URLhaus Database

You are currently viewing the URLhaus database entry for http://somcorbera.cat/wp-admin/attachments/f9Y8BG8vLOb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:561936
URL: http://somcorbera.cat/wp-admin/attachments/f9Y8BG8vLOb/
URL Status:Offline
Host: somcorbera.cat
Date added:2020-09-19 00:24:33 UTC
Last online:2020-09-28 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-19 00:26:31 UTC to abuse{at}cdmon[dot]com)
Takedown time:9 days, 6 hours, 42 minutes Bad (down since 2020-09-28 07:09:22 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19Doc_20200919_Z436336.docdoc 4cd1338ce62760cd78c5eeb9a795195c5801a562e6adb2d0f0984640a5719bc3n/aHeodo
2020-09-197284-AQ27804.docdoc c73c3b2b3cd160b32aa1f2e305d8a1b37490be7366b48f3182c6eca9dfebfe52Virustotal results 22.03%Heodo
2020-09-19File 20200919 78635.docdoc 17b333cc6c291651161d6bab9f62df4f89a31b13b8b8db8722c6e6d069d1bc30Virustotal results 22.81%Heodo
2020-09-19rep-2020_09_19-661333.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7Virustotal results 22.03%Heodo
2020-09-19dat 2020_09_19 1396698.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfVirustotal results 20.69%Heodo
2020-09-19dat_5316.docdoc 93e1254e65773ffb3d3f3aeeda414a5356482c00d5ecc36dcd385158ac7c8fb4Virustotal results 22.03%Heodo
2020-09-19Doc_9877442.docdoc 57335ffb483da81d9154676109daceab8f15e679af95fe3d0313f09d70619d85Virustotal results 22.41%Heodo
2020-09-19Mes 2020_09_19 TDY8143.docdoc 61df427b7811925c65b7097f247c0c66efd9be4177b08926eadc161d854b61abVirustotal results 20.34%Heodo
2020-09-19ARC-2020_09_19-3266.docdoc 0b58ba1859d47221ab95122240157d9d4bc885723fb94b700f1c36cb28edf3c6Virustotal results 22.03%Heodo
2020-09-19file_2020_09_19_840775.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 24.14%Heodo
2020-09-19Rep.docdoc 0d6380a49e7088513773efca368acb3a783954a2d4df49ea9b730c9e49969458Virustotal results 23.73%Heodo
2020-09-19Untitled 20200919.docdoc 2a3e7c662c026f10d65fedffc2f513a8683860a3448c822016d34579120dfb36Virustotal results 23.73%Heodo
2020-09-19REP 20200919 XE40204.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28Virustotal results 23.33%Heodo
2020-09-19903118 20200919 0200110.docdoc 389d939ee0561031b3d437377550de0aa2e31ebecca5bc6529fe3f5b1c2ce8a1Virustotal results 22.41%Heodo
2020-09-19List 2020_09_19 231.docdoc 33ce6293593a02d1b88213d5e0bd0fcc3667491733ce5009426e8fd5c2e6dc50Virustotal results 22.81%Heodo
2020-09-19UNTITLED-20200919-748.docdoc 7de7c890bf221f642348c57fd51a9d1ebac44cf9e5136ce1f0a12c7e587e69eeVirustotal results 22.03%Heodo
2020-09-19Untitled-20200919-HJ0193.docdoc b7b9257d8c50f28e5aa87090083acecd0359655c255d52dd1030c0375097e0e6Virustotal results 24.14%Heodo
2020-09-19file 20200919 VJP1360.docdoc bad0da6e5c3252214e74c5ebd3ebca1b19331a5dc3c62d1b0c400f8ad73303a7Virustotal results 23.73%Heodo
2020-09-19IOH7012-20200919-GBY3292.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2eVirustotal results 23.73%Heodo
2020-09-19inf 760799.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19rep-55729.docdoc 8065f24a60e594dd6166d1474692a8497b370ea658769bea254a65eff805ca26n/aHeodo
2020-09-1958534SM MR6365.docdoc 7d635d13a89e28fd6b0237c35f566e2be9502c55ae2dee5b94c1b5281c018152n/aHeodo
2020-09-199108307 5516.docdoc 32f41a25d60eecd90e5e66e0ac2850bd6fbe4f97ddb2dd1e1c3998ab3089f391n/aHeodo
2020-09-19UNTITLED_20200919_773201.docdoc 0f8726a2e1ed31116d9cf065548921ba480bafb9467bbbccc96ec094859734e7n/aHeodo
2020-09-19File 03490.docdoc 006e64b6cfe2567e6bc6685453e8009b6b2bee02a0ce99713266b04087241d0cn/aHeodo
2020-09-19129-2020_09_19-3592.docdoc 4c294575dcf08d7b4946e3d8d883d7a62ab36dd5170bf983df08adf59d7414dcn/aHeodo
2020-09-19Attachments-2020_09_19-N0481.docdoc 0e7b7cc13660693acc3ac77a1ba7b6128c10bfe810eecb4d67f8b315e94c047dn/aHeodo
2020-09-19mes.docdoc ab4d0777ea8585140a9d19ccb330eaddeea2151248785fff7e097912d0a3af25n/aHeodo
2020-09-19DAT 2020_09_19 ID8496.docdoc 62693145b7a340ec76dc8653cd1f603f1f25611da8b7e83de3979fee1fdb80eeVirustotal results 22.03%Heodo
2020-09-19file 126134.docdoc 75e37e5c3591743af109482748f2a48e550f1a9d767316a8cece66fb4fe8c222n/aHeodo
2020-09-19Attachments_2020_09_19_9220.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47Virustotal results 22.03%Heodo
2020-09-19REP_2020_09_19_16253.docdoc e0343838dbe81e4a9395924017c0f16a9a100c8f03f14eb75fc8be10c72edd60n/aHeodo
2020-09-19dat-2020_09_19-7846240.docdoc ff17fcb2563e69e3f433d120bdcb9410c992e3abd0502b96fc663d2adda5bda0n/aHeodo