URLhaus Database

You are currently viewing the URLhaus database entry for http://thelavanyabanquet.com/cgi-bin/public/b7qh430665o584cfwz6ysmk7hf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:440816
URL: http://thelavanyabanquet.com/cgi-bin/public/b7qh430665o584cfwz6ysmk7hf/
URL Status:Offline
Host: thelavanyabanquet.com
Date added:2020-08-25 08:38:09 UTC
Last online:2020-10-10 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002891033 created on 2020-08-25 08:40:05 UTC)
Takedown time:1 month, 15 days, 21 hours, 45 minutes Bad (down since 2020-10-10 06:25:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-06C_770315712089026071555.docdoc 149abd71b790282bbb726d12e20bad6cf1a2352df5f0bd4a827a3085fab1a6d7n/a Heodo
2020-10-01C_770315712089026071555.docdoc 4804a67e3c57f968263f9d720a45369723c1b875177896e96cabdb603ed95f76n/a Heodo
2020-09-28C_770315712089026071555.docdoc d452eddbe38e499e4d8963acecbcf2ea9cb66577201ff37081f783a79ac6deben/a Heodo
2020-09-15C_770315712089026071555.docdoc 4513f7d1430bb9b12264a00c05b6dda45ebb80733903962435ccb4f843345640n/a Heodo
2020-09-14C_770315712089026071555.docdoc 9846dcdf0af93e05595bac0e762541436274f74cdb92a69419f05b5492302fcbn/a Heodo
2020-09-14C_770315712089026071555.docdoc 720b23c9995ca274571c5f780e5cb47d11bff48b5eed098c897d8ac1cfe06907n/a Heodo
2020-09-09C_770315712089026071555.docdoc 22c39d49ec024cc014559db072f2e91450b9c108c7337a4acddda9907df6f7b8n/a Heodo
2020-09-09C_770315712089026071555.docdoc 23e44a031e3c4a106248e4714664cf03cec8397bcbb8268b0273eb2fa1931040n/a Heodo
2020-09-05C_770315712089026071555.docdoc 19514616f8d0a94e65f46c9106325d515df6f34424bb168e28188f14aeb9c3b5n/a Heodo
2020-09-04C_770315712089026071555.docdoc ab5866aac0727cece09c9728e370a66c1777f412a2e07eda158bd11fe5f402efn/a Heodo
2020-09-03C_770315712089026071555.docdoc 64bdbbd9f183a79ad4064192b889a2ca15baabc09e2ef6e3143132a46a72e87bn/a Heodo
2020-09-03C_770315712089026071555.docdoc 4ed6ca55078f00ad8de69e29a8febc92506e49a9e062c41b1f31a32cccacd124n/a Heodo
2020-08-27C_770315712089026071555.docdoc b08d1b916d15ac5bf1d1c22d10c91dab42aa65bdc7d422c115549f18e598beedVirustotal results 29.31%Heodo
2020-08-27AX04QMM.docdoc 76284ef9f8b5f77bee2c0d61afec2c579cf2dbdf906bc5a961f94c298bb94e98Virustotal results 29.82%Heodo
2020-08-27HB7342522882OQ.docdoc d23f34d11bb21115f15188e114d069117f4d7590fbf3b342fe12b3d5241dd858Virustotal results 28.81%Heodo
2020-08-27INV_3QJ1WUI.docdoc 4b21ed50ed79a420217fa1a72731b1a30d251a06141cd56f00a0fdd17ee11493Virustotal results 29.82%Heodo
2020-08-27DOC_RKL5I99AEME.docdoc 77823f121fe25decfc185abf589256c90a5c98daa17c8e6a6e2acc192bb84522Virustotal results 29.31%Heodo
