URLhaus Database

You are currently viewing the URLhaus database entry for http://hganny.com/2016-17/lm/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437146
URL: http://hganny.com/2016-17/lm/
URL Status:Offline
Host: hganny.com
Date added:2020-08-20 09:06:14 UTC
Last online:2020-10-07 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002877307 created on 2020-08-20 09:08:05 UTC)
Takedown time:1 month, 18 days, 9 hours, 33 minutes Bad (down since 2020-10-07 18:41:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22FILE_DIV_080120_QGY_082220.docdoc 44a995c783cd6b7db8fe3c0c1bb1850526aa9fdfb75f222db9191cc5d22ee6c4Virustotal results 55.10%Heodo
2020-08-22REP_EA4952592180UN.docdoc 89415d58550d6a2793ed4804dc7752b3eb54a8e12ab8c02556131b5f4b0d8decVirustotal results 32.14%Heodo
2020-08-22BAL_TV6946841681ZZ.docdoc 2352834aada622f4460b9dd3393af149de11975edbdb35d4c20f4917959a8526Virustotal results 37.93%Heodo
2020-08-22BAL_985603631162736969608892.docdoc 821e25913d73972a01a1db32a8504153128d8b4856fb812dd3ede84e3afc18f6Virustotal results 36.21%Heodo
2020-08-22BAL_H6KQM49KA58.docdoc 4b847cf561549e99bd1c9e70d88b75a0e8605203b89cb3769c12c2498bb4982bVirustotal results 33.90%Heodo
2020-08-22PO_08222020EX.docdoc 55f959cd44c12cc0010b087a01a71632af4e1b07f2d7e53f351e03ec8dd0b28aVirustotal results 33.90%Heodo
2020-08-22INV_PO_08222020EX.docdoc 02673d69c148c0f8b3a70c07d8ab42ef299cffc98186d037c1eba5949eded2b4Virustotal results 32.73%Heodo
2020-08-22563267961179.docdoc c05a2bc6afd461c389a8ede4045dfe692b0ec6338cd6d470bea60d827dd0a37eVirustotal results 32.14%Heodo
2020-08-22FILE_6V5E8WPJT3E92EPN.docdoc 223f9d553cde32a1d85c024ab5bf112893a5d55e9595f0cfab8bc6219e3e447bVirustotal results 32.76%Heodo
2020-08-22UEH_080120_ICN_082220.docdoc bfaa7a97f38b934f3f5163c647071f7e50db79d8ec83b165cd7cc5b8da521d73Virustotal results 32.76%Heodo
2020-08-22DOC_UTP_080120_PPF_082220.docdoc e1d65c4d8d7563078c1cdb7f6005516783ff001ca07a1d53e8d688dff3a2f1f4Virustotal results 32.76%Heodo
2020-08-22FILE_EQ3977917119RV.docdoc 7e242ed185df087164cd0a9a255db1edda86efcba206b8e7464695f2d892fec4Virustotal results 34.48%Heodo
2020-08-22REP_1393284764.docdoc d818f0d1f4c2dedae9fcd5152cb3a98a58e46528bdbf5decf83285dab11d4454Virustotal results 36.21%Heodo
2020-08-22XGV_297674380371313.docdoc f91300fa52a19f297115dd8c84a2b9f1083fe608123fe8dd26d1e391f13b29d7Virustotal results 35.09%Heodo
2020-08-22DOC_274334397028.docdoc 7cc0c880d55c37aa23a77e2002e19f7b8187f065384cb3ed03d43ec181cbe496Virustotal results 33.33%Heodo
