URLhaus Database

You are currently viewing the URLhaus database entry for http://aqcszh.com/404/available-array/security-tvwkzw40cmwy-pfbzszrizmrw/9s8tgy5bh8umd7-5w6szw9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:434752
URL: http://aqcszh.com/404/available-array/security-tvwkzw40cmwy-pfbzszrizmrw/9s8tgy5bh8umd7-5w6szw9/
URL Status:Offline
Host: aqcszh.com
Date added:2020-08-17 16:45:06 UTC
Last online:2020-08-18 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 16:46:06 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:8 hours, 36 minutes Good (down since 2020-08-18 01:22:43 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-18rep-2020_08_18-1252.docdoc d34a4e095dde98d6740346383251d18ce5f9bb8c58071f128db8083844be55e7Virustotal results 41.67%Heodo
2020-08-18DAT_UXT98130.docdoc e7007d098ff3b77d307fdffbc2b566e6396298bfb9718bd207a8b377aca0b96aVirustotal results 42.62%Heodo
2020-08-18File-2020_08_18.docdoc 92bd87c0eed15bf75f7c61b1879280e25a7997a4afe7c804c82a3902f51d46c1Virustotal results 41.67%Heodo
2020-08-18dat_RL25646.docdoc 8bbfe9b6aae9ae8cd42ef61b046d0c690f0637f216d5a22d4a5f7911b59469f7Virustotal results 41.67%Heodo
2020-08-18list-20200818-765.docdoc e976f7e4de4c0bedc4e4bbc27752994f9110c050508b106611f035260551a8e0n/aHeodo
2020-08-17Rep.docdoc cc2b2954e615657190a6b35c6784f2280cf56ca53c09647bcd8e096a005642cfVirustotal results 41.67%Heodo
2020-08-17Rep_20200818_ATL50308.docdoc faffee3625908bf1e2cb82c961bd1d777beeff0f87166e3aedc6fa984834c42fVirustotal results 41.67% Heodo
2020-08-17inf 2020_08_18.docdoc 5f0f7cccdbe15b26ad3d18fe0dc9c31aba891cea529b65e56c7dda35fa776c0cVirustotal results 42.37%Heodo
2020-08-17dat T881722.docdoc 34c3b24fcdb685c45554b1bc9ab60336cfb9233e87c3f21c61bd63723fea1338Virustotal results 40.68% Heodo
2020-08-17Rep_YU444.docdoc 6535313a52f000bc92afec62f22968677544878c5cf2109e862e72f7c441dda0Virustotal results 37.29% Heodo
2020-08-17List_2020_08_18_WA9196.docdoc 818e631aced6291b95a641f2eace827a0b9f2ee202b364a3a09378bc52401e03Virustotal results 40.00%Heodo
2020-08-17Inf-2020_08_18-434.docdoc b217056622d2655617081ef69ad65da589c7ca744d2d1d6b666425f5d55f4644Virustotal results 38.33% Heodo
2020-08-17INF_20200818_T049993.docdoc 47b3fee25d6683706ef483aa30125377edf7bb21dd17638c81c52fa7e64966f7Virustotal results 34.48%Heodo
2020-08-17rep_20200817_YO050569.docdoc b5ba2a25b6b78baed8f427232afed8841e367725d1fb05bb47b5ec863dcfcf7aVirustotal results 35.00%Heodo
2020-08-17inf-361.docdoc 3c021a95e5f5b22f4efc9f3fc678defdb4c50196549ba03786c0aa2bfead670eVirustotal results 35.59%Heodo
2020-08-17list 2020_08_17 875310.docdoc 348368dc3b9ba59325226c159fd0b695e4256ad96894a3f58d3b97297a87a1b0Virustotal results 33.33%Heodo
2020-08-17DAT 2020_08_17 64559.docdoc 068447c2fb052258a7ea0ba47b2fa89cd69bb3a9bc9457e394de0a70a1277da4Virustotal results 33.33%Heodo
2020-08-17FILE SI819980.docdoc 4e222c92dce7f604bdab06a48a8b26d08c4c3ff4e455795f8024e98823f1c13eVirustotal results 32.20%Heodo
2020-08-17Rep 20200817 6389969.docdoc da10e987e0f17cdbf08a4c765e272d4feb929d329ba74d4fb5d1d27c36c1ed38n/aHeodo
2020-08-17ARC.docdoc b5084e440fafd228cc3ff0eef418b654a434ed1288735ebe57084253b903a3caVirustotal results 31.03%Heodo
2020-08-17inf-NH0654.docdoc da36139efceba6bdc76e654a8ee65827216781721578417791ffd386102b8272Virustotal results 29.31%Heodo
2020-08-17ARC_5430442.docdoc 37fa3d3cd6ac66a6c2dac81cdbfa47a07af9cc5d6103546473c07d0dec853636Virustotal results 30.00%Heodo
2020-08-17ARC-2020_08_17-HI596780.docdoc 008b4cfbe6c65f8eff107a4e75b2fdf0a04e8ccc576aa651971083412c256477Virustotal results 28.33%Heodo
2020-08-17Doc_20200817_JP652159.docdoc 5323e3eb22fcccd879cb74f47c89d13dfe4e32625f12857c2ba993caeaed39fen/aHeodo
2020-08-17Doc-658342.docdoc f270338465d313eb61ba96fff7969d855bdbd8f547a9eb71f5519e789d8ddcefVirustotal results 25.00%Heodo
2020-08-17Inf 98133.docdoc 414a3261de7975d33e98be8efd2d34d23f9b0f3f51146b5d771026f5eb0a27d1n/aHeodo
2020-08-17ARC_M021156.docdoc 8b689a2b1b329de864a728b4d212d99d754ee1ba922d6995f3eba7c8f2e5812bVirustotal results 26.67%Heodo
2020-08-17file-20200817.docdoc 285cbe4cd306ae4c3557c91c2fd38e3a562f79d21643a6295b53aae718aae367Virustotal results 26.67%Heodo
2020-08-17Inf-20200817-59935.docdoc e484e9b8614dff68bd63e103a395b4e03576c2f72fdcba1ff45344012e0f51b6n/aHeodo
2020-08-17inf 2020_08_17 JGC228.docdoc 768b963eba0a3f6936ff6a6953909f9f70e8751a3b527b73aa0bb5def1b18305Virustotal results 27.12%Heodo
2020-08-17Doc_2020_08_17_UB0875.docdoc 683251a1d571223428ec926ef741b19a2274b13d904fc8154915ace942c29e8cVirustotal results 23.73%Heodo