URLhaus Database

You are currently viewing the URLhaus database entry for http://www.excalibursol.com/3dwork/personal-95258-CU2RnjNLK6FwJu7d/verifiable-cloud/f3r6cgwa-9300v6w77tzy85/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301630
URL: http://www.excalibursol.com/3dwork/personal-95258-CU2RnjNLK6FwJu7d/verifiable-cloud/f3r6cgwa-9300v6w77tzy85/
URL Status:Offline
Host: www.excalibursol.com
Date added:2020-01-29 17:37:06 UTC
Last online:2020-02-04 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 17:38:02 UTC to abuse{at}quadranet[dot]com)
Takedown time:5 days, 21 hours, 20 minutes Bad (down since 2020-02-04 14:58:38 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31file-BY92056.docdoc 5d755b4d1411ec2afe141eed7e1bb08234d961be05762c0916ab14e37ea8b9f1Virustotal results 30.65% Heodo
2020-01-31File QOY511492.docdoc 6b51ea47e60f5fbda3ed35c886b039df13df6f0f75e59538029af6e0706aab85Virustotal results 28.57% Heodo
2020-01-31Inf_2020_01_31_J8364.docdoc 075d1f5b7944bb5b788d8b9036b9ade54bf6cda3e8d6809c6846900039d90e18Virustotal results 25.00% Heodo
2020-01-31list-2020_01_31-L8205.docdoc 91275159f80eeb0eff909660f56290704daffd027e4b5725ef33573c925488a4Virustotal results 20.31% Heodo
2020-01-31Dat_20200131_846.docdoc 0c645a5b75a5e0585a9c48656071c2ca5a9bf0304861e458f13a3e250b4374e1Virustotal results 20.63% Heodo
2020-01-31rep-2020_01_31-114.docdoc 691d17ec9d017071172822819531217285cc8e76d799f1db55410a3212d81586Virustotal results 20.31% 
2020-01-31List-20200131-51723.docdoc 9fb0a6fe332aeb878af094ebb838b45e25773204f45c299a2c31fa1070c7d80bVirustotal results 20.63% Heodo
2020-01-31ARC_2020_01_31_FNF9470.docdoc 8cc142a77c13d730954666978d567d01fcdd588eee8d825d12b6b642b2212426Virustotal results 20.31% Heodo
2020-01-31Inf 20200131.docdoc 1927c895365ce9eb0b850ccab2180fd7d46e42b647113981b953bd353c6edad6Virustotal results 20.31% Heodo
2020-01-31file 610.docdoc 5e1a30103fd40640c8a5b91d5dadf5564896d808711410002020fa9f136b080eVirustotal results 20.63% Heodo
2020-01-31File_NE6951.docdoc 479acd550fee84ce07d46ca359554323d14b0874e9402267f9f6cedc7ea64065Virustotal results 20.31% Heodo
2020-01-31FILE-903543.docdoc c8bd082a9174038d1dffc9a1fe5595314f3e2cd4a2657033f2e1efd3540a3df4Virustotal results 39.68% Heodo
2020-01-31list 20200131 U3832.docdoc db5ec50aa0307b01efda63c0c839ca56003ecb0cf9e97153c79a15f8c7954de7Virustotal results 41.27% Heodo
2020-01-31file 20200131 64434.docdoc cbc9edb78b6f27bf631b12f4f66cda0b48a2e5dfef8389d8be55802cfae8e99dVirustotal results 38.71% Heodo
2020-01-31ARC_385042.docdoc 8cf8b5bd984c809a86c9c425d500393b50115233149a953678de79dca4bdc223Virustotal results 35.94% Heodo
2020-01-31Doc_2020_01_31_R2531.docdoc 02d4150ccb8c0569ecd99cc1a860f5c711f1cd2ba567aa5728b830b9f1789f46Virustotal results 33.33% Heodo
2020-01-31arc_2020_01_31_VYX004742.docdoc 8ac6cda8c7b4094b736c508bc231f782f410a72cecec097edb943014ce610585Virustotal results 33.87% 
2020-01-30arc_904596.docdoc 38ed0185799cc1cb1e2fcfea1f554229ad2ddee7695a8eee704426cf83a6b7e6Virustotal results 33.33% Heodo
2020-01-30Doc_2020_01_31_818.docdoc 7e928307f956ba7153481f9c5ff422807d3b210a51be147e9fe988fa41d392c4Virustotal results 34.38% Heodo
2020-01-30File 9521087.docdoc 3094a8cc9745d2d8c20e81837a459f5d1b7509d411d7954dc4f3309fbad50d3cVirustotal results 34.92% Heodo
2020-01-30INF_2020_01_30_VRJ1223.docdoc 3d0d29f9f42fa9d58abba5af05b9a74a48a861b54ea5a1759c4115bb77bf8801Virustotal results 34.92% Heodo
2020-01-30arc-20200130-073.docdoc 88d2169711b161c4ef3ad2a293d5d31f96681e8341468acf5a7d8f77296a0649Virustotal results 39.68% 
2020-01-30ARC 20200130 7568.docdoc 162e460256ab76b13ecf9daf16f1867bb2e13925b3894c8f56fc2d360781c389Virustotal results 38.71% Heodo
2020-01-30LIST-20200130-8042124.docdoc 8f4a6501b7d0a50fd6e8efa50f1eb0cf68d343cd44f5e4b28c47fd843d56fe6fVirustotal results 37.10% Heodo
2020-01-30Inf_20200130_NT924.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30Inf_2020_01_30_HV72845.docdoc eba2dba873ee77550f0381f6e0fabf8501232bc19b5540b15d442e85cf817399Virustotal results 32.81% 
2020-01-30LIST LJ51171.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30LIST-NW4791.docdoc 8fccb53dc5d9058d11d344f7fbd34609642b1b1d2a9e4699134d165ce6ab21a0Virustotal results 25.40% 
2020-01-30INF 0195701.docdoc 5be9645e9c0754728712933e2c7b67896f6a737736196a250f7afa3d833b1dbdVirustotal results 29.69% Heodo
2020-01-30inf-2020_01_30-59833.docdoc 6686a87ce4ec03815de4f384705a2a876aee4195ecaabf95d727a6d63030d4e8Virustotal results 29.03% 
2020-01-30rep-BT922491.docdoc 1db0c100dfea192f88767bedda9beef583fcfb5c7797f32d7f93dcf045d3239cVirustotal results 25.40% Heodo
2020-01-30Mes 2020_01_30.docdoc 05540ab9749b214e8557c647443d6b4f997326d9e3ec01cf69b855c519c53887n/a Heodo
2020-01-30REP-7104464.docdoc 4932fd4b350016a8ffd5945209efaabc177ab4bb83e310f2896d29c02e0a612fVirustotal results 25.40% Heodo
2020-01-29Doc_2020_01_30_708664.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29MES 2020_01_30 6104.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29ARC-20200129-832305.docdoc b092142d9f04ca524e6a503fce42f889811ed93f8be0719e2f8997ff614a3659n/a Heodo
2020-01-29dat_2020_01_29_59385.docdoc 49e28f382793143c68d57be83f8e7252dea8674a30f06b9063dd9ccfc4f25e85Virustotal results 33.33% Heodo
2020-01-29Inf_AUS064.docdoc b7be54905b7c6faa05793dcfbd48dbe4b489f5424a08a31cc09e12ffb7390060n/a 
2020-01-29INF WA355.docdoc c0ebbfa695c1e2d054d32b340956dfffb4c155a4e420caaf593b0f1bbccbbd18Virustotal results 27.87%