2020-08-22INV_13602545.docdoc 145acd5e0e67f614595dd75a8650697247d18e68629cacad0810b67783e01b64Virustotal results 36.84%Heodo
2020-08-22CGWW_UCRTUVPX7J6K24.docdoc 94904301a0794ca20357c8ba3c059df10179b43afe4828ac94683dfca014d6f7Virustotal results 32.20%Heodo
2020-08-22REP_007289924362199647723119.docdoc 6de50b6129796c4fa1231ce261dadabd610d00711194503150cf45355edec9eeVirustotal results 33.33%Heodo
2020-08-22DOC_PO_08222020EX.docdoc 0759e5c471a2092742d96de880d1e5b939fa7fc1bbd839fc5a6f40c79067c24cVirustotal results 32.76%Heodo
2020-08-22REP_VK6143280000IK.docdoc e58f047fe04cae788a4aecc9507bf22d1c090e44f2181a4d57f2d7c5d7535f75Virustotal results 32.76%Heodo
2020-08-218O8DLXK1YVE1.docdoc a6679eb46ce9ffb28041319f4f1f5d9ec789b87a8ee7d4e8a35d1971f7d02e58Virustotal results 32.14%Heodo
2020-08-21FILE_7921770215679748145.docdoc de8da644f768598c0f022a5398be71b4532ddabaee7035c96b697e37b6e706a5Virustotal results 33.93%Heodo
2020-08-21IPB_080120_XQL_082220.docdoc 912d5e77b3dc412999583dcbeb55c5b792e6a27ac0bf73badacee55e6e7830can/aHeodo
2020-08-21FILE_90KR526HV7FS.docdoc c6a3896c05787082ecea3bbbdbf93fc5b5a681c4b68941b36d0b17a3636156ebVirustotal results 35.00%Heodo
2020-08-21WYR_080120_XKT_082220.docdoc f39cec9be2ea681537ade05559fbd0241bfb876a899f58fc71301e6c2b2ed9e6Virustotal results 36.21%Heodo
2020-08-21INV_YB3015441319WS.docdoc 6a9cb9033ebcf0e513947cface83d763d935d1fe8fe4b8a3ed36acdd88d92371Virustotal results 32.76%Heodo
2020-08-21ZPGT18M6.docdoc 87946e4acae842c121b63eacefc34325426535b79aa49dcbcb4d1c74faa7adefVirustotal results 32.76%Heodo
2020-08-21BAL_385640289819163219.docdoc 656cc3eb3438badf2ad21a9aa6c6a7b35ef4279cc9469344dabb0878569757b3n/aHeodo
2020-08-21REP_805894918124.docdoc 185629559fc8144ebc604bdb282f488286168205d6797eebb448ee7440c20eden/aHeodo
2020-08-21INV_724095987287.docdoc 17c529f8042665bc986093547d9f8281d9684aae9d35e8774f30bee09148b53fVirustotal results 33.33%Heodo
2020-08-21PO_08212020EX.docdoc c23c13d2d134c96634d942166257baa97b35c635a000d8bc2f654fdbd6a86e4an/aHeodo
2020-08-21P_30752016.docdoc 6a83ed449dd2b7d39a4f6460c27a4b834b4b2d620d9336fda16a828f29336f8fVirustotal results 25.42%Heodo
2020-08-21EQU_10749945.docdoc c344af97c40ba39fe3b63c36dffa41cc3d2d51a8443aa1e04d06d55f219b5e89Virustotal results 22.81%Heodo
2020-08-21G_VQ6861581833KT.docdoc d2cd48c6074a7d0dcefae5ec30446a8e81f200e72744991eca77c9e2f9abaecbVirustotal results 28.07%Heodo
2020-08-21BAL_MF2195065505NO.docdoc 19645526d059459a6204436be7fe95ce06ff849a12febb7fc098f1e9e224d9f9Virustotal results 27.59%Heodo
