URLhaus Database

You are currently viewing the URLhaus database entry for http://www.fiyo.org/modules/FILE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:420212
URL: http://www.fiyo.org/modules/FILE/
URL Status:Offline
Host: www.fiyo.org
Date added:2020-07-27 22:09:40 UTC
Last online:2020-10-27 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-27 22:10:02 UTC to abuse{at}axgn[dot]com[dot]sg)
Takedown time:3 months, 1 days, 3 hours, 30 minutes Bad (down since 2020-10-27 01:40:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-03REP_UJ6699603233PO.docdoc 0409685db7e8fdd3daf6da4b1c147c2223944ddbb595f33cacabf5d39cd01b29Virustotal results 61.02% Heodo
2020-07-28DOC_PO_07282020EX.docdoc da3bcdea8cc3b33756792fdfa11bdef92dd36e4620ada8b660fc12cc211b4281n/a Heodo
2020-07-28BAL_PO_07282020EX.docdoc d3fde9018a0bc9e76edf0b992ee8af63d938a122dfe68f7ecdb578b27bcec3e7n/a Heodo
2020-07-28Z_440680821314038.docdoc 9c8f04c408fe3170c3f9d50092fa7bc79b072ac1bfe7c985dd2887d8581242f0n/a Heodo
2020-07-28DOC_PO_07282020EX.docdoc dcfa16496d19200fd3dcba8caa7f55ebb5bd56da1ad90b49ef3bbe702e1fdd87n/a Heodo
2020-07-28REP_99616188.docdoc d9e1b8b8313a688c0096c914d0cc62aed82170a3e85263d69ef058de2d978b15n/a Heodo
2020-07-28SZQD_HP2113136224CU.docdoc 78343bb65eecfad5b62d2de0e25b21a708b837293f90cfd6b1bdd8e8cb7d8014Virustotal results 39.34% Heodo
2020-07-28546652740400396.docdoc 8568762e1933e7b9acb305ef10ceef97fae4501ae0f805ad873393f9459fa229n/a Heodo
2020-07-28WIL_070120_EWJ_072820.docdoc 2099d5d04c39f86f1da8058861951deb8c6ef875e5a77272709f711e80a3d998n/a Heodo
2020-07-28INV_BF4927952346MR.docdoc dcab281c030ca8ebd833b95d2379df634eec571e1ae19b6aad70ae1a0eb2e07en/aHeodo
2020-07-2826918453121623735.docdoc 2cd1cda0f9144cc5668cca05b675beddf4257109b659772e705b41fc0fbd331en/a Heodo
2020-07-28DOC_55508920.docdoc 23c51d3c717104427e3ee990c8db28900701083c086707b24493ad7f9968be97n/a Heodo
2020-07-28REP_PO_07282020EX.docdoc 69314a5a40529facfde61bb78562869e4ca9a67ba69a3028d376a265e174ea6cn/aHeodo
2020-07-28FILE_IYW_070120_LWR_072820.docdoc 2840dbe68611c23040d1bcd78b9473dcd48de959c93280ee78f105b5af51fe75Virustotal results 37.70%Heodo
2020-07-28BAL_41230657.docdoc 8b8b2829eec27c2687e1e4dfb190e65d66875564f241e73d6229909a552a510cVirustotal results 40.68% Heodo
2020-07-28U_6OAVN50S91H.docdoc 26906041efdeafb6c1754eac8dff97abf079148816f1121ef92bfaed0a6e9991n/aHeodo
2020-07-28LZX_070120_YNC_072820.docdoc b5ff10eaad0448b933f253da6bfde702a18b8fe967e071e92fc3587fe3e0c4b2Virustotal results 37.10% Heodo
2020-07-28019827845392770246233909.docdoc 502f2432a2c035f0d1f94c39051d8f92b1600da2fc0510fdaa6f6e2419f888c5Virustotal results 37.10% Heodo
2020-07-28BAL_TOW_070120_DTG_072820.docdoc 03c755321460ac4015e02fbda399f9fa099bfcf9566ac0b91ff525f03bc9dca6n/a Heodo
2020-07-28INV_22920624.docdoc 3922ed31097dad6980d7aa3830470de434d9e128f5f37fecabf5637e7c5ab0e2n/a Heodo
2020-07-2847579052.docdoc 1f2d563a9cc13dacc7e5ca5d6b8745f38a4244777fc5ebde045785790441b196Virustotal results 37.10% Heodo
2020-07-28FILE_71305732.docdoc 20d81ffc64ba89a114dc4ee30c643d555945ab0ec0f3a17c96b56d6087ef3b13Virustotal results 42.62%Heodo
2020-07-28DOC_G7U1C62K.docdoc 5c533891fcae9ba18e3c42bd62ee131b2dca552f90753abf178ec19374191c75n/a Heodo
2020-07-28BAL_JK2852616903GU.docdoc feb69e5e064dc9aed0fb86311321af444f6296260687339fcceb53d31201a026n/a Heodo
2020-07-28DOC_IF4144695579RA.docdoc 7d63604e1fd27ac31666ba76b7d7d82a09c6035a6fe9bfc257a9e7b9249ef525Virustotal results 42.62% Heodo
2020-07-28DOC_QEC_070120_YEL_072820.docdoc 67c9d551007620c36a100f2a6eeb4e297ca891ce49a371f544cc06da016021ffn/a Heodo
2020-07-28H_ITC5VL9D20T.docdoc b0327c5b8ccf39afe08dff73d462d55164003890399c951f45c05fdf85c4c815n/a Heodo
2020-07-28FILE_M4I95M40VWM8.docdoc 2b2dc53af6714037713433698dae9be164fc7c66c23377ec620a17a4130bf425n/a Heodo
2020-07-28BAL_80149551636866198419232.docdoc 6f725b4e11df45b38cea3502301ee5e92df17109fa860dc84523501a6940f5d6Virustotal results 42.62% Heodo
2020-07-28BAL_TV6330686401CK.docdoc 085a4179c27fac8fe1ceeb6cb237242ae375f0be7b0eec75c057f1ab00389427n/a Heodo
2020-07-276879191884938184993794.docdoc ec58eee07fffa7a7af0387949a025a2ed4f748060d7420dc53316cb6b9a332e3n/a Heodo
2020-07-27FILE_81231038.docdoc 78b39f8d472206c5ee8e1cdcd47550cf56630aefc5e722ca39891b62a9c02d19Virustotal results 42.62% Heodo
2020-07-27FILE_PO_07282020EX.docdoc 2bd01d881217785295064f5e2d94720a9d0952d1ee3888349b008bce7cf5dd8fVirustotal results 41.94% Heodo
2020-07-27RI2078654256KD.docdoc d88b494734b0a01b33a3095214b8f76b448f625fa97248e6d6385ed6a1edc35en/a Heodo
2020-07-27INV_0428855276534021673790090.docdoc 0a2efb0dfe85f3fb776bdfaf83eb0b8b4f17d2f52d4a75552928b1ef7ff1f76dn/a Heodo