URLhaus Database

You are currently viewing the URLhaus database entry for http://bornahomes.com/hamraz/8OXT2ZMJUPOYE/0ygfqwupdw4/k4soi570130273561qe9nsr1bg3q/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:431879
URL: http://bornahomes.com/hamraz/8OXT2ZMJUPOYE/0ygfqwupdw4/k4soi570130273561qe9nsr1bg3q/
URL Status:Offline
Host: bornahomes.com
Date added:2020-08-13 12:30:09 UTC
Last online:2020-08-13 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-13 12:32:02 UTC to CloudFlare Anti-Abuse API)
Takedown time:3 hours, 42 minutes Good (down since 2020-08-13 16:14:11 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13INV_J6EB3OLHRV9Q53.docdoc 1d76d6caaf25aedb9a6b4a416eda1a0f237ef09b5100d844a54ed3290242e251n/aHeodo
2020-08-13FILE_UTAOGO5L.docdoc 3d9b7dd248282da644efce8e11e6933424e766ba770a6c0eb2f817b312367a1en/aHeodo
2020-08-13FILE_12695466853082.docdoc cc1a7efdcb7e41f40365042a5f31c2338804f4bacce2f64fec0ef2fcc3dd2f96Virustotal results 29.51%Heodo
2020-08-1375601340.docdoc 73b34aebc917f7437b48467815608b544f747919a4a7e78d4324a99efb030028n/aHeodo
2020-08-13DOC_KIO_080120_UHO_081320.docdoc b51738d4d37c472d3b1b69c1f7cab2d120fd9f2e53a524e772a263e65a892c94Virustotal results 28.81%Heodo
2020-08-1390176749.docdoc bd7871f1fceddc02727f3be310e4507aa75ac650a9319a03989d0a1c18bc74cdn/aHeodo
2020-08-13INV_40618790.docdoc 44a4e9297c1d0191631e49532aa755b5a7928836c63b7a9f37deb77293cf2ec7Virustotal results 30.00%Heodo
2020-08-1367533887.docdoc ae0c7dfa89cf0301b64ef4f6b364a1e426c79c80a9d0943916c93f3315ebc907Virustotal results 27.87%Heodo
2020-08-13INV_66608255283691962.docdoc 79b609ddf074406de181d656544923255389ac44a068ddaeb858e6546d2787f4n/aHeodo
2020-08-13DOC_W2ZEHYSVTB.docdoc 96e76a76f4ec76e0403c4a62e84d02c7e3fd174f61fbb051470deeb5624062efVirustotal results 26.67%Heodo