URLhaus Database

You are currently viewing the URLhaus database entry for http://ferafera.com/blueskies/521138744613-UYVWc-section/special-profile/jybevoll7-3uw86w65s74tuv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422331
URL: http://ferafera.com/blueskies/521138744613-UYVWc-section/special-profile/jybevoll7-3uw86w65s74tuv/
URL Status:Offline
Host: ferafera.com
Date added:2020-07-30 19:04:34 UTC
Last online:2020-07-31 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 19:06:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:22 hours, 53 minutes Good (down since 2020-07-31 17:59:43 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31Arc_20200731_DL2379.docdoc 297c00028ec27005a6fd90b015d1f2bd5e4568130b063896923aa6acaed98745n/a Heodo
2020-07-31List-N9299.docdoc c54a83ed7df0a40d62a865853af530ffc4372e2bf7255a43bd6e352ed5ec9868Virustotal results 47.54% Heodo
2020-07-31list 20200731 NBB78884.docdoc 8aab946a92b0c4ad6c84dcfcdb778ce9d17bde1bf3e62de5bf55071fe1757200n/a Heodo
2020-07-31Arc-20200731-YCG22376.docdoc 8f7b938673b5447b4f82339c794ba51ad2044fe11b88707e17d396ef3895f982Virustotal results 47.46% Heodo
2020-07-31List_NPU85337.docdoc 4c6a9e9d068aaa2a313b10f83cb3f03ba7afdca5c5cf699fb7da411be652526aVirustotal results 46.77% Heodo
2020-07-31inf-2020_07_31-0368.docdoc 6dca66df42bd8494a68b0844baf9a74e4bbd8da25633bca4914817f18657e009n/a Heodo
2020-07-31inf_20200731.docdoc fe4039c80b51bb184604b056d4e86b3e69fc8cb7278e61887d8c8c63155f7cd7Virustotal results 44.26% Heodo
2020-07-31Doc-832483.docdoc b9e30b1122f4f7b875893dc81126dc002e58997fde186f9a50efa25d0d41b8a2Virustotal results 44.26% Heodo
2020-07-31file-2020_07_31-57632.docdoc 1075f783527ef766efb3112e479815c4b3b867007f1dc9b8bd24fb6a5adb3d0bVirustotal results 45.00% Heodo
2020-07-31DAT 20200731 39998.docdoc b932f9fcbcd3c278483655fe0f75a06f328c7b36c2ecef394d07e8413adff2b5n/a Heodo
2020-07-31Dat_2737.docdoc c34cc723608cf1589acd4aacff4c1cc291df02a859ba8df666c93573275cb5c2n/a Heodo
2020-07-31rep_2020_07_31_4696.docdoc 5a2684ad28a602e041aeddf1c0ffab3a0ce29c3420b4a4d8a8351043a2269483Virustotal results 43.33% Heodo
2020-07-31ARC GZ48777.docdoc 03323b58028eea4598e85f64f7ceb5a05aa6319cfafddd54df733ab08604fd8aVirustotal results 43.10% Heodo
2020-07-31arc-20200731-024.docdoc 72038c4d742717c91add32782d8128e5c7753b4cd7ef566bcc1d39aa0df0677eVirustotal results 42.37%Heodo
2020-07-31dat-20200731-9166210.docdoc 596669e4ee62dd88d2ad8cd5b9f66d21a243874280e56566b6530cab61ed15b2Virustotal results 41.67% Heodo
2020-07-31arc-33324.docdoc 67ed4b0c64b53843652c30e3d24300496d59cbea3def00912b82490ae3057394n/a Heodo
2020-07-31MES 20200731 162367.docdoc 4acec2a5ef0b6f549b39db572081188d4e2d9cc039f95a709c105b7aa3bddf7bVirustotal results 41.67% Heodo
2020-07-31List 2020_07_31 81741.docdoc b7866f0bf3b77092eb43f36d11d3576b2e4db31f80033dc2ce61b2c12f799e15n/a Heodo
2020-07-31Arc-2020_07_31-E204.docdoc 27ce43fe47db68424483795b29ece2105efd82b3916c52c71c7e90acda9c6134n/a Heodo
2020-07-31DAT RW549.docdoc eedaaf67ad14a0213229367966ad1333e3f8085e1e6b83683d7fac0e3e16ae28Virustotal results 40.98% Heodo
2020-07-31list_9909808.docdoc 5a5cce347f4394dbd606a57bb1e525d50bd0400d12147fe8db44c012fe267222n/a Heodo
2020-07-31mes-20200731-9630.docdoc 7172995d1d5b54353bce9bbad1ec7900ca7175b8a7e41e5d86bd80df42e1014an/a Heodo
