URLhaus Database

You are currently viewing the URLhaus database entry for http://www.studio63productions.com/fonts/fiu2HA_inzrpqBeY8_zone/external_cloud/uytzo5fvxgf_yu8w973/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:426382
URL: http://www.studio63productions.com/fonts/fiu2HA_inzrpqBeY8_zone/external_cloud/uytzo5fvxgf_yu8w973/
URL Status:Offline
Host: www.studio63productions.com
Date added:2020-08-06 15:49:03 UTC
Last online:2020-09-04 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 15:50:03 UTC to abuse{at}123-reg[dot]co[dot]uk)
Takedown time:29 days, 0 hours, 1 minutes Bad (down since 2020-09-04 15:51:49 UTC)
Tags:doc emotet link epoch1 heodo link Quakbot link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-08ARC-2020_08_08-6233185.docdoc d840943a1f750210b98a2f26d5852b1c58ce7e454a38b38884f0b5371ec1198aVirustotal results 41.94% Heodo
2020-08-08REP-20200808-AH882.docdoc cec603db22ca641e772ad1f3912383a2b3c73d6210e966c3b6ab9b4ab6695362Virustotal results 40.98% QuakBot
2020-08-08INF_20200808_198.docdoc 10e31c0403e39c143f65d38765e917f12eb759a504a40578a2dec5ba5c1a7efdVirustotal results 40.98% Heodo
2020-08-08FILE EB68578.docdoc ce5d6aa5b1cfe76e48ec485669e784f6e6fa115c5c008cd89c499726b2a74652Virustotal results 40.98% Heodo
2020-08-08FILE_20200808_ZCE80296.docdoc cb59fe31661123327d6efebb10d883b195b318c6da1739d129dfe2616eb3a7a2Virustotal results 42.37% QuakBot
2020-08-08mes 20200808 7724.docdoc 5293588efc9ab0d7fb9777c0bf75ed1974bcc07364bd907aa5ff69b13de3aa46Virustotal results 40.32% Heodo
2020-08-08FILE-20200808-XUG95765.docdoc 424cf5c4a91c06c70e70f85621afca02a6335435bc3aca17a07b860ca1d9cfb2Virustotal results 43.10% Heodo
2020-08-08Arc-2020_08_08-C4262.docdoc 7749011322a1fa88e88ac29e4663fc961f0b6ca6432e1257aefaceb28252a4c3Virustotal results 40.98% QuakBot
2020-08-08Mes 65160.docdoc 93ec25c002b55c38fb31a036675ae4137bf12ddff82518ecd596e4282c2d08d5Virustotal results 44.26% QuakBot
2020-08-08doc 20200808 QCD085.docdoc da431f9f7888ba7c9912a4ddd22f7d4bb12fcb99f9003d0e5b37a30ba731462eVirustotal results 42.62% QuakBot
2020-08-08MES-2020_08_08-PR5762.docdoc 2ef95fd9c222a0b299b53659e79526a1281e9d076b75aafaedb447034237ba36Virustotal results 44.07% Heodo
2020-08-08Arc 7801.docdoc 1ec0aea3e7613086f550e01f5014835b55ac12b7d35ad781c2173dd150a0eebaVirustotal results 41.94% Heodo
2020-08-08inf-20200808-75753.docdoc 8d118098701f23422ec3560934134ab170767e28ea66c8a336be4dc8ec102987Virustotal results 44.26% Heodo
2020-08-08DAT 2020_08_08 808592.docdoc 70d75d5cd67db6987e30cdec0ba5856d4d7acaedba8e771af42a12151b44295cVirustotal results 41.94% Heodo
2020-08-08arc-3610.docdoc a0106e59dd260be14700f439f7a350fc5c02d1c3f1eea2c3da779ea8edbdee42Virustotal results 42.37% Heodo
2020-08-08rep-20200808-ZIN03811.docdoc 68fa39fdeeb2482b9dbec2a1c2a7649e0a1e4b883528ef42b407a240bac4065eVirustotal results 40.98% Heodo
2020-08-08MES-UQH602140.docdoc 62112657085b9dc12429d5002978a67b6a792db61dca0bfd23db9d5370717ec5n/a Heodo
2020-08-08Arc.docdoc 21a4526681f542f3066046ac15cf21e2d5e9d49314df6b742be7b46d67f8f0a7Virustotal results 40.32% Heodo
2020-08-08Arc_2020_08_08.docdoc a671e2959966d9a945046df0dd4a878fbe99b378e108e50c8de5a2746ce7dde8Virustotal results 42.62% QuakBot
