URLhaus Database

You are currently viewing the URLhaus database entry for http://heemaalnews.com/news/protected_sector/corporate_space/g9nz7dvuk2jq_5x5yyw10/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:422385
URL: http://heemaalnews.com/news/protected_sector/corporate_space/g9nz7dvuk2jq_5x5yyw10/
URL Status:Offline
Host: heemaalnews.com
Date added:2020-07-30 21:05:40 UTC
Last online:2020-08-03 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 21:06:08 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:3 days, 18 hours, 2 minutes Bad (down since 2020-08-03 15:08:23 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01DAT_20200801.docdoc 92a8c9729a35ef4fbe97b8b931ac2ba3284ff4c1aaaab30eadbe36ad12c75465n/aHeodo
2020-08-01LIST-VHW278.docdoc 68d03e74f29b8ab84731be7d1d202d1234196be51e50924a161404b942aabdf4Virustotal results 48.33% Heodo
2020-08-01arc_20200801_785533.docdoc d0af068d0fb59c36a723f73b9a022dd2bfc71dec2a8679de9cfb406aff10561eVirustotal results 46.67% Heodo
2020-08-01Rep_SZ192.docdoc a680dee80d1c2e20335b72e1ab12908d3d79228c4be39a045dbcf6bff5c2f2caVirustotal results 49.18% Heodo
2020-08-01Doc-2020_08_01.docdoc 5b869243a1f25181d647b1ab540885e1991a6d935499fe16f8b1866d6c11cceeVirustotal results 49.15% Heodo
2020-08-01file_2020_08_01_780728.docdoc b022041c3866fa72e9822bbd3eb197dfe6d228453a0261f39be63a3d2b47f9cfVirustotal results 50.00% Heodo
2020-08-01rep-20200801-100940.docdoc b516a3797050f6ac640f573248069d74c0a95c2f96e09f7c8f960d02edb53117Virustotal results 49.18% Heodo
2020-08-01FILE-20200801-110.docdoc 73b934062bb8c8721173ac73c39f36f73eaf2b1236fd8ae3a0284cb972fbcbc5Virustotal results 47.54% Heodo
2020-08-01list.docdoc dd7b7de461d1bb98f753cab9f3d748f28f34c6919770f2c279541724298390a8Virustotal results 49.18% Heodo
2020-08-01MES_2020_08_01_C863504.docdoc e22babe2af8bd5773584af907edf624944ff08fef4ceb67d88f0b67b9ef4ca33Virustotal results 48.33% Heodo
2020-08-01List_20200801_2373443.docdoc 8c17593a656e91dd4f497ede251ae65edcf1b44f79bafaf31cb1c270131d7245Virustotal results 48.39% Heodo
2020-08-01rep-2020_08_01-LC52057.docdoc badce2483951ae1a102173ec603478bd0d218eac1287212b49aa80c421e80438Virustotal results 48.33% Heodo
2020-08-01List 20200801 YKH452.docdoc df2dc0151e9893df9a0b5fc037b8857125e0e013db773886f7714baaac50f250Virustotal results 50.82% Heodo
2020-08-01file 2020_08_01 37630.docdoc d237fa25ba4fb8cc8b5aa3c9a5edc6b8f2dc2c5ca92a707e20b1a6fa58e658fdVirustotal results 50.82% Heodo
2020-07-31arc-20200801.docdoc bb7bf7084a18fe63dc1c4ab7b9e6efbbffe5e925099c0dfa664cc648e6d92adfVirustotal results 47.54% Heodo
2020-07-31Mes 20200801 GP06005.docdoc b4d308bac3c2d2a2424a9a8bcf6987ff50ee40c437032bbb16ad3545b2f73984Virustotal results 49.18% Heodo
2020-07-31mes_20200801_507993.docdoc 8698a975eeefa70a6e8eac20e57be07dbed23f59301a735a72892edcfdc62d26Virustotal results 49.18% Heodo
2020-07-31Dat 2020_08_01.docdoc 6d8b65c5b3c71d92fc5ebf336e4e8b7ece5476d4f7d9e4b32a65c16f456aab8dVirustotal results 48.33% Heodo
2020-07-31doc-EHB9949.docdoc be26601d6cda02134a641d0d0888c7c780636ec180084ca0fc3f66281e23677aVirustotal results 47.54% Heodo