2020-08-27REP_UX4290392750MU.docdoc e5ac4430e125c58dbaee260b492acbb809351f6db1c0b291f9930f318ef19af1Virustotal results 27.12%Heodo
2020-08-27O_LV3MYWBPDE228VX8.docdoc b13b6fb044972063fee5a633ab2c88e75a1e7201427b25f21be5ba73dbac82afVirustotal results 55.00%Heodo
2020-08-27DOC_M2OZO3CROY.docdoc 91a308c86bae5259dbb93a07177c2302aec9aa1d99efb3aebcf38eeec736806eVirustotal results 54.24%Heodo
2020-08-27BAL_65321157.docdoc ead400e79e4d530060faf2e4099b9bb33a0c1d25ee13a07f30e0506fc331d88cVirustotal results 30.51%Heodo
2020-08-27BAL_JZ1308083636GZ.docdoc 39af19338e24f5fcea02d5777af1f45eef1669e7834311632f223524b7e773c4Virustotal results 55.00%Heodo
2020-08-27077197931918878999180.docdoc 4a883ec03aa2a167f2ebe1778ce38fda19b778b00286254daf1de8d39a6d1944Virustotal results 56.90%Heodo
2020-08-27Q_MMW_080120_KHN_082720.docdoc eff311d3b50ec2d22d39013b7c24123c3720782dd02375e8c95f5b873c78c71bVirustotal results 31.03%Heodo
2020-08-27INV_IV1CHII6AW.docdoc 16d6be55ee176b177950348259b45429b0337137e64ff4f1584f44e6efa449b0Virustotal results 31.58%Heodo
2020-08-27FILE_OV7515891755TP.docdoc 85b485deac6e4384f0d876ed4f8dd15536249715d5207558a33ab603be4f517dVirustotal results 31.03%Heodo
2020-08-27W_01064631.docdoc ef416af10e5118129a871fbf94df4162f6dc2ae1cd5966e94b74058f8298197fVirustotal results 32.20%Heodo
2020-08-27INV_021242663.docdoc 8d55499216baf8d4336c908f7cfe243e51a6da3542a26504de0c18c18febbfbbVirustotal results 32.14%Heodo
2020-08-273GKNJEZV8I2X.docdoc 46ad3ffd2f18db73936b38d5e36b53663025ded5a415cc6154ce37e6639ad546Virustotal results 32.20%Heodo
2020-08-27DOC_ZJ5255337683FN.docdoc c2da9f1e760b2054a7244c442736269184220a1e7639e186f9eb4022ed7dba3dVirustotal results 30.51%Heodo
2020-08-27T_015013016450928129755571.docdoc 7e6ae0bfbd08090276dc8821dbac500fae364dab68dad84b1fc2c4d971080dccVirustotal results 31.58%Heodo
2020-08-27REP_PO_08272020EX.docdoc cd0f5f2cc1f1f1bc7dc7bb9fe38aed374ad228315804fa2a759639ab42a35d89Virustotal results 32.76%Heodo
2020-08-27REP_PO_08272020EX.docdoc d8b2892cb235a6a574651012133c78ab0928fdd3ce752cc0699681a373778c04Virustotal results 28.33%Heodo
2020-08-26XE7193594625IJ.docdoc c6a7218b99d6b469dbf16cb0f8940f14f89fbffa20a77c257783833f4d30cd43Virustotal results 30.51%Heodo
2020-08-26UJA_7DT0820IKJ.docdoc 969ce710e1eab7279ae63b1556e1913a3db4dddefddc28803789fdb9b880e1c7Virustotal results 30.51%Heodo
2020-08-26INV_TU2518436354TU.docdoc c1010a64991ed1fa9519bd2ff0ee0abc2b87853d34efd4a6c2e3f6a7b4fbaa75Virustotal results 28.81%Heodo
2020-08-26DOC_CPX_080120_RND_082720.docdoc 5651215bf90d3d27bf652a23f6f4ab03e32a080fba71d964022a87038fa6f1b0n/aHeodo
2020-08-26DZZ_080120_EXJ_082720.docdoc 48d23f9dd578db5e9182540eb52090352d60ee4c49698de167f1273e4e22e449Virustotal results 30.51%Heodo
