URLhaus Database

You are currently viewing the URLhaus database entry for http://medhillbiomed.com/gtloh/Scan/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:437153
URL: http://medhillbiomed.com/gtloh/Scan/
URL Status:Offline
Host: medhillbiomed.com
Date added:2020-08-20 09:23:06 UTC
Last online:2020-08-29 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-20 09:24:05 UTC to abuse{at}alchemy[dot]net,dnsadmin{at}alchemy[dot]net,support{at}vitalix[dot]net)
Takedown time:8 days, 22 hours, 6 minutes Bad (down since 2020-08-29 07:30:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22INV_63119140299770.docdoc 2352834aada622f4460b9dd3393af149de11975edbdb35d4c20f4917959a8526Virustotal results 37.93%Heodo
2020-08-22SG1420224039FP.docdoc 821e25913d73972a01a1db32a8504153128d8b4856fb812dd3ede84e3afc18f6Virustotal results 36.21%Heodo
2020-08-22I_F8VAT0PLN2FV7NS1.docdoc 6a9cb9033ebcf0e513947cface83d763d935d1fe8fe4b8a3ed36acdd88d92371Virustotal results 33.90%Heodo
2020-08-22A_80143573.docdoc 0a190f7914f6ab083b1a9f35ca711813e261bcedc4be7c11cdee294e1bea4928Virustotal results 33.90%Heodo
2020-08-22JY2213749581FH.docdoc 185629559fc8144ebc604bdb282f488286168205d6797eebb448ee7440c20edeVirustotal results 30.91%Heodo
2020-08-22BAL_XFO_080120_BXV_082220.docdoc 02673d69c148c0f8b3a70c07d8ab42ef299cffc98186d037c1eba5949eded2b4Virustotal results 32.73%Heodo
2020-08-22INV_439204600045005932044.docdoc c05a2bc6afd461c389a8ede4045dfe692b0ec6338cd6d470bea60d827dd0a37eVirustotal results 32.14%Heodo
2020-08-22PO_08222020EX.docdoc 024a28141371c4ce50a1e6c618487c96a072f85c27e5af508ccc51b9d28b0e19Virustotal results 33.90%Heodo
2020-08-22PO_08222020EX.docdoc 0d291495ce695d2c9c13a944dc9a2ef5024668989e0299524e6dafde988b17a1Virustotal results 38.60%Heodo
2020-08-22INV_VF6B6MFF8QU.docdoc bfaa7a97f38b934f3f5163c647071f7e50db79d8ec83b165cd7cc5b8da521d73Virustotal results 32.76%Heodo
2020-08-22PO_08222020EX.docdoc e1d65c4d8d7563078c1cdb7f6005516783ff001ca07a1d53e8d688dff3a2f1f4Virustotal results 32.76%Heodo
2020-08-22Z_04631952.docdoc 7e242ed185df087164cd0a9a255db1edda86efcba206b8e7464695f2d892fec4Virustotal results 34.48%Heodo
2020-08-22BAL_24027477.docdoc d818f0d1f4c2dedae9fcd5152cb3a98a58e46528bdbf5decf83285dab11d4454Virustotal results 36.21%Heodo
2020-08-22BAL_GE3172590103PX.docdoc f91300fa52a19f297115dd8c84a2b9f1083fe608123fe8dd26d1e391f13b29d7Virustotal results 35.09%Heodo
2020-08-22DOC_BWZUQIPKZKX9.docdoc 7cc0c880d55c37aa23a77e2002e19f7b8187f065384cb3ed03d43ec181cbe496Virustotal results 33.33%Heodo
2020-08-22TKSRGPH6UXAY883.docdoc 9b346908d565318e24361470532b2b73c7b6ac6350e49f38098b7b37f521168fVirustotal results 32.76%Heodo
2020-08-22BAL_X1ODIGGDS84EO.docdoc 94904301a0794ca20357c8ba3c059df10179b43afe4828ac94683dfca014d6f7Virustotal results 32.20%Heodo
2020-08-22REP_37881630.docdoc bb0c5d0c4e2a4b8b8ab614226ec5a46e7b8d257072305d5ad98dacb489b852c1Virustotal results 40.35%Heodo
