URLhaus Database

You are currently viewing the URLhaus database entry for http://mciss-consulting.com/wwfrwg/eq1asqy60306erzk_qp3cu2_zone/open_space/al1witiudeno8_06yx8y33/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:299396
URL: http://mciss-consulting.com/wwfrwg/eq1asqy60306erzk_qp3cu2_zone/open_space/al1witiudeno8_06yx8y33/
URL Status:Offline
Host: mciss-consulting.com
Date added:2020-01-28 02:29:02 UTC
Last online:2020-01-28 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 02:30:03 UTC to abuse{at}ovh[dot]net)
Takedown time:11 hours, 13 minutes Good (down since 2020-01-28 13:43:55 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-28MES 2872.docdoc 267aa23c9031b06e6dc7fac45daca30a65d4f08843fe0976c2ad7201d9646dafVirustotal results 28.57% Heodo
2020-01-28REP 69120.docdoc e3ba2559956e5915407cc1fb85cbb6d4a50bfb9d028a5ba9dd33505953aa5ddbVirustotal results 29.03% Heodo
2020-01-28File-5931.docdoc fccf3876128e78c8d3a6385aa312b1333c822a2b9efafb26daf1d2ffea296d59Virustotal results 25.40% Heodo
2020-01-28dat 20200128 5102.docdoc c5666d80df3d2361122568d511e336c58a58b27576a1cd78b434c425d8b2e809Virustotal results 22.58% Heodo
2020-01-28mes-2020_01_28-63515.docdoc 12934d2c01ab4c7e7639e04a3a27c545f2501b1f835fc9ab5ca4f1ba97c63e38n/a Heodo
2020-01-28Inf_2020_01_28_X908428.docdoc 9cb664f1e4189925744979c21e305e2af11f98b2fedd6d32c4e3d5745b51ce07n/a 
2020-01-28Arc-317.docdoc 0827a2ab4aa1c0caddd493489b6197943bc03b6da0d9f52c54071449dee6538cVirustotal results 40.32% Heodo
2020-01-28dat-4853637.docdoc e5f579ac649c7d63c79885d849d0631d7a0fdddabb60cc9fe78f0583a9d00396Virustotal results 41.67% Heodo
2020-01-28Inf ZC1855.docdoc 20cdcb97c92b8c58397ab1170823f96ce0db2c3e93d4859bd06fb23302687d30Virustotal results 41.27% Heodo
2020-01-28FILE FK6183.docdoc f79992105131cff7dd4570db1648129b246323085d2843087e402a966d52503aVirustotal results 41.27% 
2020-01-28Arc 20200128 KRK997.docdoc c13b52eb583794eb0a50cdcaa031505507d999bc95725e77c29eb6b1adcfffa8n/a Heodo