URLhaus Database

You are currently viewing the URLhaus database entry for http://materialescantu.com/wp-admin/docs/chwexd1ug/9hhs319177336237664863ucgzhi23v7tf27nlk3gd3b/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422421
URL: http://materialescantu.com/wp-admin/docs/chwexd1ug/9hhs319177336237664863ucgzhi23v7tf27nlk3gd3b/
URL Status:Offline
Host: materialescantu.com
Date added:2020-07-30 22:13:06 UTC
Last online:2021-09-03 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 22:14:03 UTC to abuse{at}ihnetworks[dot]com,admin{at}ihnetworks[dot]com)
Takedown time:1 year, 1 month, 9 days, 13 hours, 48 minutes Bad (down since 2021-09-03 12:02:41 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01MT_UGW_080120_PGM_080120.docdoc 0fa595cd726af1676d49870dc47693d1e86f0e380fb4dffe6a813a6dcfed05e9Virustotal results 47.54%Heodo
2020-08-01FILE_HO6408956900NU.docdoc 765106c1d6f0cea3eda974421d797503caf97e1ba0f4bb3ed4345826bd7dfd8aVirustotal results 47.46% Heodo
2020-08-01DOC_PJO_080120_JNY_080120.docdoc d401fa6713cdefb108ccd10a91818362434758b2823cee224bd4eba85bc4b164Virustotal results 54.84%Heodo
2020-08-01128388019110896469889.docdoc 6f043b03996404ae97104ef7baa132eccad7e1f0716fab5798f50d326d64bca9Virustotal results 55.93% Heodo
2020-08-01INV_948592691500.docdoc b4bb1c002968b4e90f8455bcac3039b72735ab12cb9966abad99ed6fc66ff0adVirustotal results 57.63% Heodo
2020-08-01REP_MTS_080120_DZC_080120.docdoc f5671015ad6746cf334bbde3f8310dc831719a74e5432d619f8843e20be44dd0Virustotal results 52.54%Heodo
2020-07-31BAL_MS9229096842SA.docdoc 6e57ee227a3844d09aa4ed4a64cf69ec819367f00f8df9bdac7f6e09ffc551aaVirustotal results 48.33% Heodo
2020-07-3120954177087808.docdoc 94740399d4f82347d284463c29d6bd05a288b65a122efd5f8d8b379ab5979a80Virustotal results 49.15%Heodo
2020-07-31INV_PO_08012020EX.docdoc 4834d43a503e5a10693dcc514692016c26b9084f17b258a3505a4e44ac893db7Virustotal results 47.54% Heodo
2020-07-31REP_PO_08012020EX.docdoc 7b6a76a3a932265f067c2751c8bd6647327d0ec5bd95563dc3dc38d797a1469eVirustotal results 47.54%Heodo
2020-07-31BAL_80910602.docdoc 1e4b706d611f935dd5aaac2b97e921c9c1df152d9dcf98127840b7c0e60348eeVirustotal results 47.54% Heodo
2020-07-31KARBAGYU2BXAO.docdoc bbcd31c3397c143abb89d3bf7569302b4ba6966d081e8c0929461f8c4d94d66dVirustotal results 47.54% Heodo
2020-07-31BLX_080120_TGG_080120.docdoc 7ba9d770d237bd49b68182d551c5f73e2f7c00bbcaa22bf9c1107ca4dfd2038bVirustotal results 48.33% Heodo
2020-07-31DOC_PO_07312020EX.docdoc 634f50b36e81b7e81cfb0e42da0afb32839b6f8713b7ef336ef70ed10d716159Virustotal results 47.54% Heodo
2020-07-317787638841340721260524.docdoc 71afb28e344b33280645d19837d08148c4db31ec51857d00702ec6471775c359Virustotal results 48.39%Heodo
2020-07-31INV_9001424599698.docdoc 1c2a8cebd9dfaa1c8cb5cbd5b65529c2da636a4b9c3439b43e99a296c304b8c9Virustotal results 46.77%Heodo
