URLhaus Database

You are currently viewing the URLhaus database entry for https://thesbest.com/2ptgf/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:434738
URL: https://thesbest.com/2ptgf/docs/
URL Status:Offline
Host: thesbest.com
Date added:2020-08-17 16:29:04 UTC
Last online:2020-08-17 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-17 16:30:04 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 22 minutes Good (down since 2020-08-17 18:52:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-17PO_08172020EX.docdoc 8c3c3fea1dbe95885292e7e451eb78885b32d903b97fa622c32167f09a7f6588n/aHeodo
2020-08-17REP_FQL_080120_CPC_081720.docdoc c1723fd8ad296c3e5aa79c5b73769bf8e4d641fc4460b614cf5693accc401022n/aHeodo
2020-08-17F_KQB_080120_EDJ_081720.docdoc 7953c54fcacaa1a31dfbd127cc41f089eb3d531f9d8c863404d07aa902f0f3ean/aHeodo
2020-08-17EEV6706K4EL0.docdoc 57db63931c55189db9571561e4a3285926786a4ec61f2aeb938a5bb1ebdb3261n/aHeodo
2020-08-17UM8160233087JR.docdoc 095bb889a019ecf676de31a52ae472b04486e8ce2dcc1db0f9698dd27d4fb8fdn/aHeodo
2020-08-17153204366.docdoc 0a80a905cb06b8af73d6ecd4fdf057104115e69b52b8e28b2d99baef9500c25bVirustotal results 27.12%Heodo
2020-08-17REP_ZEEPA80.docdoc be85dc6e1ccbe1a1c0f6d504a7893e15d4139c39f4754e8c90a503ae4dfeeea5Virustotal results 27.87%Heodo
2020-08-17YTTZ_PO_08172020EX.docdoc 060c6fd92c84f52d8d4519be377e1ae53efd464bb9ddc6558bc8c0049bf89d67n/aHeodo
2020-08-17M_YX8089459656CF.docdoc 8e7fa400a5e469ba5366c483a1ce40666c0a8dc2399d663ece2d8e6533e9ca3dn/aHeodo