🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for https://himosaandnasa.com/lfnwz/nxqo57cpn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:542146
URL: https://himosaandnasa.com/lfnwz/nxqo57cpn/
URL Status:Offline
Host: himosaandnasa.com
Date added:2020-09-17 06:40:14 UTC
Last online:2020-09-18 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Spammer domain
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-17 06:42:21 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 8 hours, 35 minutes Poor (down since 2020-09-18 15:17:44 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-1842814699.docdoc d0fbfd4dc83b404a1168591a1d4a52b1cb9da8f58c55e95719dc0199efe6fdb5Virustotal results 35.59%Heodo
2020-09-18G_TQHJ3G1C6HMS.docdoc 44d0c90d842430656bb499c996d721b16d4ef131f92e3443c478d37beb0d43f2Virustotal results 23.73%Heodo
2020-09-18K_93044182.docdoc 15c49ec4dc917425fbbe700b8f340f1d1629be55957693427600488b42eb5156Virustotal results 34.48%Heodo
2020-09-18BAL_MCI_090120_WOP_091820.docdoc 84015141ee67fd7d83bb8c912c6b0b32a1caf9d27e65b62d47494985973d0c45Virustotal results 32.20%Heodo
2020-09-18KQ1085671523NA.docdoc 7c81019f932c35ff188d4260fe0b23ba6cb27363922cbb8265a8f3121e26c32fVirustotal results 24.56%Heodo
2020-09-18V_PO_09182020EX.docdoc 59b07ee573d9567fe99ebe983b0641353a94c1584dbd8a330ce9a1b1ead621dfVirustotal results 30.00%Heodo
2020-09-18P_HYJ_090120_MKV_091820.docdoc 2d14279414dca849e4148148eaa21237c4c7a73d826fb02538c7bb2083e4fb1aVirustotal results 27.12%Heodo
2020-09-18BAL_OXZVRRD.docdoc 1bd22346068e0c3ebd43f84602033625137f3f35c3b3dc18473cd089834f4541Virustotal results 24.14%Heodo
2020-09-18T_YB7272256035YR.docdoc 2121c5bc91b394da5845d8effc92948979f57c4bf252ffd09451fda76e1c273bn/aHeodo
2020-09-18A_IFY_090120_ZQF_091820.docdoc 6abcae841dce14d172e12d2c27729756c194836844ccbba13a69617a31dbdd07Virustotal results 23.73%Heodo
2020-09-18NJV_090120_MDG_091820.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 49.15% Heodo
2020-09-18DOC_FBE_090120_LJZ_091820.docdoc 1783b7210fc11d49c254e9d01607f32e9124044eebc736c34bf7d3fe06d7c0b0Virustotal results 49.15%Heodo
2020-09-18B3W22YKJ5Z3UN1P.docdoc 81098064cd4ad8fdf1ccf43093703418fee8dffb9970aa44e9f9be469df9a310Virustotal results 49.15%Heodo
2020-09-18BAL_96991515.docdoc c5860ceb1f0030db0b4e716f600d818fb77b6d0ae4a2154291cf4fae1856cd7bVirustotal results 50.00%Heodo
2020-09-18RXC_090120_ROR_091820.docdoc 8f5dd0f7d3c0f356a4a2cd39351f11b5be1e32ff16162229fff6548dc8ada245n/aHeodo
2020-09-18REP_71615346.docdoc 8e53c80df5380a098783ffbee94ed572d63fecf8753904f25a12075657f1d4deVirustotal results 49.15%Heodo
2020-09-18FDL_090120_CYE_091820.docdoc 4401b8e76e1cba8daffe10ee7151f70d1ccb78a6857c49598c33f9b8bade1541Virustotal results 49.12%Heodo
