URLhaus Database

You are currently viewing the URLhaus database entry for http://valleymedicalandsurgicalclinic.com/ujftb/sites/OvM37KkGWcuLejYGPX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:558636
URL: http://valleymedicalandsurgicalclinic.com/ujftb/sites/OvM37KkGWcuLejYGPX/
URL Status:Offline
Host: valleymedicalandsurgicalclinic.com
Date added:2020-09-18 17:50:13 UTC
Last online:2020-09-22 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 17:52:44 UTC to abuse{at}choopa[dot]com)
Takedown time:3 days, 20 hours, 8 minutes Bad (down since 2020-09-22 14:00:44 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-193367APU.docdoc 4cd1338ce62760cd78c5eeb9a795195c5801a562e6adb2d0f0984640a5719bc3n/aHeodo
2020-09-19Attachment_20200919_438650.docdoc 5a0c4c40fea422907e85ce8348431c8365731e13690a0df7ded61ac480bd6137Virustotal results 30.51%Heodo
2020-09-19inf_20200919_1308556.docdoc 034a97e7614fadaf9552e4fbc5992139431bbc6bc905b9af8adea4d60b741f3eVirustotal results 27.12%Heodo
2020-09-19File-2020_09_19-RB279.docdoc 5c8826f1210fa85335233abd36c1a1139d5689142c5842c0da0c688f104c6410n/aHeodo
2020-09-19Attachments-20200919-7861959.docdoc 17b333cc6c291651161d6bab9f62df4f89a31b13b8b8db8722c6e6d069d1bc30Virustotal results 22.81%Heodo
2020-09-19inf_TB5243.docdoc 67cc9853ec0a3e3d1283d0ccc57907b9c5c60ff1359dab4e9456b581a3ebc3bdVirustotal results 22.41%Heodo
2020-09-19arc_20200919_HYJ75236.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19LIST 158.docdoc 50e2ef861a0588af5e970bd2bd2d4d52e68f8c65d8f82b2c2f6457adc2302ea1Virustotal results 22.03%Heodo
2020-09-19Rep_20200919_6827.docdoc 8d1f2360b408776088872210b32de86eb3f9ba1f6c038e9167351edc66528823Virustotal results 22.41%Heodo
2020-09-19MES_20200919_94465.docdoc 23c8490e131915effd12a2adf737b6fb74515b1b54759d0bb237eb7392338c08Virustotal results 22.03%Heodo
2020-09-19Dat-20200919-652.docdoc d0b4b470d5e523a36a9751cec3eb8c5e1fae85904ab8637b745f1aebea3aa8cdVirustotal results 24.14%Heodo
2020-09-19file KVH9500.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28Virustotal results 23.33%Heodo
2020-09-19list-381252.docdoc 906eb841dd00ed7c09bdb5dc7c0d3722f6313536e45201301a2db07d0fe04beaVirustotal results 23.73%Heodo
2020-09-19Attachments_20200919_70076.docdoc c358d536ae6f128e4d3e87de606603d1eb16268041e18e130fac19804fb21de4Virustotal results 23.73%Heodo
2020-09-19file-20200919-NVT959.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19Rep-N72276.docdoc 03caf29484a047db9c68e15e6117f665c59b1cc6ea7cdacba9042f80149861b9Virustotal results 22.03%Heodo
2020-09-19Attachments_20200919_EKI273.docdoc 5dcb34b82840165da4c8d3f693522093656d8731ab6ffade09c8f5d2b8376408Virustotal results 23.73%Heodo
2020-09-19inf 2020_09_19.docdoc 7234cb8db24e20ba0abe1fb9f9a177573e1e83122a6f3b8debd45e34b67a7775Virustotal results 20.69%Heodo
2020-09-19mes_G399243.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19UNTITLED-76343.docdoc 8065f24a60e594dd6166d1474692a8497b370ea658769bea254a65eff805ca26n/aHeodo
2020-09-19dat_V751309.docdoc 4a9b7794b446b3948e75da5f390b3cfd4764afe8d48109c42ef37606f5b4f572n/aHeodo
2020-09-19MES_8652072.docdoc 1d13a0fe58c9b38ffc4121ee00cb8c1c7bd55d755cc87f610fb1a3c306204474n/aHeodo
2020-09-19Doc_L201.docdoc 13431cff4346b87ec1e099ca8da43a0b6b7dca250d9c69bbc46b8f28dd09a68en/aHeodo
