URLhaus Database

You are currently viewing the URLhaus database entry for http://blscomputerworks.com/journal/parts_service/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:420126
URL: http://blscomputerworks.com/journal/parts_service/
URL Status:Offline
Host: blscomputerworks.com
Date added:2020-07-27 19:50:05 UTC
Last online:2020-07-28 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-27 19:52:02 UTC to abuse{at}servercentral[dot]com)
Takedown time:8 hours, 37 minutes Good (down since 2020-07-28 04:29:40 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-28INV_YZS_070120_KDS_072820.docdoc 20d81ffc64ba89a114dc4ee30c643d555945ab0ec0f3a17c96b56d6087ef3b13Virustotal results 42.62%Heodo
2020-07-28DOC_PO_07282020EX.docdoc 3bd36ab32026af0a6cb457a12a0ba75df13d8e6a288da64ca838af0bef9c2e24Virustotal results 44.07% Heodo
2020-07-28HI_DMEGZZ5LRQGE.docdoc feb69e5e064dc9aed0fb86311321af444f6296260687339fcceb53d31201a026n/a Heodo
2020-07-28INV_YBKIWHW58R.docdoc df3f07a28988e65741321c968afd02eaf8a49fa2dcf2e2f2685d04e13a236122Virustotal results 42.62% Heodo
2020-07-28REP_362532553052.docdoc 1e687ad756dada51e71738e9b4af3eedc481d865f7df0bd32500ea50bd16233aVirustotal results 42.62% Heodo
2020-07-28KEQD_ACR_070120_WUV_072820.docdoc 388d49d105196dea02e96ac0172560dff1d9862e5b8910e7af963585439dbde3n/a Heodo
2020-07-28FILE_86492488.docdoc 2b2dc53af6714037713433698dae9be164fc7c66c23377ec620a17a4130bf425n/a Heodo
2020-07-28S_27420168.docdoc 29c42aa5892fede943d2975f64abfccbcc8cfa164a85e278753f970a17d010deVirustotal results 41.94% Heodo
2020-07-28REP_XO1HTLHZ6IX.docdoc 6f725b4e11df45b38cea3502301ee5e92df17109fa860dc84523501a6940f5d6n/a Heodo
2020-07-28INV_PO_07282020EX.docdoc 2b4263841c81074211dd59e820bf05562e5c59be8d38bf8791a0a21753cdf504n/a Heodo
2020-07-27PO_07282020EX.docdoc dd1fe9f11a267149ce356a768d071605c1972fd10d1f7a57a29fe8a2c8fb41c1Virustotal results 41.94% Heodo
2020-07-27FILE_KK3275608941ZJ.docdoc 3e21349ba3bf686515975146afcebe14651b2304ec58b47bea6b87b5fbc79a69n/a Heodo
2020-07-27FILE_PO_07282020EX.docdoc 3a4fd8ba092ea2243de196e6a43f4568bc13d88e3c04ed3aaba6e494b4ec47ffn/a Heodo
2020-07-279480302675592241674916802.docdoc d88b494734b0a01b33a3095214b8f76b448f625fa97248e6d6385ed6a1edc35en/a Heodo
2020-07-27DOC_719506599346633983568643.docdoc 1025216058d489f910a0436f2fc8da78f7b0c69707130f006d627744e413067aVirustotal results 43.33% Heodo
2020-07-27INV_037011212732304.docdoc 9e6b07432484371908b25279a80c78f3f717726fdc1cee80af1458b9dcdd92bfVirustotal results 41.94% Heodo
2020-07-27Y_IA1349814105HM.docdoc e014e7351a4ad87f016b72570a6ea61c63069ef368ef1501bf75c019760740d7Virustotal results 41.67% Heodo
2020-07-27BAL_0CU8Z98V1CXVM.docdoc 5d08f7fb64c5fc4af654eed617b862ed33cd458b34326c027882d886627f96d0Virustotal results 40.32% Heodo
2020-07-27BAL_46263567278.docdoc 8b45eedf831a892ec3c09d8c866f1d771b5910bf44de36ce99157d6dcaf56eden/a Heodo
2020-07-2732567608.docdoc 7552c96fe26d72990ed41266e7d9f152f0be0ae10f6e335c50f0cf9ad81b954cVirustotal results 41.67% Heodo