URLhaus Database

You are currently viewing the URLhaus database entry for https://veronicajames.com/cgi-bin/Document/x5vd2xi8734020j14j11usbl1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426691
URL: https://veronicajames.com/cgi-bin/Document/x5vd2xi8734020j14j11usbl1/
URL Status:Offline
Host: veronicajames.com
Date added:2020-08-06 21:39:15 UTC
Last online:2020-08-08 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-06 21:40:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 day, 2 hours, 57 minutes Poor (down since 2020-08-08 00:37:59 UTC)
Tags:doc emotet link epoch2 heodo link Quakbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-08DOC_25854873553967044177853.docdoc 99c91d2f1ecbee44baa8f5c9f3bfc0e2d7d11b63cac8d777f6dc1dd3b1c2aaa8Virustotal results 37.70% QuakBot
2020-08-07FH_41249849.docdoc e13d2522f5de3bf728003e6151c88b16e89fe52f325fe677b39df8e486354bd6Virustotal results 35.00% QuakBot
2020-08-07GLI_DBLIF49.docdoc 41ef6b4c13a98f92f61c7a14e9619f68f166ea699a7ea6eee9a1bf0165512f81Virustotal results 36.67% Heodo
2020-08-07BAL_UEM9YX4QY4S.docdoc 41051e1b0ef6db0f014593da4cb56df1bd320b0b7f7917b80b0e44f529504443n/a Heodo
2020-08-0723816603.docdoc 6db606248d43c819a2ab538c317686648dcd10422fb5a903bd82de9335961828Virustotal results 34.43% Heodo
2020-08-07BAL_72628933168.docdoc 3f4c381531d4604385f763850e0e32cd72c1b21b78330327c64b2da16e62e9f8n/a Heodo
2020-08-07DOC_755267627164102929.docdoc 3449ebd127fc3e854e9fbe37330f06267533809795a7319df12af6afd25293b6n/a QuakBot
2020-08-07TL_QHP_080120_LRV_080720.docdoc 26693c872e32e4099183a56ac09ce74b34519be0599c62c0413abeeda18ec49bVirustotal results 34.43% Heodo
2020-08-07G_PO_08072020EX.docdoc 647e4bdd2ba51f7dfc1c7749092db78d95b64ca550d266e025602d2437cb503dVirustotal results 30.00% Heodo
2020-08-07INV_PO_08072020EX.docdoc cb11b1caf24c2fcb7392f2eebaca5b10cc06dcd73edb88a8aca3bd89e80bdfe7n/a Heodo
2020-08-07XTH_080120_LCK_080720.docdoc 84180bac4fd537cf561faef664e01bc8fb757b261a84048d002437b908b0d85aVirustotal results 27.12% QuakBot
2020-08-07PC_ZAFAL2DL9HEQ.docdoc e082b2329828991b213829b5233c4e473c98ec463d6d3f64b04269e8e2fe0739Virustotal results 28.81% QuakBot
2020-08-07BAL_PO_08072020EX.docdoc 500bea7d7174b43a7e97b737cf87aadc01519413b884aed2bd0f60418800fe54n/a Heodo
2020-08-07REP_IQF_080120_QSO_080720.docdoc 22dfe0c94909b2d896f1e8fc556aae5ebe6f0e34e855052507917fd0211f6af1n/a Heodo
2020-08-07Z_NI7988233128RW.docdoc 39f54a264c6f06a36935cc3416dff1e8e83f2c0dc205680966c8510c9dac7fcdn/a Heodo
2020-08-07E_LP0538083819AR.docdoc c5073d635a11aa6e28f69926c0a499058a39d8a76e9ecafbf2933c03af8fca47n/a Heodo
2020-08-07DOC_VGJ_080120_ENH_080720.docdoc 22c64ac7a89ab8a195cf01ac7fe65b95cfb560eb85d98fe16f7b5b0e5db27538Virustotal results 24.59% Heodo
2020-08-07RT_PO_08072020EX.docdoc 56aea8dd28bb9f893ec49cf3e5bd73eb7dafad62fb12c5f1431b94e2bbd02986Virustotal results 22.58% Heodo
2020-08-07C_PO_08072020EX.docdoc b5c9b45ccc9086ad11f0cd352ec98defa5b69a014eb4c371db8799808871a91cVirustotal results 24.19%Heodo
2020-08-07INV_36772021380216781453.docdoc 8ce364928dc868c937733a95a34e468073564c6cd0ba8210831635ed02af1694Virustotal results 22.95% Heodo
2020-08-07DOC_09295428537.docdoc 6d8b48f794a0198cada5151ed6d8bc46fcf9c9b2c326e69212b0abb4fa60cdb0Virustotal results 24.59% Heodo
2020-08-07FILE_C1MCQSMIPZ8DGCY.docdoc c25b2007d6bf55f9583da51d51090e6c145e2f1b30a05a0b0638fed6845d24f5Virustotal results 23.73% Heodo
