URLhaus Database

You are currently viewing the URLhaus database entry for http://daoisthealing.com/cgi-bin/eTrac/SOhEje4nFt4h/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:553051
URL: http://daoisthealing.com/cgi-bin/eTrac/SOhEje4nFt4h/
URL Status:Offline
Host: daoisthealing.com
Date added:2020-09-18 09:33:50 UTC
Last online:2021-02-02 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 09:34:14 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:4 months, 17 days, 5 hours, 53 minutes Bad (down since 2021-02-02 15:27:32 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19Dat_2020_09_19_R4774.docdoc d6ae83f018f7848b69c8e3f73f71992caabb9a19ab572796adf043a08bf46c11Virustotal results 36.21%Heodo
2020-09-19KZV475-20200919-8389806.docdoc 8065f24a60e594dd6166d1474692a8497b370ea658769bea254a65eff805ca26n/aHeodo
2020-09-19MES.docdoc d91d3355ed5c4d2b1c8a1577424bb71aa3ef224770b4d5c01dd7703a4c329eceVirustotal results 27.12%Heodo
2020-09-19arc 20200919 UGT934220.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19ARC-20200919-8631585.docdoc 4186791608fe67e3dd4a2f61f52ed52ba67c4d7d75996cbf27f8379a44509f18Virustotal results 22.03%Heodo
2020-09-199419867.docdoc 67cc9853ec0a3e3d1283d0ccc57907b9c5c60ff1359dab4e9456b581a3ebc3bdVirustotal results 22.41%Heodo
2020-09-19dat_2020_09_19_44422.docdoc 57335ffb483da81d9154676109daceab8f15e679af95fe3d0313f09d70619d85Virustotal results 22.41%Heodo
2020-09-19Attachment_20200919_0609854.docdoc 50e2ef861a0588af5e970bd2bd2d4d52e68f8c65d8f82b2c2f6457adc2302ea1Virustotal results 22.03%Heodo
2020-09-19LIST_2020_09_19_R698.docdoc 8d1f2360b408776088872210b32de86eb3f9ba1f6c038e9167351edc66528823Virustotal results 22.41%Heodo
2020-09-19Attachment_2020_09_19_PI885.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 24.14%Heodo
2020-09-19file 20200919 047668.docdoc 0d6380a49e7088513773efca368acb3a783954a2d4df49ea9b730c9e49969458Virustotal results 23.73%Heodo
2020-09-1951560R_2020_09_19_7651.docdoc c23cc89488404b578a22052d1d946ea0e421961bb77a5c4b002d890506c2aba6Virustotal results 24.14%Heodo
2020-09-19List-HA78884.docdoc 1b92e7710017ee24f07eb3119de1f3556bc53d686201c428cf4538d133fa8fa7Virustotal results 24.14%Heodo
2020-09-19mes_TIA72535.docdoc f0e6815411621dc6ccb4ca55c8c1ceba4ed59cc0f64b6884f0d93d49f9493bb5Virustotal results 24.14%Heodo
2020-09-19file-20200919.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19UNTITLED_20200919_764745.docdoc b7b9257d8c50f28e5aa87090083acecd0359655c255d52dd1030c0375097e0e6Virustotal results 24.14%Heodo
2020-09-19LIST 2020_09_19 VF5105.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2eVirustotal results 23.73%Heodo
2020-09-194539321 20200919 MC2499.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19LIST 20200919 4863440.docdoc 7914bb6c3d6664a065cdb3f06cfc21a7f85fd7423e3b5af3468245d1f03edf5cn/aHeodo
2020-09-1921510OS-2020_09_19-QC7757.docdoc fca26f8a9f6995a0a5dccd24f54b77b3d5c855fe48084f99f9b2da3382f88c2fVirustotal results 30.51%Heodo
2020-09-19Attachment 2020_09_19 UL9485.docdoc b81a03fb70bafe2e7fd636ad7371dd77cd8fb21b274fda2b5bfb4b2d4356e91en/aHeodo