2020-08-212D843VJLXGN2.docdoc a7da93abb18c18072efe59aaa0c6479e8c85e09c61336c1684a118219facfafdVirustotal results 28.07%Heodo
2020-08-21REP_64939925659618689653.docdoc 77460cc133315ccdfbdaf1546ce45acc79abed14bb832947ca2dd33c1425dd49Virustotal results 27.59%Heodo
2020-08-21INV_03930092.docdoc 8629c793b67877bd01d45910331ea12b6f45da2b3723d513588c6f27017f7af5n/aHeodo
2020-08-2198533672.docdoc 33da171c98a915b6b46ee6b15f06b10f57557c479fe659f138921a4578264ab1Virustotal results 27.59%Heodo
2020-08-21DOC_SUXG11QRMGOCY3.docdoc 52f93265171c4daa8a38ef46773660e8b83d21d2a1bd660a0e52efb67cde6ebeVirustotal results 22.41%Heodo
2020-08-21BAL_7FKEJK79.docdoc 653b972960d0bc9bd9d49ec85b038fcdbf2c766a68509911ca2ee4a4410433fbVirustotal results 22.03%Heodo
2020-08-21ZN0844873673UI.docdoc a733a4e6024de8fb8639c32f10763eb1350346440beca5654a2d0dcb93ad94f0Virustotal results 22.03%Heodo
2020-08-21FILE_9RH85PB7YFHD.docdoc 92ce63816306ff769b615c927a2677d7a4d1eecdbe7e6bc825ce4a446df1bc7eVirustotal results 22.03%Heodo
2020-08-21BAL_OZW_080120_LJU_082120.docdoc bce60944d3f355c0b0204703032c8c88b18863aab47ce9c419f3b2b9bead9c9bVirustotal results 22.41%Heodo
2020-08-2111488012272290369610.docdoc 71168d573c54a2d35fe5f22691d9090791fe2c78cd932b4c9fdfec7062329f87Virustotal results 20.34%Heodo
2020-08-21REP_47334772.docdoc b326935dc2c2961ba03dbcb71953cb015dc694fdd25510aaea3efd5f86ac04c1Virustotal results 21.43%Heodo
2020-08-21INV_SEKRELX.docdoc 5f663d1e8899dd1bf8794a251e7acd014dbe349b71e9d4cbb592a9ad3d4d155aVirustotal results 21.05%Heodo
2020-08-21FILE_UH3520293605CM.docdoc 83912e356ffc063006637864e3ceed204efd7141ac92b7ff91fc4e3372c2552cn/aHeodo
2020-08-21BAL_HTW_080120_WQI_082120.docdoc 10b6f0f265e6ffee5f3f24d1719593a94876a740dccbeb6f319bdf53a44a72d8n/aHeodo
2020-08-21071ORCROZBKWI58.docdoc d3e288e78e76e10c2214ea9589c989760fc693bb097650669c7f37b9332698c5Virustotal results 20.34%Heodo
2020-08-21INV_49908783.docdoc a99bc78979b657a1d16c9c3cb64ddfbd2d0317097210ad0dd85088b7a6c1b3ceVirustotal results 31.03%Heodo
2020-08-21INV_PO_08212020EX.docdoc 2266dbbb77a605eb9fa60593582a7a364dbdfea40398654e94f4c17c05b15faaVirustotal results 30.00%Heodo
2020-08-21INV_3646756374215995358.docdoc 54352cd25b7c6901b81eda69dcdca9f9177865d644ff9bf018890b9ce49d3580Virustotal results 30.00%Heodo
2020-08-21BAL_20783081.docdoc b3bab296d26d412d3adaa195a93ca6ff44a5b6bc5e16f130e2386928d12f0570Virustotal results 30.51%Heodo
2020-08-21REP_WN1359677647XF.docdoc fd2732589c07dc97af78689360772ace939ebdbf5c47132f7df607d9e24a267dVirustotal results 29.31%Heodo
