URLhaus Database

You are currently viewing the URLhaus database entry for http://microcomm-group.com/aspnet_client/attachments/closed_resource/OnCk9L_cu3mh4aj5f6_warehouse/hn0yre_78s0vztv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:438708
URL: http://microcomm-group.com/aspnet_client/attachments/closed_resource/OnCk9L_cu3mh4aj5f6_warehouse/hn0yre_78s0vztv/
URL Status:Offline
Host: microcomm-group.com
Date added:2020-08-21 21:21:14 UTC
Last online:2022-04-18 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-21 21:22:08 UTC to abuse{at}uk2group[dot]com)
Takedown time:1 year, 8 month, 4 days, 11 hours, 30 minutes Bad (down since 2022-04-18 08:52:45 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22Inf_20200823_7357.docdoc 341e9a1b4252cc46eaaf7518c4a09a3f4caea692bb29798760dbc23601731ca5Virustotal results 54.24%Heodo
2020-08-22FILE_2020_08_23_D713266.docdoc 8497faf7956deca580f40179c41fa928c0a810d44b9522acf54d00062baefad7Virustotal results 55.17%Heodo
2020-08-22Inf VJ880.docdoc 5dcffa82020a84b2d08003b7730cfcb8a550676a5757b048a44eba3db9b1c782n/aHeodo
2020-08-22dat-GX861302.docdoc fa51bf8fd1da8c767a9d37c044edfe2cddd9e3b49011babc5b9418d3ffd21fc1Virustotal results 52.63%Heodo
2020-08-22MES_2020_08_22_M997.docdoc ebab708f03ee6f65f5d74463903c11d08108d9b335a01b1c504fb44a337b7ef7n/aHeodo
2020-08-22DAT F96337.docdoc 241170b03a78352fc3be673f0edce2be2087a865f54e547cd65912e0c6b5f219n/aHeodo
2020-08-22rep_2020_08_22_VHI3535.docdoc 164465258e55e97d043ab6f880e55b5391c7e9797de4c30b19f1a4998277087aVirustotal results 50.85%Heodo
2020-08-22Doc_700.docdoc 5fa91070a3507710ecbe203e1124bfa581b74ecda84751a17795c86c8a890d46Virustotal results 51.72%Heodo
2020-08-22LIST-20200822-R88877.docdoc 0fb3f076a5760f5cd7f7e51347a38e02dfc8901bb5d01ff764a6fd2d6784cc7cVirustotal results 59.65%Heodo
2020-08-22dat_20200822_673.docdoc 3b87b742002b973d033d06a0392bcebfb3073fae103e48cc81f1d57b55e92525n/aHeodo
2020-08-22rep 20200822 RW37532.docdoc 2e4be71a90e92bfdb86d96135462904c2ee04e76d0262438bd5602b5ac0c417an/aHeodo
2020-08-22Inf-20200822-P85125.docdoc 2d37b5d896f89d65b52008ce0db99ea6b780989a36a29acd6e47cd10504ff507Virustotal results 50.91%Heodo
2020-08-22file-2020_08_22-H1747.docdoc 97fd4c5a3798765f362ebf591aa87772792782f5c76f675ba6da1af0225ceaa4Virustotal results 49.15%Heodo
2020-08-22Dat RB6883.docdoc 8a9d3660622cbdc54031e97a13d4ea638f5ba8db0e9eef1d84363d53e0618ae5Virustotal results 55.17%Heodo
2020-08-22inf MX8279.docdoc 1eab37042ccf24c1988ac1582cb8829751e1e4c1fa5c72ba5e984daa11869410Virustotal results 48.33%Heodo
2020-08-22Doc_551.docdoc 141ae7bd833a21adbe67d57ce9791cdd5ca210777ffa0df005892c94b01f78aeVirustotal results 57.89%Heodo
2020-08-22MES-JPL5573.docdoc 558ef83ed5a5b4eb0578baea821632acc65eaa9bb6e3f5dab4d437aa52bdee13n/aHeodo