2020-09-18FDL_090120_CYE_091820.docdoc 4401b8e76e1cba8daffe10ee7151f70d1ccb78a6857c49598c33f9b8bade1541Virustotal results 49.12%Heodo
2020-09-18REP_80172496758251604.docdoc 7a20cfdc1bf8e38ae094a08d8c24b9fe9afc5019768f31ce2a89a17898420878Virustotal results 45.76%Heodo
2020-09-18REP_PO_09182020EX.docdoc 1121962d0a0d52780b13618c7cdcc2916ea8ffdcccb17ae0e54e0b9f8799c5eaVirustotal results 43.10%Heodo
2020-09-18305067019421.docdoc 8de1f0bc21df74b36c7d23af7047d1e92050ec37ed0daef2adadb8dee5322488n/aHeodo
2020-09-18IWCD_93492253996.docdoc bd6e4786281e2b7657586b4cc071d1233e90dcb59638890dc1dbe6b10127978bVirustotal results 38.98%Heodo
2020-09-18FILE_PO_09182020EX.docdoc 7c59a227af18d0ce74f71bcd465aeb811332968c24b837a6d9761a61bf0b2abdn/aHeodo
2020-09-18FILE_31402383.docdoc bf8ba8f948673c3556726edb8ae210bb81ee962e4c6a15cfd27e3901396960a4n/aHeodo
2020-09-18INV_AZA_090120_QFD_091820.docdoc b93adb958e71ae93847f4db73ae4fb7f9f596e3f9ff08cb951842dfa36911795Virustotal results 37.29%Heodo
2020-09-18BAL_OO2667126802PE.docdoc bb86997dfeeb53c0434119028526baad7180e7705c9f111b56b3b0e56e37ae60Virustotal results 38.98%Heodo
2020-09-18INV_REX_090120_LFE_091820.docdoc ed98997bd450d0c8f1285f0677f4735e52e35f8504b6ab44ca0af91650f29ac4Virustotal results 36.84%Heodo
2020-09-18FILE_YUH_090120_CCZ_091820.docdoc 0201f9b5765c77f097c4e2c4c55dfb1bc9c99f104bb07af3dcdc6d62731d99c2Virustotal results 36.67%Heodo
2020-09-18BAL_TI0527140924PO.docdoc 230fa7a324c31b742bc3e78cd724d571d7a462ba188b8e6dfc9f7060cb24fbc6Virustotal results 35.00%Heodo
2020-09-18DK_BO6110428547VQ.docdoc 344be8e47a1c334ca0f6e8d6383c509d62ca9004f050e5a368e064e87e2e947fn/aHeodo
2020-09-18ZSQ_XU3379438481IM.docdoc d95aeafb85cdd18684d7a50288bd895c7549455d652bc1997dc4b27c26788c92n/aHeodo
2020-09-18REP_ZS7261591324ZC.docdoc 6885a68b8ea6eddc639d7f787451c8f7d98f44a57f7a17d48e5f93cb4aaccad1Virustotal results 34.48%Heodo
2020-09-18BAL_50413594144.docdoc c63f6783c00a837e235c2c2405fccfe135bf4358704dad7525b4660588e6ed3aVirustotal results 33.90%Heodo
2020-09-172L1M7B6S.docdoc 0606ba599bf7a4fca591dc6e4c5b29805cb37284a37a2cefd0f5237a52ce46acn/aHeodo
2020-09-17INV_B0LKFHZJ.docdoc edee77f468412b29903ec095de648b2214e471174deffc438b41cb18fed1058bVirustotal results 33.90%Heodo
2020-09-17REP_4849755153869.docdoc 24b4b9f235edf4c63faa8b1722508868d0727dd455e4abcbdaf1ac38eb379dfeVirustotal results 33.90%Heodo
2020-09-17I_PO_09182020EX.docdoc 11cfbdf8ce4f99c93816a1ed7ff7410d051b0cc978efc9ff9fa824db596374e5n/aHeodo
2020-09-17FILE_17741371649308.docdoc 12d6b38f752ecea5e77fa8c3623f322427bd77fbe3070efe165d432a739f4bd1Virustotal results 33.90%Heodo
2020-09-17L_FS5R5QU35PNCYCWG.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17BAL_PO_09172020EX.docdoc 339016f3d85e1e43b24fe0c43e85be15801e5268905882fd77f11c3b70d3ded7n/aHeodo
2020-09-17FILE_PO_09172020EX.docdoc 4158528b357889ce0b983d5f0ffb48cdf92c23296c2f12cf848cee1e46538af4Virustotal results 43.10%Heodo
