URLhaus Database

You are currently viewing the URLhaus database entry for http://relvinsglobaltech.com/cgi-bin/common-zone/individual-gw98zV-skh6hKEpkzSjjS/5jhxzgq5l-w354/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300531
URL: http://relvinsglobaltech.com/cgi-bin/common-zone/individual-gw98zV-skh6hKEpkzSjjS/5jhxzgq5l-w354/
URL Status:Offline
Host: relvinsglobaltech.com
Date added:2020-01-28 23:22:03 UTC
Last online:2020-01-30 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002283389 created on 2020-01-28 23:24:04 UTC)
Takedown time:1 day, 17 hours, 12 minutes Poor (down since 2020-01-30 16:36:23 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30INF_20200130_W344981.docdoc 27e174efb0d6e8b05cf666fd50c3163d91cd9bc9416197af58f70c1f027d2a0eVirustotal results 32.81% 
2020-01-30FILE-AOA7935.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30REP-20200130-6918505.docdoc 767b17c9708aa05e3d52db97aa2842a873f2cf8e9d75f19e3e8c84fd32442e32Virustotal results 25.00% Heodo
2020-01-30doc 2020_01_30 4418.docdoc 7099bcda5f0b4caadc077f6bc794a4dc8933e66863535f49c23c8b19ec793b7fVirustotal results 28.57% Heodo
2020-01-30Rep.docdoc 6686a87ce4ec03815de4f384705a2a876aee4195ecaabf95d727a6d63030d4e8Virustotal results 29.03% 
2020-01-30Dat_11505.docdoc 1db0c100dfea192f88767bedda9beef583fcfb5c7797f32d7f93dcf045d3239cVirustotal results 25.40% Heodo
2020-01-30Inf_20200130_P4773.docdoc 23b0933587b2ce021d44e764dcdfb9961d967b9e9490d154457df7e420cf9fa4Virustotal results 25.00% Heodo
2020-01-30doc_2020_01_30_GW8052.docdoc 9770154f6b54c8685ee215a2ddb8c8c91d95c59768711dae07d13a0d7619a70aVirustotal results 25.81% Heodo
2020-01-29file-2020_01_30-651095.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29LIST-20200130-RTJ3683.docdoc 2c7a2ffff7a4a2fcb7a86235dafda3b02ce67330155e00a22408d6c14b2f5cafVirustotal results 40.32% 
2020-01-29MES-20200129-176916.docdoc de39c0b0ba341eb6a6c1cc3bff5a3dede93907976a77563396df5165f422ac7fVirustotal results 33.33% Heodo
2020-01-29Arc-2020_01_29-C6016.docdoc 7e8c0e91d30b485bed7963d9d3169c243edb3f5f2ce5e8049df4731007ea4d61Virustotal results 32.26% Heodo
2020-01-29inf-A257.docdoc 49725f6641477d5fcdc1933e66eb652922a1e1264277a6aef8069967eb0084f0Virustotal results 30.16% Heodo
2020-01-29LIST-20200129-RR8595.docdoc c0ebbfa695c1e2d054d32b340956dfffb4c155a4e420caaf593b0f1bbccbbd18Virustotal results 27.87% 
2020-01-29INF_OOS1591.docdoc 7caba02f08e117aabc3a0f109c1e5d565c3fdf3aec3ae0c90d0d78a16b6c2a8eVirustotal results 26.98% Heodo
2020-01-29DAT.docdoc 41f2df35fe03375e39b939c95142a9c04e1613e60bcdeb4f50ea339349d04243Virustotal results 26.98% Heodo
2020-01-29DAT MND824.docdoc 0b0243567f8017cba7be007b4d797731af10a9c7e9971cb09881d0a646bf88a2Virustotal results 30.00% Heodo
2020-01-29FILE-20200129.docdoc 6765421b973c2bc3603b0f52f3ed514310bb83b678823614f845b6d4b1cbedc9Virustotal results 26.56% Heodo
2020-01-29Rep 20200129 K99514.docdoc a4edb0742bb50f5c20c88508ef0dd1028d985dcf0b9ced6c6c9bdf800e1c6748Virustotal results 25.40% Heodo
2020-01-29list_20200129_944784.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29doc-11343.docdoc 94e0d6de6118c26179d6f05dd39b5583f1fe79c66151f666734b93a655a71930Virustotal results 23.81% Heodo
2020-01-29Rep 2020_01_29 OH88253.docdoc 7c22eab322ac6b786498c54df9abb223c3466203f681028b1023147f081fd6can/a Heodo
2020-01-29inf 20200129 653386.docdoc fb8b1e69574f8ec2121b612f1339a516d01536a2174f432585e94c98fba7ab8bVirustotal results 44.44% 
2020-01-29FILE_2020_01_29.docdoc 085777a85dd9b9d62ecf918d0cda586ecae8d0b32af5aa6182d85c77a8a571fdVirustotal results 42.86% Heodo
2020-01-29arc-20200129-6539.docdoc 8c05cb88caacbc8eb0e4a1e79a0d1a707959b45fb39f5e694923b6b069ebce75Virustotal results 43.55% 
2020-01-29Inf 20200129 5321.docdoc 6a23106b558df36e6d88bb5b5dd187430087eff0c8a2ca1586f8538e8259e01dn/a Heodo
2020-01-29doc_20200129_212861.docdoc 5ed01ecc76724ef8dff654d4ef2b359c600c6dd3da2481677304b851d0c752b7Virustotal results 43.75% Heodo
2020-01-29file-T115.docdoc 85359d87138be58de0c049e5c520f4de37adde9310893971769a0c640ba0a0fdVirustotal results 44.44% Heodo
2020-01-29DAT-IZ212620.docdoc 705a21a458e18ec2353f1141cd6971cd6ffe76398c6c0bffea9c4f3e2c370c87n/a Heodo
2020-01-28rep_658.docdoc 823c46a2cd9f3c41e6795ce6489cee5478c80ae57a213d3fa40f9f10fa2dd6aeVirustotal results 41.94%