2020-08-22inf-2020_08_22-SFD3269.docdoc c101788996fd465167fb930e0ee443ba396607808c74fa8ded82e0bcfa9f7f64n/aHeodo
2020-08-22list_20200822_AQ6027.docdoc 92e5e1a51ddd03e23c7c26053d435dae5ad6603e18a54d2926e943f5380ad077Virustotal results 36.21%Heodo
2020-08-22Doc-2020_08_22.docdoc 46821d694a7c94efbd9aa8cf863377946de88c036c813decd85ed3cd8bfb6cdeVirustotal results 34.48%Heodo
2020-08-22list 81120.docdoc 4cd4ea7314c2268401c1395af0e562dcb530b081eb42c55152e03990a62bc4eaVirustotal results 34.48%Heodo
2020-08-22Mes_R86349.docdoc 037b8124330acc05c14aeec4da5dd741dfc43260dbd62df806d84fb370ed3416Virustotal results 38.98%Heodo
2020-08-22LIST_20200822_66569.docdoc 90e7e0a921f7805d5392b6725349de6ed30c7a234187790c6579d8cc240ebce2Virustotal results 34.48%Heodo
2020-08-22FILE.docdoc 9171991027c772e7f4a0461492ca9a074c828f0647d3fb993b0b370dd233fd2fVirustotal results 40.00%Heodo
2020-08-22Inf FF873466.docdoc bf613424225d5260ce91473ce6ebfe8adceb0588ea8fd5bb613437a9ce55f5cbVirustotal results 34.48%Heodo
2020-08-22MES-2020_08_22-1782318.docdoc 9c6e241a9a90edac415dda654252a69fb56e32a5f9894dc1e0e44f8d02e56d2aVirustotal results 37.93%Heodo
2020-08-22ARC 9379.docdoc e57d599086e79ba7f1f77e0a2feed6facfad3c7b3d142c75c2608906fdc6656cVirustotal results 33.90%Heodo
2020-08-22arc_20200822_X9732.docdoc 48a7604dcb51f7fc9e0bc37a40f2c7dcde23bbbacf719ae5494c9ed2c795a27aVirustotal results 39.66%Heodo
2020-08-22Arc_ETO61965.docdoc 17d1a183b329a542e212c99216bfbc17c5abd835093634f262e79e38dbb61be8Virustotal results 35.00%Heodo
2020-08-21arc_N732130.docdoc f3910c447952615a78e47e19bb4d3f313f015a74e603c83b15fbe812d5437d4cVirustotal results 34.48%Heodo
2020-08-21rep_359525.docdoc 44be463c465e4e229df4dcea734d505a424cb65601ccdcd1348117882ad9038cn/aHeodo
2020-08-21dat 2020_08_22 P9830.docdoc e2e7f4b11f11f2af066278c55e5cca8fb8e9e9c9f3bcebea7b72b4c6e938cf4dn/aHeodo
2020-08-21doc 2020_08_22 V72251.docdoc bf674967afe4c840338de636d94e0808463b9786fdcb2161515d63e333f4bf56n/aHeodo
2020-08-21Dat_20200822.docdoc e41c9acb24c7dbffbe881b62867bf6c7e1ee5c151509f7fa14b4004d0db184aan/aHeodo
2020-08-21File ZRJ7624.docdoc 410274b2ca31ea3142f4fb91817422ccc1ca62617732458298145fae6d740559Virustotal results 35.09%Heodo
2020-08-21INF-20200822-72624.docdoc a8c50cfa1146130af0f5fb5225f6ee606553cd2e869a7b0d4f3523bf464fd3acVirustotal results 34.48%Heodo
2020-08-21inf_DZJ3730.docdoc 605a94a5d882c71dfe00f46a2f2206f95436ec9be3be78d13a2828dcd55a3935Virustotal results 35.59%Heodo
2020-08-21arc_20200822_LWP994.docdoc 9e69975dc06b14ef59f0b2b3c90ea60751f1b5a352c10e97eaf03c7cfbe7265an/aHeodo
2020-08-21mes_20200822.docdoc 2f21aa81b394e0b43e1f6a75e671ac3df68135f44ba1ed1c982a65cb2d8bee9fn/aHeodo
2020-08-21Inf-X51981.docdoc eb03beecb5dbcd12f2191ec6980a4b9abb56b43907f1bff900378a80daa3699an/aHeodo