2020-08-22X_302067699590349754.docdoc 0759e5c471a2092742d96de880d1e5b939fa7fc1bbd839fc5a6f40c79067c24cVirustotal results 32.76%Heodo
2020-08-22REP_TAH_080120_HXV_082220.docdoc e58f047fe04cae788a4aecc9507bf22d1c090e44f2181a4d57f2d7c5d7535f75Virustotal results 32.76%Heodo
2020-08-21YVO_080120_DYG_082220.docdoc a6679eb46ce9ffb28041319f4f1f5d9ec789b87a8ee7d4e8a35d1971f7d02e58Virustotal results 32.14%Heodo
2020-08-2199706397.docdoc a94bfdde9ea088c41de28d3442c32ab32bc1fedeca96db46e004671e01f80e21n/aHeodo
2020-08-21FILE_KSLCKN711.docdoc e13da1516e2f63a731df6ef27cf254ffe39dfebf1dfdb23489fe0d0e15376e01n/aHeodo
2020-08-21DC2326714877FN.docdoc 89415d58550d6a2793ed4804dc7752b3eb54a8e12ab8c02556131b5f4b0d8decVirustotal results 32.76%Heodo
2020-08-21GWQ_080120_DVF_082220.docdoc 4bfdbdebb1f582e2fb034a60c4b82004b6ea2db5c8d312d5e384133dd634c5b2n/aHeodo
2020-08-21DOC_CRV_080120_PLM_082220.docdoc 36b36ee08213e9dd9f760f39fb9a84c9504c19f801ef2114f8350f3082dce9bcn/aHeodo
2020-08-21FILE_09834026.docdoc e0b9952435a1e6f33cea8d02f0c567833c748d540f40c5b57c4d056b8fe44c8eVirustotal results 34.48%Heodo
2020-08-21BAL_72735405543599435.docdoc 678ffcb73c659ab91d6358a0d28ccd8b3c88c6d6b85d0a3d17dfea553fb291fbn/aHeodo
2020-08-21INV_JV2194017101WS.docdoc 6323c7b4ec8783e51f631813adf56905ab2c875fd1c8f94f58f7b2f98ed037f7n/aHeodo
2020-08-21FV7992291158QR.docdoc 17c529f8042665bc986093547d9f8281d9684aae9d35e8774f30bee09148b53fVirustotal results 33.33%Heodo
2020-08-21DOC_XWW_080120_EUS_082120.docdoc c23c13d2d134c96634d942166257baa97b35c635a000d8bc2f654fdbd6a86e4an/aHeodo
2020-08-21N_PO_08212020EX.docdoc e3a1db9625e95bab4a009a18804f0e89bb1233d33af7e255b6e304a51b582450Virustotal results 25.86%Heodo
2020-08-2112611458.docdoc c344af97c40ba39fe3b63c36dffa41cc3d2d51a8443aa1e04d06d55f219b5e89Virustotal results 22.81%Heodo
2020-08-21REP_Y6LNI2WROGSLTC0.docdoc d2cd48c6074a7d0dcefae5ec30446a8e81f200e72744991eca77c9e2f9abaecbVirustotal results 28.07%Heodo
2020-08-21ZKO_080120_GHJ_082120.docdoc 52f93265171c4daa8a38ef46773660e8b83d21d2a1bd660a0e52efb67cde6ebeVirustotal results 22.41%Heodo
2020-08-21K_89688458.docdoc 01298d83e8f16304e95326dc2aaeba75fb90913b8e359ba16ffa314513f6ef63n/aHeodo
2020-08-21DOC_DPT_080120_ROJ_082120.docdoc a733a4e6024de8fb8639c32f10763eb1350346440beca5654a2d0dcb93ad94f0Virustotal results 22.03%Heodo
2020-08-2167602835782759376.docdoc 92ce63816306ff769b615c927a2677d7a4d1eecdbe7e6bc825ce4a446df1bc7eVirustotal results 22.03%Heodo
2020-08-21O_UNL8W2T49WDYGM.docdoc 8fa0e96a0c451ca7a5a9d19938ab3182c69947198fd5a28f6af95356729a1480Virustotal results 22.41%Heodo
2020-08-21FILE_PO_08212020EX.docdoc d88027c8f802a9c670d326835d3153aadf2dd191cf9bf60148bc6532b6614402Virustotal results 21.05%Heodo
2020-08-2150484624.docdoc 8a887dca0fea26577923cdf9c4985eac7870541eacebc98ac38b51a4bda04ab7n/aHeodo
2020-08-21DOC_PO_08212020EX.docdoc 5f663d1e8899dd1bf8794a251e7acd014dbe349b71e9d4cbb592a9ad3d4d155aVirustotal results 21.05%Heodo
