URLhaus Database

You are currently viewing the URLhaus database entry for http://chrishalaska.com/php/report/685c6352621072ofckpme6qzp/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:420010
URL: http://chrishalaska.com/php/report/685c6352621072ofckpme6qzp/
URL Status:Offline
Host: chrishalaska.com
Date added:2020-07-27 17:10:10 UTC
Last online:2020-07-28 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-27 17:12:02 UTC to noc{at}synergywholesale[dot]com)
Takedown time:14 hours, 54 minutes Good (down since 2020-07-28 08:06:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-28753649682236912697.docdoc 03c755321460ac4015e02fbda399f9fa099bfcf9566ac0b91ff525f03bc9dca6n/a Heodo
2020-07-28MW3718070277BB.docdoc 3922ed31097dad6980d7aa3830470de434d9e128f5f37fecabf5637e7c5ab0e2n/a Heodo
2020-07-28CL3894608789VQ.docdoc 1f2d563a9cc13dacc7e5ca5d6b8745f38a4244777fc5ebde045785790441b196Virustotal results 37.70% Heodo
2020-07-28ZV0577658103MH.docdoc 20d81ffc64ba89a114dc4ee30c643d555945ab0ec0f3a17c96b56d6087ef3b13Virustotal results 42.62%Heodo
2020-07-28DOC_35967308.docdoc 5c533891fcae9ba18e3c42bd62ee131b2dca552f90753abf178ec19374191c75n/a Heodo
2020-07-2828654817.docdoc feb69e5e064dc9aed0fb86311321af444f6296260687339fcceb53d31201a026n/a Heodo
2020-07-28BAL_GI4731984123TK.docdoc 7d63604e1fd27ac31666ba76b7d7d82a09c6035a6fe9bfc257a9e7b9249ef525Virustotal results 42.62% Heodo
2020-07-28471FMTV6SBMV.docdoc 1e687ad756dada51e71738e9b4af3eedc481d865f7df0bd32500ea50bd16233aVirustotal results 42.62% Heodo
2020-07-28QFS_070120_LFO_072820.docdoc 388d49d105196dea02e96ac0172560dff1d9862e5b8910e7af963585439dbde3n/a Heodo
2020-07-28INV_08001088.docdoc 2b2dc53af6714037713433698dae9be164fc7c66c23377ec620a17a4130bf425n/a Heodo
2020-07-28TMJ_UFC_070120_VLF_072820.docdoc 6f725b4e11df45b38cea3502301ee5e92df17109fa860dc84523501a6940f5d6n/a Heodo
2020-07-28ZZXP_31994262.docdoc 2b4263841c81074211dd59e820bf05562e5c59be8d38bf8791a0a21753cdf504n/a Heodo
2020-07-27FILE_113269868774921453.docdoc 745208b9589c716bfe12fb99f5d6fe5e713fabb7097d8629a75a114584b2cec5n/a Heodo
2020-07-2797554588879203.docdoc 78b39f8d472206c5ee8e1cdcd47550cf56630aefc5e722ca39891b62a9c02d19Virustotal results 42.62% Heodo
2020-07-27BAL_13569679.docdoc 3a4fd8ba092ea2243de196e6a43f4568bc13d88e3c04ed3aaba6e494b4ec47ffn/a Heodo
2020-07-27PO_07282020EX.docdoc d88b494734b0a01b33a3095214b8f76b448f625fa97248e6d6385ed6a1edc35en/a Heodo
2020-07-27PO_07282020EX.docdoc bbf1da4131b3b508272428af648b22533a0add8b66f8b09f4570c1d799434a76Virustotal results 43.33% Heodo
2020-07-27S_F273A0YJ65.docdoc 9e6b07432484371908b25279a80c78f3f717726fdc1cee80af1458b9dcdd92bfVirustotal results 41.94% Heodo
2020-07-27NPT_070120_ETR_072720.docdoc e014e7351a4ad87f016b72570a6ea61c63069ef368ef1501bf75c019760740d7Virustotal results 41.67% Heodo
2020-07-27DOC_WL4805767147XO.docdoc 29142d1b50c19825901b0907408eb52d7962cff9742b7c0dcd550b7aabbab2e6n/a Heodo
2020-07-27REP_51027611.docdoc 2317a555c5aabac7a3b94757661b5ca7f25d7612b4c4a93df00b35fa56fd8e9eVirustotal results 40.32% Heodo
2020-07-27FILE_SU5923310426VV.docdoc 638c2bca4d280ee089f6038536d990d264e547a0aa4848cf1777b3c73e448561n/a Heodo
2020-07-27BAL_YMMSFC7ULYZH.docdoc 331fdfa975f4a2d408e197f274ab95fc524b04df25be54ea4af222cdca4300e5Virustotal results 37.70% Heodo
2020-07-27SCN_JZU_070120_SHF_072720.docdoc a2567b74182ca4bcd6e1d71b9d97079c0e9e0b0e311f994050401968d53b2a41n/a Heodo
2020-07-27DOC_WGP_070120_MUR_072720.docdoc e2346f7650658fe42696358919e1a59c058912b95266b7bce2ccbdc9c7365537n/a Heodo
2020-07-27WZQ_77518869.docdoc ee15b91ffaa6ccb45f34e54e28cac0313eeabf7ae3be97772023b75d65c1b778Virustotal results 37.70% Heodo
2020-07-27PO_07272020EX.docdoc ae3fe22384694c5fb3e90b4187e3766f58f0a7cacd0d60df5b5928b8cb380c69Virustotal results 36.07% Heodo
2020-07-27INV_ZPY3WFS.docdoc 3139a080fb259f348c0117281ce68f5ddf97af673efa6814de5c3ccb9efee0f6Virustotal results 36.07% Heodo
2020-07-27XKC_070120_EYR_072720.docdoc 041bf5b81e86e0f7498cb2c490ce915e25b16ad79da00523fa37417c34b5a6bfn/a Heodo