2020-08-07REP_PO_08072020EX.docdoc 57370f33ff18a79a83e7ab0a2058c0182aaf87d4f996595ed5aecbbd404b351dn/a Heodo
2020-08-07PS4026425396IX.docdoc cbef8bb9b1caac4b767ba202e8e6d41fc3d5e40a2a905062bba9bcc9233630aeVirustotal results 41.94% Heodo
2020-08-07REP_YB1560020061RK.docdoc eecea8fd330329b9b832be329a5ec67804ada3d27b6e7ae845f1d7493f99a013Virustotal results 27.87% Heodo
2020-08-07INV_PO_08072020EX.docdoc 4b4574331de7a4583c2a0d5eed8d114453c864e40643f51ed2a5f0547bb936a9Virustotal results 43.33% Heodo
2020-08-07BAL_LYW_080120_RQG_080720.docdoc 406ba28d1bd67874bfadce37b6dd1d585a96e578e84886cf956e0e5fd241dab0n/a Heodo
2020-08-07FILE_N9NY2IVM5CG4LTSW.docdoc 6e72a9dc7224bc18a8ee74089430217794ccbf80832bbf920691ec7362a07953n/a Heodo
2020-08-07HX0OAOP2MVBZT2W.docdoc 2ee56c4e8d6634b957f41adcf4b67f3236267ee4fecd4a0a9262af3401bcc06eVirustotal results 37.29% Heodo
2020-08-07FILE_PO_08072020EX.docdoc 1362eb5c759d65c30ec4701769d5559f5bc1950d618ff4d17939fc69f4fb104fn/a Heodo
2020-08-07BAL_PO_08072020EX.docdoc cc93f31c0d302e29add795820ac93373ebe03ec88d8bd1480afa134d76b5a0a5n/a Heodo
2020-08-07PO_08072020EX.docdoc de2e8e894a666aa181f12760177bf5ea9cdba17074cc7062f42d6c9aa82a124bVirustotal results 34.43% Heodo
2020-08-07REP_H3KWZ9CPIG5.docdoc ec6ba7f511bb9cc0ded4f294c57c2637abf236bfc20c781101875c9d6d6efb34Virustotal results 30.65% Heodo
2020-08-07Q_GA4874071674UX.docdoc 4b1b6f5ab3d49093211eab8cbec1b072cabe87aac46a3079e562b382bee3b7edVirustotal results 28.33% Heodo
2020-08-07RGN_080120_GQL_080720.docdoc e302459e39df80f53582e6613f56b1157f8c198075ff65e2dfb5d69f336e5daeVirustotal results 25.42% Heodo
2020-08-07INV_FAS_080120_FDG_080720.docdoc 70bdb576c61fd1465ac3a5c01025bd1c5bc89ac4054c7473b529da4b927c1142Virustotal results 27.87% Heodo
2020-08-07KJU_080120_BSD_080720.docdoc 5a29439105e1b8230b665913a4b5de40622cfbbfbfde619777d996b4fb4d058dn/a Heodo
2020-08-07DOC_WB2G9LT6ZPGCTAYB.docdoc 2a23c6ec323c7c604b9146c5c0aea4cf3b17c5693417e758c1dfa35974fdd737Virustotal results 27.87% Heodo
2020-08-07REP_JUN_080120_PJZ_080720.docdoc d01c8f6276d006be38cb7a690d45041052dc157de49f18c0539bde4b53bd6a4eVirustotal results 27.42% Heodo
2020-08-0787662056973.docdoc 126ac0659681502d22c022b42a39e2cce1bf2cdf60549fe70db6f81d2cdf636bn/a Heodo
2020-08-07DOC_66NVJDVD3A79LMY.docdoc d1a9ffa1566f0dc17eaee7771d4b8a88af8c5d57481bdd3d57fc858cdb5faadcn/a Heodo
2020-08-0723119641.docdoc 900718ee868a4b5cbd08d7ace9025a5fcb821139170628df57c44e739a01dad4n/a Heodo
2020-08-07DOC_145082883164.docdoc 994805cfda9767fb84aafaf6dd5d88e374470a9d937785f371ee82843b0c5a80Virustotal results 27.87% Heodo
2020-08-07S_JN5875333513KO.docdoc 899c39cce572efb68d609a270a70dd25f3e2ca25c21b41dcf5de57f4ed377fd5Virustotal results 27.87% Heodo
2020-08-06N_42539441.docdoc b2e1c3ec5988e1bff64d6dee4fbc7f379ef509842572cbd16087d6e68323d455n/a Heodo
2020-08-06RS_3OA4WA9DHAX7NFS.docdoc ebf75695d493b7e4fc6f08fe275fb2fb1acda454ddadff7161de42dec0df342cn/a Heodo
2020-08-06H_CA8SW7GYM.docdoc 64dafb54d874fcf098a374328013c97ae0b1f78c8958e2865bb0d7e711db6edcVirustotal results 27.12% Heodo
2020-08-06QZO_17574207723376811346.docdoc b50f11d3c9824d9d8e24907a06429c04aa7f976c1941d149665c477cf46b12cfn/a Heodo
2020-08-06INV_AIY_080120_DCO_080720.docdoc 2ee0a294d681306e15289470a69d09210966baba4b985463131eaec15ea3cbcaVirustotal results 26.23% Heodo
2020-08-06F_976104607675960698147835.docdoc fdd0de7dd1df09b348b4eef3c0328110d0e972faf74a98aaa056ec109dae7b20n/a Heodo