2020-07-31INV_9001424599698.docdoc 1c2a8cebd9dfaa1c8cb5cbd5b65529c2da636a4b9c3439b43e99a296c304b8c9Virustotal results 46.77%Heodo
2020-07-31153094743846662210826066.docdoc af7e72a666fd36530317b483eddbc3f283b02844b307974a5955c8c7d49a26caVirustotal results 47.46% Heodo
2020-07-31T_3AM1TOKT0K8I9L.docdoc c99d29a720a02f4d759c1b02ad533deeddb74851d9703831b9ff236c9c87d21aVirustotal results 45.76% Heodo
2020-07-3116271617.docdoc 504834100a9af027c208a0a9b1f6b09b526c4e6d4925f4bc15e4c30a6c6edcc0Virustotal results 43.33% Heodo
2020-07-31BAL_PO_07312020EX.docdoc 16671e21f71303d0a1d46b0dc51d497225d35009e28cf1daa6cb1ac55d9959a0n/a Heodo
2020-07-31DOC_PO_07312020EX.docdoc 74c79e2ddbba251595996dc010becfe64bde18250a2996d4930d60b6dc688f79Virustotal results 43.33%Heodo
2020-07-31PO_07312020EX.docdoc 79c176bbb127e50221aff1d14c8b4f8536dfe567f477e4608a526858824fcd26n/a Heodo
2020-07-31DOC_125515762647255963896898.docdoc 67eefdc61c4894365a14b80f30a06e1581213946458527b37964761cfae38cd0n/aHeodo
2020-07-31U_73639833748.docdoc 98ee1381f134eaedefa2baef746295a547b2a4b7468ffbf5a9834e65a71c7c8en/a Heodo
2020-07-31X_QBQ_070120_VOX_073120.docdoc 3dc5ec3fc47a3d3cc7a39aa7b36f0d5edc36aabb1c459f26ea6cb221cf78d461Virustotal results 41.67% Heodo
2020-07-31EAPL_5QWWRS2Z.docdoc 18d9ef695345eb4c97d2ac385a33550e01a3760dd3e3edeea1507af436451b0fVirustotal results 43.33%Heodo
2020-07-31FILE_ATG_070120_OWB_073120.docdoc 9c184a50a28234ea058519a136d7e474a3e8fa0d75828d3b5167ff02cbf87b8fVirustotal results 40.68% Heodo
2020-07-31INV_PO_07312020EX.docdoc 728a0a1d8f9a71bd86dce389f0dd100a5abd819ea428304f97e35104903c0a28n/a Heodo
2020-07-31FILE_PO_07312020EX.docdoc ea9f5d6d5363bc485842e0149dd7639902681ad2ea0b03384e00b3b2cdd3d0b3Virustotal results 41.67% Heodo
2020-07-3187422605.docdoc de285f1a109746ea1e76c02ae16258e3a45397ac6bc348f864ffc48e7192bde7Virustotal results 41.67%Heodo
2020-07-31REP_017723268492.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3Virustotal results 48.33%Heodo
2020-07-31REP_TD4439904819EI.docdoc 86c5dfaedbd4d9194b9b151a7c04a77eeed74491bc24e407bdfa249f82ba0377n/a Heodo
2020-07-31DOC_001361646281606.docdoc 56d187176e22e7ee7159e0a45fb2c16ccab49b8f3c6cb92e5adce5acdb2325caVirustotal results 49.18% Heodo
2020-07-31FI2235474796FN.docdoc 582a1cef0fa903d6e306172892c6ec7fc72bed9ac3fa49364da864273c260db1n/a Heodo
2020-07-3014031413.docdoc 29bb463a499d45a2b27d4f278b883361ed66aacd2f6184c93f79f9ba5df2fc53Virustotal results 50.00%Heodo
2020-07-30XOI_070120_DQR_073120.docdoc 19ea776d38d5517e9ade267190a3a924e7149f349133a8bd6102565f30699dfeVirustotal results 49.18%Heodo
2020-07-30O_ET6292694070CP.docdoc 20e213a6cc2e87694cf7dc47a1df5d7105e0023cb01fc7fbb74d6a9584d45793Virustotal results 50.00% Heodo