2020-08-08Doc_376771.docdoc 4be780211b5eeca427c252f629f2ed5b1e7062193463819a056e705ffa9df1ban/a Heodo
2020-08-08mes 2020_08_08.docdoc a06d116a6a22a8bf4413f8be14dc63fced336358a21a7711ab9ac2f94da681b2Virustotal results 40.98% Heodo
2020-08-08Doc-2020_08_08-DFL18709.docdoc a2c4d99f84b10b57c46b0bd1ea0fdd817fbaec3ca977b5b71f62b8ad2896f3d7Virustotal results 40.32% QuakBot
2020-08-08arc_390.docdoc 501893610fc7b68385c512147e464fd30fbe631de1d21b4b7f2f89bbc7583e81Virustotal results 41.67% QuakBot
2020-08-08mes-2020_08_08-93798.docdoc e8bbbd5c68169c70ec94a173c3d4a58f8758a90e0c1e5b09a0ac09d692e0b5b3Virustotal results 40.32% Heodo
2020-08-08Rep 2020_08_08 136.docdoc e49e34bfeed9d527f6a2c80df9f388d89705278aafa1aa2b250556754ac38944Virustotal results 40.98% Heodo
2020-08-08FILE 20200808 574796.docdoc 58f0127055c008e43422699f0ad05a08557071493548f6b4c1190411c6f00200Virustotal results 40.98% QuakBot
2020-08-08rep-452.docdoc 4749be0b925b0d49c831813a68772865cc0448b80e10fc43d06b81c93c5c9e34n/a Heodo
2020-08-08REP 2020_08_08 893.docdoc 63c966c20ccc686dfa62a5063bff299d385ea9f159cc9a5b79dc59063fb9514fVirustotal results 43.55% QuakBot
2020-08-08file XGF5500.docdoc e5e2f23eae1e5ced0e4dd57ce7c5c5ebb9206decd8ef46a05c454df21be49ea6Virustotal results 42.62% Heodo
2020-08-08Arc-20200808-01017.docdoc f3be0b911d44447b80b1337f332187ad596fbfe6a0739cdacdd2f9d759e12114Virustotal results 44.26% QuakBot
2020-08-07inf_JIX7541.docdoc 53ac99d5826bd318da8d98fc65d4b28ee61fd3f4cf67cdf387cc88e35a0fed86n/a Heodo
2020-08-07mes-20200808.docdoc 5d2b88e4fefb1593bca1de5b27276ba0d00140416c91339fc6fd44431c8ccbd9Virustotal results 40.00% QuakBot
2020-08-07File-68286.docdoc e8cfc1ea617361564b695bbb732436a5b497bec2660b878ca91e398406298900Virustotal results 36.67% QuakBot
2020-08-07arc_RC13379.docdoc b73f780a433d41cd9d6d0046f85474514b51eb5471e34e530974673c6579eb1aVirustotal results 35.00% Heodo
2020-08-07mes-2020_08_07-C630.docdoc acf64b8e97e3201f06314a33733d479adef77620d8c569663be2e02c3ef38e98Virustotal results 33.87% QuakBot
2020-08-07rep-20200807-015.docdoc 1efe160047fc230f05990587dea94ff8f3a0677431f83670f9706ad2fe7d69c7Virustotal results 36.07% Heodo
2020-08-07File-2020_08_07.docdoc 72e7b1f1f982d507c7ffcce28b3d49cd61c6ae305f47ade10cb7da5f3210ba5aVirustotal results 33.87% Heodo
2020-08-07list-N808.docdoc 7ba25693e2acb9afa6c453839ed62fb82efd94369f13a1549a0b57b8949cf0ccVirustotal results 33.87% QuakBot
2020-08-07MES-20200807.docdoc 5cc4b2533d3e8e5c1b21cdae7a43f181f01351036c17fb3b35fd05c59383552aVirustotal results 34.43% Heodo
2020-08-07arc 2020_08_07 QEF71505.docdoc d30fd458f190f862617c0b08d5cc7d7368f2dec8903b2caa0f8aacb6b498edb6Virustotal results 29.51% Heodo
2020-08-07dat-20200807-149.docdoc 612b33cca81c88e812436d48c987273b54a73bdc04a908102beac2aaf50b5825Virustotal results 26.32% Heodo
2020-08-07rep 20200807 90042.docdoc 8e2bbe860f81156cb3f65c53cc9e82ba407d702856b895049330baf81c76a673Virustotal results 25.81% Heodo
2020-08-07DAT-2020_08_07-ES8550.docdoc 9f3d4befc75b49a5e090558b5cf953d5da87bfac56db564bfdde1d36d6ad7b74Virustotal results 25.81% Heodo
2020-08-07INF 20200807 PPR1643.docdoc e557c9d2cc0e3f2aa2355b58c657834d11c61fe22903ea0800713dc9e09632c0Virustotal results 26.23% Heodo
