URLhaus Database

You are currently viewing the URLhaus database entry for http://dentalcad.tech/xuk63/public/puhpoq25/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:495737
URL: http://dentalcad.tech/xuk63/public/puhpoq25/
URL Status:Offline
Host: dentalcad.tech
Date added:2020-09-14 12:58:08 UTC
Last online:2020-09-14 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-14 13:00:44 UTC to abuse{at}hostinger[dot]com)
Takedown time:8 hours, 15 minutes Good (down since 2020-09-14 21:16:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-1470950707.docdoc 9f0ae988efa45dd5a31b192546bb881ebbf6b50e79bf2da69fa2256bbf4d845dVirustotal results 38.98%Heodo
2020-09-14DOC_67720797.docdoc 25745649b41d77ba129790a2a0c37f720f1e050cbe6ddc4a74e1348e41b59de9n/aHeodo
2020-09-14FILE_FDE_090120_VXE_091420.docdoc 92851cb764419d8ba397bd68f8a097ac8cd0faeeac231c1348fc7ab7172aee64n/aHeodo
2020-09-14ZN9301716738IM.docdoc 725dc3d87fe6b2dc432cb12cffea801b29ee6ad5e3e47446216c677d8fe43b6bVirustotal results 37.29%Heodo
2020-09-14OGT_7E8ZY495F0XS.docdoc 57a86884de3a12e1b3b6bbd6596903706148a2c98c90827974c176979e8d1bb6Virustotal results 28.81%Heodo
2020-09-14VW_96081319.docdoc ed410e106fe3f9f8bedec883afe4b7b0d0dea3b449ad26fa6f41aa69c0a78f80Virustotal results 28.81%Heodo
2020-09-14M_614373573630424119.docdoc 218f129d0a9af2058f7b45dbba90b9784f52c5ba284c347192dc265a8c48993bVirustotal results 27.12%Heodo
2020-09-14CB_93351069130734999392719.docdoc 1696e01404af8e515a6ed2d5b48c04a659ac1ac279a678816278240d1ce7b9e7Virustotal results 21.67%Heodo
2020-09-14B_PO_09142020EX.docdoc c2e8f7c925f56e68086ee279048349eaede27f3cff8aea65d4298610fd97a3d9Virustotal results 21.67%Heodo
2020-09-14FILE_YG8010012713XT.docdoc 506bd0bf18d33b2e92b6638ec09ed0af6dcedffe870c41063f7845695e19fbc4Virustotal results 22.03%Heodo