URLhaus Database

You are currently viewing the URLhaus database entry for http://fernandez-ulrich.cat/cgi-bin/multifunctional-resource/69237055-p3SgtFGb6ryb-profile/mcmy4jpgfbh2i-094074588u5/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:420890
URL: http://fernandez-ulrich.cat/cgi-bin/multifunctional-resource/69237055-p3SgtFGb6ryb-profile/mcmy4jpgfbh2i-094074588u5/
URL Status:Offline
Host: fernandez-ulrich.cat
Date added:2020-07-28 19:02:29 UTC
Last online:2020-07-31 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-28 19:04:04 UTC to abuse{at}ovh[dot]net)
Takedown time:2 days, 18 hours, 12 minutes Poor (down since 2020-07-31 13:16:37 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-30file Z087487.docdoc 721cc11d186a6415a34e64ea1a20b27395fa2d2e240bb6d8e19d771f0e234769Virustotal results 46.67% Heodo
2020-07-30Arc TJO4692.docdoc 71775842208726cdd177ebcc5685f3317566ab37e4a1b45cb7fec9d36933d3deVirustotal results 46.67% Heodo
2020-07-30LIST-20200730-4068.docdoc ad33ec972d9985244a4cd48a254703fa8164102e2a0065be9e6d9048c4f22e53Virustotal results 45.16% Heodo
2020-07-30List_20200730_VNS920178.docdoc 0edf9f8a236bf09a40e5f42258fdca9d68a29652be2662e4eb33c0dc1587cf3en/a Heodo
2020-07-30file 20200730 682.docdoc 48a17d54a2bbde984c983167a5b265e642abfb2492127d957923f96f48847b4dVirustotal results 45.90% Heodo
2020-07-30doc-2020_07_30-SK46939.docdoc efe6987f7439dae236c90f86285492de8ba06022a1d71383abc6ff7d7b2fcc3eVirustotal results 47.46% Heodo
2020-07-30mes.docdoc 560e3b4e31cb20202815bf8cbad8a1656c68b1ea22f9430cf8c5565df4c90796Virustotal results 46.67% Heodo
2020-07-30Arc 20200730 U344.docdoc 7c0e6753e1e3c45107af5efe73d18fc4759a3cb4073d1ad69179ff8a2a5b3d38Virustotal results 45.90% Heodo
2020-07-30rep 2020_07_30 416587.docdoc 7c571658c742a32cad84172a2ee48d1a7e8787aa13f0d2a9d4514cb8815c9cd7Virustotal results 47.46% Heodo
2020-07-30rep P040584.docdoc 3817e9920ed535d977f608a697ce13182db45fdfd54eb64077dbd572a66dd350Virustotal results 43.33% Heodo
2020-07-30MES-KB37142.docdoc 0eea95c39b655fc52f92d1d2cf86ae51392722292bfb7c947721922490140584Virustotal results 44.26% Heodo
2020-07-30Doc-2020_07_30-VVZ856887.docdoc 6a26d2f7aa6928173578fa3eb5cfcf85364def1cc8a569a21a263c898014cd7eVirustotal results 44.26% Heodo
2020-07-30FILE 2020_07_30.docdoc ad9587141a231584567ce8270198d925b59239088aed69e3ab7331358f8fcf83Virustotal results 42.62% Heodo
2020-07-30FILE 20200730 YQ84857.docdoc 4f8b72d63ed6d938b2ad442c2df18d45ad92a53876d6ac6261d12131bb01702eVirustotal results 43.55% Heodo
2020-07-30Inf_2020_07_30_127.docdoc 82fece784c2dfb8236c30c5efb2c891f5dd32c6b836bc3c08828a0135526074eVirustotal results 43.55% Heodo