2020-08-26013405349.docdoc 4e48203902e2971b1f0046c8b0e664760e818aad6c055903981a67549c91eab6Virustotal results 32.20%Heodo
2020-08-26FILE_MVQ_080120_QTL_082620.docdoc d30dd5e885a79fb037d8a45fbc54cdfc8a4d0186cdb5f1cad6e3554458a5c69aVirustotal results 30.51%Heodo
2020-08-26QQ4756834037GH.docdoc 874b498a569260ed044256f13bd87d1a3697f02a17a364d2d61ba9005e12cd25Virustotal results 28.81%Heodo
2020-08-26BAL_0039645209016334720.docdoc 7fe66f85659a10160846a834f8b4befde4e554e2c6e6586097218eed58c96790n/aHeodo
2020-08-26FILE_AU4625191720VC.docdoc adcff3f1b60e737879478f5ffe1450906166be8f4b197343ea2684bcb11d1f1bVirustotal results 30.51%Heodo
2020-08-26JKAV_1IIY8TB.docdoc d9d8d7e4e5f7fa56ad36e21ff3874101b96e601a79397a7aeff7918cd9d0ec80Virustotal results 28.33%Heodo
2020-08-26MWW_080120_SLQ_082620.docdoc 39fffa400541356137e91075849e49947cd4864baeeacbc328e6aa73f52ef4fcVirustotal results 33.33%Heodo
2020-08-26INV_NLQ_080120_VCJ_082620.docdoc 71a9af3c869b41333224d9d53eae47aba49f7c8512250f3286ef22680bf6ef9dn/aHeodo
2020-08-26DOC_58691516385421235835.docdoc a3a78a6e05b43cb54a8442d9d2ad271d3a5434a7ba034ddb9fee6cb20ab10a7fVirustotal results 33.33%Heodo
2020-08-26TBZ_080120_DEP_082620.docdoc dd471711916613ac1e38ee1a757f5b743a522d49535d62096de0d3f248c5465eVirustotal results 31.03%Heodo
2020-08-26REP_SM79Y8CDOE5PJ.docdoc cc40e627bf4ec25eadb39fe8f637b55c950280c0f5329b0b189a35ede2339cd7Virustotal results 32.20%Heodo
2020-08-26REP_APD_080120_KVQ_082620.docdoc 6172691b40af326e4401a41208b54f047786ccc000cabda70b3afc6a0d434278n/aHeodo
2020-08-26B_MMF_080120_NZU_082620.docdoc c93985113b7ab940892fe866cfb3b38cc34ddb4f2487ea543567364b8cf5711eVirustotal results 30.51%Heodo
2020-08-26DOC_081557870391678633664.docdoc 14d43c503a1c9c5f61bcfd706d421ffca90c3f85c85dd05adc435c623d8fb46fVirustotal results 29.31%Heodo
2020-08-26DOC_PO_08262020EX.docdoc a40b452daaaef1e757d3c55171fdbefcbfaa8342757d2037b3eb3e451f292008n/aHeodo
2020-08-26BAL_49875553.docdoc a356e5e255cba02c8e3e973edcf986a20bff8764ba83a2bb53b55dba03d5529cVirustotal results 26.67%Heodo
2020-08-2686061767.docdoc c19d34674361bf3327dbf38e59b15eb11950852d492580c1cb9e838a877c8702Virustotal results 29.31%Heodo
2020-08-26I_PO_08262020EX.docdoc 1c78723c1b5b80a28a823310405f7bda1bb07ed0c94d433eaf5581c4409f8199Virustotal results 28.81%Heodo
2020-08-26I_5XDOQMT94PWX.docdoc 43b33fc5852e71888cd1482bebdb418167ded93b6c98c1c46892a0559ad53345Virustotal results 26.67%Heodo
2020-08-26REP_10591688.docdoc 673dfbd1e8a6cae6500c6bc52686bc69101e89a34d4f579b1f3b5a45174ef250n/aHeodo
2020-08-264426341819277464538205.docdoc fc8d4d45930f6975b843b9efc608897012e01b772d88025fc4d2762e24802adbVirustotal results 27.12%Heodo
