URLhaus Database

You are currently viewing the URLhaus database entry for http://bavhome.com/wp-content/FILE/HKWOdLLTcRocfIcUTyP/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:556296
URL: http://bavhome.com/wp-content/FILE/HKWOdLLTcRocfIcUTyP/
URL Status:Offline
Host: bavhome.com
Date added:2020-09-18 14:43:34 UTC
Last online:2021-04-16 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 14:44:28 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:6 months, 29 days, 22 hours, 0 minutes Bad (down since 2021-04-16 12:45:18 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19dat-20200919-VXL159.docdoc 8065f24a60e594dd6166d1474692a8497b370ea658769bea254a65eff805ca26n/aHeodo
2020-09-19inf-C904945.docdoc b81a03fb70bafe2e7fd636ad7371dd77cd8fb21b274fda2b5bfb4b2d4356e91eVirustotal results 36.21%Heodo
2020-09-19FILE-2020_09_19-PH009513.docdoc d91d3355ed5c4d2b1c8a1577424bb71aa3ef224770b4d5c01dd7703a4c329eceVirustotal results 27.12%Heodo
2020-09-19Mes 20200919 3224722.docdoc 5c8826f1210fa85335233abd36c1a1139d5689142c5842c0da0c688f104c6410n/aHeodo
2020-09-19mes 20200919 074.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19File_2020_09_19_BNZ92260.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7Virustotal results 22.03%Heodo
2020-09-19LIST_3561.docdoc 12184c3b864ed546a8c1c0b94d18631228a2cd6caa38e1d6c332c113d327f21bVirustotal results 32.20%Heodo
2020-09-19List-20200919-4988941.docdoc 57335ffb483da81d9154676109daceab8f15e679af95fe3d0313f09d70619d85Virustotal results 22.41%Heodo
2020-09-19dat_20200919_4635.docdoc f5ca634bdeacd64ccc52ea932bd221762cc68524fcef2df96c77ecd777d16670Virustotal results 22.03%Heodo
2020-09-19DAT 20200919 23430.docdoc 0b58ba1859d47221ab95122240157d9d4bc885723fb94b700f1c36cb28edf3c6Virustotal results 22.03%Heodo
2020-09-19REP_2020_09_19.docdoc 85c0fbbdc250f9ddf13c8a438a1c90ada6ff0e475cddaa45cbdbcfdf18c9dab9Virustotal results 22.81%Heodo
2020-09-19FILE 20200919 XKY454176.docdoc 3eb7679ffcb5eb0cd537545d2e28ad49fdb4bc89366476f731659703b6707ff5Virustotal results 22.41%Heodo
2020-09-19List-UCL8684.docdoc 2a3e7c662c026f10d65fedffc2f513a8683860a3448c822016d34579120dfb36Virustotal results 23.73%Heodo
2020-09-19Mes-FV360.docdoc ea48e310224317a3a93d7679dbb50ae967383d973cf7713613d8a240224ff454Virustotal results 25.00%Heodo
2020-09-19UNTITLED-G611.docdoc 606c981a35630090fe7df6ea2bd78be7c01eb20f5d266ba2432b209e9bf26eb8Virustotal results 22.03%Heodo
2020-09-19Doc 20200919 L50174.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19Attachment_2020_09_19_573.docdoc b7b9257d8c50f28e5aa87090083acecd0359655c255d52dd1030c0375097e0e6Virustotal results 24.14%Heodo
2020-09-19Attachments HLC698.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-1914863-2020_09_19-FZO9701.docdoc 7914bb6c3d6664a065cdb3f06cfc21a7f85fd7423e3b5af3468245d1f03edf5cn/aHeodo
2020-09-19LIST 20200919 0314.docdoc fca26f8a9f6995a0a5dccd24f54b77b3d5c855fe48084f99f9b2da3382f88c2fVirustotal results 30.51%Heodo
2020-09-19REP_2020_09_19.docdoc 1d13a0fe58c9b38ffc4121ee00cb8c1c7bd55d755cc87f610fb1a3c306204474n/aHeodo
2020-09-19list-20200919-182.docdoc c67445bd4a7a3846de10ecccfc8117f4c144d3c2cc2ed29bbd934d3e06dd7e9bn/aHeodo
2020-09-19Rep_2020_09_19_XMF2797.docdoc 006e64b6cfe2567e6bc6685453e8009b6b2bee02a0ce99713266b04087241d0cn/aHeodo
2020-09-19147AA 0396.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2n/aHeodo
2020-09-19arc 20200919.docdoc c73c3b2b3cd160b32aa1f2e305d8a1b37490be7366b48f3182c6eca9dfebfe52n/aHeodo
2020-09-19LIST_2020_09_19_683.docdoc be971e5ec9022f9fd6f2362de737a9133bda66f8e69ec70d11bba08b47f81075Virustotal results 22.03%Heodo
2020-09-19ARC-2020_09_19-86637.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9n/aHeodo
