URLhaus Database

You are currently viewing the URLhaus database entry for http://basinfarm.com/cgi-bin/browse/ure616200499xb8svja5e3i01ei7j/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:438227
URL: http://basinfarm.com/cgi-bin/browse/ure616200499xb8svja5e3i01ei7j/
URL Status:Offline
Host: basinfarm.com
Date added:2020-08-21 13:41:05 UTC
Last online:2020-09-08 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-21 13:42:05 UTC to abuse{at}macstadium[dot]com)
Takedown time:18 days, 3 hours, 23 minutes Bad (down since 2020-09-08 17:05:39 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-23BAL_YLO_080120_SUZ_082320.docdoc 493fbab43b8eaf0772394866842fa9474e8e54a84894498828af06590dff1cbdVirustotal results 59.65%Heodo
2020-08-22DOC_1341990519738526.docdoc 6bebf3800b86c6323ad76e0e16209f4061d763cfd67f4496b6fa9c2b62b52305Virustotal results 57.63%Heodo
2020-08-22A_AFW_080120_BKV_082220.docdoc b827ea89c0285f491b5d81e3db08938e1c2c1bca8c6187af15debc415b8ee65dVirustotal results 56.90%Heodo
2020-08-22DOC_DAZ_080120_WNO_082220.docdoc 04d877632142f79b8bad4d3e25dc07870f8c31c719b9214b22321b21566874ddVirustotal results 36.21%Heodo
2020-08-22DOC_PO_08222020EX.docdoc 7ea054ef114875e69c5527af740abca012c4db7feb7eabe49bbee4e43e1fdc61Virustotal results 32.76%Heodo
2020-08-21I_YSRB1OD.docdoc 845169ecadd97b50576fed0fca204646844a511794662c22fdce0cadc58219b4Virustotal results 32.76%Heodo
2020-08-21F_PO_08222020EX.docdoc f39cec9be2ea681537ade05559fbd0241bfb876a899f58fc71301e6c2b2ed9e6Virustotal results 36.21%Heodo
2020-08-21FILE_3061268025761695306370.docdoc 63e8e5f134319a61ee0ea021511f79a597ad651a1712ff703902454157100d1cn/aHeodo
2020-08-21FILE_HD2CYCG24FE.docdoc e0b9952435a1e6f33cea8d02f0c567833c748d540f40c5b57c4d056b8fe44c8en/aHeodo
2020-08-21INV_35063318.docdoc 656cc3eb3438badf2ad21a9aa6c6a7b35ef4279cc9469344dabb0878569757b3n/aHeodo
2020-08-21DOC_MC6940250102MD.docdoc 6323c7b4ec8783e51f631813adf56905ab2c875fd1c8f94f58f7b2f98ed037f7n/aHeodo
2020-08-21REP_HE0330518180VM.docdoc 860c5f447f202c55885fc12b01dae4464cb7a2813113a03099954d6e2487f437Virustotal results 32.14%Heodo
2020-08-21INV_67827654.docdoc 3acfeafec9971bb3056e5e40ceedc8fe643ef9ca1d6f640bf3788eefce20c035Virustotal results 33.90%Heodo
2020-08-21I_VRW_080120_WRM_082120.docdoc f81e4de8069e9551180db92af779f1c19f7bfef0dde8f9696ae0b242d3fb8f2dVirustotal results 25.86%Heodo
2020-08-21TMR_080120_IYZ_082120.docdoc 2104b3c3cb7575b93609857c99f026f4a8fe95e3e0099e0a2f6ef9eb26254b4en/aHeodo
2020-08-21BAL_013995242607423708460.docdoc 18c26df05964f6990d83c174e74bc5708cee7e1e1d0a27d8f556b06864340da3n/aHeodo