2020-09-19File 2020_09_19 GX750538.docdoc c67445bd4a7a3846de10ecccfc8117f4c144d3c2cc2ed29bbd934d3e06dd7e9bn/aHeodo
2020-09-19INF FU592.docdoc 4c294575dcf08d7b4946e3d8d883d7a62ab36dd5170bf983df08adf59d7414dcn/aHeodo
2020-09-19Mes 2020_09_19 O717244.docdoc d2f7410370f98bd4b8df1da90c315498ed40486e84d2c1a4951935f642fb8d3cVirustotal results 22.03%Heodo
2020-09-19UNTITLED 20200919 2898376.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2n/aHeodo
2020-09-19list 20200919 BC864.docdoc 17b333cc6c291651161d6bab9f62df4f89a31b13b8b8db8722c6e6d069d1bc30Virustotal results 22.81%Heodo
2020-09-19392V-2020_09_19-4333261.docdoc 34d91dd2c961c7932b2e9f2a6ce803cdd745ef4d3b0fd60d429858237f8e45dan/aHeodo
2020-09-19UNTITLED-20200919-X1139.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfVirustotal results 20.69%Heodo
2020-09-19Inf-2020_09_19-M8814.docdoc 93e1254e65773ffb3d3f3aeeda414a5356482c00d5ecc36dcd385158ac7c8fb4Virustotal results 22.03%Heodo
2020-09-19Arc 1235047.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcn/aHeodo
2020-09-19Dat X99368.docdoc 23c8490e131915effd12a2adf737b6fb74515b1b54759d0bb237eb7392338c08Virustotal results 22.03%Heodo
2020-09-19DAT 20200919 77790.docdoc 85c0fbbdc250f9ddf13c8a438a1c90ada6ff0e475cddaa45cbdbcfdf18c9dab9n/aHeodo
2020-09-18Untitled.docdoc d0b4b470d5e523a36a9751cec3eb8c5e1fae85904ab8637b745f1aebea3aa8cdn/aHeodo
2020-09-18Untitled 20200919 M5512.docdoc 9cfbd2b1385991e74144b32795611bff463960304a0bac67116378ec94caf271n/aHeodo
2020-09-18Mes 20200919 8100402.docdoc 33bab5da95407fde0ab439aa5942622a7e1286cb5ad74d4e55689fa5c59f8559Virustotal results 22.03%Heodo
2020-09-18Attachment-F884.docdoc df50fc4b87844f590011e4655d981e4aa7d498dec2d0940b554aea8538567352Virustotal results 22.81%Heodo
2020-09-18Inf-615023.docdoc c358d536ae6f128e4d3e87de606603d1eb16268041e18e130fac19804fb21de4Virustotal results 22.03%Heodo
2020-09-18Attachments-20200919-5959386.docdoc f13c7662ae4f7890dcaaeffec05902dec857b5cc7f106b1002c1b595add9912an/aHeodo
2020-09-18Rep 2020_09_19 3689.docdoc 8de922c73adca515635e350e8e59e9e2470d9baab56386d9e8f3b3f9b6bfb701n/aHeodo
2020-09-18FILE-2020_09_19-950.docdoc 5dcb34b82840165da4c8d3f693522093656d8731ab6ffade09c8f5d2b8376408Virustotal results 22.41%Heodo
2020-09-18FILE-V9954.docdoc bccc6031b088f432a5b9d9303eceeb6d9ba9da4ec4f85997f393f67e2d552819n/aHeodo
2020-09-18Attachments-2020_09_18-GUH581.docdoc 94cbcca1d095e7f389dc8a63c2efe17bf54bbbdab3b2ae794b6093bd8d65e9cen/aHeodo
2020-09-18TYL0431 2020_09_18.docdoc 6582b37fd7a1c9ef797e7f6db679df941000a9f14475cff833abe8d4b78e51f7n/aHeodo
2020-09-18FILE-20200918-U368370.docdoc b0e9328bcb95627a9137ba580a2369f569f9636c2f9f46ec63d55da3c7810997Virustotal results 30.51%Heodo
2020-09-18mes 2020_09_18 1928.docdoc b709505d72068d9b8b222a2b52a8178f0b8fc95b0256124c72f2fbcdea4dc417Virustotal results 30.51%Heodo
2020-09-18Doc-20200918.docdoc f8e7f7f012680a8d3f5624ea4deb0f4761bbf1b8b43d8696de50c5e8833f1c21n/aHeodo
2020-09-18Mes CM524092.docdoc 47a553542d803d57913fbd50e6c510a9d5a5a27338f8b149b7c7c23d3f5f4671Virustotal results 27.12%Heodo