2020-09-19doc 20200919.docdoc 4f95474b074798a5301ed054cc87ee6768a0c44b9d2a39f679750741537dcea0Virustotal results 22.41%Heodo
2020-09-19Rep 20200919 ULW3530.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47n/aHeodo
2020-09-19INF-53165.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19ARC 20200919 G5203.docdoc 8d1f2360b408776088872210b32de86eb3f9ba1f6c038e9167351edc66528823n/aHeodo
2020-09-19MES 20200919 7548.docdoc ff17fcb2563e69e3f433d120bdcb9410c992e3abd0502b96fc663d2adda5bda0n/aHeodo
2020-09-19dat-20200919-FU625.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 22.03%Heodo
2020-09-18Arc 2020_09_19 7194.docdoc 0d6380a49e7088513773efca368acb3a783954a2d4df49ea9b730c9e49969458n/aHeodo
2020-09-18Mes-6345.docdoc c23cc89488404b578a22052d1d946ea0e421961bb77a5c4b002d890506c2aba6Virustotal results 22.41%Heodo
2020-09-18Arc 20200919 QR2636.docdoc 906eb841dd00ed7c09bdb5dc7c0d3722f6313536e45201301a2db07d0fe04beaVirustotal results 22.03%Heodo
2020-09-18file-916.docdoc f56906e33a9a9bd3b074b3b5c24c2e98ba58817c4c61452977054f27d0d9312dn/aHeodo
2020-09-18arc-20200919-MX089672.docdoc 0e31dc003b5fa4ef58751e94f3718852fdf5c75f438a8a587eac213cc8786c23n/aHeodo
2020-09-18file_2020_09_19_YZ685.docdoc 8de922c73adca515635e350e8e59e9e2470d9baab56386d9e8f3b3f9b6bfb701n/aHeodo
2020-09-18DAT-20200919-32691.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2en/aHeodo
2020-09-18Rep-TTZ097108.docdoc fd925205136ce3b71945709fdfbbdda52ea8fd455f8e4e410f942ee48f893b76Virustotal results 28.07%Heodo
2020-09-18doc_2020_09_18_GPG145111.docdoc 6c10c2ec829e5c74174f1c3237f44a6aaee6d53c6fa9eaec16e8caeacc3a8b9bn/aHeodo
2020-09-18Mes 2020_09_18 OGW8368.docdoc 6582b37fd7a1c9ef797e7f6db679df941000a9f14475cff833abe8d4b78e51f7n/aHeodo
2020-09-18448XNC-20200918-798517.docdoc 1d188489aa0c86820ef03aef6d4c6737367a5872ca87080c9fb14670099d756dVirustotal results 31.03%Heodo
2020-09-18dat-20200918-6280.docdoc 0993a8e2a1ede660ab29dac20d8b95443ba1577a1247c423d7c7fce39820fb51Virustotal results 31.03%Heodo
2020-09-18Untitled 20200918 409.docdoc 616b3634b06ebfcbeafec931856cf7455e3e8bc1c9dcd964e5b8a441aa3511bcn/aHeodo
2020-09-18UNTITLED 339.docdoc d05dfb23daae9a5649bfb3524abe2e785019321bafdc50d9dc3bcc48b2aa17d0Virustotal results 25.86%Heodo
2020-09-18FUG602_20200918_0455.docdoc 5ab22cc852aaef34ff92b6dfc926ae182c1ca84cc17ddefb9cf2340a73dd7b64n/aHeodo
2020-09-18Untitled_2020_09_18_XNJ474000.docdoc 65603b499c24d66104493036513a1bdaa69eaed1280c65bbafdbc9f26c35a502n/aHeodo
2020-09-18dat 2020_09_18 13025.docdoc 851a395186b32fd0d0176d07440e7a1a5c05a5eabfd843b7dce3d2586c1ecd01n/aHeodo
2020-09-18Attachments-20200918.docdoc 69c0abbfa57fb4e08634b1d77ced96d0121e6b4d065d1b586d4968995bdab7dbn/aHeodo
2020-09-18Inf_20200918.docdoc b1ea1b35bd161e9d432523b6f7cc6c4868c5ecf8065f64d0030fff59e0aa99f2n/aHeodo
2020-09-182518794 Y9538.docdoc 84d59b721ec78cc9090af23a6c1bb391200be0a712dfa25ea26c74207c6ae7a8n/aHeodo
2020-09-18INF_2020_09_18_02793.docdoc 29c2db70c2ce8da26776dac8aa23097df5663524a46ac77518a87d9d964c4e8fVirustotal results 25.42%Heodo
2020-09-1862867819 2020_09_18 313626.docdoc 3c932359391f21f99046ff99927040cbdd34c0bb1d8d14a2ef54724ef8dc1df0n/aHeodo
2020-09-18Arc_2020_09_18.docdoc c78b6fd735feacf05ab8254985b5a5f154b52b13e5c0033b566d90c3155c915an/aHeodo
2020-09-18Rep.docdoc 40afc53b7c0069afdc962caa737c4ac768d922b355bbe22c793eabc2017c3e56n/aHeodo
2020-09-18LIST_2020_09_18.docdoc 818a38c5ed237846eff052db6fc103a6359c3bba18679dcce7dc5203ed68e2abn/aHeodo
2020-09-18REP-2020_09_18-6583715.docdoc 3818966f06313456db929b2ca2b80c73b336e9190e4cda521901a342ea19721cn/aHeodo
2020-09-18doc-20200918-CL104784.docdoc 849b9573ea464d27f0d384f1aeab58d1d384f3f2ba08e2dc04f66b97e7f015e4n/aHeodo