2020-08-07dat.docdoc bb249753b6fd6220b43602a1122cd458d29055d3e37603c1a3a1e2f21a81366eVirustotal results 26.23% Heodo
2020-08-07MES-046.docdoc a288dd3026142c4fb729f070fdb05a968a11a0cb77d24bdcc066866ac51eb936Virustotal results 26.23% Heodo
2020-08-07ARC_20200807_30929.docdoc 5758ab9165be010ed997a923a16d1d5651b13ede3b6ec4c96faa236f8591759fVirustotal results 25.81% Heodo
2020-08-07REP_20200807_02169.docdoc fe1ae8ea8abfaf32f9f1f40504fc00c2f746c6dfb758714e8a29b9a43c35d019Virustotal results 25.81% Heodo
2020-08-07Inf-2020_08_07-XYK428.docdoc 3915157ac78131871b91bc6eec62153f53f74c5f6e7b6c23451f4b55688a14cfn/a Heodo
2020-08-07MES 20200807 JOR3080.docdoc a250ce55a113006da7d4cb57c16786f3d0c62ba5ab7c1fb76b0baf89b4ec9332n/a Heodo
2020-08-07Mes.docdoc 382174823a7c36d512b36fa77c017170465f34034a645db3517ca6de6e902aaaVirustotal results 25.81% Heodo
2020-08-07Mes-5127.docdoc d55a2e0971027bd30b6722f6827d6344f1126b7f7ba6c04a91179b881ca6e98aVirustotal results 26.23% Heodo
2020-08-07REP_2020_08_07_ES206504.docdoc 1cc3fe55cd9952581cd54ff7b1a12d5a7a2aa90d760fda8b9a6b2ea8d010e1a7Virustotal results 44.26% Heodo
2020-08-07DAT-20200807-HOG035792.docdoc 76f38b42e6c5822d699f67b2b342f3657d7118ebd1c9a62f7e8c0e493ea10735Virustotal results 40.32% Heodo
2020-08-07rep_20200807_OZ40157.docdoc e3cfb2e0648535875890582842fe912425271c2dfaeb7c1ef7f982a9ac41c18fVirustotal results 37.70% Heodo
2020-08-07file_NIJ500900.docdoc fe032b45e17799af19f0dff52340131849e761ed8072baa910c48854206f12b6Virustotal results 36.67% Heodo
2020-08-07Inf YOY926.docdoc 2a7f0551cd0fa000ed5992db4346987430e32084240b9eb53ad0369763734b71Virustotal results 33.87% Heodo
2020-08-07List-20200807-ZZK80872.docdoc 50142b56616f33de96a00f3619a900237753bb4552fdd62f220ae93fb25cbf3cVirustotal results 35.48% Heodo
2020-08-07inf_Q59408.docdoc bde536ff0957de3adb9867d66016e8c3cbf60783323bb1589b762ca55e034fd0Virustotal results 37.70% Heodo
2020-08-07inf-20200807-573039.docdoc ae908684371dfff2fef8392c36cbf6a27800823f0c41b16230094f8dce844029Virustotal results 32.26% Heodo
2020-08-07Rep HE6020.docdoc 8dee1c489137e967d7674246af7a20f33986189be2bc33d2d1c2a766391d65d1Virustotal results 32.26% Heodo
2020-08-07DAT.docdoc 13c170ae434fbb8b3aacd4d570a8e87de168decd5016266098bff59c7b388df0Virustotal results 29.03% Heodo
2020-08-07List_20200807_6275.docdoc a9f3247aa61118e5538983621ebddd91a88c6fef1097fd3f142ce169b078cd7eVirustotal results 29.03% Heodo
2020-08-07arc.docdoc 9f0042355df96916dafb4a7e119ef22bfdd051653c32c759b005bf61a57e0324Virustotal results 29.51% Heodo
2020-08-07file 2020_08_07 Q2478.docdoc 45d57af4df3ea5f698e2cd3b99ad5c649487b9a7c3583fc1add77c0cd4a7d945Virustotal results 29.03% Heodo
2020-08-07file 20200807 239.docdoc cdad26800b0cbf8b3c591cc545378d50c93a28c735fada99d6bbe4228f2ed6b0Virustotal results 27.42% Heodo
2020-08-07Rep 2020_08_07 298.docdoc b8dacf3ee73cdfc545f0e66e81dd8331ad345136a5a94dcc78f387bc7dfbea3fVirustotal results 29.03% Heodo
2020-08-07dat-20200807.docdoc 08ca8a74274ab131580360028ca5d38c3e37712bdfcdb3708115f9d0c7db7f0cVirustotal results 29.51% Heodo
2020-08-07mes.docdoc 2d9e8d19691ccc198cf997196c54e831404e2577b1bd3c17ae29b1c78b0f95a8Virustotal results 29.51% Heodo
