URLhaus Database

You are currently viewing the URLhaus database entry for https://roofingservicecompany.com/k2ban/balance/db8jpsw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:415258
URL: https://roofingservicecompany.com/k2ban/balance/db8jpsw/
URL Status:Offline
Host: roofingservicecompany.com
Date added:2020-07-20 14:32:35 UTC
Last online:2020-07-20 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-20 14:34:05 UTC to abuse{at}fastly[dot]com)
Takedown time:8 hours, 28 minutes Good (down since 2020-07-20 23:02:25 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-20F2HX8JVR.docdoc 24801ffebf7c96489c02613a4cc1fe277a4b1aab78bf4034145167ab19ae657fVirustotal results 27.87% 
2020-07-20REP_EW8047436257PN.docdoc 69167697c3c077b3ca6449ae55750d1712c20bc33196537fdbbe05e463aab195Virustotal results 27.42% 
2020-07-20XGG_070120_SHJ_072020.docdoc 6f07729a0d38233363651ce3760f506ded756ffb5010218df70d03bba767e7d5Virustotal results 27.87%Heodo
2020-07-20W_34719156.docdoc 2af9360b0c34eed7913f05bb4d71151b7e9439e871bb7d1efbcce6b30dd59635Virustotal results 27.42% Heodo
2020-07-20INV_PO_07202020EX.docdoc 1e146c18d65265b27e23f9ee84a8f1d20c046aa76c30ed386710a10cb0da2960Virustotal results 27.87% 
2020-07-20Y_67473186.docdoc c3cb4f0f8f7099a203fb3f3980347a57f1abb6f813c9dbab3985e8c5af4ce136Virustotal results 25.81% Heodo
2020-07-20FILE_02977889.docdoc fdc3a5d1febd58ec001ec2e119bc2756b8518c289478484bae758ac45c964e59Virustotal results 24.19% 
2020-07-20FILE_RL3004946018HG.docdoc 45dad59b2eb0981fac78ceb41cbf3116b8da2fe992cb351b96acb6968e33a98bVirustotal results 25.00% Heodo
2020-07-20W_PO_07202020EX.docdoc 80b106f0a5ee76807f30854146ca7ec399ba3a278a7d7b2dabfb22df35ffaafdVirustotal results 24.59% Heodo
2020-07-205884485793363293.docdoc b1117dc0028ac754790e7b23a96c3bf2666f38c9096bc7e111c92a379c8408f3Virustotal results 24.59% Heodo
2020-07-20INV_88489029.docdoc 78b522f88005e96bdfd89250e19f663f77d4cebd983c5471a52c36bfb74adeb9Virustotal results 24.19% Heodo