2020-07-30INF-20200730-M027.docdoc 020489febefffd2304a280f71f515a70323c405a1dea01213dd8f6834466241fVirustotal results 44.26% Heodo
2020-07-30Mes 20200730 874773.docdoc 536f687ed48372184bd85778ceb82c69ea9379cd363ee0081693ea440e3734f4Virustotal results 45.00% Heodo
2020-07-30file.docdoc a3bfe95f9b484dd75ec9f3f822edf22b77135b82a47fac0dcfc8c2006643f84fVirustotal results 44.26%Heodo
2020-07-30FILE-TU4110.docdoc 8b05e13300b42eae0f8f72fd506a7a5f7c3bcb3ccee3712c8cdc5b829c64f9b4Virustotal results 43.55% Heodo
2020-07-29LIST.docdoc 1ed9c5e4967acdbb39a9a35da73474e5b3c958d1d8a7519658b33e2765a1f1d4Virustotal results 43.55%Heodo
2020-07-29dat 2020_07_30 N80673.docdoc fcac2689185cf174e195fc9a8a9898529873dc4c681f3ef0a67fbcf76e94340dVirustotal results 44.26% Heodo
2020-07-29Dat-20200730-026.docdoc c7679d310573a3ac39a832e1becb0c92aa6d15012f67a78e721b17b48c18f21cVirustotal results 44.26%Heodo
2020-07-29ARC-20200730-431142.docdoc 3a13395e66955213b18a45d9281b21af1f041b59525de55318121a1ceca64f18n/a Heodo
2020-07-29FILE-20200730-FDA195029.docdoc dcb0d5886c4e43d1e46789d4fa9213efb3917724caac5574b7b3e508bfbb99a6n/a Heodo
2020-07-29Arc 2020_07_30 NR87269.docdoc d9c8ebbeb2d3f36ed06681fa776d55bcc4603e50d6a226f2ccf12dec6075694bVirustotal results 36.07% Heodo
2020-07-29List OR914176.docdoc 7894435f0911559a26dff508b47295b2bb762b9812e13c08ea44ff6dffdbaf83Virustotal results 36.07% Heodo
2020-07-29list-2020_07_29.docdoc 7d5c1b7ed02d907f282dc39417e607956d98cee471c6078c82ee8e32bade2310Virustotal results 36.07% Heodo
2020-07-29Dat 0121848.docdoc 7c006213a1ebcf46df1005593911b565a17cfdaf788bab1a9cf1d247ad683ee7n/a Heodo
2020-07-29REP-20200729-R968.docdoc e73a899dea76c5fd448705b9a6898077ff11bc1f90b7426d2bbb01bc93d3c23dn/aHeodo
2020-07-29inf YB50473.docdoc 223e86dcf769c98a56e5838cdee523ad0468b02cfa437e7ffd7613ad922ab09fn/aHeodo
2020-07-29REP-2020_07_29-582.docdoc ac12bfd17290d68dd86ea22a43bf4f6f0ade51e8a38d377c20050add454536ecVirustotal results 35.48%Heodo
2020-07-29rep-20200729.docdoc d009612760ad9dba467fc8f4cf70df7525b45c528a2e14a49cedbccd0203cffbVirustotal results 36.07%Heodo
2020-07-29dat-23058.docdoc b2e71b233e35e377f0c5c6483cf83a9c2290dfc04760f8bf973cd014e689a742Virustotal results 35.48% Heodo
2020-07-29List 031.docdoc 4ee5376ca1ab5c1f49bddd182e7fc412f36875312a81f11518f81ff52fb166e0Virustotal results 35.48% Heodo
2020-07-29REP-20200729-F53946.docdoc 22432edf35d5245c7e5b9613890819c87862cfee69167a8741e4fb2e3867479aVirustotal results 36.67%Heodo
2020-07-29Arc-2020_07_29-447852.docdoc 917a1cd7c970524992615c7db0740d3c4f4b2984c657dd7ae29fba01d6768408n/aHeodo
