URLhaus Database

You are currently viewing the URLhaus database entry for http://bigventas.com/wp-admin/closed_array/guarded_fa9z40jy6si7mb_8on3mebqsw/89964905_Vu2o8cc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429204
URL: http://bigventas.com/wp-admin/closed_array/guarded_fa9z40jy6si7mb_8on3mebqsw/89964905_Vu2o8cc/
URL Status:Offline
Host: bigventas.com
Date added:2020-08-11 10:58:06 UTC
Last online:2020-08-18 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 11:00:04 UTC to abuse{at}hivelocity[dot]net)
Takedown time:7 days, 3 hours, 58 minutes Bad (down since 2020-08-18 14:58:25 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12Arc 20200812 AY781.docdoc 2180342d9c66c0f6df8550aaaa50fa5977e4186f3934cd927c5ceeabcd3cca0aVirustotal results 51.67%Heodo
2020-08-12Mes-107846.docdoc 1f2721d86674c089b606753be49e601afa652cd0daa1af0a19239ca33981af29Virustotal results 51.67%Heodo
2020-08-12File-2020_08_12.docdoc 1e49a48de56f70d98bd4a9438f95292a8725b5025075cbf8f0bccd551474754bVirustotal results 49.15%Heodo
2020-08-12Dat_20200812_2098.docdoc d6ceff199daed77e31636bbce10dd06d27353c4064b10c076028aea4313071c1Virustotal results 49.18%Heodo
2020-08-12List-P463.docdoc 9e95cffa8cb342aefdb7f8c1a029adcd48d1304b400d07318215436dd2894341n/aHeodo
2020-08-12MES_2020_08_12_B05948.docdoc e5c2116828d317efeac4ff3a7fe2092bae369fbb5265db371d919a3ffa037cefVirustotal results 51.67%Heodo
2020-08-12MES_2020_08_12_VE167.docdoc fadf9dff9ac739df4bfe67bb110d2570b3a8b56ff10d4d0a619ec013819ee896Virustotal results 50.82%Heodo
2020-08-12List-20200812-413271.docdoc 106b70745b6bbcd2a3b1590f596682076f039f584ccde6df0ca12dab353fb701Virustotal results 51.72%Heodo
2020-08-12inf.docdoc 6fa74bb52572c68bce1d712b488aea9184f884d85ef22b26492011dc0fbec3a8Virustotal results 52.54%Heodo
2020-08-12File_20200812_RX70817.docdoc 7d7ecd381d765e01cbb41e6b0a254b7bc60ebb1d59c3c212286dbb9054e5093dn/aHeodo
2020-08-12MES_YE2175.docdoc 239b0c4f5e150bac96fff321ed672e0772718018ae715db9d4feb0b59879fbb7Virustotal results 50.85%Heodo
2020-08-12FILE_20200812.docdoc e49959014262227a3e6ca5bc2937e6afab83a251fc694000d1a3d38e7814d9dcVirustotal results 50.85%Heodo
2020-08-11Dat FCY139.docdoc db2aadedc60eea4a3a77bfbd6c1334cfca2091f721e34c196cde4f47624bcb90Virustotal results 49.15%Heodo
2020-08-11ARC_2020_08_12_NXZ0870.docdoc d135bfa839f7aced43217658d78cc59d8c51a7120940e59b3c805612e1b276eeVirustotal results 50.85%Heodo
2020-08-11Mes_3853.docdoc 0241b1ed7a1656dab5d9fe64b7e59fec547126495769ca53d78220090b494889Virustotal results 49.18%Heodo
2020-08-11list_20200812_E6004.docdoc 116d5a4d0b83b31befcc51de658fe9a2a9554ada261572c59be7e4c01a077efdVirustotal results 50.85%Heodo
2020-08-11File 2020_08_12 6684.docdoc 593a1eee983e1c66c480fc52ce564f0ebb60c48d5cadef3f5ed4367d32f1112bVirustotal results 50.00%Heodo
