URLhaus Database

You are currently viewing the URLhaus database entry for http://chezalice.co.za/content/balance/hacybf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:588316
URL: http://chezalice.co.za/content/balance/hacybf/
URL Status:Offline
Host: chezalice.co.za
Date added:2020-09-21 18:20:40 UTC
Last online:2022-08-26 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 18:22:39 UTC to abuse{at}netim[dot]net)
Takedown time:1 year, 11 month, 13 days, 21 hours, 9 minutes Bad (down since 2022-08-26 15:32:35 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-07-13BAL_LJ7587497615OI.docdoc 912d584edc7be7c5c4120e87dba10281d1cf2ee1d46cbf4f265ad7e4c5839408n/a Heodo
2020-09-2311874632.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23DOC_831770601.docdoc 936e0b3b696a31047618a5ffe005e0500e2dd472581d4df1580db803e19cca8aVirustotal results 35.48%Heodo
2020-09-23INV_PO_09232020EX.docdoc 93fddf6220e95dc443df2a8bea1bd77d75a502ca3d7ba4428a6f7eccdf3c659eVirustotal results 35.48%Heodo
2020-09-23LCU_090120_QYI_092320.docdoc 15b6e8645e321e35774c5f7b9e295ba0e3d31d3f116e7a67724e6e0e5f8f3ed8Virustotal results 36.07%Heodo
2020-09-23A_0333075489188588763483859.docdoc 5a6efe389fc1530d950fe7f4032d8f0c585eb3c4ccd412e20bcae526b12691b6Virustotal results 36.07%Heodo
2020-09-23A_RARND96OIGM.docdoc 9ada6e70d1ea3cc0f566130a6c075640478ba1a8c0b42a0dd5e8b0a318ea1009Virustotal results 36.07%Heodo
2020-09-23TOZM_RG6572706284PV.docdoc f732dff0368dd8ff983021f4786d2c04ecb2f9196327138f25d6ca5272c9b556Virustotal results 35.48%Heodo
2020-09-23DOC_NFI_090120_TCC_092320.docdoc 920ec5e49cd513625409968ac2e4fff374909c666943e0f55771bb56f1ce2020Virustotal results 37.10%Heodo
2020-09-23OPD793O7O7RM.docdoc b853cd46658fd7e0fc597e041702404ceb38bce2a718061faa3170d5389828bfVirustotal results 36.07%Heodo
2020-09-23BAL_TGL_090120_QOX_092320.docdoc d883db39359e5a0cf794c3c7892eec5ae89669110839e909876a1b5aa527ddbfVirustotal results 41.94%Heodo
2020-09-23UJU_5891498335240.docdoc f06641ee9e6b743cb2edbd1898982be6d7ea50c042b93330a7bb869df86fb945Virustotal results 38.71%Heodo
2020-09-2306588329.docdoc 66aa75aca1e5a0fae3797f424ff58868d5a813eeef2d2c287a893e91b60769f8Virustotal results 30.65%Heodo
2020-09-23INV_LB9436558537UK.docdoc 7fc71d784c714360d684b4c25382fe807f04a3cbd861352f3c19fa0fd789e59dVirustotal results 32.26%Heodo
2020-09-2380560581725882801.docdoc 23bc63af094f80c54cfecb85f86f0b2f1975ae55f29d9d66ea61d6612c36a567Virustotal results 37.10%Heodo
2020-09-23BAL_33041141336267805685.docdoc 5503f97a821a1c8dee9c3e1bcdc31e1fc7d98157b552c7cc79605a9d68dd8b12Virustotal results 30.65%Heodo
2020-09-23REP_40011117.docdoc be8eff5238b1b4c55eaf6bf5399d71b18bc093dbf2344c41e86f192173e1a5efVirustotal results 33.87%Heodo
2020-09-23INV_38682167.docdoc 8f8f1029e9909427e27aa6d225db5eb6d8767560af23836c44a0abff203eae4bVirustotal results 27.42%Heodo
2020-09-23INV_PNY_090120_YNZ_092320.docdoc a306f78cac809e60ccf84e607470e4c43f0de4efe4dcd2f0e470786a5f672a35Virustotal results 29.03%Heodo
2020-09-23REP_76443287697.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 31.15%Heodo
2020-09-22REP_KAB55HEKWZS.docdoc 0bf81a6e813d1474fb8f3bc1b2071f479aa978b3e536a2c960d60226fd1ebaaeVirustotal results 30.65%Heodo
2020-09-22BAL_RLB_090120_IKV_092320.docdoc 93fb00cace65d90b02ab79f949887b3eaa5b0a0bca1e4a9d7c20576f8ad18deeVirustotal results 30.65%Heodo
2020-09-22CW_WBO_090120_GXO_092320.docdoc eec6b346639f5aa9208c2fbc57161a281b1f72b3902a41ffdfe3a3a5b1ae3a3aVirustotal results 30.65%Heodo
