🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://youssef-clema.m2web.info/assets/a640054878hqirhvzhifrm0cfv1b1q/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:521165
URL: http://youssef-clema.m2web.info/assets/a640054878hqirhvzhifrm0cfv1b1q/
URL Status:Offline
Host: youssef-clema.m2web.info
Date added:2020-09-15 22:31:34 UTC
Last online:2020-09-24 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-15 22:32:39 UTC to abuse{at}ifastnet[dot]com)
Takedown time:8 days, 2 hours, 54 minutes Bad (down since 2020-09-24 01:27:16 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-165823GIU5M1Q.docdoc b114281a6664f44018353cae8a6f00cea1d34854e2942f01a9e027d2ab333b9dVirustotal results 38.98% Heodo
2020-09-16INV_4679762807563279105.docdoc c94ba7222039884690f7049f607f0059bc3e2f965a11e75f937cfe271bfd96e9Virustotal results 38.98% Heodo
2020-09-16BAL_KBK_090120_FYJ_091620.docdoc c88d8beb44c5609d538cae9b2bba76ebe5b09aefbb561fd2801356e147f179ebVirustotal results 38.98% Heodo
2020-09-16MF4731712739BX.docdoc 4d88090314c39059da536bb37270cdf7ffadeeda4ea768b55dcb9f2b807586f4Virustotal results 38.98% Heodo
2020-09-1648039715349657512.docdoc 02451c13f63ed93c6ed0c0e4a3025100834fd59eeaa78acff45d726c056b2293Virustotal results 38.98%Heodo
2020-09-16W_ZCL_090120_HNL_091620.docdoc 07687b2d27dd0a53f82aaa9379b2bd9e62b3e60c83dc4cf2820fe254a93190d4n/aHeodo
2020-09-16FILE_QP0746410910HX.docdoc babaf8e764b3bc4f5fef74de7d819fa533ebf675d69174df27c5e0ae20174ecaVirustotal results 38.98%Heodo
2020-09-16MER_HF8808612864RH.docdoc 0745a0b546e98bc288370d0b4faace44a060f1abb905403e159b812b2d694a7fn/aHeodo
2020-09-16CFX_090120_VEC_091620.docdoc 54f3ff0a6c12843bdb1b448362320aac7421e7a1c1a210779dbb9c57ede15a75Virustotal results 32.20%Heodo
2020-09-16048363467.docdoc c714262e7ca075c2816149ba0cf39cd465e11d7020a2675a228f4180df6163c8Virustotal results 32.76%Heodo
2020-09-16V_QYL_090120_ZTX_091620.docdoc 4de948e6257ef045a9344b48f4ddf5612d889f7d5cd462390c1e6fc333fe28fcn/aHeodo
2020-09-16BAL_9M3HXEE18DGQ8T.docdoc 895d3180e6cd0f21d0b56b5061eb6a16f029d010fc833dd6fc2b85ebbbd6b76bVirustotal results 32.20%Heodo
2020-09-16INV_63220564.docdoc d568208ba08c7d30eea80ea82899d3af70f76cbfb55c2c0700fa48c40f5aaaa5Virustotal results 25.86%Heodo
2020-09-16REP_VMC_090120_JXD_091620.docdoc 7d29e749c79d53fc5303ab43bed236a5f884e21617771cce4518860bd7bec1f3Virustotal results 25.86%Heodo
2020-09-16F_ZLJ_090120_UND_091620.docdoc 11fc9d76f9ab6d54ffc389ea4c4b2445ab3d2c00935ea19c38de48d2e29010c6Virustotal results 27.59%Heodo
2020-09-16LPW_NX1699471510UR.docdoc 8df40fea0429dee60fdf8fa354db52ddf3cbe643cd5945d226b5eedca75bd659Virustotal results 25.86%Heodo
2020-09-16YB4272745628JL.docdoc ff0be8f9b0efc6b14928e8ea89ffb82ebe82f74db08241df5ec7713c073dfe91Virustotal results 24.14%Heodo
2020-09-16DOC_24378226.docdoc 0e0913f7c913e70406fdc7b5e47f2455d7152c4e461770cc1b9bee581491fab9Virustotal results 25.42%Heodo
