URLhaus Database

You are currently viewing the URLhaus database entry for http://mastermindgroup.co.in/wp-content/kPevCoq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432711
URL: http://mastermindgroup.co.in/wp-content/kPevCoq/
URL Status:Offline
Host: mastermindgroup.co.in
Date added:2020-08-14 00:18:08 UTC
Last online:2020-08-14 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002867173 created on 2020-08-14 00:20:07 UTC)
Takedown time:16 hours, 20 minutes Good (down since 2020-08-14 16:40:19 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14InvPZE050983620.docdoc 30a1ebc7ccadab73a1c6463cf44298031c3f083c146a97526e66aeb4f851e881Virustotal results 31.67%Heodo
2020-08-14invoice_UBAG5_3471615.docdoc c2af257a8a40028722b621eec7a07631530b6ad0a75733f89eb70aad03b1e4b7Virustotal results 30.00%Heodo
2020-08-14invoice_39_644243931.docdoc e25abc26006918a7b3aebd6972159b23fd0188c75af859831bf0c870f839a487Virustotal results 27.59%Heodo
2020-08-14INVOICE-03-4138996.docdoc 8668a5aae3e7db513fdb925e16313049037536bc67a86ed756b682c98b7f6f09Virustotal results 25.86%Heodo
2020-08-14invoice RM7 294138.docdoc 946ce7bab4b96c0fd40f3bb134b7d616880bc04dc8eacdf9d4cf10f4c0287cb5Virustotal results 26.23%Heodo
2020-08-14Invoice MV7 5039809.docdoc fe58e66ba70c6c395732f2c817dbd2c6454463fc5104633ec022c7d1fac1bed9Virustotal results 25.00%Heodo
2020-08-14InvX40305193631.docdoc 287b1c2cdc4b225da919062620fa3a273db58864387add5e91f642613c416075Virustotal results 25.00%Heodo
2020-08-14INVOICE SFYK31 296821999.docdoc 78933fecf248691aab0f40469c0dcd29e03ea9922aaf89b7cdc830b802cfa8a9Virustotal results 25.00%Heodo
2020-08-14INVOICE-PB7-97680145.docdoc 187f385bef1fda1bcb05ef62b9e4189a16432875e3fba2d0b7cf1fd6e6739de4n/aHeodo
2020-08-14invoice-LHD5-158323.docdoc b580ef15f157d6c19b61810ddb5f085007685d55693d05cb54782cb52bac7e2bVirustotal results 24.14%Heodo
2020-08-14INVOICEX63751816839.docdoc 0aeb7a7ccd5f0a664f6955eaf500b29020c82c40acd8b9d14cff49c6a9377f72Virustotal results 25.00%Heodo
2020-08-14invoice_766_738898341.docdoc 3a05ceccd595d5635e66f16ae47e0a770f4e6f2569c7cd141676678cb7c61de5Virustotal results 25.00%Heodo
2020-08-14Inv_QXF50_7659596.docdoc 9767bd56721afd6905bab6c3a1a8790999605c8e5b91b2dfded3a0849c7e5d60Virustotal results 23.33%Heodo
2020-08-14Invoice-FPSH30-8871908.docdoc 46bbb2bd635097e18804f6d1f60b8705220eeaae2b5a4edc01f3d275e618cb21Virustotal results 24.59%Heodo
2020-08-14invoice WVJ97 256067.docdoc a437dcd3136177141f2affb2906b150c6c0da7a4a12a87e1c808b2b320370f18Virustotal results 40.98%Heodo
2020-08-14INVOICE-F8-809248.docdoc 538aec1c87a88d78a75a417c253579be5fa18cefce592109122505cf70f2eea9Virustotal results 40.68%Heodo
2020-08-14invoice-VAC2393-224565552.docdoc fb17807621969c33d345882ad5ae95cd5294c32509e13a6fe8ce1d317a5c3f4dVirustotal results 38.60% Heodo
2020-08-14INVOICEAEE842203597.docdoc 865aa27f909822b77734136c2ce238a258cbf8a6041b588f5fb75c284fab5d26Virustotal results 40.68%Heodo
2020-08-14Inv-G9-974264568.docdoc 845f584a4b58e05f5eabb64041142baac8b97a971f88d4cb2544c4ac3af97a3aVirustotal results 40.00%Heodo
2020-08-14Invoice-S0-880790759.docdoc dbc3f242e959a4c3398cc0676dacb940b4253a18f4a2be2d3a1aebb7c1f62d74Virustotal results 38.33%Heodo
2020-08-14INVOICE_IO7_0712087.docdoc 4156fe5a204dbbd2086b1c71f40ced2d03b723dfbbf218927b71ad2b2fb369c6Virustotal results 38.98%Heodo
2020-08-14Inv_4161_764083681.docdoc c257cd4e52104d35aad4c65319a54abf3cbea3929e1fd295bff5fe422409618en/aHeodo
2020-08-14INVOICE IBD1 627220.docdoc 167459762dfa748a07ae8e4d2479e9733ad4d66e0d833453daa2038e833efa29Virustotal results 38.33%Heodo
2020-08-14Inv_HTB2974_934813.docdoc ad1c63f07f872f3b37453d29dce7654dc1b79e4f3e875dd8090977c30093b6f6Virustotal results 37.93%Heodo
2020-08-14InvJS2081465.docdoc 0b134d91d537beab9f4e700b126eb1b43b69c80126818592cef4697fce08263bVirustotal results 37.70%Heodo
2020-08-14INVOICEGJDJ4359807308015.docdoc 2879a9d705300779c0269f3a6847fb725a3564c7ae27f44226fe17f422474ca3Virustotal results 36.67%Heodo
2020-08-14INVOICE NIET0447 54403033.docdoc e8516c23d1aec8faadd52ae68fd240339940d05f4a1db7c56afdbec1eb5de0f6Virustotal results 37.70%Heodo