2020-08-26INV_VIX_080120_UKI_082620.docdoc c2e51843833af341e0041af71442fb6dfb6991c35fb6a54ad3e2e23fbd3d691dVirustotal results 27.59%Heodo
2020-08-26FILE_PO_08262020EX.docdoc 0c96443c933d94eb5dd8cc1af29600409b0fa6cbb09308d6a633c3b8d1b0b466Virustotal results 24.56%Heodo
2020-08-26MTH_080120_NRI_082620.docdoc 406a71da2ba7ca86c6b8f287878515470f549d94bff8732fb1f17e6ad5c12a36Virustotal results 23.73%Heodo
2020-08-26DOC_161072689947258764.docdoc a1b37527202d95f794add7eefe6cdd747cb51e22ffe2d301dce761e7f27be7a4Virustotal results 25.42%Heodo
2020-08-26REP_RLU_080120_YJJ_082620.docdoc 403e535bda588ec80344c0372c10b247150f9d19c55ae04dd57b69ca7c5b1f7aVirustotal results 25.00%Heodo
2020-08-26BAL_79BNN4FEY8X0Y.docdoc 300cf0fd3de72ba9c28fc5428b8fac05aa455c7d7ffffbf3ae72db863f7fec1eVirustotal results 29.82%Heodo
2020-08-26P_SQA_080120_UEK_082620.docdoc 40387fe6e6a66244dfe24e5e9f6f88ca7111c0331b4239de96114a8d3b9b2b63Virustotal results 28.81%Heodo
2020-08-26MQN_AWS_080120_BKC_082620.docdoc a4b0033aace38e2c6d2dfadfe6776527459551c761c232558d3c573220f5c15fn/aHeodo
2020-08-26D_PO_08262020EX.docdoc 4014edeacef628a8e6b950feaa547a482a43162461571eb152266564c38c619dVirustotal results 29.82%Heodo
2020-08-257382541962881635086057.docdoc 8fca1b7834abd4c497c08643e11210ec88d3dc33c3d75a94f72f2039b584bf94n/aHeodo
2020-08-25INV_507654204148904.docdoc 966e05abf8db8638c7e4ca88db7b7943092c05b18f44597801128b6f7ba41254Virustotal results 29.31% Heodo
2020-08-25INV_ENP_080120_OJX_082620.docdoc b1e3c18649bc4cbed912ce7f0087cdba73298204214713ad1038375ad055142bn/a Heodo
2020-08-25INV_PO_08262020EX.docdoc 4a5ed6745fd5984335099810dddf416d8d709155611992c8d2f5af52a465fe32n/aHeodo
2020-08-25U_YAT_080120_HCQ_082620.docdoc 1cfa8b0347632b49a79619381b1d4e69a627df9cc64c67f825d774937ccb28b9Virustotal results 29.82% Heodo
2020-08-25FKVA_PO_08262020EX.docdoc edc3477618d76e98889e1be29182a8db3e21ff561eaea309e12070219788bab4n/aHeodo
2020-08-25FILE_SV3CJSR1O7FQN8CC.docdoc ac78eee3878c21048095ec53df6b24c4cfb8475a8eae927fdb5a179e811b47acn/aHeodo
2020-08-25REP_4842359004719.docdoc eda8c0a961b0b85716938320487195e5ad9925ad632e0d5d2f7cf677b746ee25Virustotal results 28.81%Heodo
2020-08-25VA1333504177EC.docdoc 0d20df2cfdf9cf06ae715303485715ec9bf9baf96fb9e6a9f7de0bd43479e678n/aHeodo
2020-08-25597876054136237617376.docdoc 52d5f65c1708917e116f0217caac8d2a8ebdc93b3b349f9f42b7d7c1b13d69d6Virustotal results 29.31%Heodo
2020-08-2503707052.docdoc 96eef74c59d9b8b47979fbaf2552a9735dcddef28df0b5b87655a4c849f9d853n/a Heodo
2020-08-25U_98130662.docdoc af6b3f177c1e4755a276700e2b50a76facb1c7434a2c2f291539bc2b70eba147Virustotal results 30.00%Heodo
2020-08-25REP_IYC_080120_GNX_082520.docdoc 9c0aab9278337eef97af4227c2c84c4e6ca81a76b72df7c1afcf2439b5d6db00Virustotal results 41.38%Heodo
