URLhaus Database

You are currently viewing the URLhaus database entry for http://coniitec.utrng.edu.mx/telcom2018/RUun/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:303433
URL: http://coniitec.utrng.edu.mx/telcom2018/RUun/
URL Status:Offline
Host: coniitec.utrng.edu.mx
Date added:2020-01-30 23:35:06 UTC
Last online:2020-03-13 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-30 23:36:03 UTC to abuse{at}uninet[dot]net[dot]mx)
Takedown time:1 month, 12 days, 17 hours, 58 minutes Bad (down since 2020-03-13 17:34:42 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-01INVOICE_RVQT5429_6152708.docdoc 970df6100d8375af169bb259df2c7bb1ad641294e34ed57dc3ad02a38371b4c7Virustotal results 36.51%Heodo
2020-02-01invoice_VHV482_943203.docdoc c7f8a534675b643449abfdf573e7b23803ecce479e90653ba295ae4d5f82995eVirustotal results 36.51% Heodo
2020-02-01INVOICE PL224_80359778.docdoc 068c0fa7ec2b72cc8c87bf99a725b7e44c8a49a5b8461358acd77d6186504229Virustotal results 35.94% Heodo
2020-02-01Inv-7_87330964.docdoc 1e0386b417804238140c5a047a6abbe6d561b0d67c0ab65173f3b5b22b687d51Virustotal results 36.51% 
2020-01-31Invoice-O9_1294364.docdoc 66cf6a1cda9e240560d3dd09a638f88527ba60dc15d9d5716e63c8ad1df5e954Virustotal results 32.81% Heodo
2020-01-31Inv-F4462_40447806.docdoc df3b6aaa924ed3e9a2eba95dac5813980820281a3c2d6d6c1c91c0a0c5294ecfVirustotal results 31.75% Heodo
2020-01-31invoice W9340_653483.docdoc fd5e1f93669595bc7da4234b070ced924dc67bc22e30ea0892b89710c8303775Virustotal results 32.81% Heodo
2020-01-31invoice-75_582149.docdoc bc79e24ba2ac5c6cfe39026ed82318cd18feb73fd5f8987ffcf5b7f9cdd9af0bVirustotal results 34.38% 
2020-01-31Inv-VS34_0173424.docdoc 48aece09b58178b17b2a09cebbb26f2da0bc3e6140b65d86b642060ec00689e5Virustotal results 33.33% Heodo
2020-01-31INVOICE-JL7_484513447.docdoc 2041559b24b2289ef8263b1c8335bd87424dc62061a72b4bfdd5525b98da6b54Virustotal results 28.57% Heodo
2020-01-31INVOICE-SC903_0453545.docdoc 33e4df7b63c4cc29a65e8108ed4a9b38735a04ccc24292e4a85e85773ad25b5eVirustotal results 29.69% Heodo
2020-01-31INVOICE QKPT0_674468.docdoc 8e0afd2fa4abbe847f9ff21eb7ac55c920eb69a98ebf7d214cd28aa32d5a5eccVirustotal results 26.56% Heodo
2020-01-31invoice L0_608288.docdoc cf5dba5032b0f5bb0d64f3622bfeb7e35d27c6892d6ba1daa6f07cae87b1566eVirustotal results 20.31% 
2020-01-31Inv-PACT346_929403.docdoc 3787564ed34e427bb2a2d38b16eb007660f36dffcbb6a32b4f38768073b582feVirustotal results 27.87% 
2020-01-31Inv-K2730_837887330.docdoc 322bc97effba52663f35f592be159313057162f0b75287845c440a3971648cb7Virustotal results 20.31% Heodo
2020-01-31Invoice-JA1_91186734.docdoc 0668a44b54d70499bb0ba03c8fc66fe388ac0acdbb91c6284ea3683c00aad183Virustotal results 17.74% Heodo
2020-01-31Invoice-FTSN865_612208.docdoc 21b6e7719a2afa773453d60937aa333af8e41f515ecf2f2f50301c235971e447n/a Heodo
2020-01-31INVOICE-NNK6_694683887.docdoc 1d0e564ea6985e92ea399f37d2410b18fe208c71c35c4bca9bcfd196d44017b9Virustotal results 20.31% 
2020-01-31Inv PL3057_743124103.docdoc facebe4f4fb11ff93ea3c94d04d02fea5330b7f8102855dd3766d5d579fe0e51n/a 
2020-01-31INVOICE UI178_678828.docdoc 2a154df78f570ed8acf939ecc71aa078e047b4a0b7cadbcc449df5c0d3f0f665Virustotal results 34.92% 
2020-01-31Invoice BM45_498212737.docdoc 813226187f75c12909c10d00dfafe96c916ad768979a68def760048753fdea9eVirustotal results 34.38% 
2020-01-31Inv-4917_70534122.docdoc d74b87f85b69bdff1d86ddfca587e4dd079798c98cf7dc80f9515e4d9ccdf8d9Virustotal results 33.33% Heodo
2020-01-31invoice PDDC6_0700934.docdoc 9931f06412385e83080f75415b9fba75bafafe36cb481e478b635d4dca29d0f3Virustotal results 33.33% 
2020-01-31Invoice-DW390_081826.docdoc a2c25cc5e8f8afa23325d5cd041fafa25cf6407882113ec43fe75ac3548ea8eeVirustotal results 35.59% 
2020-01-31Inv-43_501535.docdoc 7520f696c405469515a806385d54d83b2861501687a91bb899a29bd3bdf664ffn/a 
2020-01-30Inv-ZRD565_148966614.docdoc 84d46bf763331a37dbbb8ad419567136746910d9f1f9de72be0ddb3590786396n/a Heodo