2020-08-21REP_DQH_080120_UWH_082120.docdoc 7e14cb336280cddeab32d3133ceec407982c1c7bf659dca411970cb837c6ce63Virustotal results 19.30%Heodo
2020-08-21REP_WH9384724238WL.docdoc eea83be73bb6b63138b070ecbc75bc0af0a8f6540fb9125735eda75701adc2b5Virustotal results 20.69%Heodo
2020-08-21REP_35094020.docdoc 9bef601df3e482ea5b723a710c2086bab43312b7c275da979b1765cb7660f060n/aHeodo
2020-08-2190901642.docdoc a99bc78979b657a1d16c9c3cb64ddfbd2d0317097210ad0dd85088b7a6c1b3ceVirustotal results 31.03%Heodo
2020-08-21REP_PO_08212020EX.docdoc bf9fe3f7b66ae5baa3877c2da0edf95f1434298010128ce61c76f6bb6c4c46e0Virustotal results 29.31%Heodo
2020-08-211981182442.docdoc f4cf506743474d0a3cd6642db40bb54301ec4a84e38d41782b1199600b16df5dn/aHeodo
2020-08-21RG6499451524QG.docdoc b3bab296d26d412d3adaa195a93ca6ff44a5b6bc5e16f130e2386928d12f0570Virustotal results 30.51%Heodo
2020-08-2123083337767.docdoc fd2732589c07dc97af78689360772ace939ebdbf5c47132f7df607d9e24a267dVirustotal results 29.31%Heodo
2020-08-21WC8761HRCE2OAYTP.docdoc 1fe0891c052882024b25b0fa7d4b15654e380ec923aa12943e177a3b076157fbVirustotal results 30.51%Heodo
2020-08-21KSG3XHAI.docdoc af3988b7856704b5467030ee792d90beff86f1f453c3280c8d0f822b2dc9898fn/aHeodo
2020-08-21PO_08212020EX.docdoc 29489d8ec25a46a76a0bb977cba3d4260eef3e2520e1b060a323df2c5f8cd8fbn/aHeodo
2020-08-21TP1700176673GI.docdoc 346bffecd143569cdd0fb796380eb297dbf4b03fbb9c68edf994501847763d20Virustotal results 31.03%Heodo
2020-08-21GO_JY6468137192CO.docdoc 468a139ddc357c7f3d37c8013c190d7add2b9be072dc851cfa91e2b125718aa2n/aHeodo
2020-08-21REP_39647013162456718739.docdoc 7112a5a9264a099d9056f3d980c95fead062c56ea04362528c505bcc6ddd2b1dn/aHeodo
2020-08-21REP_66920680.docdoc 913271f10fdbf26cf67c0c6b3b0f0f501848bf25f539c04feb5553f95307bd95n/aHeodo
2020-08-21DOC_684629942757926962578903.docdoc 7a13dbbd4da1bec806c6eb1b585d5d1be3e682b691fed51ea02a818a10686100Virustotal results 29.51%Heodo
2020-08-2106089656.docdoc 860c1beab2153836d0fc30dce5b6b48b4ba96f3690404c504ebb1283ef780302n/aHeodo
2020-08-21BAL_MHQ_080120_JPH_082120.docdoc 4ab707775fa2390fd9243175abdd54e81f7bf91607d4d7fc5c97be1d43f8606bVirustotal results 31.03%Heodo
2020-08-21REP_1K8IS8DBLJ7S0YQV.docdoc 24fd38bc7a9fc81d9db5634f8d3c76f68707dd688bd30ade28d86def52b8aa8bn/aHeodo
2020-08-21MNQ_23403113.docdoc bae16ea340cc512d6e1934d205bb3f0e34da81c10bbdf1a411b338c91f415c03n/aHeodo
2020-08-21PXRZ_PO_08212020EX.docdoc 543d4653e727a81a043520535ab31b14ebeb76e76c4e033e3c76a95c02f17398n/aHeodo
2020-08-21PC8924757653GZ.docdoc 0a10c7547caff2ef72359bb8941e5b1d66920f7ecefd54c795b7d18c1474ab9dn/aHeodo
2020-08-21INV_EVRAG9IAJR841TZ.docdoc cf949407cd2ac080beab74ad3f668e760f555bf85a0b919c14580aafb5c8651aVirustotal results 30.51%Heodo
2020-08-21PO_08212020EX.docdoc 827b61d3f0f0d3d42ee69919ecdb9a190e3939c7d32cf425f7cf355276a3d2d4Virustotal results 30.51%Heodo
2020-08-21CRD_080120_OUM_082120.docdoc 3c86a0b190ac5ab87b216155e1a11d7a756739986e3545d994fce52d209cd64cn/aHeodo