2020-08-07Doc_2020_08_07_072215.docdoc 73e2caa408d07e0108e48b2636910a8894434b6f052b80a142eadc2b8e4390feVirustotal results 30.00% Heodo
2020-08-07MES YI670479.docdoc 90f8bbf6dee1ad7d38d610ea379dd8fd80444592cadac1f1497cad9b6d4e5caaVirustotal results 27.87% Heodo
2020-08-07ARC-726127.docdoc ce537cebc52ef63cd5bf7f35abb10712d236835b821443089e3c40551d3cf481Virustotal results 29.51% Heodo
2020-08-06dat.docdoc 3a17dd818992725fb9bf1c2e0d4d18141f5b9fe15a184e7ebac32b935fe7e60fVirustotal results 26.23% Heodo
2020-08-06LIST-20200807-681.docdoc 2c5b7f8488ec8abc944d1a90f84293494cb7c6dea6cd23bad40fce8429f41442Virustotal results 29.03% Heodo
2020-08-06Inf.docdoc 834ae3e3344f994a972b0a6dd3850fc3a7d26a9d1ab48ed2c3ec49e34239147eVirustotal results 29.51% Heodo
2020-08-06rep 2020_08_07 EW60454.docdoc 9fda153dee6f47ac4ab198402cc17dac3bd96bd975458ef5dc23e2345abe48bdVirustotal results 26.23% Heodo
2020-08-06Rep 20200807 787.docdoc a1668530748354caf4b83b007f729aa168414a2e53c2c87bc4043bdd0c7a3c06Virustotal results 25.00% Heodo
2020-08-06list_2020_08_07_41918.docdoc 60317c70b7bf645aaa1486df2110ed8d5b562fa849d73b3d6c850093713545b8Virustotal results 29.51% Heodo
2020-08-06INF 5259.docdoc 70600ea20b1ce00f93af9afd801ce0915972b4102901b00d37b8f9a7f782a036Virustotal results 26.23% Heodo
2020-08-06inf 2020_08_06 327.docdoc e4c0b9acd76b72b5cfaae774818c9222ae052b5fdcb6c29bac642d6c0b720477Virustotal results 26.67% Heodo
2020-08-06Inf 2020_08_06 A523.docdoc 5aa5250ff5c978f28b1cae5cd797f549c018e87636de1298771d8c1fa0e7ad0bVirustotal results 28.33% Heodo
2020-08-06rep Z12766.docdoc 8b7d452fbddc7ae83d98a52e61df4d58e8376e0aac9419dcfa40777aa279a0a1Virustotal results 29.51% Heodo
2020-08-06rep RI92394.docdoc b1677b8c7736ccca1544b631f95f9c8997e288c8a69b94d957c518f0b12c9076Virustotal results 25.00% Heodo
2020-08-06Doc DUF527.docdoc 700aecc7e91d44127bf925bc60a0fa24d7c0b35914acaf5174cb77e3994ce30aVirustotal results 22.95% Heodo
2020-08-06Rep-20200806-U15394.docdoc 8de17adc871dd2bf55bc2e2f0b799772bbf81891cef9f28bdbbb5783a260e38en/a Heodo
2020-08-06Rep_20200806_199.docdoc fee5f03d9808ee5aeef5b926cdabd3b142953d0f9f99e64f98da383a2cc5f5c5Virustotal results 22.95% Heodo
2020-08-06Arc-20200806-SJ7501.docdoc d0a24444d0f97ecbc49b529c1e8ad930ad3c32d18b825aa7f90cb9ddc45ece0aVirustotal results 23.73% Heodo
2020-08-06file-239.docdoc 3ab9a472141139b40fc79113a1938a4e2a47b4e3ef657dcb687fe93a3ef23299Virustotal results 22.95% Heodo
2020-08-06REP_2020_08_06_7672374.docdoc 8c7bd0ce39e4ce213d3a16f12ad37431978b78982519ba7500a61d180929d45aVirustotal results 23.73% Heodo
2020-08-06REP_2020_08_06_UVS5235.docdoc 19b8385b0b03c41090e393a31e0b86cb628b2d697fcbe1c18e359dac4fbc83e1n/a Heodo
2020-08-06File-20200806-AW745.docdoc f1b9b760caf05e99ffa15c3744254dd36a6b3523523d3796930179b9edd909d7Virustotal results 23.73% Heodo
2020-08-06Arc 20200806 KFC914388.docdoc cdc18ee9b39177102976aecea6f2bd6bd760ab97431acd2dc4524483aef5a903Virustotal results 22.03% Heodo
2020-08-06list 2020_08_06 14512.docdoc 197e3c11e30b5ac40cf44d64892fde49f4c6dc66bcd343027d78159fca14ac18Virustotal results 22.95% Heodo
2020-08-06MES 2020_08_06 U0735.docdoc 13d3f89e0880281bef900884d46138dcef1c203c652e750c13fe38ff5f968ac7Virustotal results 22.95% Heodo