2020-07-29File_20200729_947.docdoc 4174168df0202ec0fc0570fc65b4fe9fff2699fd99649dfd8cddb823e8efec6dVirustotal results 34.43% Heodo
2020-07-29doc_5618.docdoc ba70e5201cfbce20c6c71c9b53e47e758e4f13da5db46260d3feae0824f1e749n/a Heodo
2020-07-29DAT-084.docdoc d076cf496cceee93a7feff09cde2c3debeca7167b511425696cb3a76f3ffc843Virustotal results 35.00% Heodo
2020-07-29arc 165310.docdoc 47482467cc04e69d03d51061b35e629ea671fcfdef9cd16b6beba53c363753a6Virustotal results 33.87%Heodo
2020-07-29LIST-Q032.docdoc 8bb634c8040c0dbdc8103c0bf90ca21e4ff6d65b9f63ed5a317b6e676ed0c7c5n/a Heodo
2020-07-29rep 20200729 7730157.docdoc d80d4a17577b544fa7da9fb2fef8c39d77ebaf839456255a0fb4994148b0f00bVirustotal results 27.87% Heodo
2020-07-29Doc_20200729_CC444760.docdoc 4b66bb4e22f421f21ae63f70aa2f43f7952f0ff42459c7f15215a3c8615e032fn/a Heodo
2020-07-29INF-2020_07_29.docdoc 67eef8e781f8a712985d6413f121e8546df018a33aea849f20c2d5095a6994e7n/a Heodo
2020-07-29DAT-20200729-274700.docdoc 4cad41a2c94580e73badd4c35c2282597f7708204d5214f88c3f9972e3d99bbdn/a Heodo
2020-07-29Inf-2020_07_29-975.docdoc 89d432c817816f75db9bf20e7515b7bbd355cc542e437cfa67242563879d2bdcn/a Heodo
2020-07-29dat_1628.docdoc 1d08f0b597c36bdbeff2046fbc31263ea2c4044af0e4040aae479badb1a900b2n/a Heodo
2020-07-29file_20200729_399.docdoc 6d33d26c6514907d83ea254422280f50c6087470e0014a527536e49da0a65359Virustotal results 44.07% Heodo
2020-07-29Rep_20200729_QT773.docdoc 6a8bb6e77fb312e9755b5119e1f2d52a58b9f11f1ffdd96eb7c937a0307cc6a7n/a Heodo
2020-07-29Arc-20200729-C2436.docdoc 3861720e702387ead5b58b98c9d9551a84f794e3ce9c331b7855311604ad2b46Virustotal results 44.26% Heodo
2020-07-29rep 20200729 JT760551.docdoc 18eb3a42e22bad4739e7e30656ea54d812b781b53f4bdfb702acc5e440a0b6dcVirustotal results 43.55% Heodo
2020-07-29FILE 20200729 EYR271156.docdoc 820134a5637582882bafcc6aaee3741fded6acffba0751a562ebff93370f7a64Virustotal results 45.76% Heodo
2020-07-29arc-QJ715241.docdoc 581b3d0fa7b6ae23cef3a8e882801014964734eb92d18b457027199033b4690aVirustotal results 44.26% Heodo
2020-07-29arc_20200729_BLJ38481.docdoc f89b0ab3a3817bdaaca98ca6ebdd47fea5c4ee59872c90a4fccc23463d192e52Virustotal results 45.00% Heodo
2020-07-29Dat-F30933.docdoc b83b73c67632686490ef3198ab96f4202bf007bce5df43a744af04c764b3f258n/a Heodo
2020-07-29Inf 20200729.docdoc 57762ae9b274f78f82bc45f3b59af74465d25bf85817dd487d1176b6b55813d9n/a Heodo
2020-07-29list_20200729_711552.docdoc dc9ed541230e97a30f45695e066b67e80728f6963ada93b7fb8d9617a653857dVirustotal results 43.55% Heodo
