URLhaus Database

You are currently viewing the URLhaus database entry for http://1.magnoec.com/r2v5r/closed_CPo2hqV_9LuHqppjuXGHoSN/870323622452_ABzYhbO_portal/82h8i4qo61essf_4tu0x/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:299342
URL: http://1.magnoec.com/r2v5r/closed_CPo2hqV_9LuHqppjuXGHoSN/870323622452_ABzYhbO_portal/82h8i4qo61essf_4tu0x/
URL Status:Offline
Host: 1.magnoec.com
Date added:2020-01-28 01:09:06 UTC
Last online:2020-02-02 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 01:10:02 UTC to abuse{at}digitalocean[dot]com)
Takedown time:5 days, 20 hours, 38 minutes Bad (down since 2020-02-02 21:48:09 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-29FILE-20200130-NA665752.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29INF-2020_01_30-8756.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29LIST 2020_01_29.docdoc ff03bf7f9376aeaf634321eda33cdb1c854770422c5c08b7997dcf6d93b8febaVirustotal results 32.79% Heodo
2020-01-29File-20200129-RB7130.docdoc 7e8c0e91d30b485bed7963d9d3169c243edb3f5f2ce5e8049df4731007ea4d61Virustotal results 32.26% Heodo
2020-01-29REP_8706.docdoc d9e6778d130d18c51ae971d9b67674e2efc88e36d86b1d08e74ff54214d601d8Virustotal results 30.51% Heodo
2020-01-29arc 20200129.docdoc b09c8d39fe17d600ac2beffd9540076f55d944b41ae3c11b26600252a272b3ecVirustotal results 26.98% Heodo
2020-01-29inf 20200129.docdoc a6f8d6e5f80b47b55146e82c61a78c5ed8c451bcb68d157dee574d02c768ba30Virustotal results 26.56% Heodo
2020-01-29Dat-20200129-5425362.docdoc 41f2df35fe03375e39b939c95142a9c04e1613e60bcdeb4f50ea339349d04243Virustotal results 26.98% Heodo
2020-01-29list_287785.docdoc ec9b05ca4512e2e594339751e698ee57b1373c749a8c8b26cbe5c79dc1e978ccVirustotal results 26.98% Heodo
2020-01-29inf_2020_01_29_QH84996.docdoc 49b8fd89ee5214a640b987bf72e14b9ef0ce65d9d14143e63ed55e8e8113f7fdVirustotal results 30.16% Heodo
2020-01-29arc-K820.docdoc aad9025b37d955a0929dc76185e7b87d374e735e3a30a258bd549dcfc7a1bf27Virustotal results 26.98% Heodo
2020-01-29DAT.docdoc a4edb0742bb50f5c20c88508ef0dd1028d985dcf0b9ced6c6c9bdf800e1c6748Virustotal results 25.40% Heodo
2020-01-29arc_SYG7035.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29list-2020_01_29.docdoc ab46f8f9b1905e64a35d9db9e9ff84df5eb21679b53d1291553d1b6a936554a5Virustotal results 23.81% Heodo
2020-01-29file_20200129_IW667.docdoc ff622f5e5e3370bc68d5d00d00bb610357cc7620c1ccc8a6f8edc051119621abVirustotal results 25.00% Heodo
2020-01-29Rep 20200129.docdoc fb8b1e69574f8ec2121b612f1339a516d01536a2174f432585e94c98fba7ab8bVirustotal results 44.44% 
2020-01-29mes-Y132.docdoc b40831be7daa247208f2f37c223101e825eca3eaedbae7a72de040e21852ae00Virustotal results 42.86% Heodo
2020-01-29List 2020_01_29 8904.docdoc 8c05cb88caacbc8eb0e4a1e79a0d1a707959b45fb39f5e694923b6b069ebce75Virustotal results 43.55% 
2020-01-29DAT.docdoc d0587297f7b5699b364592f59c0d93057b42defb42c714d6381d54a6142953edVirustotal results 44.44% Heodo
2020-01-29INF_20200129_T805104.docdoc 26e9b52ab2150b5410b69fbb020642053c81b652e8c997a7bb304da089232cacVirustotal results 43.75% Heodo