2020-08-21INV_Y8GA4N69AS.docdoc 1fe0891c052882024b25b0fa7d4b15654e380ec923aa12943e177a3b076157fbVirustotal results 30.51%Heodo
2020-08-21N_MP090BXRQKY.docdoc 88d6e1ed15385f113c6a82c9d25f4d2e3a7534dc2a50b948bb34a19f1e9ca71aVirustotal results 28.81%Heodo
2020-08-21INV_12953676.docdoc 899de53046dee542652783aaddb111a9ca0eaa24c584ee2b5737b7f6fe3c8419Virustotal results 31.03%Heodo
2020-08-21INV_RF9679372678SB.docdoc 346bffecd143569cdd0fb796380eb297dbf4b03fbb9c68edf994501847763d20Virustotal results 31.03%Heodo
2020-08-21DOC_PO_08212020EX.docdoc 468a139ddc357c7f3d37c8013c190d7add2b9be072dc851cfa91e2b125718aa2Virustotal results 30.51%Heodo
2020-08-218646381172813258.docdoc b008c2a5a3f325892c0b9e4b83ede888637a59c8b5e320968165589ba583af7en/aHeodo
2020-08-21LDSUA275.docdoc 47f6342732efcd12286d1c14e1c445d607ea2b4f637b7dee23dac0db3edc2993Virustotal results 26.67%Heodo
2020-08-21M_18232909748063.docdoc 7a13dbbd4da1bec806c6eb1b585d5d1be3e682b691fed51ea02a818a10686100Virustotal results 29.51%Heodo
2020-08-21REP_90711682.docdoc 860c1beab2153836d0fc30dce5b6b48b4ba96f3690404c504ebb1283ef780302n/aHeodo
2020-08-21PZS_080120_SLK_082120.docdoc 4ab707775fa2390fd9243175abdd54e81f7bf91607d4d7fc5c97be1d43f8606bVirustotal results 31.03%Heodo
2020-08-21A_IG8029705925LA.docdoc 1d4d8969d69882c83a3c783bea8ab1443a88303f332c7bba708ee7b9d1b66b78n/aHeodo
2020-08-21INV_PO_08212020EX.docdoc bae16ea340cc512d6e1934d205bb3f0e34da81c10bbdf1a411b338c91f415c03n/aHeodo
2020-08-21PO_08212020EX.docdoc 1125770ca72ec38466e63abb84b14f1128a7b5fdee91ab098dd25c53230e1537Virustotal results 30.00%Heodo
2020-08-21W_EQZI52AMU.docdoc e9a0e6332b5faebefd8eaa44f82d2bbebeb7b2dea78ecb0b89761f9bd85b0d8aVirustotal results 28.81%Heodo
2020-08-21T7DYPC2MB2LPU6.docdoc cf949407cd2ac080beab74ad3f668e760f555bf85a0b919c14580aafb5c8651aVirustotal results 30.51%Heodo
2020-08-21VYG_080120_SVX_082120.docdoc 827b61d3f0f0d3d42ee69919ecdb9a190e3939c7d32cf425f7cf355276a3d2d4Virustotal results 30.51%Heodo
2020-08-21INV_ZY73SB4XAF9.docdoc 92212c2f3b4445e151bb54c869e7b1d8025339f89a49962048c61a425164a38fVirustotal results 30.00%Heodo
2020-08-21INV_7849802689954212512896.docdoc c78e1a46aaa668a1c315dfb0b147f7a8d1b34af64b8f3cb9c6621ac872d7a2afVirustotal results 30.51%Heodo
2020-08-21BAL_7849153717505.docdoc 31e1775c43a698b705e2a0e7b26e8b8942b04b51bb902f9008fc355c637c2c4bVirustotal results 31.67%Heodo
2020-08-21PO4870929720NX.docdoc 756a4d472796d23433de7126e62ce1e2db7fe58f109c96ed8539bb03e9032e90Virustotal results 28.33%Heodo