2020-08-25REP_3326965250360983.docdoc a739a31e32ab7fa601d4f3c3b816aaad621608deb572db4c84030ea4f4e8df20Virustotal results 38.98%Heodo
2020-08-2559578385.docdoc df5f5adbd899a24275faad214a5993c5a343567429e0f9072904e708703b21c2n/aHeodo
2020-08-25DOC_BCB_080120_NCM_082520.docdoc 3dce2355e30fc9c2bcf1011d6e069107e0f65eef8e4b8dcab989ecdf8bc55407n/aHeodo
2020-08-25FRI_080120_VHL_082520.docdoc 9e285624cad29ab6abc3514e6b6953d0ed47ca24c1cb8e7db97f1fa652a8766cn/a Heodo
2020-08-25INV_2739242214485973896202.docdoc 340c0a7bd1dea55284f43e599ed5afbb240cbe03d66e478ce327abac2358c230Virustotal results 32.20%Heodo
2020-08-25TAC_WUX_080120_WIG_082520.docdoc b378fe416dfcb63d2ab446b973223719a1fc95e0a6e8e7131da3e65dbcec601an/aHeodo
2020-08-25FILE_PO_08252020EX.docdoc b4af8baeea33ca21af96589af92b649bf69047b7b79857ae67f6b40479234b25Virustotal results 28.07%Heodo
2020-08-25DOC_26SCSYVBE.docdoc 10216de03866c86a163d074495bfd71636ac299c24a2c6f0d482a733a5582c62Virustotal results 29.31%Heodo
2020-08-25BAL_45555594.docdoc 9782513596cfc5b6c1085aab702486a584065a2801f69b7b671c7d5d347534eaVirustotal results 28.81%Heodo
2020-08-25IX_XV8699968877AO.docdoc 67a58e87a8dd00886a21fd38eb8403c023f21a4594424b6a9067b970d59b6c7an/aHeodo
2020-08-25REP_2JZMU1K16VQAGT1W.docdoc f5ffa936dc576e70c923aa780b2b4a8dc00d3a56413b790e992c70562bcc0071n/a Heodo
2020-08-25INV_PO_08252020EX.docdoc 917c58bc1bb89ba90f3ac83a87a5ad3370a69bf351acdf7e5b9ccf53d25d3d84Virustotal results 29.31%Heodo
2020-08-25INV_DD6824935054YC.docdoc bd8a0109baf1b5261b7d2f4bf5845d6de6998b471a2a21a52e9bc7d07d343ce5n/aHeodo
2020-08-25X_PXA_080120_LKW_082520.docdoc 0df64ce61cdbbf4b4160935d6baeded88ee22c0b22c1d55d2cb539191250df70Virustotal results 28.81%Heodo
2020-08-25PO_08252020EX.docdoc 8ee5aae6fb9d81c6a4e85f924675fe62f29639141ad7911eeeb96d7cf26ceee9n/a Heodo
2020-08-25670003585.docdoc 97041109a2bf9ca737a19f5c58799f5388707e7ccfc1a230510c2980217688e0Virustotal results 30.00% Heodo
2020-08-25KT9640538540MI.docdoc a625be66768def572dadf087688b50491783b22f833a303d619dd07b9a1a5735n/a Heodo
2020-08-25DOC_Y1IIA0LSJ.docdoc 9653845487d1b3c5f4a30493f9a0df6df6f9f50677748425b87c6a9480793d45Virustotal results 29.31% Heodo
2020-08-25FILE_PO_08252020EX.docdoc b5490ea63aee70823ef3fafe7f92029d02c053b8021e4cf76d37fbb602f9021cVirustotal results 29.31% Heodo
2020-08-25PO_08252020EX.docdoc eb3eca423080581d8603a389ff96b26cbf224b094eb984d8a748d667a973cef5Virustotal results 29.31% Heodo
2020-08-25RT_32018449.docdoc ff0ebab531232f9ae8d5b2ad78ace8848adffedec41de03b8676c956c14c6015n/a Heodo
2020-08-25REP_08899177.docdoc b022201eeef15df44c02961535def592951db581bac63f60b861349c58a894f4n/a Heodo