2020-08-11file 20200812 JW067551.docdoc 7100d7486bcccf991906541b709fd020c8cf3aebaed5025f37c19ea15924b034Virustotal results 50.00%Heodo
2020-08-11Arc 20167.docdoc fd98e040494ec96249be1460752ad33da1d1a230de136873e2c99e72fdbc336fVirustotal results 50.00%Heodo
2020-08-11list-2020_08_11-9887933.docdoc 6bbbfea0979ddea7c5b31d79ead31b118ac7455812560b7e9bea64b8d1cc3366Virustotal results 47.46%Heodo
2020-08-11REP QFJ277.docdoc dc67e4720accd77c39d460b3209c199a542e2c1e9e673e3645d2924c6a7827d9Virustotal results 48.33%Heodo
2020-08-11Arc-20200811.docdoc 505bf00a3f0c6b5d8ececc410f78de1bdb0fffc8fe7a3324166448fbb3a213f0Virustotal results 46.67%Heodo
2020-08-11FILE_20200811_141.docdoc e589ae383d2dda4770ca6a4cd98ae21ad8e8230567a0c3c2dd5fe33395d90cefVirustotal results 38.33%Heodo
2020-08-11arc 2020_08_11 055233.docdoc 1da87bf7cde42012d6ef60a19e839e43b5cf12ca5942cd31c40cc0ac0e31da49Virustotal results 40.68%Heodo
2020-08-11dat_G51689.docdoc 41a14ae8992338c85b383362556c69ed34ef79be6782f91011a521681efea640Virustotal results 40.00%Heodo
2020-08-11dat 2020_08_11 686711.docdoc e55a8128dcdbeb38bece187c83b4066e4c92f5d4d2fc16cc1375139a39cf148fn/aHeodo
2020-08-11REP_2020_08_11_EID538.docdoc 0c2fd444f2fb9f77cde4f5629c19ea2ff814f7cda10a63a6bc6227d3ce403b4bVirustotal results 36.07%Heodo
2020-08-11doc_2020_08_11_88973.docdoc c3832fbc9a1ddc68c6e46a3833639941057f03d5a0382d4987e72a406da4d1ddVirustotal results 36.67%Heodo
2020-08-11DAT-1360121.docdoc d2d1169820bcf260d48e6273ea105b4db9727fcaf8702362a7c8d3b8ca93b1b6Virustotal results 36.07%Heodo
2020-08-11Mes_20200811_A649.docdoc bef25908178e50a5ea5c9427e2d767e442719458414443980f1d1454659d4804Virustotal results 32.20%Heodo
2020-08-11arc 20200811 PN25618.docdoc d959ba3063627e8c1ba90a9562d91943c0a6e82b8b2b749750fc5900649b6a12Virustotal results 31.15%Heodo
2020-08-11REP-20200811-8363885.docdoc 356e3d6505e5c614fd7fe96e3e20c392e04e5b6e552a28f069dd37250d00508eVirustotal results 30.00%Heodo
2020-08-11Mes_5579387.docdoc c279b2621cc960bc14d86aa7b7a8ed1d61346e3e582e77072b43a1631871f3f1n/aHeodo
2020-08-11Doc-20200811-1385579.docdoc 5c7e33c23d454291dacaf4ae431d451d0659a56b3cf2e2a0ed82002b5ee21bdcVirustotal results 27.87%Heodo
2020-08-11Inf_LD174003.docdoc 03ae6dacc26669e23257af7d5e8a8c8d15bdbe6cc973112960392ab22d03d93fVirustotal results 25.42%Heodo
2020-08-11List_20200811_92226.docdoc 15101ad204c6aa2c1a38ba1dbb0eb7c8f64c9745e96ed7c93ba8cd16368fd67fVirustotal results 24.59%Heodo
2020-08-11Inf-649361.docdoc 29d67f5bde2807da0a4316463578997237825ad1a5e219e2dc5d9c4efa4cf3e1Virustotal results 23.53%Heodo
2020-08-11ARC 20200811 QCN28738.docdoc 4ac8303dee91eda247aa1c6dd66b88b668f8737dd92aee682a3226619e5fcfb5n/aHeodo