URLhaus Database

You are currently viewing the URLhaus database entry for http://vics.com.sg/aspnet_client/995543_lNkq1v1HN_sector/external_portal/408tp2uevn7w8k_617t3v6zytuzx7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:308903
URL: http://vics.com.sg/aspnet_client/995543_lNkq1v1HN_sector/external_portal/408tp2uevn7w8k_617t3v6zytuzx7/
URL Status:Offline
Host: vics.com.sg
Date added:2020-02-05 10:46:08 UTC
Last online:2020-03-07 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-02-05 10:48:02 UTC to abuse{at}netdeploy[dot]com)
Takedown time:1 month, 1 days, 12 hours, 2 minutes Bad (down since 2020-03-07 22:50:53 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-07Mes 2020_02_07 20474.docmdoc 449e2b8365dd554b9df5281be690520fc194fd1b4e74d71b3af98e04111596e3Virustotal results 24.59% 
2020-02-07Mes 88612.rtfdoc 5a4fc3c23be16cff577a8b9af743cdfc330a1a3a8efea386690c226398d246ceVirustotal results 25.00% Heodo
2020-02-07List-2020_02_07-281.rtfdoc 637aa5ca4158cfdea8113bdb062b8ac800b8d600a5b7e16969f7f3d4ce77245aVirustotal results 24.19% Heodo
2020-02-07dat-G8840.rtfdoc 4d46d038cd9f2a48555e70846240d75457b23f0c3a192d9a9bf8a498ea35e2ceVirustotal results 23.33% 
2020-02-07List QRG57653.docmdoc 006766d9879f75d74de2c385ce8418fb838989af2046d8d329ad6ae7dc6d26ebn/a 
2020-02-07arc D8956.rtfdoc 88d2e0f1e728a7142e0fa0f277f4020c91bb5e4222ccfd8162d9e0b6beb60e5aVirustotal results 43.55% 
2020-02-07FILE 2020_02_07 8245.rtfdoc 60a2db35f6a200f89387811492bf70f40551c72578c80be36bc21dc7abbcce67Virustotal results 43.55% 
2020-02-07MES IMA7078.docdoc ae0dba6208040d7656556bb876279d0ee3708e7cba62fdf3777e81466021bceen/a 
2020-02-07List_20200207_CLT624.rtfdoc 951c41a81d18a2577f97934a32f1a28463dc7cdf7b4118ed040c35ae62864843Virustotal results 35.48% 
2020-02-07mes M251036.docmdoc 4de743bb5a807944570907fec4e4ca12efe2016c5c50e04f718ed117b26a76eeVirustotal results 32.79% 
2020-02-07file-GU684358.docdoc 4ea3c2e1f6d051de33d5c37e2dc88e621ad3ce6404691932b5787393c76fe8a6Virustotal results 30.65% Heodo
2020-02-06Mes-2020_02_07-H0750.docdoc 2ab5454468bf092401bb674e12f9577b0102b97450e07cc6ffdbaec61eb40953Virustotal results 29.03% Heodo
2020-02-06List_2020_02_07.docdoc ac7760c7ac85f9e8058a9af1862e8b503ba18efe9bf1ebfc820845a33714ea8aVirustotal results 29.51% Heodo
2020-02-06FILE 2020_02_07 1829521.rtfdoc b7676cdb8dc6fbbbfb658a4eccf03a5c3290883a4fda239945b7a3c012950ed1Virustotal results 27.42% 
2020-02-06List_2020_02_07_7259980.docmdoc b6a866cd6767e85ce9779e18601e4ff38f6a25e8bf459d47936489b9d58ba9c9Virustotal results 27.42% 
2020-02-06REP_2020_02_06_466.docdoc 69caf04e8e1e56614bea23015c10066190147415d1c1699accdc79c49531cedbVirustotal results 29.03% Heodo
2020-02-06List-QKZ13759.docdoc e62205f9ad8ce110e6f628a4622e7f12d9db3b4c2cc100e1d464b06f2a2b0afbn/a Heodo
2020-02-06Dat-145.docmdoc 548c32e1f7c11d658a1b45cc341ea2480b28c86e352baf366289aaa70a9e9292Virustotal results 29.03% 
2020-02-06arc MGM772566.docmdoc 3e2e9332429ca46e97d6d5b2d39864b216599b31498ebda448a3fc2adfc78a0dVirustotal results 29.03% Heodo
2020-02-06doc_9952.docdoc e2242f427a47cdd239a61505c64bb7956f2c451a95ae9dfcf44f845fafeab46aVirustotal results 25.81% Heodo