2020-09-16GFUF_6220026246491229.docdoc 8d23dd0aa60ef4332c6cee379e7719bb7275f27b1d8be36f48bc0c2e77a4a95eVirustotal results 27.12%Heodo
2020-09-16BS9073284944OM.docdoc 4a42864618e8b860f0cc23b81a63cfeb95e60a000bac0acb3edd4294f8531329Virustotal results 25.42%Heodo
2020-09-16FILE_39471440.docdoc c24eaf2c7e9192b22bdb558cdcb458e6de607d17f373c4d46d92561b2312f1d0n/aHeodo
2020-09-16UNK_090120_VRO_091620.docdoc b8d558c1ac20808b0809fcfa0c5a017da7e300736b6dbfee52ed1930c7b19a08Virustotal results 23.73%Heodo
2020-09-16DOC_AN0724290979QY.docdoc 4127d459a04c32375faea92c1b93077f9a79c1c7ffff36dd050303fe2c295bccVirustotal results 20.00%Heodo
2020-09-16CRO_ESW4MF352.docdoc 8398f9c5f37ef0558a84d839ee7058340351a71fe4cf26d2590652a5a66857f8Virustotal results 21.05%Heodo
2020-09-16BAL_PO_09162020EX.docdoc c81e73cde0ba06145f34071dd88dcaa6a7a0490d9096b1c3f78886fbf5063669Virustotal results 20.34%Heodo
2020-09-16INV_FNK4K7996QFNX.docdoc b8684570ff020824676af136d3c0076181180c4d7abe963ffb04a340ecb68186n/aHeodo
2020-09-16DOC_22708216.docdoc 85e8c954fc64556cac2d3c01b725c69f7b2640b92ee156c1875c02f923db643aVirustotal results 20.34%Heodo
2020-09-162733740700243.docdoc ca193911fda7f38dae553f8746afb6e4021eb40f46144ae77d2c8883da2c3d82n/aHeodo
2020-09-16FILE_38017750.docdoc b0a0b8c0689039bcb63108626720aa99a3bf7a6b09f92dba5ac5243bdc3e61deVirustotal results 20.34%Heodo
2020-09-16INV_09356238.docdoc b465429729fe580c1862844b5e743b4913418b2bde007ae65a8b150f3defe751Virustotal results 20.34%Heodo
2020-09-16FILE_UHQ_090120_RFK_091620.docdoc dcfdf9a342db69a880c3acc43b01f2e3f04938ed129c9b3597ee7aad3377f25dVirustotal results 20.34%Heodo
2020-09-16INV_PO_09162020EX.docdoc a6706614d0da8c58be5ac61af02a29dd4542a4fd130464ee3bec6b26be18416fn/aHeodo
2020-09-16INV_50013194.docdoc 1bb4012e89aef09b80eda22d99a564f0d3e923f96cbf25dc4a78ff6de6dbb31fVirustotal results 33.90%Heodo
2020-09-1669777734.docdoc 13238717cc308eece65e0e1787bfda1e801a63f6256bb88850fb9fa8d76042b4Virustotal results 32.20%Heodo
2020-09-16INV_KGU_090120_TOH_091620.docdoc 32b64c216d2a44427fdf3edfe941de9017c0ac4864f88a73a252fd4256c7024cVirustotal results 33.90%Heodo
2020-09-16REP_ZN0126199574HQ.docdoc 1b96135a2846d7a48ebfda9e2ca65dd11d6820c9fb6f1ef9a9b2b15395cf48c9n/aHeodo
2020-09-16REP_HL8873568253AC.docdoc 63179447814d11c06c79d802adbf84daa1d758ac37a1591e280194ac6db52e16n/aHeodo
2020-09-16DOC_QWH_090120_IXD_091620.docdoc f8033b99d4728d0e4ad633cd47aa7df527d0cfe6aa3808bbb2f120f4f6c7d931Virustotal results 33.90%Heodo
2020-09-16INV_AAX_090120_HZS_091620.docdoc 62fd09a1ff4be50f0ef342f12c9551165d6f9743f510cadc096752e52e0b296eVirustotal results 33.90%Heodo
2020-09-16EG6745832347MU.docdoc 5cce38afd4ebb2d6788c1c97654dacf76b69f37c87f90e32970b3b6e2e707d80Virustotal results 32.20%Heodo
2020-09-16V_PO_09162020EX.docdoc f875df5ff3a0ae34e7f9c96c6d419326c5411a29964693ced9a875ab952484d2Virustotal results 32.20%Heodo
