URLhaus Database

You are currently viewing the URLhaus database entry for https://rbji.com/rbjfiles/INC/G9W4hOKA9Gl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:561556
URL: https://rbji.com/rbjfiles/INC/G9W4hOKA9Gl/
URL Status:Offline
Host: rbji.com
Date added:2020-09-18 23:10:11 UTC
Last online:2020-09-25 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 23:12:17 UTC to brian{at}tierra[dot]net)
Takedown time:6 days, 23 hours, 24 minutes Bad (down since 2020-09-25 22:36:32 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19inf_2020_09_19_6236136.docdoc fca26f8a9f6995a0a5dccd24f54b77b3d5c855fe48084f99f9b2da3382f88c2fVirustotal results 30.51%Heodo
2020-09-19LIST_20200919_DR30660.docdoc 5a0c4c40fea422907e85ce8348431c8365731e13690a0df7ded61ac480bd6137Virustotal results 30.51%Heodo
2020-09-19Attachments_6359.docdoc d91d3355ed5c4d2b1c8a1577424bb71aa3ef224770b4d5c01dd7703a4c329eceVirustotal results 27.12%Heodo
2020-09-19ARC_20200919_08340.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19Attachments-2020_09_19-4505.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9Virustotal results 22.03%Heodo
2020-09-19INF 20200919 FFY19622.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7Virustotal results 22.03%Heodo
2020-09-19dat.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfVirustotal results 20.69%Heodo
2020-09-19DAT_NI265610.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19FILE-20200919-YQ560.docdoc 61df427b7811925c65b7097f247c0c66efd9be4177b08926eadc161d854b61abVirustotal results 20.34%Heodo
2020-09-19REP_240662.docdoc 9a89421741b56db1e2d97d925176d40fae890abdefd3e136a24afb0589d4371eVirustotal results 22.81%Heodo
2020-09-19PWS75323-20200919-0867.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 24.14%Heodo
2020-09-19Doc SEQ976168.docdoc 0d6380a49e7088513773efca368acb3a783954a2d4df49ea9b730c9e49969458Virustotal results 23.73%Heodo
2020-09-19file 20200919 KU133843.docdoc 9cfbd2b1385991e74144b32795611bff463960304a0bac67116378ec94caf271Virustotal results 23.73%Heodo
2020-09-19LIST.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28Virustotal results 23.33%Heodo
2020-09-19list-2020_09_19-69731.docdoc 906eb841dd00ed7c09bdb5dc7c0d3722f6313536e45201301a2db07d0fe04beaVirustotal results 23.73%Heodo
2020-09-1936925_20200919_NY4195.docdoc 606c981a35630090fe7df6ea2bd78be7c01eb20f5d266ba2432b209e9bf26eb8Virustotal results 22.03%Heodo
2020-09-19INF-15319.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19UNTITLED 2020_09_19 241.docdoc bad0da6e5c3252214e74c5ebd3ebca1b19331a5dc3c62d1b0c400f8ad73303a7Virustotal results 23.73%Heodo
2020-09-19REP-516356.docdoc 2cbeb14e3ad7c8a795f7454334ae6793f020780e53173535e65ddee8c2a717afVirustotal results 24.14%Heodo
2020-09-19INF_Y1414.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19Arc-20200919.docdoc 7914bb6c3d6664a065cdb3f06cfc21a7f85fd7423e3b5af3468245d1f03edf5cn/aHeodo
2020-09-19Attachments_20200919_7879.docdoc 4cd1338ce62760cd78c5eeb9a795195c5801a562e6adb2d0f0984640a5719bc3n/aHeodo
2020-09-19S43812_20200919_7122449.docdoc 1d13a0fe58c9b38ffc4121ee00cb8c1c7bd55d755cc87f610fb1a3c306204474n/aHeodo
2020-09-19REP_1689.docdoc 0f8726a2e1ed31116d9cf065548921ba480bafb9467bbbccc96ec094859734e7n/aHeodo
2020-09-19Doc_20200919_0591158.docdoc 006e64b6cfe2567e6bc6685453e8009b6b2bee02a0ce99713266b04087241d0cn/aHeodo
2020-09-19Inf_5915728.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2n/aHeodo
2020-09-19ARC-2020_09_19-8439.docdoc 48eb7810be7073be627369d41227071fd89b859692c501707fdbfce2300e42fcn/aHeodo
2020-09-19arc-146.docdoc be971e5ec9022f9fd6f2362de737a9133bda66f8e69ec70d11bba08b47f81075n/aHeodo
2020-09-19Doc-YG0704.docdoc ab4d0777ea8585140a9d19ccb330eaddeea2151248785fff7e097912d0a3af25n/aHeodo
2020-09-19file 2020_09_19 95771.docdoc 12184c3b864ed546a8c1c0b94d18631228a2cd6caa38e1d6c332c113d327f21bn/aHeodo
2020-09-19Untitled-NLI099051.docdoc 67cc9853ec0a3e3d1283d0ccc57907b9c5c60ff1359dab4e9456b581a3ebc3bdn/aHeodo
2020-09-19Dat 20200919 ATV23792.docdoc f5ca634bdeacd64ccc52ea932bd221762cc68524fcef2df96c77ecd777d16670Virustotal results 22.03%Heodo
2020-09-19Dat_20200919_U9786.docdoc 59ee3757e66be242efc0972dd6c65966fd25efedac6d7183bf2ebb22f73ed835Virustotal results 22.03%Heodo
2020-09-19dat-20200919-058.docdoc a6d4e72568e642cf4b7ebface0d1efd59bb14b348af845c74bd132af71733f53Virustotal results 22.03%Heodo
2020-09-18Rep 2020_09_19 7541.docdoc 000dd08101567f408a0ee2b7d095d3baa02f532ed3839f66b60b9d64ce065d17Virustotal results 22.41%Heodo
2020-09-18Attachment 2020_09_19 62872.docdoc 2a3e7c662c026f10d65fedffc2f513a8683860a3448c822016d34579120dfb36n/aHeodo
2020-09-18File_96831.docdoc 389d939ee0561031b3d437377550de0aa2e31ebecca5bc6529fe3f5b1c2ce8a1Virustotal results 22.03%Heodo