URLhaus Database

You are currently viewing the URLhaus database entry for http://utah211.org/prototype_dev/Document/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422057
URL: http://utah211.org/prototype_dev/Document/
URL Status:Offline
Host: utah211.org
Date added:2020-07-30 15:14:06 UTC
Last online:2020-07-31 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 15:16:05 UTC to abuse{at}fiber[dot]net)
Takedown time:1 day, 3 hours, 41 minutes Poor (down since 2020-07-31 18:57:38 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31INN_070120_LXN_073120.docdoc 058d1f89179dfcc881c3b5536cb2043d92c25b8dc70c74af1fe9fe6d6f49e75en/a Heodo
2020-07-3111288646.docdoc f78befb20738164c9c26b7fcff7944bb4e74cb285c1834fe96222a419c8e5cecVirustotal results 46.77% Heodo
2020-07-31S_LD8118307377LF.docdoc b7164e5314e8030a20bba3ddacb9030ec7e6b8459ce2a1643f6181eefacacfc1Virustotal results 47.54% Heodo
2020-07-31FILE_09593422.docdoc 93a916a37039c35db0ae99e9119dffc92dbb4224c25eafc2a4b63475576e88daVirustotal results 49.15% Heodo
2020-07-31FILE_09593422.docdoc 93a916a37039c35db0ae99e9119dffc92dbb4224c25eafc2a4b63475576e88daVirustotal results 49.15% Heodo
2020-07-31REP_PO_07312020EX.docdoc 1c2a8cebd9dfaa1c8cb5cbd5b65529c2da636a4b9c3439b43e99a296c304b8c9n/aHeodo
2020-07-31FILE_PIF_070120_HCG_073120.docdoc a4793238143f28a12c3574808fca946d088dacc4570bbb1fd33df193b2185bb3Virustotal results 47.54%Heodo
2020-07-31V_PO_07312020EX.docdoc 8174f855fde235a5c33778a867d83daef055075f49b6ddcddedeecf8a466172fn/a Heodo
2020-07-31MJT_070120_KDH_073120.docdoc 54ba24d383abb977b3b8e9fd0ad9a73735f0953a3c0f89fc0c192e86cb67d45aVirustotal results 47.46% Heodo
2020-07-31BAL_PO_07312020EX.docdoc 55da5c5eb03990c56ace11826deedcc82fe9d5f1a0fa6055575be6d9830f85e2Virustotal results 46.67% Heodo
2020-07-31A_0375625192133585.docdoc 1a4bdb64a47146d10bf8594404bcf28b53acfdb7242c989eb3d1c6673a270f86n/a Heodo
2020-07-31INV_27541941.docdoc 87a3224fa89663f53a2114b2db0c6140013d1f5ea825037d85290190c0081e44Virustotal results 45.76% Heodo
2020-07-31BAL_MI5166282864XK.docdoc 912cfde07319c14a61233144c7f079d0aedc495c068e5927e1cde8edec091442n/a Heodo
2020-07-31INV_MB30YZPSMKT.docdoc 3879446e688314a2f6bb2b908df0a76083c6375f64469c3987bed043df329fb0Virustotal results 43.33% Heodo
2020-07-31REP_CMX_070120_IMC_073120.docdoc 66e9380acc03aa90e855320b6090e72cc9e0fd7c72f1fd005f08a0b3e5aeda0cn/a Heodo
2020-07-31F_65431227.docdoc 628a4059b2b1433fae9cd2e40f5e6c8dc2528d5269c48dfcd20ee92378809e66Virustotal results 43.33% Heodo
2020-07-31H_PO_07312020EX.docdoc 2f1f7209f67f3d0b35e8ffb126f47975811bac63e9bc0e409a90e3cdfc15c76cVirustotal results 42.37% Heodo