2020-09-16AY7199270676BL.docdoc f612c549bdd3f599721c805169c70aa6e0b6f144a0a58a323f0d59d11f23b45cVirustotal results 24.14%Heodo
2020-09-16DOC_DSHL5EMINGKD20OC.docdoc 20843d0cdd4530871779caa7abdd86286747cf5422074a5f981d499aed8d19d3Virustotal results 32.20%Heodo
2020-09-16PO_09162020EX.docdoc 52a5776503722d0ea87fa60009674bdd3ebbd4449ed9328bf502c7ec5c5ac516Virustotal results 31.03%Heodo
2020-09-16F_PO_09162020EX.docdoc c5be1178786e06c4c3265db8da35fbe4f74a96000fe5eb06874abeb6b85fbd74Virustotal results 28.81%Heodo
2020-09-16BAL_WTU_090120_RTH_091620.docdoc ede79cad6b8517c5d9a8ce2fa49a478bf40491b3295b2d348c418589f100e877Virustotal results 33.90%Heodo
2020-09-16DOC_IQ8762766262ZB.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360Virustotal results 27.59%Heodo
2020-09-16REP_01636044673575438500.docdoc aff9c4fbadddf0c2b4c80320ddb1809027d157508adbf5e5f12d88db367c782fVirustotal results 24.14%Heodo
2020-09-16VZ_9483346881618.docdoc c22a92c3f9f72a3ac154573621c47a61ea04bc8df6fbd72a14f55b0ac858f385Virustotal results 37.84%Heodo
2020-09-16PDM3MZ50VAXLBVE1.docdoc 7cec88df6a841fbc1251142492e673c8a2cddc58f21d6fd402f8167ee96e194cVirustotal results 25.42%Heodo
2020-09-16REP_MRQ_090120_FCN_091620.docdoc 1fdc71b89f5d3b5fce037341692415964a8c4141c9579be50045bf9d2e309afdVirustotal results 26.79%Heodo
2020-09-16OJ7592845206WV.docdoc 8c88e1e8081c3c1795039fb19de72e17b4e0a72076d49470327bd62bf090909dVirustotal results 25.42%Heodo
2020-09-16F_FD7752952976PS.docdoc d4c8ce2687fd07ab7c3991cab5500c05e719381d7906228371f0457d260ded94Virustotal results 25.42%Heodo
2020-09-16M_EJ9764467661WX.docdoc 5b6ad999ba9c1fc2c8a7c9405f7e52131bde9eafabb19f737c031e3b6206d4b4Virustotal results 25.86%Heodo
2020-09-16DOC_65146223320087934425880.docdoc 5184e08e6c595ddbb60b6ac4030286b2e70fa5ee7567cb0360b2a66ec04f8d89Virustotal results 25.86%Heodo
2020-09-16PO_09162020EX.docdoc 17ee903ed9c7b72546d333ce76b2e0996a4688e758937667ff466bb3ff005c00Virustotal results 25.42%Heodo
2020-09-16K_XJD_090120_NMH_091620.docdoc f8a35f4ee5b56117d206ece5cd25afb33aba58cbfb3c32748018d4424f212bddVirustotal results 25.42%Heodo
2020-09-15FILE_02798481492.docdoc 629e1a081ae300a6d2f05af5d3062f2b48e11d58f2589a4dc44c4f79c9c32c87Virustotal results 27.12%Heodo
2020-09-15REP_12958394.docdoc aee8c2cd0f5858f9d9f402974a799cfa4ba52786593ce6681014c289e75f58c8Virustotal results 27.12%Heodo
2020-09-15FILE_PO_09162020EX.docdoc b2a10928dc3d7419e3b9ec74228185d8a4d57a7dbec48722c9fef2178b7baa68n/aHeodo
2020-09-15REP_CE6454962139ZK.docdoc 5e96a02fb1ec1284bbdd4f122425a6f635312ee541211269b39acd5addd3dd5aVirustotal results 30.51%Heodo
2020-09-15DOC_7888641409393924488992132.docdoc 9563d877bafd1387934e2e5243284770dc969f8406fce65bc70b4a8741081548Virustotal results 31.03%Heodo
2020-09-15OKP_PO_09162020EX.docdoc eba11506102b0d17ade3dd25ef88614226a2faa5c3710af2a89b5588f49844a2n/aHeodo