URLhaus Database

You are currently viewing the URLhaus database entry for https://lcccl.ca/ik/142y-gt-24732/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:418200
URL: https://lcccl.ca/ik/142y-gt-24732/
URL Status:Offline
Host: lcccl.ca
Date added:2020-07-23 03:31:54 UTC
Last online:2020-07-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002825448 created on 2020-07-23 03:32:04 UTC)
Takedown time:6 days, 9 hours, 37 minutes Bad (down since 2020-07-29 13:09:41 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-23Invoice_C42_75688756.docdoc 548e4293f740ef77ecf074a7e8eb5ee8659eb565fd08db697ca873dc770c11b0Virustotal results 46.67%Heodo
2020-07-23Inv-9_2258723.docdoc cf2ba9c49c359ebc0d9ce182b928db8e967b6720c8d531c8366b2420ce778d21Virustotal results 42.62% 
2020-07-23invoice BDQW6152_9939280.docdoc fd1b363068e21fa7a3e86cc0aa6134bfa46a640d70bcef686f19f57f54340f6bVirustotal results 44.26%Heodo
2020-07-23INVOICE-DR7_54296995.docdoc df314d2431bc91e51d22c2f55c6b9de5577ac0129f93014698c3e17546ae0867Virustotal results 40.32%Heodo
2020-07-23Invoice-PSH4769_92925896.docdoc 823bc611785f0ac57c609d89af04775d2555e96de7529cb5c367e4690c08f6eeVirustotal results 41.67% 
2020-07-23INVOICE-R636_838166.docdoc affd22130c658e33e153da21dacd828359afe4c1bee7d621def53e3c7fb5a712Virustotal results 42.37% Heodo
2020-07-23invoice_TEJE34_310175970.docdoc eb8252a2dd0e7e0f44a6b26fb09abb04ef9a618d216f46a9c1525a55350766e9Virustotal results 41.67% Heodo
2020-07-23invoice_W2077_52993374.docdoc 8a3c6c28c8e2a7d4a12919a3c5894648e4a54661f9ded2f99e00685742d95bc4n/a Heodo
2020-07-23INVOICE_IH018_5058037.docdoc 5ecb66cb399d319d7c2e24a9ae1e427ee2b10ccd3da9b2a2266dd764ba29cd16Virustotal results 41.67% Heodo
2020-07-23Inv-IP341_0724068.docdoc fcdbd1df2994aa81348459cba048cb91f2d0c779911d4abd1ac45bd540eae640Virustotal results 40.98% 
2020-07-23Inv_H114_14133513.docdoc f815f1d2c10f89e966e1637e1d1478a36c5c8c8ceb852eefaa2247c44f10b9fdVirustotal results 41.67%Heodo
2020-07-23INVOICE-36_9931212.docdoc ec054f61bce05bdbe5b35d954f9e1869d873b720b529dabb46a862550a0f0ba4Virustotal results 42.62% Heodo