2020-07-31DOC_Y4U55G5SKRNSYBN.docdoc cfff60f6938778198175a6d8a3bf888e554ac46c2b6db4fd4e3fe452472ba24cn/a Heodo
2020-07-31LBAR_99045415.docdoc 33cc5ac87a9b8a4bceb717df74b6cf6b1162ff33a67dac529744e3f81c55636cVirustotal results 45.00% Heodo
2020-07-31NH_PO_07312020EX.docdoc 98ee1381f134eaedefa2baef746295a547b2a4b7468ffbf5a9834e65a71c7c8eVirustotal results 43.33% Heodo
2020-07-31EX_DMZUORHTFW5M.docdoc fc8260756d35c29ece5bf1f7e3841128d9a81a67341151568d6885a070cd82b6n/aHeodo
2020-07-31BAL_07092144.docdoc 18d9ef695345eb4c97d2ac385a33550e01a3760dd3e3edeea1507af436451b0fVirustotal results 43.33%Heodo
2020-07-31REP_PO_07312020EX.docdoc 8876342a76e0843d39e640a43c7870089dbf3a3ffcd79980c44a14383a4c856eVirustotal results 40.68% Heodo
2020-07-31QEJ_070120_FPH_073120.docdoc 522b63a0d190f96b3d7e635d7431958b68f94c8f95a44594318d0e382b17bad5Virustotal results 41.67%Heodo
2020-07-31U_PO_07312020EX.docdoc 5e55aa28613770be2ebdf584ad12081c21c3029122a4d016325fe4c933a1fb68n/a Heodo
2020-07-31A_64542768677372501922.docdoc 98c69796d0d4c669225ea7ee1ba6fab9cd3b038014bfcdb4e95b82a7ef96d4ebn/a Heodo
2020-07-31VSY_UJ9NLMFGFKZ66NQ.docdoc 9e7028d16ec6751019c80ff608d17691d7f07637b8155b56eea82c7815f151a8n/a Heodo
2020-07-31FILE_VKN_070120_USC_073120.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3Virustotal results 48.33%Heodo
2020-07-3187251468.docdoc ea37595a4802120f66a609e536e29eb8d342291b5e852c8554b1ed845a2e7fb8Virustotal results 49.18% Heodo
2020-07-31INV_50846031.docdoc eb4de0607032c708751372ead86a2fed758f83ac11f563f2763f2703f13f6c77n/a Heodo
2020-07-31P_WL7IEPNLCEG.docdoc 0ab86823b70ea0debb9b67bf3947e1f5f751101476cf11859c2630521854ebddVirustotal results 49.18% Heodo
2020-07-31DOC_DF9639773108RZ.docdoc 2db2afb589741f5b0c9d9664e2510f5d3497e24ec06588da2004db3c53074267n/a Heodo
2020-07-31AWTAG8D2.docdoc 17592f34648b1b8fabe68fb11ba3945bb82b9b7c3eca7f20210fa1d18c1af346Virustotal results 49.15% Heodo
2020-07-31BAL_PO_07312020EX.docdoc 9e2281655f7c68cdd376157b01db76237250a6c8a9ad766b4c9e541980f6168dn/a Heodo
2020-07-31KS_RRC_070120_DDB_073120.docdoc b3ef47f4c34fd270e8e97dcf5117fa5ae1c737eeccdea4717e498aba02710bf4n/a Heodo
2020-07-31KX0141963087AI.docdoc 49607420463039be83e2fef6d13b6998ba5829ba255f017c28ce9fbb5f45487cn/a Heodo
2020-07-31REP_L8KZK2D9UCB232.docdoc c3ee2087183e8fc4fa6ad487d597d161b3bf5d8c3fa9b042f081d0c218d87931n/a Heodo
2020-07-31REP_FZCS0B1L4LN0KAQ.docdoc 2aa439841e9bb37a7aa0d8a030e05431405dbddbe11c2b3d148e79097e66dc17Virustotal results 49.15% Heodo