2020-07-31doc-20200801.docdoc 3d5427a07cdecdce3e2943473bf2a141a3eeff0e22919c7b1fe3378aed3d1590Virustotal results 48.33%Heodo
2020-07-31rep 92537.docdoc c45bcf9a41075804172523238d905c314dea01aad3babafd32cfe0ef52b86260Virustotal results 45.76% Heodo
2020-07-31DAT_20200801_4981.docdoc 796654f192e741799d2243175e6ea18540b6c48fbed84b010dd806485acbbbceVirustotal results 47.54% Heodo
2020-07-31arc 4739845.docdoc f4469edd9d414e0d622d3b4445beafe1ef3b0787f29b9225b2157438d9bfa722Virustotal results 46.67% Heodo
2020-07-31FILE 20200731 U1987.docdoc 112b96b73e4dcbe07fd908df7b26c09d9946a971b4b942ba0756dd22ddf50796Virustotal results 49.15% Heodo
2020-07-31arc 20200731 37286.docdoc fbd0c49f5c2708ad67b9d66dc6d64eebc7ab9d234b2b79321393591d081dbdeaVirustotal results 46.67% Heodo
2020-07-31arc 20200731 37286.docdoc fbd0c49f5c2708ad67b9d66dc6d64eebc7ab9d234b2b79321393591d081dbdeaVirustotal results 46.67% Heodo
2020-07-31File OZ20333.docdoc c54a83ed7df0a40d62a865853af530ffc4372e2bf7255a43bd6e352ed5ec9868Virustotal results 47.54% Heodo
2020-07-31Inf_1766076.docdoc 810d5899f085d1c3160e9a069dad7915609292c8666fe0e02c0438d997827753n/a Heodo
2020-07-31doc 20200731 RSV914.docdoc 3807ea27c87ef220916b55deb372a2eab386ffd18028cfee853a34521e6fd377n/a Heodo
2020-07-31rep-2020_07_31-477.docdoc 4c6a9e9d068aaa2a313b10f83cb3f03ba7afdca5c5cf699fb7da411be652526aVirustotal results 46.77% Heodo
2020-07-31Rep_20200731_EZ097.docdoc 6dca66df42bd8494a68b0844baf9a74e4bbd8da25633bca4914817f18657e009n/a Heodo
2020-07-31dat_20200731_7858.docdoc f9daf58283bfa44af378dcad38562399d3e8a6ed3117f97a4019941b8f6164baVirustotal results 46.67% Heodo
2020-07-31INF 616.docdoc b9e30b1122f4f7b875893dc81126dc002e58997fde186f9a50efa25d0d41b8a2Virustotal results 44.26% Heodo
2020-07-31Arc_20200731_0341209.docdoc 0d19eab6c2f65c93fb4711c4ffc828bf9cb8d040a96755fd0c8f7ca1e360dd1dn/a Heodo
2020-07-31FILE_795724.docdoc b932f9fcbcd3c278483655fe0f75a06f328c7b36c2ecef394d07e8413adff2b5n/a Heodo
2020-07-31mes-20200731-CBE507.docdoc c34cc723608cf1589acd4aacff4c1cc291df02a859ba8df666c93573275cb5c2n/a Heodo
2020-07-31INF-2020_07_31-LNB9013.docdoc 5a2684ad28a602e041aeddf1c0ffab3a0ce29c3420b4a4d8a8351043a2269483Virustotal results 43.33% Heodo
2020-07-31INF.docdoc cd29071298cbab67d898b5cbcf4b56f1b7d725f85267037659bdd2da3083f57eVirustotal results 44.64% Heodo
2020-07-31FILE 53265.docdoc 72038c4d742717c91add32782d8128e5c7753b4cd7ef566bcc1d39aa0df0677en/aHeodo
2020-07-31file_033108.docdoc 596669e4ee62dd88d2ad8cd5b9f66d21a243874280e56566b6530cab61ed15b2Virustotal results 41.67% Heodo
2020-07-31arc_2020_07_31_XP6337.docdoc 67ed4b0c64b53843652c30e3d24300496d59cbea3def00912b82490ae3057394n/a Heodo
2020-07-31ARC 0820889.docdoc e5b7ca03743efe37bb95aa3800a1a6cce4097f10559da6e89c52d20e0903069eVirustotal results 42.37% Heodo
2020-07-31list 20200731 44273.docdoc cb6ac957d36fc72b75e45e7c90202b929041dd3d870a095ddae756a7f50180a5n/a Heodo
2020-07-31Inf 080.docdoc 27ce43fe47db68424483795b29ece2105efd82b3916c52c71c7e90acda9c6134n/a Heodo
2020-07-31Inf_20200731_BJD327.docdoc eedaaf67ad14a0213229367966ad1333e3f8085e1e6b83683d7fac0e3e16ae28Virustotal results 40.98% Heodo
2020-07-31list_2020_07_31_RAT659.docdoc 925fb8974d3622ddd5df080f3bee888c2ce91a92d43cd6b685ee82c8108deab1Virustotal results 41.67% Heodo
2020-07-31Rep 20200731 T812.docdoc 1d075da8b51be2231edf1a9450db095e374e7d2200b6d3c3e7088dcad1557bd1n/a Heodo
2020-07-31FILE-20200731-1865799.docdoc c67829ddda6b856d8108c7466c504e2fe554ee00e99fbbd7c7ede24a312a9807n/a Heodo
2020-07-31File 20200731 M757435.docdoc fa3e81294239894ab6d187ff561319cd3f23649f9888593ae2c7bd734af6ecfdVirustotal results 49.15% Heodo
2020-07-31Arc 2020_07_31 204068.docdoc 0d9bd1c99b795fe81a3fd93c3876a155141a8aae073c9bc13d6e68771efdd59an/a Heodo
2020-07-31ARC-2020_07_31.docdoc e6a1cc45ec979b40952950438c59cd9dc2a3009a942d9fff7cd793d7518e0368Virustotal results 48.33% Heodo
2020-07-31LIST_2020_07_31.docdoc cfb9e071cc0b8abf3bfe496027745ff1085b24dafec350195422d545c337001bVirustotal results 50.00% Heodo
2020-07-31File_2020_07_31_41614.docdoc 73729cfbc98f25d4dbdecf63cd27eb82bff9057cdf78e160440e41c9d553f4c2n/a Heodo
2020-07-31file 20200731 64537.docdoc 504a1e650555404e3526d3045ef7bc16a577c06635215b1cea49e2c8877a7cf7Virustotal results 48.33% Heodo
2020-07-31List KU19964.docdoc 624aa2e87b85c4c93a21bf0b764d1594ddff016da7f44040918cbcccdfb017c5n/a Heodo
2020-07-31ARC_20200731_1250.docdoc 3d0cc46b7da5512e1f7e206cad81500810333df0c10fd1270f314353c2602d83n/a Heodo
2020-07-31Dat_20200731_O837.docdoc 9d3a2720e64fadf090a5267f5ca698c0ab762940705497bc2412d711f1494983Virustotal results 49.15% Heodo
2020-07-31ARC.docdoc ae98434b475cd34f72aa2b317e2c29339d0a2578d792a14ee7102cc0bb415aa8n/a Heodo
2020-07-31inf-605.docdoc 2af35203a78ab48a45126f959aa05f3037e941bc7ff22d04decb13d88846a967n/a Heodo
2020-07-31mes 20200731 213.docdoc 61e8635da3b4dad36cbca3de124b4e2d07a5de346e069517354f0e063bb9ecfdVirustotal results 49.15% Heodo
2020-07-31rep_N7951.docdoc 57b075be6438184bf527bd055363a33f851ee9acb765aaff3c717f2ca6ea7d5fVirustotal results 49.15% Heodo
2020-07-30inf-2054.docdoc b9c357adce4a39fef2bdc25779951e2f40307dade90e05fdd0f95b77cf77c786Virustotal results 49.18% Heodo
2020-07-30Mes_20200731_KH300413.docdoc 1aec4694358be776e5733a6efe431b95ad93ed01eb0b394bac898a68f62938b5n/a Heodo
2020-07-30list 20200731 IQ543536.docdoc 103409fe241a51656f19890d23c38daa378646f589ef42fb9a84480af85fcddfVirustotal results 50.00% Heodo
2020-07-30list-2020_07_31-T8113.docdoc 16312617256751866a6609cf1deb47b3605e122c7c756151d68c635960088c31n/a Heodo
2020-07-30ARC-2020_07_31-65116.docdoc 80565d4ed000d2c561645c79096f5e2fe04ac3f5c7e9e34ac68cb4ed9306ceabVirustotal results 50.00%Heodo
2020-07-30REP_20200731.docdoc 4122a94cf3814bd9e32328263e6b981316558b31ce38df659a1853a02274dc00Virustotal results 50.85% Heodo
2020-07-30FILE-20200731-4732597.docdoc 1076bbb650f5180bd85eead7b5411b8d601b04cebbf38dac7328ea86b4e7adb8Virustotal results 50.00%Heodo
2020-07-30inf_20200731_W145.docdoc 3a5df0e5b7f882e21dd8cbdcb738a0c85cc2edc3224cd6f47a96c1930f3a543eVirustotal results 48.33% Heodo