URLhaus Database

You are currently viewing the URLhaus database entry for http://mechsource2.azurewebsites.net/87/personal-array/open-522079932027-x3Dj3EJJKAej/831861396-Xqk68PVZ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300540
URL: http://mechsource2.azurewebsites.net/87/personal-array/open-522079932027-x3Dj3EJJKAej/831861396-Xqk68PVZ/
URL Status:Offline
Host: mechsource2.azurewebsites.net
Date added:2020-01-28 23:37:04 UTC
Last online:2020-02-25 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 23:38:06 UTC to abuse{at}microsoft[dot]com)
Takedown time:27 days, 7 hours, 20 minutes Bad (down since 2020-02-25 06:58:44 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-24mes-2020_01_29-REJ27296.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 55.56% Heodo
2020-01-29DAT 20200129 QP931.docdoc 7e8c0e91d30b485bed7963d9d3169c243edb3f5f2ce5e8049df4731007ea4d61Virustotal results 32.26% Heodo
2020-01-29ARC 20200129 05504.docdoc 93e6b158ccceb81017a551ff0ede39622381a6ee79e572a206f2756b342a47fbVirustotal results 28.57% Heodo
2020-01-29FILE-0953.docdoc c0ebbfa695c1e2d054d32b340956dfffb4c155a4e420caaf593b0f1bbccbbd18Virustotal results 27.87% 
2020-01-29mes.docdoc 5ae7e30b55476614975a3dcc125e78cc5e84eb3a8c413ce9a42be9d99ed7150fVirustotal results 24.59% Heodo
2020-01-29File 2020_01_29 894128.docdoc 1b2ab9713101a1224f92f7b670acc6debff91071765f456e98552b87fe6c6750Virustotal results 25.81% Heodo
2020-01-29inf.docdoc ec9b05ca4512e2e594339751e698ee57b1373c749a8c8b26cbe5c79dc1e978ccVirustotal results 26.98% Heodo
2020-01-29inf_20200129_JJ623.docdoc a570252bf1c2fa10675c88c55f9ef2362c2c7d3ac6e6bc1400102a49f2aac861Virustotal results 27.87% Heodo
2020-01-29Mes.docdoc 02e02e6f3d5f2447a5269982bfa0714b129e54897d7616443ca03430d0a3188bVirustotal results 25.81% Heodo
2020-01-29mes 2020_01_29.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29inf 81334.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29mes 2020_01_29.docdoc 94e0d6de6118c26179d6f05dd39b5583f1fe79c66151f666734b93a655a71930Virustotal results 23.81% Heodo
2020-01-29Doc_2020_01_29_49996.docdoc 7c22eab322ac6b786498c54df9abb223c3466203f681028b1023147f081fd6caVirustotal results 24.19% Heodo
2020-01-29arc Y14663.docdoc d6548725e281a6fac0ace4af505c15a21b8e1582ab951ad62e29dc42cae45885Virustotal results 43.75% Heodo
2020-01-29List 2020_01_29 FEH637.docdoc 085777a85dd9b9d62ecf918d0cda586ecae8d0b32af5aa6182d85c77a8a571fdVirustotal results 42.86% Heodo
2020-01-29List 307399.docdoc f5c5c5efd56a06272577f6aa8fde6fe22660095ec9332d7449f3e0769fa11b8eVirustotal results 42.86% Heodo
2020-01-29ARC_20200129_1608104.docdoc 6a23106b558df36e6d88bb5b5dd187430087eff0c8a2ca1586f8538e8259e01dn/a Heodo
2020-01-29mes_2020_01_29_Q925.docdoc 5ed01ecc76724ef8dff654d4ef2b359c600c6dd3da2481677304b851d0c752b7Virustotal results 43.75% Heodo
2020-01-29rep_F21430.docdoc 85359d87138be58de0c049e5c520f4de37adde9310893971769a0c640ba0a0fdVirustotal results 44.44% Heodo
2020-01-29Doc 20200129 320.docdoc 705a21a458e18ec2353f1141cd6971cd6ffe76398c6c0bffea9c4f3e2c370c87Virustotal results 39.68% Heodo
2020-01-28doc-2020_01_29-981306.docdoc 16e3a063a2cbd226471212e7e3dee7443a1c41b8c47628d4c01dabb62d62f9d1n/a Heodo