2020-08-21T_IQ7749018148RM.docdoc c78e1a46aaa668a1c315dfb0b147f7a8d1b34af64b8f3cb9c6621ac872d7a2afVirustotal results 30.51%Heodo
2020-08-21DOC_AS9SABLGFVF76.docdoc 7523d22aeb84f9371a23ac8932c4316ea64ba34548df83083e4110ab90ce9cabn/aHeodo
2020-08-21REP_32873986.docdoc 87fa434c22634148cd773528a464946457014d363c09cfe28a9a28b69f14f136n/aHeodo
2020-08-20K_TJX_080120_UIX_082120.docdoc db5d466d972210f819496f74e47cc8db88a065acde70d9d2ac61221eb8746003n/aHeodo
2020-08-20YULZ5FQFJLPQ.docdoc 7a5a55b43ecfea50eeb9c49237690761f59724b78c13b3bac6c3daae988fb145Virustotal results 30.51%Heodo
2020-08-20FILE_PO_08212020EX.docdoc ea9a29f42ce90bd0cc4aa2b4758dc76ce4a5d639dcbe1ee8f4f0b61632793577Virustotal results 30.00%Heodo
2020-08-20BAL_3374695095799070.docdoc 172af56801cf4f253a30974aeeddb1910408d1417b4d8bffbefe887436c3b633Virustotal results 27.12%Heodo
2020-08-20R_PO_08202020EX.docdoc 4ede2184628e55fa1ea3685e13bbd786f208d794b3778b7c95fcb18765d8ab68n/aHeodo
2020-08-20BAL_PO_08202020EX.docdoc 2c2e43bed567dfdcb8e47998142d228368293bfb77e444e994d7bca8e706bf8fVirustotal results 23.33%Heodo
2020-08-2012119129.docdoc 63e9feccbce48a28a57ea982881e70ad82acb00c62783da34b12563033dea4aaVirustotal results 23.33%Heodo
2020-08-20PO_08202020EX.docdoc 18898d58822870334064b88a2224dc8d236210978f732a70cf80f3617e5a6445Virustotal results 23.73%Heodo
2020-08-20PO_08202020EX.docdoc 1c61a6fec7f540e75cf3ee83531b0da27e40c95f3aef4f8fc750c911d731c1can/aHeodo
2020-08-20591757198623496006545.docdoc 444338ba6ceda41ab1c42d04fab8b73df29e5524c86e54bbf61f1d4f49d487bcVirustotal results 23.73%Heodo
2020-08-20PO_08202020EX.docdoc dc62b29f01e0debdb807f4adaaa4c22ca3f21e5fd5a48e7b2cb6b994d76cb36aVirustotal results 23.33%Heodo
2020-08-20BAL_PO_08202020EX.docdoc f2c11a8f3f6306050420e37c8c1c24cfde3ca7e03cb703761581c1e5f6f75757n/aHeodo
2020-08-20YQFX_15624187.docdoc 601fd5470b6ef0aa11898d2c1d96a77bf1382dafeb3f1b7c2a3107dc61d426a2Virustotal results 23.33%Heodo
2020-08-20DOC_H1G1MH4KHGM0P.docdoc 3950245c4b02b5b36cad1f7785113bb4312d8afd9f6106882f29d16a80a6735bn/aHeodo
2020-08-20PO_08202020EX.docdoc 66adaecff904f859044c0d2aacc5bf77afc7928a3827c0e75dda7e79c0c29601Virustotal results 22.03%Heodo
2020-08-20REP_986020358350.docdoc 093c4c10f1ad0e417b62968802b3cf0b3e4b43b59ff54f6c894a005b3de57b54n/aHeodo
2020-08-20KD2BXMF.docdoc 004df4af1179c95b943b776e868fe3f553dc136e2586a75fcbb13bf6c000f569Virustotal results 20.34%Heodo
2020-08-20DOC_24426620.docdoc 1ec4fbe7672e49a2c4d311f2abb491d07517aa98db9ade8f346fefdc6cad7469Virustotal results 20.00%Heodo
2020-08-20INV_4731105820544296.docdoc 6999b90afceb089b399c074269f52600ddb3d7aee434cfba9a1896c8213f4df1n/aHeodo
2020-08-20BAL_L187MJEA55E.docdoc 568471d2d31e15f9b46076ae0167cdda7da49957b7cb120d330a0e450bc2c7f3n/aHeodo
2020-08-20DOC_98027626.docdoc 9b8093f8e43a21459619460b9e991aa75ce552e9671b0d1b47ac7b3c638c8fafn/aHeodo
2020-08-20NHBL_33199378.docdoc 4d13cf551fbf104910af75a1ae936d4ed00322e44d742c32270a1fbbd5af041aVirustotal results 20.00%Heodo