2020-07-31dat-2020_07_31-LDP28385.docdoc 97071ba63f17807623b2324ae19a8fc1cf5b4dda03e64e3c6bf3921575d83695n/a Heodo
2020-07-31mes-20200731-JU831.docdoc c67829ddda6b856d8108c7466c504e2fe554ee00e99fbbd7c7ede24a312a9807n/a Heodo
2020-07-31MES 20200731 2811.docdoc 75cc6b61d895e82e5ab177ba62aa31ac93ed56ec1ba04701b2b2b3927d98e30dn/a Heodo
2020-07-31MES 20200731.docdoc 0d9bd1c99b795fe81a3fd93c3876a155141a8aae073c9bc13d6e68771efdd59an/a Heodo
2020-07-31DAT_20200731_65652.docdoc e6a1cc45ec979b40952950438c59cd9dc2a3009a942d9fff7cd793d7518e0368Virustotal results 48.33% Heodo
2020-07-31arc-UG88509.docdoc cfb9e071cc0b8abf3bfe496027745ff1085b24dafec350195422d545c337001bVirustotal results 50.00% Heodo
2020-07-31Dat_20200731_180880.docdoc 73729cfbc98f25d4dbdecf63cd27eb82bff9057cdf78e160440e41c9d553f4c2Virustotal results 48.33% Heodo
2020-07-31Doc-20200731-5966013.docdoc 504a1e650555404e3526d3045ef7bc16a577c06635215b1cea49e2c8877a7cf7Virustotal results 48.33% Heodo
2020-07-31Mes_2020_07_31_W940.docdoc 3c7ec988c0951420c57857cda05c624236d7f014f4c4c720d4937152b0366eedVirustotal results 49.15% Heodo
2020-07-31Arc 20200731 U98050.docdoc 06bb12ac0adffba3f0f1286ef26927750fbe1438a8953b91109ec4890e548404n/a Heodo
2020-07-31List-2020_07_31-VI277.docdoc 8fa1a53141a9745f824ecea3c830850c7b798488ba6e3e33382229bf495c1d5dn/a Heodo
2020-07-31list_20200731_114.docdoc ae98434b475cd34f72aa2b317e2c29339d0a2578d792a14ee7102cc0bb415aa8n/a Heodo
2020-07-31DAT_2020_07_31_128597.docdoc 2af35203a78ab48a45126f959aa05f3037e941bc7ff22d04decb13d88846a967n/a Heodo
2020-07-31Dat.docdoc d3d723ddf022b5d35a3438e4b729bb0f329667e675f6c73d5d228f2994478859Virustotal results 48.33% Heodo
2020-07-31dat 20200731 5576.docdoc 57b075be6438184bf527bd055363a33f851ee9acb765aaff3c717f2ca6ea7d5fVirustotal results 49.15% Heodo
2020-07-30arc-20200731-24479.docdoc b9c357adce4a39fef2bdc25779951e2f40307dade90e05fdd0f95b77cf77c786Virustotal results 49.18% Heodo
2020-07-30List-2020_07_31-HY245.docdoc 1aec4694358be776e5733a6efe431b95ad93ed01eb0b394bac898a68f62938b5Virustotal results 49.18% Heodo
2020-07-30INF 0828.docdoc 103409fe241a51656f19890d23c38daa378646f589ef42fb9a84480af85fcddfVirustotal results 50.00% Heodo
2020-07-30arc FUB616716.docdoc 71100778f6bc4fefc8bee7d8191d1a50ec140a1f8d30b57b9abfd2db06635274Virustotal results 48.33% Heodo
2020-07-30Dat-0152331.docdoc 80565d4ed000d2c561645c79096f5e2fe04ac3f5c7e9e34ac68cb4ed9306ceabVirustotal results 50.00%Heodo
2020-07-30LIST_2020_07_31_LS5594.docdoc 4122a94cf3814bd9e32328263e6b981316558b31ce38df659a1853a02274dc00Virustotal results 50.85% Heodo
2020-07-30REP-4761.docdoc 1076bbb650f5180bd85eead7b5411b8d601b04cebbf38dac7328ea86b4e7adb8Virustotal results 50.00%Heodo
2020-07-30mes_2020_07_30_114142.docdoc de22f3d159bf17825aa2c83805068b8ebe5d690f6981d2e8102613087fd3b6deVirustotal results 47.54% Heodo
2020-07-30Mes 2020_07_30 OB0491.docdoc 8fa056cca848c61d974a9bbcb5ee31aa9e45987ef15a2589765d61065fa9fc1dVirustotal results 48.33%Heodo
2020-07-30Mes 20200730 9407937.docdoc 0ae3792dfb7057e3264b21dd694ca5b3fc93502edf5829ca4797eb57f01170a2Virustotal results 46.67%Heodo
2020-07-30Rep_2020_07_30_C185.docdoc c52589c34fc9f77cdb0ac7ebb6235fb2a936af8cb2993c2a7b73e8203883c112n/a Heodo