2020-01-29rep.docdoc 85359d87138be58de0c049e5c520f4de37adde9310893971769a0c640ba0a0fdVirustotal results 44.44% Heodo
2020-01-29dat_2020_01_29_ZEK205937.docdoc 99f4cbe6a9549c0dd8d99cdbee3c8ffe2c85d61f8a3cc94d1e57a962e4497be1Virustotal results 41.94% Heodo
2020-01-28DAT_2020_01_29_3176.docdoc 3184cbfa34c1ffcc3a308983dbff824aa454bb50b733e4cfd2cbb343030b9d6bVirustotal results 41.27% Heodo
2020-01-28inf-20200129-5686637.docdoc f2a6a0283ff20ad3d0855ce7825d84920a0a27c55825a5a5b9ba91408388a402Virustotal results 41.94% Heodo
2020-01-28list_F5293.docdoc 9a1962dfceb1a62ff349d932160c03ec9304954e3a0fb69e25b672fbef7b90b4Virustotal results 36.51% Heodo
2020-01-28REP_20200128_YV880.docdoc 4f0657b4834de2757799949da41f3ed5391b919f6539122e9dd06523c75df20bVirustotal results 36.51% Heodo
2020-01-28list_2020_01_28_HJ253.docdoc 2063f0749cb5832ffe25435cb2bdb2060ee2aca45409e0990772283bf9d37d72Virustotal results 31.25% Heodo
2020-01-28File 20200128 5584103.docdoc c1cab8e632a4cf554ec0a4d36e228aae0333fbf9f2bbf06bd23dfe0197bf885cVirustotal results 25.40% Heodo
2020-01-28doc 2020_01_28 W413.docdoc 59428bbec1459b7f3517f508013242a3dd7f4dbdee059380b5ff1c265abc6197Virustotal results 26.98% Heodo
2020-01-28Mes_GC828.docdoc 2fac5572f786da32ea0810309138075fa6d25b8fae0f0f92a0c7e539353ca05eVirustotal results 23.81% Heodo
2020-01-28dat.docdoc c50c6dc106e4d46b561eb4f45f329818ee1c5077cf4d4b4010ce38d01e437756Virustotal results 22.58% Heodo
2020-01-28Doc_20200128_WXH532963.docdoc ff3030128824873fe504c15ecf0cd7b700b36b02bee75fad21ac9d45ea20fa58Virustotal results 30.65% Heodo
2020-01-28File-20200128-0598.docdoc e3ba2559956e5915407cc1fb85cbb6d4a50bfb9d028a5ba9dd33505953aa5ddbVirustotal results 29.03% Heodo
2020-01-28REP 61078.docdoc 1ac8d894b4e2be7cb2d7fc3dee2346677c5fdc5871be74589848518155c5ff8cVirustotal results 25.40% Heodo
2020-01-28File-20200128-5309.docdoc 68938178a947046088472c9c687caf7843271233fbba2b888ada13c2bb5a5e5cn/a Heodo
2020-01-28File D82877.docdoc 256954bf735b73749d5fd67afbf6e789abb356f02cec192954e129996801d642Virustotal results 22.22% Heodo
2020-01-28INF 2020_01_28.docdoc 9cb664f1e4189925744979c21e305e2af11f98b2fedd6d32c4e3d5745b51ce07Virustotal results 22.95% 
2020-01-28rep 2110.docdoc ae1c2a1ebc838f4092123a0fed626a10f1325e7796629f6d370111fd50d8154dVirustotal results 22.22% Heodo
2020-01-28Doc_20200128.docdoc 0827a2ab4aa1c0caddd493489b6197943bc03b6da0d9f52c54071449dee6538cVirustotal results 40.32% Heodo
2020-01-28File_2020_01_28_8105.docdoc 33d3ef3b1fb0f8ed8ed87b487e184b207ff302b60481dac9da9487ca210247e9n/a Heodo
2020-01-28arc_2020_01_28_D934952.docdoc 20cdcb97c92b8c58397ab1170823f96ce0db2c3e93d4859bd06fb23302687d30Virustotal results 41.27% Heodo
2020-01-28Arc-20200128-291388.docdoc 2946e66d3c28fea77d3dc9314e7f9452564f9800fb9904657fef915985f3936en/a Heodo
2020-01-28Arc 2020_01_28 P215.docdoc a021057a2d983bc13e1f6b1516cac0041546aa046e6822c87e09c6c8ba870b1aVirustotal results 41.94% Heodo
2020-01-28Arc-20200128-144750.docdoc d6b962cebae3c20b5db1e4ca260810416f6b990cfa21b0d9e0c8c27ffd1222b5n/a Heodo