URLhaus Database

You are currently viewing the URLhaus database entry for http://zlomex.fun/cgi-bin/bx4play3ka_phda82x8_box/individual_portal/16374183693_NJsamFQnc7SP/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:435198
URL: http://zlomex.fun/cgi-bin/bx4play3ka_phda82x8_box/individual_portal/16374183693_NJsamFQnc7SP/
URL Status:Offline
Host: zlomex.fun
Date added:2020-08-17 21:46:10 UTC
Last online:2020-08-18 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-17 21:48:03 UTC to abuse{at}ovh[dot]net)
Takedown time:9 hours, 14 minutes Good (down since 2020-08-18 07:02:10 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-18Dat 2020_08_18 46404.docdoc b532ca1d80293700b173d821d788d7f1a27d7a9cbc5b8e83aa351dd69e0fbd5cn/aHeodo
2020-08-18DAT_20200818_GUQ9295.docdoc 4cc1cdbdd17e8f0b7cb09725937c61cb74bab089ccd7249d8198c12f62b0c857Virustotal results 44.83%Heodo
2020-08-18INF 2020_08_18 C1161.docdoc 26919d2560f6e6e4b5c44add2fdda04f676163a1085799bfcacaec874289f126Virustotal results 45.90%Heodo
2020-08-18Mes-2020_08_18-F365.docdoc a7c86fe81531f07b7120be70ff6f16519758654ccc7ae3c901cea8d36e3a21c9Virustotal results 45.76%Heodo
2020-08-18LIST 0653799.docdoc 1b091450a22052f2f93d1729f74b3ceeae074536055865f9e232398acd2f3a7dn/aHeodo
2020-08-18arc-14065.docdoc 3b916aa5cf96d7330d89f1de96c84ecc9f5acb0f21832d5571cdfe9fcc0b069dVirustotal results 45.00%Heodo
2020-08-18dat DF9163.docdoc 81ec297e1363823b4a4170387a248d68e35aaefafcd998d0f30c090fdb0a7ee8Virustotal results 44.07%Heodo
2020-08-18inf 7593.docdoc 4a49fe6ff5e8731a7aa0536b8f0c0dbc5673dae67c35f0141efb3807cb21daddVirustotal results 45.90%Heodo
2020-08-18Arc_2020_08_18_KZ427.docdoc f3155524e3a1006204ec5ef83349e5fa2fcdf663c69d598cdbd5cda6a378a0b9Virustotal results 44.07%Heodo
2020-08-18Inf 007215.docdoc 23866d5c01d81dae8b6112cf09cb195b3caeab201b8d5b2074c6c01e280d1783Virustotal results 41.38%Heodo
2020-08-18doc 7758980.docdoc 1c62113735e6ddecc264c05212144be5441448de6c9cdc063a1d3ff2494185a7Virustotal results 46.55%Heodo
2020-08-18Inf_F3470.docdoc 9f6acf9a0b1abf9481a13650ecdec0e7a9cb7a4c30938c2ffcca8da0934a96d2n/aHeodo
2020-08-18list.docdoc 1a92578592df96f6bc3c58861c8719f37bd57d2386789d07d319c613fcf2f79bVirustotal results 45.00%Heodo
2020-08-18Arc X771227.docdoc 77893a46e331faf345a8134849c0182109a90c65f156f288b95f054bc8bf667dn/aHeodo
2020-08-18List.docdoc 78159b47ee6e43a81e5f727e9f01d56700fb22cca0c9f6cde333e91c0130dee3n/aHeodo
2020-08-18inf 2020_08_18 95002.docdoc cbae984f113307015e9a42c646507cd4fecbc37c1ce7ed2fa9d731fdfff7e00fVirustotal results 42.62%Heodo
2020-08-18dat 2020_08_18 3160001.docdoc 872c0c3578f24be338bcaa8a29f2b157d80a2d3d5e5ecbd33b028bced714c077Virustotal results 41.67%Heodo
2020-08-18file-2020_08_18.docdoc c84240ca9f8d00a5e32e190c4fc4a4728fe5ca1e12603cf78a77ce78b9f69d72Virustotal results 41.67%Heodo
2020-08-18dat-20200818-K102.docdoc 4426143a003042fcf53c32a42cb6e2dfa30ff4dfdf7e2248eb6533df67ac8723Virustotal results 41.67%Heodo
2020-08-18ARC_Z1455.docdoc cfe5cae34d529a71812a66cb3d6f2e9b2b7446bf4ece6aeae5c32c9cb325ce7aVirustotal results 42.62%Heodo
2020-08-18list-R260937.docdoc 92bd87c0eed15bf75f7c61b1879280e25a7997a4afe7c804c82a3902f51d46c1Virustotal results 41.67%Heodo
2020-08-18LIST_20200818.docdoc 8bbfe9b6aae9ae8cd42ef61b046d0c690f0637f216d5a22d4a5f7911b59469f7Virustotal results 41.67%Heodo
2020-08-18mes-R917.docdoc e976f7e4de4c0bedc4e4bbc27752994f9110c050508b106611f035260551a8e0n/aHeodo
2020-08-17Inf-831625.docdoc e997b17d809b4d63590d7b7cca81318d3ecd18b59a46a4e83d88af6dfaeba54bVirustotal results 41.67% Heodo
2020-08-17File_2020_08_18_2108.docdoc 2e363ae514de57da55513b7e9b5499e658bb254447ad4bac734032c94faed259n/aHeodo
2020-08-17rep-194.docdoc 32cb1657bab6cea4734f694fefe16389dca17cad7673cc0be676c77e070ae735Virustotal results 41.67% Heodo
2020-08-17doc-20200818-QI4457.docdoc c5e15f4b4f97c4a8ab87e6bd09bf057455834577a7180163ca978fb734c66961n/aHeodo
2020-08-17inf-20200818-86431.docdoc 6535313a52f000bc92afec62f22968677544878c5cf2109e862e72f7c441dda0Virustotal results 37.29% Heodo
2020-08-17arc-852781.docdoc 818e631aced6291b95a641f2eace827a0b9f2ee202b364a3a09378bc52401e03Virustotal results 40.00%Heodo
2020-08-17dat.docdoc 1c00d01cd184a0d2a13e0b10fc17fe857ee0c55fe6894a8a538685b2c7a9150fVirustotal results 38.98%Heodo
2020-08-17inf JQH0382.docdoc 28be508a00c3db077ca8f4a78784ca44bcc58cdd1a37d988c56d08c777f5ade6Virustotal results 33.33%Heodo