2020-02-06MES.rtfdoc 464e3fbff2832e347b5bfa5fd0151fbfc4f3107cf97f74b7addcbc2984b60143Virustotal results 26.67% 
2020-02-06INF-2020_02_06-Z639.rtfdoc 20a0926fb970d58fb5681385d5b8bbc67f1abdfe2e240c721e1034857c14cb9aVirustotal results 24.14% Heodo
2020-02-06list-409859.rtfdoc b99125a74c2d36d2875478ee03096a69ad74f272c1ced98d2e22ea0f2a3d3191Virustotal results 22.95% 
2020-02-06Doc_P100256.rtfdoc 186ad5a4edbbc67f97e4c4d0236f263ae46435a2687639dba2a0a91edd0d6ce5Virustotal results 22.95% Heodo
2020-02-06rep 631545.docdoc 5c65f21a3869e1e15433c2263d8dff3827f622520c972b12f4686250b8e68018Virustotal results 23.33% Heodo
2020-02-06rep-2020_02_06-778.rtfdoc de051ed1500a8c104656fd5cdfc8735affb7c0bc996b98ab0872bedf6d4172ffn/a 
2020-02-06REP-20200206.rtfdoc d0ba1020328bfa59129c6d94b6bfd8979bd652574b24407bcfdadc75fcf28fb4n/a 
2020-02-06LIST-177556.docdoc 5c3ce056d5c4c031e62f29306f27698d258d673ab890eaf2c2bd06487933aa00n/a Heodo
2020-02-06mes_20200206_5987651.docdoc fa37e0cba4786db4ba847c2e4f9b4ee78aedbf0eea4491228705fc00980af4e8Virustotal results 32.79% 
2020-02-06inf 20200206.docdoc 346d01cf657414934f8c87af6f0ae07d23875f613db84e483f2174b6353ab405Virustotal results 33.33% 
2020-02-06Doc 2020_02_06 YJH03763.docdoc 43e38902740c39567550fd0e4c87c00947c5fe577765eb00051f0212c05d7cabVirustotal results 33.33% 
2020-02-06Rep_20200206_YI3365.rtfdoc 702b22d598064f664dd6fbf97fb50364269f0215cbeabf867165861dd0b7d82eVirustotal results 32.79% 
2020-02-06inf-2020_02_06.docdoc 24bc1b322505611fc96f657f00be75ad4a096d02fc3e78d4b45369b13358575fVirustotal results 33.33% 
2020-02-06ARC 2020_02_06 8005187.rtfdoc 58f94895848e841464a8b36d26e332a50e9b082bd7df37c1c054168929b7b34eVirustotal results 31.15% 
2020-02-05file 20200206 CJ21752.rtfdoc 335e92129e141d12928fdc17fbb6c1dfe8b6fa59b2ff2a4ad0c60f4f0637ee83Virustotal results 27.42% Heodo
2020-02-05DAT 2020_02_06 5282836.docmdoc c1d36e9aab2030f23a10178cc432f92255b74c7e2382840bbae1ad7c099e97a9Virustotal results 26.67% Heodo
2020-02-05file 2020_02_05 I732008.docmdoc 1566745273aeac5249400c456f82b70e870825a50ee2457479f734c7686dfb54Virustotal results 26.23% 
2020-02-05REP 2496.docmdoc 47ca3de0e80a4e9571311ab0b2470ecc29d18c990b063b57aef1818e5a3c260aVirustotal results 26.23% 
2020-02-05rep-8410.docdoc c0b9c90ce017a4e5196e744c7948464ff57431da4a1d820793c5aea57cc0a095n/a Heodo
2020-02-05doc 20200205 VYW6368.rtfdoc da0b1e331a89bd28e4338a886d224c01e9194a764a6ded30bac8b16670a589b3Virustotal results 26.67% Heodo
2020-02-05File.docmdoc 20b603562ad65e466c27733e3ba8368c3ed83caeec165555f4a935ed0cc6d4b1Virustotal results 26.67% Heodo
2020-02-05File-459.rtfdoc 1d71db32310de6088f008bda0c652b8a1715c3b98c549cfca90601bdc70c59a8Virustotal results 25.00% 
2020-02-05FILE 31715.rtfdoc 6228be42f808ff1c2d59dc6df839b24c07a9e9640fffea33d21e69f3b2765a69n/a Heodo
2020-02-05dat 1819629.docdoc e017e89646b0d091bc67504f4318ea078b5a279edd898f418ff735e40c432e28Virustotal results 25.00% Heodo
2020-02-05dat 20200205 6528903.rtfdoc 4a45120dce1cd34a211f66e94d6a16a0e567d8aa85527c6fa830f99691cd1816Virustotal results 24.59% Heodo
2020-02-05mes.rtfdoc 2ace029191f61ec162d3403a04de30018c667003664c72194a3fd133c86b6c72n/a Heodo