URLhaus Database

You are currently viewing the URLhaus database entry for https://vandamebuilders.com/w7f7efx/personal_sector/verified_profile/647495513_nZ7R3fj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429273
URL: https://vandamebuilders.com/w7f7efx/personal_sector/verified_profile/647495513_nZ7R3fj/
URL Status:Offline
Host: vandamebuilders.com
Date added:2020-08-11 12:44:05 UTC
Last online:2020-08-13 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 12:46:03 UTC to abuse{at}a2hosting[dot]com)
Takedown time:2 days, 8 hours, 15 minutes Poor (down since 2020-08-13 21:01:50 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13doc-GY92375.docdoc 597c1e67220b23553876dd11db55a2daab298063d5ff4f3afe922db00c9cf514Virustotal results 28.33%Heodo
2020-08-13dat 20200813 D586.docdoc ef80277a8e9cccbf933a7a8a8d823f2ea70553923a1eeefaa42bccf7592bdadfVirustotal results 28.81%Heodo
2020-08-13list 20200813 0444328.docdoc 7ebf31c9057a3561f1d395d73da8418336da7443aa47c62297905fecb7f5420cVirustotal results 30.00%Heodo
2020-08-13Inf-2020_08_13-ZUZ971039.docdoc 2ad23af4014fe937433f4df6f4623f11d97900dc02f74ee90b1bf873ed2eb9b9Virustotal results 28.33%Heodo
2020-08-13Rep-2020_08_13-9936.docdoc 944d697c1efa48e05a7685b59212a811f39a764153fd417b0ead7250736f347cVirustotal results 26.67%Heodo
2020-08-13list_DF4714.docdoc 4e1e08d41d68da18121a8a778a437a6dc515878e7a4b367eacc4eab0765f6245Virustotal results 28.33%Heodo
2020-08-13list 2020_08_13 9275073.docdoc 8e34aac321039ce22c7bbb89b61257a397013e7b62607102bea64b2fb1f61960Virustotal results 26.67%Heodo
2020-08-13file.docdoc 764307084ac62f0f93eb1af151418ca65b0a225868b196247e1cd6f04cb740a1Virustotal results 28.33%Heodo
2020-08-13MES-2020_08_13.docdoc 646c649d5a2f5ce95b1786afce717859e792a5ef3aae5b5ddd382874755e6350Virustotal results 26.67%Heodo
2020-08-13Rep_20200813_PKK648.docdoc a547b1929ab490afde0868812aa109aad11e71f8df07ca4325c556fe506072a5Virustotal results 26.67%Heodo
2020-08-13ARC-2020_08_13-CW845.docdoc c7bbcd996feef001294a81136872af1029abd58a873ec83501f17bdd0c825e25Virustotal results 27.59%Heodo
2020-08-13Doc-20200813-86981.docdoc 5c70b1d9be2e62d3cb581708789ffcafdc47ae8733f09039db0c3c7bfe9041d9Virustotal results 51.67%Heodo
2020-08-13Rep-2020_08_13-UFY8832.docdoc 57fcedf7b710607daf3ff9d1d3f81b02e5597d6a760e10c3af3805702f2e2ec5Virustotal results 51.67%Heodo
2020-08-13MES-20200813-330.docdoc c58ccc775e7c2333d87ae2d0e8b965a9c633a1eebb558d4e153f2ed1a7cb63e7Virustotal results 50.85%Heodo
2020-08-13Mes_20200813_4179847.docdoc d88d0131f8422f4ca25451d4c1f3642d6bcab4aa071bbf0cfed86e54a6e62976n/aHeodo
2020-08-13INF 20200813 GWA87488.docdoc 79c7463e43d45b9b6f904dac346635421e52e2f126f22b855b533a85715ae3c4Virustotal results 53.33%Heodo
2020-08-13REP-2020_08_13-WD2722.docdoc 34b90b804ac07f37b48a7437f520d80dd3efe9bc79c96c722240c63d9e457164Virustotal results 52.54%Heodo
2020-08-13mes-0772.docdoc 95b4b56cd387e84d98464776533fc9c64ba2102ce84cf990e49dc6cbc17dd8d3Virustotal results 51.67%Heodo
2020-08-13REP-20200813-XUO26902.docdoc 7efe325d3dd462aa685894527836d96928d50d1fe594ceab5af597a3df8c258aVirustotal results 52.46%Heodo
2020-08-13doc 1213266.docdoc ccef51f2aac08b771675329e49226ef621176b8408f1e7f7b72aa4359c3d137dVirustotal results 50.00%Heodo
2020-08-12LIST-2020_08_13-1239.docdoc 508b0f1d8e5ede23aa2da775ab08b29c3be1fea89e1d2646c00c0b3c3570af5bVirustotal results 50.00%Heodo
2020-08-12mes_20200813.docdoc 6793d7866cd3e3e456843e5eaab907dbcf624cd6b5431f5f40c0cbf492da582dVirustotal results 50.82%Heodo
2020-08-12INF-784.docdoc 986acc515daf31c8bd8d424f27e1307eab1f51a043c896ffeb2cd94df1eed8a1Virustotal results 49.15%Heodo
2020-08-11INF-N62633.docdoc f250036a8f70c0d3c21d3fe9d60127b45879746797a2bbe697334d2576b3ab75Virustotal results 27.12%Heodo