2020-09-19Untitled-20200919-446.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19rep.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2n/aHeodo
2020-09-19Untitled_E7996.docdoc 48eb7810be7073be627369d41227071fd89b859692c501707fdbfce2300e42fcn/aHeodo
2020-09-19ARC-20200919-L2728.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9n/aHeodo
2020-09-19arc-2020_09_19-9714.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7n/aHeodo
2020-09-19rep_2020_09_19_Q4955.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfVirustotal results 20.69%Heodo
2020-09-19LIST_20200919_62097.docdoc f5ca634bdeacd64ccc52ea932bd221762cc68524fcef2df96c77ecd777d16670n/aHeodo
2020-09-19ARC.docdoc ff17fcb2563e69e3f433d120bdcb9410c992e3abd0502b96fc663d2adda5bda0n/aHeodo
2020-09-19Dat_628.docdoc 9b15f15ca0fc3748ef3b9f9a91bae081e2b5c076d1b39e7e16cfbe3a08cc5070n/aHeodo
2020-09-18File 20200919.docdoc 000dd08101567f408a0ee2b7d095d3baa02f532ed3839f66b60b9d64ce065d17Virustotal results 22.41%Heodo
2020-09-18File 2020_09_19 1420.docdoc 28507b923fd0244f91298f75b8c588b4a5fdff53a29d81177bcbfdfd741f9b82n/aHeodo
2020-09-18FILE-20200919-054015.docdoc 389d939ee0561031b3d437377550de0aa2e31ebecca5bc6529fe3f5b1c2ce8a1Virustotal results 22.03%Heodo
2020-09-18Dat 20200919 GPJ768858.docdoc f0e6815411621dc6ccb4ca55c8c1ceba4ed59cc0f64b6884f0d93d49f9493bb5Virustotal results 22.41%Heodo
2020-09-18Attachment_2020_09_19_H8303.docdoc 606c981a35630090fe7df6ea2bd78be7c01eb20f5d266ba2432b209e9bf26eb8Virustotal results 20.69%Heodo
2020-09-18ARC_20200919_M08795.docdoc 0e31dc003b5fa4ef58751e94f3718852fdf5c75f438a8a587eac213cc8786c23n/aHeodo
2020-09-183764_20200919_8628.docdoc 2cbeb14e3ad7c8a795f7454334ae6793f020780e53173535e65ddee8c2a717afVirustotal results 22.03%Heodo
2020-09-18LIST-20200919-UDE275168.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2en/aHeodo
2020-09-18420NKK 20200919 QF995737.docdoc 94d5445a36c1741b9e7cf1a4a3d93f84511094b007a15afa0da3f586cf405132Virustotal results 27.12%Heodo
2020-09-18MES-C652.docdoc 6c10c2ec829e5c74174f1c3237f44a6aaee6d53c6fa9eaec16e8caeacc3a8b9bn/aHeodo
2020-09-18DAT-2020_09_18-8501.docdoc 9660dd01ee64ace04da407c96c1dd719b121175f82cf4830bba277f206919b3dn/aHeodo
2020-09-18inf-20200918.docdoc c3d3a8875994a4286a4689dec6992bfa46d12decace42927701e0265a33128c1n/aHeodo
2020-09-18arc-20200918-WC14915.docdoc 0993a8e2a1ede660ab29dac20d8b95443ba1577a1247c423d7c7fce39820fb51n/aHeodo
2020-09-18DAT 777135.docdoc 8a3a2eecd83a01a3a12933b730e8ef7c752c7bbee0818f77940551ba926cf847Virustotal results 27.12%Heodo
2020-09-18inf_BWR5960.docdoc 36e558eb9793c1590c59d139f78c9ef94073482a1cf904df78f45a2da8bfccc9n/aHeodo
2020-09-18Mes 2020_09_18 WCQ2485.docdoc 47a553542d803d57913fbd50e6c510a9d5a5a27338f8b149b7c7c23d3f5f4671Virustotal results 27.12%Heodo
2020-09-18list-2020_09_18-TJZ654297.docdoc ad3ae846e4d7d6c6486ff7745250a6369003b467de82c65d5024b389f718c0c4n/aHeodo
2020-09-18Doc_2020_09_18_K124.docdoc 59be634c99d32cc1d2bdfc3663c81ef4a20e38bfb841fb02cf3152233aa9f7b2n/aHeodo
2020-09-18ARC 4857.docdoc 69c0abbfa57fb4e08634b1d77ced96d0121e6b4d065d1b586d4968995bdab7dbn/aHeodo
2020-09-18ARC-20200918-KBB268490.docdoc 858abd3d8e95ff9e3e6cc3248b87ee49e9a57c339a4f849bf6a8436d8c7fabd6Virustotal results 25.42%Heodo