2020-09-18list 2020_09_18 RYE60133.docdoc ad3ae846e4d7d6c6486ff7745250a6369003b467de82c65d5024b389f718c0c4n/aHeodo
2020-09-18Rep-20200918-WOT364.docdoc 459e35015e9a3742fc691cacea980bb8ac5761944e9b5b12eae483826aacc1dan/aHeodo
2020-09-18dat UVI520323.docdoc 437dab8ba10eb91c00d79f3019265d85eeec7dcd944ee86186a542f24a31b596Virustotal results 25.42%Heodo
2020-09-18list-20200918-4650942.docdoc 528cc8d3ea6fed5fceaa0bd0918bd41dfc6a2ac19f22b397892544b1e7200d6fVirustotal results 25.86%Heodo
2020-09-18File-2020_09_18-NXJ4539.docdoc 0263b53f04598f5cadac5f4f8dda3b7caec39583ec1d6caff37e9183df96f8ban/aHeodo
2020-09-18inf_2020_09_18_4263.docdoc 0afb7c179025ddfba82f253e521171894baccb916aadce3f0c6cd8014f706940Virustotal results 25.42%Heodo
2020-09-18MES 20200918 SRD141.docdoc 7a26d78e43eed9a8b66afce0aeb832d911c9e96642ba906f3c6c2c5c6cbaff21n/aHeodo
2020-09-18doc_20200918_R618.docdoc c1c7c1c836f1ba36f773936527d4d7afc53a36b7d4f5c191a08fa9b84c2af7c6Virustotal results 25.42%Heodo
2020-09-18FILE_2020_09_18_D106.docdoc a3243652b05c45b85ffbebf961ed8563c4fc164a71e7abf56feb805974745343n/aHeodo
2020-09-18MES_2020_09_18_EDN962137.docdoc c03b6f6a7c2392a296a5e3744871ecb5852a36e3946fb65cf574f54a6050ad39n/aHeodo
2020-09-18File-I91494.docdoc 72e7bd4d09757bec76ea8bcfbdc7764868642f075916f99b6fe0623a5729533dn/aHeodo
2020-09-18List.docdoc 2ffe410c23611da6f521bf9ea1c738509e7d399ef3fd0b539a2ac9469a132479n/aHeodo
2020-09-18dat 2020_09_18 2852150.docdoc 9f74c5855fc6ea9a1b608bc0a74b1ee1b6b0f14aa431ed67565aba64e7aab0a4n/aHeodo
2020-09-18file-2020_09_18-CXA6638.docdoc c82c3dc7341a149248f768f8f7da5e9f1ca7dcd9f2d1cd61a56386cfef07ff7bn/aHeodo
2020-09-18mes-7334644.docdoc a4e9fa7e865e2c2bae3abbd6d249ecc57198eb070b868ff767ac9220fd806efdn/aHeodo
2020-09-18ARC_YR649570.docdoc ca63d9c9e846ae66ae0030d7a8ec4041674dc2b6189b86eefad806122c65a092Virustotal results 20.34%Heodo
2020-09-18doc_AWK902.docdoc 09d7531172a59bcb88cd40ae8d44dcf6554175c2c77158b67c74426e86fdf9ffn/aHeodo
2020-09-18inf_2020_09_18_186796.docdoc 8e4b5c75dfd8ad1acefed08603f4a69c435e29f076db8183c17703d238ea71e1n/aHeodo
2020-09-18LIST-4682057.docdoc 41b56895d7750e19dc5f91eae36162bd717f4f1b7ec054e948d3c236ccec23d4n/aHeodo
2020-09-18inf_20200918_13243.docdoc 067b6c601b97d9573b74bd1ce702e0e904b1a6853984f51334eb17b7e5394ba5Virustotal results 23.73%Heodo
2020-09-18REP GU5067.docdoc f8a3c7880b09bfa1e2cd25c09e319e9fa1f694f78895bf9564c2688d1c08d06en/aHeodo
2020-09-18FILE_I14301.docdoc fd1c756de37284ef14753f94de746cb901e9270d43d949a73a4199657563f7b2n/aHeodo
2020-09-18file 20200918 A85618.docdoc b3df6baae42ad2fb9e41daca8e7ecfd97c85406cfaa41dee0fc391f1d447cb77Virustotal results 21.05%Heodo
2020-09-18Mes_20200918.docdoc 1977a3adfe1c4cabbf2555c097598719ac5955e1300726f0af8a4834ea9d2335Virustotal results 20.34%Heodo
2020-09-18MES 2020_09_18 376006.docdoc 16d16c19afc038d847158afb27766eb624e2d095168da4fd3ddd985c9554d119n/aHeodo
2020-09-18R0908_4675000.docdoc c14f6ea04faae9e49d10a9058b2f2ac09c82eab2a9c38bafc8e1d75209c9b927Virustotal results 18.64%Heodo
2020-09-18Untitled JBA916.docdoc 22c171075714c95ae4ca82895c1375553e8323f71f2a6cdb4f1ccff8e92fd690n/aHeodo