URLhaus Database

You are currently viewing the URLhaus database entry for http://logicrux.com/wp-content/nqz4ci/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:452635
URL: http://logicrux.com/wp-content/nqz4ci/
URL Status:Offline
Host: logicrux.com
Date added:2020-09-03 18:14:33 UTC
Last online:2020-09-04 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-03 18:16:02 UTC to abuse{at}contabo[dot]de)
Takedown time:15 hours, 45 minutes Good (down since 2020-09-04 10:01:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04OTYGRL7BID.docdoc f19b7c3502d8e70e4a41fc4676cf0ba7a1de47cc19b1e961be4ceb8511119637Virustotal results 41.67%Heodo
2020-09-04BAL_TMO_090120_XWP_090420.docdoc db8ec99d40ab02d4ccd48a1c7b15bf169acb5b672dad9862e19dcb7f2805cde6Virustotal results 42.37%Heodo
2020-09-048M44124327WT6DR.docdoc d9845d6cd1dc60f9101f99ccfe8ecd94e40035baa15949d08c31985d152695a4n/aHeodo
2020-09-04EGB_090120_UDX_090420.docdoc 58688db2a10ad53af04287f0d28ff7a01d056a48dcb725797d9c1f724d13ff2cVirustotal results 42.37%Heodo
2020-09-04013212069517.docdoc bf52c7ee63e57eab046b65369d5d9bca719accc2b77b4541ddbe5924711aa9c1Virustotal results 41.67%Heodo
2020-09-04PO_09042020EX.docdoc c189d47783e317fad94867d3dda3a2cbbfba58dc3cda5f354b7f43b8d80daadaVirustotal results 41.67%Heodo
2020-09-04BAL_67539506204.docdoc f9fbc826ae77def5611c9cd629b157e60b70efa54fcb0dad8dd8b72d64323bf4Virustotal results 42.62%Heodo
2020-09-04DA_4465123824484485178481951.docdoc af94a807ad27af0322ecdce2f282be8b0d3037615f7d64915e271c5db9016d18Virustotal results 42.62%Heodo
2020-09-04MWV_PO_09042020EX.docdoc 9b93250ba68a08df743a47727d6b84318527714e489bfe0064f103b2c3fb9b21Virustotal results 41.67%Heodo
2020-09-04BAL_LM9608061363HQ.docdoc 8aa2a0bba5e9b2f0f212f07d152f089fd10e8ca4485608178547f12196348c45n/aHeodo
2020-09-04INV_KGB_090120_XSE_090420.docdoc 6213a6690c58fe48fb522c125a84a5b500e3e17bead81239b107cc1fd336ee1eVirustotal results 42.37%Heodo
2020-09-0407888895.docdoc b6f6deed6a2a7773bc32ffdeb76b3c6203ef5104979733b539cefafd5172afc8Virustotal results 41.67%Heodo
2020-09-04UP2486740917CF.docdoc 1d3c23422da9f070996381406668d34699557d693bf4db1e3cf752fe8b83b560Virustotal results 43.33%Heodo
2020-09-04DOC_UI1GAZ3V3.docdoc e9a5c8f81a3a669685cf322e54f602a882b6a8843070c10d6f5e53794379a8daVirustotal results 41.67%Heodo
2020-09-04BBK_29865640.docdoc 615736850fd6ace5e3359e30427d4ef5824b28c6d1e0bd9dbd2cc12340dfeda8n/aHeodo
2020-09-04REP_77547264.docdoc 628bd28e635f7fa6ca78c666cd219873a82d1c749dcd80ca407469194fb0064cVirustotal results 41.67%Heodo
2020-09-04DOC_NDX_090120_PIQ_090420.docdoc 781509afe3329ab61b29f3b67394eca12b43b25e82a4f1b9ed2c4f178b3a6d8bVirustotal results 41.67%Heodo
2020-09-04FILE_RTU_090120_MIV_090420.docdoc f0e89834b4906361a067ea23efa018387f75a2dbf921d028779c2ad15a19bf47Virustotal results 43.33%Heodo
2020-09-0498428908998811.docdoc 789a71395ae5c9ea3e1613452abd8ed4927d9baf524868cdac935110b5f6f0fen/aHeodo
2020-09-04INV_19242801.docdoc 847c5774eaea8a9d9ce3d2a5b91650c30fe5a44a68cb6ab8688236c878787aecVirustotal results 42.37%Heodo
2020-09-04INV_10725940.docdoc bf8ba4d58a232e576705b37030a7df091539bafb0051f4f28032d54fe49c4c98n/aHeodo