2020-07-31FILE_PO_07312020EX.docdoc 8d7f5cd06bb06193bf56a6084659355f3087b32118304efa7f736950c5c3224dVirustotal results 48.33% Heodo
2020-07-30FILE_PO_07312020EX.docdoc 226d9689fcf84f7cf9decb14e3b58a86f7f82df4ad2646632444f63095544015n/a Heodo
2020-07-30DOC_OIN_070120_VCX_073120.docdoc c36f82ea105cba4a44f73acab1118437af3aab1d9a0f306fad8180ed6fb20205n/a Heodo
2020-07-30Z_WXR_070120_UTQ_073120.docdoc dd4fb6c70656957415214f04b8140c86f59491dd53c396283d1968888e5a48fbn/a Heodo
2020-07-30BAL_PO_07312020EX.docdoc 087d886769130e2e66ae3c58ffae09a89067b34644d00e1b033022da3f23eb86Virustotal results 49.18% Heodo
2020-07-30INV_VSYXZRX0N8.docdoc 6021073b6ea70ee11cd7e0ed9870576731cf122279533ddaa21ff9a37be8ff34Virustotal results 49.18%Heodo
2020-07-30LKD_XL3378676759YV.docdoc 938eef5af1fcb36268d2fc14becef86e477ea0ef1c824fe19c450453c5499215n/a Heodo
2020-07-30YH_VW8633245172HS.docdoc b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378Virustotal results 50.00%Heodo
2020-07-30FILE_ET3758917540PL.docdoc efc246c7b0ebf3c39603eedeb894a347b40c72962b13b9a3b47059645e808bb9Virustotal results 48.33% Heodo
2020-07-30REP_D0UII7BEAGD.docdoc f8e63fad886d5ab2d244f39608a7cd53f7bd5a5ab283d1e5aa64774633cb79c1Virustotal results 48.33% Heodo
2020-07-30BAL_22901023.docdoc 9a28a0d745f8efe68b7c5caa46014db396f45be3cbd77ea9e90f618d3c032f45Virustotal results 45.76% Heodo
2020-07-30HEM_070120_ORM_073020.docdoc b3c476526978c5ce2f22627e47f21fdd3a16f03b166965bac3be05ca29b80575n/a Heodo
2020-07-30BAL_HTN_070120_IWM_073020.docdoc e36e626e95cc4e2feb34bfba30b423f08786bde39a1ddda5fa65ce1abc18bdb7n/a Heodo
2020-07-30INV_5ZW2O294W3ZE.docdoc 6bb1593ac7b893c0564d6a29fcbc566db5a0cf5e8a4c0c19dab1866d91a041a9Virustotal results 48.33% Heodo
2020-07-30INV_SHH_070120_ZSP_073020.docdoc 9a039540a5c66db061b1a3fb4f0e45324d5f2b48cedc6c1bf88e4b8f1b887302Virustotal results 47.54% Heodo
2020-07-30REP_PO_07302020EX.docdoc 3980bc03e6441886276662410ebdae8017ceb3af1230c4464922bfc2afe9908fVirustotal results 47.54% Heodo
2020-07-30Y_SA2156007190ZR.docdoc 7ab3f1f78716b3b1e08d3a279da59d52631b286c7c5b01372d063c53a3819079n/aHeodo
2020-07-30L9YUYEOOXR3LM.docdoc 21670c1b2f6bd3739bdf6a11f4edc5cf70af68046eb16b6a392cffccb2cdaf84n/a Heodo
2020-07-30TBUR_84B2B6UXFJUL.docdoc 5c7a7a9074d122179780a3db64b04f9d8225c9d4004dd201eb6e650e8d072dbdn/aHeodo
2020-07-3088554285088107873649588.docdoc c02e0eb20c2fc2499173394f114c843e96a7bedfb367ad2c5b83b11d32bc5e7cn/a Heodo
2020-07-30REP_30932912768986422692.docdoc 962a4c9cebc2543e78e0cfc5d7a7d80aeb7e6681d8096c50841ca5f650728b7en/a Heodo
2020-07-30INV_09563244.docdoc c84cabbddd69bdc825d121fd233f8f07c123bf60bf294b6fd253506e21432501n/a Heodo