2020-07-29FILE 2020_07_29 M004370.docdoc ae55f67659dd8f44ccb77fc51e56174eadb421dab3bed4f02afb2dff2c783934Virustotal results 44.26% Heodo
2020-07-29FILE 20200729 004068.docdoc 53236b0c820aa4108bba6680f4fdaa6ce978bb238f3420053f74424168190813Virustotal results 45.00% Heodo
2020-07-29doc 20200729 9247.docdoc f108b93f8a51197e20952752105e589dac418d57b106df142a474ed7f8627354n/a Heodo
2020-07-29INF 2020_07_29.docdoc 4939104d6ac747a434d08a86353fdba0f99fab4fdfc1fe2791945d8bcb3f8482Virustotal results 44.26% Heodo
2020-07-29Mes J18931.docdoc c5fe30ccdc224f47c8059f8abf775b896101e8e9d007aa2f41a9071562390b1eVirustotal results 43.55% Heodo
2020-07-29MES 2020_07_29.docdoc eeeffe5ba0fcb1fd64fc11747b2b463cb84f1acd64201609163da191e142aa36Virustotal results 39.34% Heodo
2020-07-29Rep-N49667.docdoc a9089c8bcd79952f1a685be193816ad0b38833e532bf89a6e1944ba326747a17n/a Heodo
2020-07-28Dat_20200729_39839.docdoc 94ddcb3d527aa945321d1e706a0d7cdebe9b0380b2ac33918e02ae142da93a34Virustotal results 42.62% Heodo
2020-07-28doc_20200729_828053.docdoc 2921a5edaa2846bc5bb45cd6962c46cb936bdf64f171d9f6a42e686e02d1984aVirustotal results 40.98% Heodo
2020-07-28arc-2020_07_29-902.docdoc 54a962d82de3bdeb06f38850bc6cb537b3d35c6d95c97b7b1ccbc4948e0fb3e6Virustotal results 40.98% Heodo
2020-07-28inf.docdoc b08aee092cb3defc671949d65b32da80150ad60e64554f24eb25bea83ade4708Virustotal results 40.32% Heodo
2020-07-28arc 20200729 709410.docdoc 63e8efafd895a3c81e6b57f8df7af0d841c821d7e99b7dc74c82906d3291365bVirustotal results 40.32% Heodo
2020-07-28ARC_2020_07_29.docdoc f37ae711b262ab3caff91d44e0ef517c066e9eafcff80cef84ac904d8efad0aeVirustotal results 40.32% Heodo
2020-07-28dat-2020_07_29-QZ360166.docdoc c14881380d3b455bd2d466c9faaae7b1fd9e8319ec59724a6ea345ca13dcab51Virustotal results 41.67% Heodo
2020-07-28arc_2020_07_29_3627.docdoc eedf4533a63bc5838e513e7b015e80ab717a608090e7b3715c06a4e349cdbbf2n/a Heodo
2020-07-28Dat_2020_07_28_61924.docdoc 03d305262c813c8499df55f06b291331f87758dd0a17daf10b8d7c4a82bc795eVirustotal results 40.32% Heodo
2020-07-28FILE 2020_07_28.docdoc 539ff641f2ad4aeff90b35b5fd17121ac44fcc6081483bc9d1903c33c99b8d46Virustotal results 40.32% Heodo
2020-07-28LIST_5320.docdoc cac82767427ea3ebfc0e8f64c5f3d58bfb5a97ba333bf935631b378ac7e0378eVirustotal results 41.67% Heodo
2020-07-28Dat.docdoc c43a63602cb0b1dad2eaf7f04a744d632f94f40f19a5ee48afbe46d6898b573dn/a Heodo
2020-07-28doc 2020_07_28 Y464.docdoc 4fa3db5f1db73e8a740c861d684c92f641076801c8430193e022a01e1e44ec71Virustotal results 41.94% Heodo
2020-07-28list-2020_07_28-NHK4083.docdoc f4cacca3653da98959d2b7e7df30a2021d7c5844c01be3fb5c657235aabab8a7Virustotal results 41.94% Heodo