URLhaus Database

You are currently viewing the URLhaus database entry for http://jesclongroup.com/UCCA/efrzNaxMV/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432786
URL: http://jesclongroup.com/UCCA/efrzNaxMV/
URL Status:Offline
Host: jesclongroup.com
Date added:2020-08-14 03:30:08 UTC
Last online:2020-08-14 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-14 03:32:02 UTC to abuse{at}ndchost[dot]com)
Takedown time:13 hours, 8 minutes Good (down since 2020-08-14 16:40:11 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14invoiceWQ9331868.docdoc 3faefaec25266917cdada868fc8076b16e9b42382e82bfb5018562978d0085a1Virustotal results 31.15%Heodo
2020-08-14INVOICE JR0 90290539.docdoc 022cf3a8bcb181e5218ff3a6b7e759e94462df01ff93902560371dfa2ffc0950Virustotal results 28.81%Heodo
2020-08-14InvoiceEE323060056886.docdoc e25abc26006918a7b3aebd6972159b23fd0188c75af859831bf0c870f839a487Virustotal results 27.59%Heodo
2020-08-14Invoice ZXM3 67977613.docdoc 8668a5aae3e7db513fdb925e16313049037536bc67a86ed756b682c98b7f6f09Virustotal results 25.86%Heodo
2020-08-14invoice-QLEQ324-838493.docdoc 4935ab1182453885ea821cc714b1679ae7eeb54bb744fe13f52ad6e954a7f785Virustotal results 25.00%Heodo
2020-08-14Inv42778251.docdoc 6969c9659df92d53fbfae853c8c208cb0e09fc6acf7dce23773cb66cd060294dVirustotal results 25.42%Heodo
2020-08-14Inv-M0120-01241288.docdoc 7dc64cdcabade0fe1b2cccc83c3a256efb0de22bbc1e8b17a072104e393b3b26Virustotal results 25.00%Heodo
2020-08-14invoice-85-959804025.docdoc 78933fecf248691aab0f40469c0dcd29e03ea9922aaf89b7cdc830b802cfa8a9Virustotal results 25.00%Heodo
2020-08-14Inv_JF9433_32544425.docdoc 187f385bef1fda1bcb05ef62b9e4189a16432875e3fba2d0b7cf1fd6e6739de4n/aHeodo
2020-08-14Invoice MAN5585 462834301.docdoc b580ef15f157d6c19b61810ddb5f085007685d55693d05cb54782cb52bac7e2bVirustotal results 24.14%Heodo
2020-08-14Inv-67-120963623.docdoc b491fec759260d8a1c9a3ae8ca946359d8abd506b683a71ee5a45fb91e170236Virustotal results 23.73%Heodo
2020-08-14Invoice L2 63577866.docdoc 4af3cc1ac4ee4610fa7671fdc8b02ad17ad4e71433250d2ab04291fc1f5e657cn/aHeodo
2020-08-14INVOICE_7157_8186356.docdoc 101c35e8c776b8ae43e1a8703b8793462210ca7ed543c075d7fbe88796826773Virustotal results 24.59%Heodo
2020-08-14InvPH46604457739.docdoc f841c145c39f74c12260a67c686e4dde761614e633f204a3e68f47750f2e6d1fVirustotal results 23.33%Heodo
2020-08-14Invoice-9200-619831241.docdoc b873855abe6ecb687a4df753ed5f4882475ca551c53ffc20ef18b3c896115a91Virustotal results 23.73%Heodo
2020-08-14invoice_CZQ88_887411286.docdoc 27db24afe51c643a809e559c190b96146022ef6d3394b8e990c6eee4bb9846acVirustotal results 40.68%Heodo
2020-08-14invoice-C52-34128949.docdoc fb17807621969c33d345882ad5ae95cd5294c32509e13a6fe8ce1d317a5c3f4dVirustotal results 38.60% Heodo
2020-08-14INVOICE-PWM7-6349529.docdoc 3132acbb0aa02f175f2e8bf589a53e732564cf73f1f003cb64c842ba52d3c889n/a Heodo
2020-08-14Inv OKHI6118 129731676.docdoc 845f584a4b58e05f5eabb64041142baac8b97a971f88d4cb2544c4ac3af97a3aVirustotal results 40.00%Heodo
2020-08-14Invoice-PKU9151-642604.docdoc dbc3f242e959a4c3398cc0676dacb940b4253a18f4a2be2d3a1aebb7c1f62d74Virustotal results 39.34%Heodo
2020-08-14INVOICE-C1-76364698.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14Invoice445599238590.docdoc a5cebe26ebd797b743940f94cd3b74255ae3864a8042734c1b430e3da0198e2bVirustotal results 40.00%Heodo
2020-08-14INVOICETLFD358080995.docdoc 79ea3e6251e22a744018845dfa9472128b35301f22c571781bf17b288237e411Virustotal results 37.70%Heodo