2020-09-176LVLDYNM2O.docdoc 0b2362700a49af3797e3a32128e561ba70c171de8406a65e5290362ab574c31fVirustotal results 40.00%Heodo
2020-09-17PO_09172020EX.docdoc 0804fcd4768e815cb1f55da211cb90a7aaae5ec655ecaeecd1d864069fa07569Virustotal results 35.00%Heodo
2020-09-17INV_PO_09172020EX.docdoc 54e22118b677aadbd92103152e9eb98f6a37c701dba7fcc87067d84e124d0ba9n/aHeodo
2020-09-17INV_TFZ_090120_CHZ_091720.docdoc 55e876b6274746f9d8486bee3ae8b45b9fac29272c39e6d09ec38a93903d3decVirustotal results 35.59%Heodo
2020-09-17BAL_OPAYZCMHXCDL5KD.docdoc 6f259bd35269f76ac42871f5c84e9d480c5ab4b878108a381a7040a8cc0b5434n/aHeodo
2020-09-17J_90475468.docdoc ef1653ce5dbebfcbaedf38b0994902c3b34b60f312dffcca34560164a435847eVirustotal results 35.59%Heodo
2020-09-17BAL_PO_09172020EX.docdoc 24c7551200e919fc0bdce151aef784c0c324c81a337a8bf70e67cfebf1abae0dn/aHeodo
2020-09-17RZQ_090120_YJQ_091720.docdoc 5550d9e16cad7854633fe0ca4c7315a5595cdb78147360f022c916fb27890aa6Virustotal results 32.20%Heodo
2020-09-17BAL_TSV_090120_VNX_091720.docdoc 437bd5f99ce1bef9914ea519c89cebb01cdd47fa38a3118f59c850b469953465Virustotal results 32.20%Heodo
2020-09-17S_CU9924068637MT.docdoc 58e9e29b2ad9adffb9050f55dc81946e45a9f4dfbf263e4b4a1af049f2897148Virustotal results 33.90%Heodo
2020-09-17PO_09172020EX.docdoc 48161edaf6dc6f677f000108096fb60a547709797ada71d0c7e48667f035851aVirustotal results 32.76%Heodo
2020-09-17REP_PO_09172020EX.docdoc a162bffd2c7937b14cbc56696db2b2a7a964b9998e204c32edaa94c4de1cddc1n/aHeodo
2020-09-17O_TT7533642488QR.docdoc a831fbca2d81fbf112e8404702e34d5012199f825fd1db85eee8d58cae245402n/aHeodo
2020-09-17INV_TT8144345759ZS.docdoc d6780dd989cd52d8f8db998fedd1bdc4d5b52c738e0850db64c96310eddd7c1an/aHeodo
2020-09-17PO_09172020EX.docdoc 53cb476741739fa01399bdb2984585d7b534db91b3501aeecd3a07f4d9f927adVirustotal results 31.03%Heodo
2020-09-17BAL_ZEY_090120_RZF_091720.docdoc b929bd8a5f5519a7f5322a0bb13f74878a3782bbd4635c67427720c671c1c80cVirustotal results 36.21%Heodo
2020-09-17BV_YBT_090120_NZP_091720.docdoc 27eba47f653b19797edea37d8dbf75215328081ca3b6abb42719eb226a877a5dVirustotal results 30.51%Heodo
2020-09-17I_73558985.docdoc 1356c113c2e17f52077c000bfac7f6eeeb2aaa7fb1f9e3650fdd9d72fe79eadbn/aHeodo
2020-09-1760812971.docdoc 39b976a0e5df67f8d4593b26c8291a2ca2c49113f6df6d8329ec5a07adb6e01cn/aHeodo
2020-09-17DP_PO_09172020EX.docdoc 43b986aff0456aa4a46557f94d9229679337ddeb001128e516ed0a627e17edc0n/a Heodo
2020-09-17AQA4ASTHT8KCHP.docdoc fe6c61d58e613b1737dd42c11ceb421b40f8f854324adeecb71245e245ed3a34Virustotal results 36.21%Heodo
2020-09-17INV_WQH_090120_VSE_091720.docdoc 4cd9f43484e69a009522a8853514539c74fa5b59f03f86c34a85037ff3076a55n/aHeodo
2020-09-17FILE_08420203.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo