URLhaus Database

You are currently viewing the URLhaus database entry for http://spindelaar.nl/mine/available_array/close_profile/SmHQ4iYh_sxsmykodbnbn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:427172
URL: http://spindelaar.nl/mine/available_array/close_profile/SmHQ4iYh_sxsmykodbnbn/
URL Status:Offline
Host: spindelaar.nl
Date added:2020-08-07 12:28:16 UTC
Last online:2020-08-07 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-07 12:30:04 UTC to abuse{at}nedzone[dot]nl)
Takedown time:4 hours, 57 minutes Good (down since 2020-08-07 17:27:30 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-07FILE-20200807-B300.docdoc 420cf1f6784246f59cc804ab9685106d033fb5d1d8d3e76558418bc0786f7b69Virustotal results 29.51% Heodo
2020-08-07Dat-20200807-8495356.docdoc 612b33cca81c88e812436d48c987273b54a73bdc04a908102beac2aaf50b5825n/a Heodo
2020-08-07Mes-20200807-2640.docdoc 8e2bbe860f81156cb3f65c53cc9e82ba407d702856b895049330baf81c76a673Virustotal results 25.81% Heodo
2020-08-07Arc_NU952870.docdoc 9f3d4befc75b49a5e090558b5cf953d5da87bfac56db564bfdde1d36d6ad7b74Virustotal results 25.81% Heodo
2020-08-07Doc_YIR87578.docdoc 5080eb6df265a19a54691328b412d3f78cee2e6e21284f98c03a973300334a72Virustotal results 26.23% Heodo
2020-08-07rep 20200807 X243410.docdoc bb249753b6fd6220b43602a1122cd458d29055d3e37603c1a3a1e2f21a81366eVirustotal results 26.23% Heodo
2020-08-07Rep-PLX20545.docdoc afcb2dbd3d6efa8401aabfea9622280306122ecbd80ca129f6930db9b4b87dbfn/a Heodo
2020-08-07Inf 20200807.docdoc 415416ecc82f18f2912e30f893e208e86b2c47bc418526c19fe5a1ecae185535Virustotal results 25.81% Heodo