2020-09-04DOC_54876779.docdoc f00f58cdf16e19d21e63d94d8fc0be44f2ca6b18df7ca59cb6aed2bba4b5ff97Virustotal results 37.93%Heodo
2020-09-03BAL_KZZ_090120_NZK_090420.docdoc 2e96dcfe760df7dd6db7de3e4a51f33e031a3c1c8d3aa5545cfe92fa072b6189Virustotal results 36.67%Heodo
2020-09-03REP_NC2446887518MO.docdoc bfb730608ea4de6d4d60292f703782a118e42cee42d7c0b1077e6c70b3fe5491Virustotal results 36.67%Heodo
2020-09-03R_VRW_090120_ESE_090420.docdoc 079755626794412a025b4f2e13b8a7900345b513afb0538ee3f16c638878c800Virustotal results 35.00%Heodo
2020-09-03R_VRW_090120_ESE_090420.docdoc 079755626794412a025b4f2e13b8a7900345b513afb0538ee3f16c638878c800Virustotal results 35.00%Heodo
2020-09-03BAL_00149881.docdoc f95add757971b2b4deabdb71a2aaaddf3ea0cd2562b6bf7c1db04298470477ban/aHeodo
2020-09-03PPY_090120_CBU_090420.docdoc 2060a8eea8cc61bcf2fe3f82a2e9a4f773cd8463c4f2d0e55f198b5a12dd9c88Virustotal results 33.90%Heodo
2020-09-03ME7226934264NR.docdoc 230c3ef0751309b7f9f857b34a278f477fa7c0d6caf0b48f86c23529bc0bb0ddn/aHeodo
2020-09-0369249052845744993974587.docdoc f8642c869c224dbe6adb98e13e148e8a62ff97af2fca4cc61327bf66c78267e3Virustotal results 32.20%Heodo
2020-09-03DOC_PO_09042020EX.docdoc fc9e4656d99b0f3f630a84da99c604feaac1aada1ce97dee65cfcfa63931e8a4Virustotal results 32.20% Heodo
2020-09-03REP_EW1083577835RZ.docdoc 3eec4fb22221c450841f1d95abec12b04972403304b3a23ad587c5819a130fc6n/aHeodo
2020-09-03BAL_PO_09042020EX.docdoc 70456cbd5863ba0a0589d9c519d57d90f5ff4276ddfea58d14f1ebdcfcb43ff1n/aHeodo
2020-09-03PO_09042020EX.docdoc c97ae72cf47cf2dcf512ff6cc50c1ceaad2cb6b5079e02592255f4cf537193b3Virustotal results 31.67% Heodo
2020-09-03LJS_090120_NKC_090420.docdoc 9e79dbd711c7ebd622260b14fb8315fea7af36f7a38875d1e886ef499aa0043an/aHeodo
2020-09-0363011846.docdoc 581f99f55797eef29f45c55f6a75da11c041c2e6a22b98de7b988fce956eaef8Virustotal results 31.15%Heodo
2020-09-03PCQ_66276816789.docdoc 520aac7b363312bf116cf9bff103ed8a010ffefbc4962a7f4a76e4d609f78734n/aHeodo
2020-09-03ZS6107433441YF.docdoc 2ae3f946c2fc6bbf82769e802952b179a1177f36405dbeefcab082b66a99bb57Virustotal results 32.20%Heodo
2020-09-03FILE_94582240.docdoc 141d3778aacb158d57c6376c40d27cdfd1aad69f40a88d1d68ca23f9df812f67Virustotal results 32.20%Heodo
2020-09-03INV_BG145XVIO2Y.docdoc f50133085cf408fa42e3568d8466e35d6ae2ceffb26ec78fc25041eb5e5d7c93Virustotal results 27.12%Heodo
2020-09-039082882758427364900146817.docdoc 1f8a43a029ae828c0b5ee1519e8ac48959f642865437823851fad16b13dd1c73n/aHeodo
2020-09-03FILE_XZQ_090120_IHD_090320.docdoc 634898ad95e56ffb4fe5e2a3636cc9b5f0527eb73d40f7d701db08f19d54cec4n/a Heodo
2020-09-03BAL_0J215BNQ.docdoc 54db84a7eab0ad73dc1fd9b802cbea856c41d186a7ece87b0b2dffd42a9c1edcVirustotal results 27.12%Heodo
2020-09-0388296822882276.docdoc 6c818fe954c67ca4e2b3fccec2e00931f21b0a825d378e963e409827bba019d4n/a Heodo
2020-09-03BRL6S8V9GN1XWWG.docdoc eb47eea0bcf90ecf892f9b47223701eefb9813fc540ca5eddc06a4a57be07cbeVirustotal results 23.33%Heodo
2020-09-03VTS_090120_JWL_090320.docdoc 45df584b759aeebac31b1c7dae71ed74a5711867e836b62aabfdfcf73e94d5fan/aHeodo