URLhaus Database

You are currently viewing the URLhaus database entry for http://dandyair.com/font-awesome/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:431542
URL: http://dandyair.com/font-awesome/docs/
URL Status:Offline
Host: dandyair.com
Date added:2020-08-13 04:52:05 UTC
Last online:2020-08-13 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-13 04:54:02 UTC to abuse{at}digitalpacific[dot]com[dot]au)
Takedown time:14 hours, 26 minutes Good (down since 2020-08-13 19:20:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13U_46487953.docdoc 92b38ca67d00bffc28647167730cef8ea6123542c4123464f1c565e59186b871n/aHeodo
2020-08-1399965856.docdoc b8c7112d2672445960d4ca69da612b07b761b5119015c0dc4e75064b85978ff0Virustotal results 36.67%Heodo
2020-08-13DOC_PO_08132020EX.docdoc ea4ab11724bb19ff8c0451069a27cfc6b2de7b7ad0254edd07f3036c265a066fVirustotal results 35.00%Heodo
2020-08-13UZQR_352442098529661.docdoc f2cfa3001f9b3f64a8c75cb726c5a894693ed9297adb5c97b35b825225bd4001Virustotal results 35.00%Heodo
2020-08-13PO_08132020EX.docdoc 787b6d7c7eccdccf7041ef2028eebf0f8eb9691e1fc1561c6a6c13985156b1a7Virustotal results 32.79%Heodo
2020-08-13INV_PO_08132020EX.docdoc 964bb9e35389ab3548e2500223110b3ed04c0615a423017037d0c9985e784d52Virustotal results 32.20%Heodo
2020-08-1326351845.docdoc e075507a16b93d21aa9bf0848bd5299ef87fe338654ca4e30075fb8677475c50Virustotal results 31.67%Heodo
2020-08-13N_6767677154.docdoc df8919a57eafa270cc35700fb2edab8c2e7c0b3e2bffa1ab48e747ec2dc1e5ccVirustotal results 30.51%Heodo
2020-08-135727415612746727961.docdoc 3d9b7dd248282da644efce8e11e6933424e766ba770a6c0eb2f817b312367a1en/aHeodo
2020-08-13TNK_AO7CHDSZMJ6TS2VK.docdoc 8a0a74b31fb30ce1a4adbaa3945c4186c7d467268e76b9ca802905b7cf5fa54eVirustotal results 29.51%Heodo
2020-08-13H_JQ9046957298AL.docdoc 479e00f4a39c727821fabea3c681e051bf755f4eb4c10e62f23055ca7f4a9353Virustotal results 29.51%Heodo
2020-08-13598648238258744489681200.docdoc 4b99e8df8f724bfea2f32a9274cf4aa0f41b3e57a2b1ec753b17514149c670b2n/aHeodo
2020-08-13FILE_BAMVB0K66.docdoc bd7871f1fceddc02727f3be310e4507aa75ac650a9319a03989d0a1c18bc74cdn/aHeodo
2020-08-13REP_WFU81Y2A11K0.docdoc 44a4e9297c1d0191631e49532aa755b5a7928836c63b7a9f37deb77293cf2ec7Virustotal results 28.33%Heodo
2020-08-13DOC_PO_08132020EX.docdoc ae0c7dfa89cf0301b64ef4f6b364a1e426c79c80a9d0943916c93f3315ebc907Virustotal results 27.87%Heodo
2020-08-13BAL_09755716069.docdoc 11115387b71ec2162713a34b3ced799ace3def99ab9e495234326a68ae1f6ef9Virustotal results 28.81%Heodo
2020-08-13NWIMICOF9M.docdoc 430d07c2162af45022115ce4b557ab182afc95143b698568d50c41832c6b281bVirustotal results 29.51%Heodo
2020-08-13BAL_3O9PNUFV158MIHG.docdoc e9a1e08c1d8de096fd30cfc93c23d0037c4016bc7c4cad64c8c4c7b6fb3a717bVirustotal results 26.67%Heodo
2020-08-13S8RC030D5EQQK.docdoc 0c4015de45653ee2f8fc6e338461a2377e14139b1ff879df5a2fe1d3c200a15eVirustotal results 28.33%Heodo
2020-08-13INV_GG3WZ07MJW9.docdoc fdf714d8a02549739b60c414ff535944cd2b7d8a84e465b55f4fa263680e9cbeVirustotal results 26.67%Heodo
2020-08-13TGHO_THZ_080120_XQS_081320.docdoc f1194d491ba7c0f8f39b1c0b9d47c4324742b324adc2e4a3feba13f77e9b40fen/aHeodo
2020-08-13INV_00365913.docdoc 5194be1983e90239f9db2e155ceda0e8c3614455a64815f33ef7c8a1bac92cc5Virustotal results 25.00%Heodo
2020-08-13DOC_PO_08132020EX.docdoc 0652c184cccfd772644a2b72467b93f57ee93b1095894cc08ab3a9d9470fbac9Virustotal results 26.67%Heodo
2020-08-13FILE_BO2C0E0H.docdoc e1bf8d2efe529d4cbe16fa5c6f747b604e88d6ffbeec9742a7617aa8617a9133Virustotal results 26.67%Heodo
2020-08-13INV_PO_08132020EX.docdoc 1ac4188f22c717e76b493881ab12ef60e719cb86d2e5289f743b42b338cb5b96Virustotal results 26.23%Heodo
2020-08-13BAL_1663624319553270502.docdoc 9806f54f8d2769646e6a9caee3f1c15a1b47f781be6eef64c390d6e9ee867bd4Virustotal results 26.67%Heodo
2020-08-13REP_99297542.docdoc a8bba76a96bc1cc1852b0b70a3e75776d9dda9cdd9a5978c25f38dd031cd1d4bVirustotal results 27.87%Heodo
2020-08-13PO_08132020EX.docdoc ba510b5a0f97430a09efbd12acbb4c1be869e71e678adf5fa0b5498fb477068eVirustotal results 28.33%Heodo
2020-08-13IQZ_CH4067823805SL.docdoc 9cef5779c85ee88af278a91e4102830de7b05bb7b71b9f7a1889a2aeb033ac7bn/aHeodo