoc 822cab01673ebcd4b1d6de1afd0e2cba9d227f59b4be13c5df84c1427ef64389Virustotal results 20.00% Heodo
2020-01-22Dat-2020_01_22-ZS463321.docdoc 55e7c45b115a1b3f5841cff784e524e1a7db1007c8b7dab6c0ac641891d18a4bn/a Heodo
2020-01-22mes.docdoc a6d88c45a2db468584d02f98537fa9948fb89553ecdb4a9ed46bd92cbc43d863Virustotal results 21.31% Heodo
2020-01-21Inv 2020_01_22 ONW68084.docdoc 2119f3e51c12625d689a0d06dbbbf6d19fc6555e7f33b67a54e3df778f1a09fdVirustotal results 20.00% Heodo
2020-01-21Bl_2020_01_22_040.docdoc 7b232765d9422f6b8c3e43dfb8b3c0d368a3104179225a6694c2ef5ad8dccfcfVirustotal results 20.97% Heodo