2020-08-20CRB_7DXNZIOC7F.docdoc 2a1df4345631fb171486a4030f429df645518685e10efd27e6c0844ef61640e2n/aHeodo
2020-08-20P_DI3704629402CS.docdoc 7a5a55b43ecfea50eeb9c49237690761f59724b78c13b3bac6c3daae988fb145Virustotal results 30.51%Heodo
2020-08-201CPMSFYP3MT.docdoc ea9a29f42ce90bd0cc4aa2b4758dc76ce4a5d639dcbe1ee8f4f0b61632793577Virustotal results 30.00%Heodo
2020-08-20INV_PO_08202020EX.docdoc 172af56801cf4f253a30974aeeddb1910408d1417b4d8bffbefe887436c3b633Virustotal results 27.12%Heodo
2020-08-20BAL_UF6970723631FZ.docdoc 4ede2184628e55fa1ea3685e13bbd786f208d794b3778b7c95fcb18765d8ab68n/aHeodo
2020-08-20DOC_OW6026071015MR.docdoc 60222c9a16cecc0e2cdbc84cf33986aa7663cbf80321a3106f4dc0b096529401n/aHeodo
2020-08-20M_PO_08202020EX.docdoc c57a4ab4e5c80b5cd6551c5927e4a052aca796d0dc0e9ee1f0e18308fca78605Virustotal results 23.33%Heodo
2020-08-209571719253143232757862.docdoc 18898d58822870334064b88a2224dc8d236210978f732a70cf80f3617e5a6445Virustotal results 23.73%Heodo
2020-08-20FILE_PO_08202020EX.docdoc 1c61a6fec7f540e75cf3ee83531b0da27e40c95f3aef4f8fc750c911d731c1can/aHeodo
2020-08-20DOC_W5G3OU0IVX.docdoc 444338ba6ceda41ab1c42d04fab8b73df29e5524c86e54bbf61f1d4f49d487bcVirustotal results 23.73%Heodo
2020-08-20BAL_518654924.docdoc dc62b29f01e0debdb807f4adaaa4c22ca3f21e5fd5a48e7b2cb6b994d76cb36aVirustotal results 23.33%Heodo
2020-08-20R_81893401.docdoc 62aaaf61f90d1c3f0c657fb7c0698dc7e72492a3e762c2161612a93b9ffe2aa1Virustotal results 23.73%Heodo
2020-08-20V_17880446.docdoc 601fd5470b6ef0aa11898d2c1d96a77bf1382dafeb3f1b7c2a3107dc61d426a2Virustotal results 23.33%Heodo
2020-08-20BAL_89055022.docdoc 3950245c4b02b5b36cad1f7785113bb4312d8afd9f6106882f29d16a80a6735bn/aHeodo
2020-08-20V_SG3555916824BJ.docdoc 3cf6636d1972930d486f669fc73492d137e9bbb470ea98c3466c14a582d3995bn/aHeodo
2020-08-20FILE_CFQ_080120_DXY_082020.docdoc 73bfcb9214b001594d3b0d3cc9c11c8ae9b0c2f57e4b75b8772cdad41a7e3c28n/aHeodo
2020-08-20INV_PO_08202020EX.docdoc 00cfa0d29018a083da02dd5f6e523ada069a14dca8be20142f8ffc7fd03b1fc1n/aHeodo
2020-08-20INV_PO_08202020EX.docdoc ab47a062dbbd97fae72fe297e5cffaea9d96c74395b5e6e3113c55364df5f6a1n/aHeodo
2020-08-20REP_PO_08202020EX.docdoc 6999b90afceb089b399c074269f52600ddb3d7aee434cfba9a1896c8213f4df1n/aHeodo
2020-08-20FILE_AI57LCV.docdoc 568471d2d31e15f9b46076ae0167cdda7da49957b7cb120d330a0e450bc2c7f3n/aHeodo
2020-08-20BAL_KCV_080120_TBZ_082020.docdoc 7d25d64f715231e2df3f268734ba75f0b09e05794c9ebba4faac4020c883d770n/aHeodo
2020-08-20AY5272560813HO.docdoc ca6afe2845c41dbaedd8343b40907afa196baf617a6dc67feed4b755b19e9f8en/aHeodo