URLhaus Database

You are currently viewing the URLhaus database entry for http://ebcsb.net/images/balance/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:565593
URL: http://ebcsb.net/images/balance/
URL Status:Offline
Host: ebcsb.net
Date added:2020-09-19 09:34:05 UTC
Last online:2020-10-20 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-19 09:36:25 UTC to abuse{at}mxhost[dot]ro)
Takedown time:1 month, 1 days, 3 hours, 1 minutes Bad (down since 2020-10-20 12:38:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19BAL_FM7291736429GA.docdoc e9325a711e0f6f605b85898c5b507d4320e1f1dc672c68172b06cda359b5107eVirustotal results 34.48%Heodo
2020-09-19JX_89063569.docdoc a76f26ab417e48dda54f238aad10c895f9d842783705b9946da669a7768ec8f3Virustotal results 40.68%Heodo
2020-09-19FILE_09114299541935922146.docdoc 6f78fbb2d641a076bd2f40a39b2802a3ece7627b834468e1af726bc6bcec7237Virustotal results 40.68%Heodo
2020-09-19Z_VBR_090120_PIO_091920.docdoc 391cd9bd45449d75d87e8d3b434aeed7fc41ee587f7b36345418f388f2acb390Virustotal results 42.37%Heodo
2020-09-19BAL_WG0282079634AM.docdoc 336faca574dbafcf9eb66a5499f5b37d83a6ad046b7a8a7db5636040fa605429n/aHeodo
2020-09-19UXW_090120_STC_091920.docdoc 48516090408f4d8cfbed9330748f7647d9e7c7d03fc6845dff52b900751f2c3aVirustotal results 40.68%Heodo
2020-09-19FILE_KW2298338572OT.docdoc 20afdfa7a7c7a299565cdd046c41bcbea4b1cbdc4041edc9f0e51d52dac04a0cVirustotal results 40.68%Heodo
2020-09-19INV_PO_09192020EX.docdoc c8fc2ffef7922459d1144fe2ea5973e62255d0256394126a4cb635bcaa107fbeVirustotal results 41.38%Heodo
2020-09-19BAL_PBC_090120_VZD_091920.docdoc d7f9f33aa1e41e5cf3ed675039323eedced58cb2e29f20b2fb2b6df79ab141d2n/aHeodo
2020-09-19INV_3073647711514923564297973.docdoc e5d9bb556a385de29f04eccbf388a0e8f73f556394bfcaff0a6c7ffb15e85a48n/aHeodo
2020-09-19INV_JI8220492820EI.docdoc 6da6b99d1e7334c2df666c15e596c4fb9cca58c3f3891e9cc6676580e5b1dcbfVirustotal results 35.09%Heodo