2020-09-2241242880.docdoc a7305cf8e088408136fdfd5deadd230a7d00a03b1cc3fc12fc0705a30b4e0ae7Virustotal results 30.65%Heodo
2020-09-22DOC_HO4735960484SC.docdoc 10fe3df8f6540696c8eaf649bc752e30d5533b0203869ec0839cf045227620baVirustotal results 27.87%Heodo
2020-09-22FILE_WW8543161705PY.docdoc 814f137cae855a704657faabeeebe984d9e9677440e260fdba8d193f3f24005bVirustotal results 27.42%Heodo
2020-09-22YGZ_090120_FJY_092220.docdoc 8545f8aee7ed198b20effca9952996d49c5b91811a6dc47bdda10aa92e633938Virustotal results 28.33%Heodo
2020-09-22U_PO_09222020EX.docdoc f929a641d61afcc3da16efb268321fa3a98a19ed3cacd0d1b6b2a98c5de37d35Virustotal results 27.42%Heodo
2020-09-226950600614416144.docdoc e446be795bac5464b1bb80859e2ffd0857fe8d26f1f6973457b491498010f0c1Virustotal results 27.42%Heodo
2020-09-22R_8262524970018740.docdoc f8f2dc63225fa38d16de547469f9c418f3093385a270836e7431aad8bf52eebfVirustotal results 28.81%Heodo
2020-09-22PO_09222020EX.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405can/aHeodo
2020-09-22BAL_P2QESABTJA7OF0.docdoc 65da347c17ea74a9ddd129c6a7d05a42b72f4d4588b3d53e70ce9e96a118cd69Virustotal results 27.42%Heodo
2020-09-22INV_XTA_090120_OYO_092220.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efVirustotal results 27.42%Heodo
2020-09-22BAL_40832015.docdoc 02503f6546f32015f98eb839efb8b3d86d56b8ab5de5a30b5d6e99b4bd41802dVirustotal results 48.39%Heodo
2020-09-22S_6000793828096493.docdoc 26df475661d0c478c1fd69028ee3eca341beeb52a8d3a364e0c9d2796718325aVirustotal results 48.33%Heodo
2020-09-22LW1615131818OT.docdoc f89aa22c1927349bda0dbff535a94d4950810fb1c7306f3043c4462dcb1ba53aVirustotal results 46.77%Heodo
2020-09-22REUT_6DK0EAP7W3.docdoc 115d1ed6f823c370e1b33dfa97569b4c77dd8e1021f3e62f54ca9860da3d0033Virustotal results 23.33%Heodo
2020-09-22FILE_PKT_090120_WRU_092220.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 46.77%Heodo
2020-09-2249376623631.docdoc 868edec3ec279aeead8acb68afa154463ee9c468e59e7a39c2ac8cc532356c27Virustotal results 46.77%Heodo
2020-09-22V_WCKW88O.docdoc e9eef03a2437c273d0745bcc0b14df9ad8c3cb2807330029d609796172ad5d45Virustotal results 46.77%Heodo
2020-09-22QZG_090120_GCX_092220.docdoc deb600ac1ac3e5230085da737631928e9460610812ddec5ab166f830acd7a411Virustotal results 45.90%Heodo
2020-09-22649RYBRXGGLVYW.docdoc ee9c083f564292675dc436701b08e7e57bafc7483a2df297a361ccebd2456f95Virustotal results 42.62%Heodo
2020-09-2292568302.docdoc 5c67a313b984dab65ca85a5fbc4fafa12240ffeb66fd25b980a691a56d98b1f2Virustotal results 37.10%Heodo
2020-09-2299576889.docdoc d00dbd221b3b4987bac5866f5989056f9a7f250dd8a1fea24c2ca3c9a88f1ffcVirustotal results 24.59%Heodo
2020-09-22INV_PO_09222020EX.docdoc 9bf0d791ca4a4276d0eb75151a08b6c78c6859a87418de1441e628aa592bc365Virustotal results 32.26%Heodo
2020-09-22M_WN3049692333IR.docdoc 0490f225c70972f96003689bd80f008021b6a7fe6e0973bed7e7caa00b972edbVirustotal results 32.26%Heodo
2020-09-22K_NT5043682500AL.docdoc 013f49af6f7f5e1e34116aa22e1bc2ba4babbb2c0b0f97bf4da287ce88b16a16Virustotal results 51.67%Heodo
2020-09-22LYT_090120_NSV_092220.docdoc 8f51045bf4512d45bd027b735f25ad7e29ff6f26ff53ea4fe4bb6cd083f432f3Virustotal results 50.82%Heodo
2020-09-22BAL_PO_09222020EX.docdoc 64a28ead161d7e6125bb0eb7e8fb2cfa83c18c53ba5b8c0b369f222bd4c28ad6Virustotal results 50.00%Heodo
2020-09-22JR_MK8694574034KW.docdoc a28d0c32d71e746278dae91f242085290e2985efbfe09594c6f0adc2b1d7af4an/aHeodo
2020-09-22U_KH9432217553ZE.docdoc 74a6334b6418e88aa1a0e2df20b00ce5686a53784ccd705131de2ac7c5229486Virustotal results 50.82%Heodo
2020-09-22BAL_PO_09222020EX.docdoc 193194a1f2cec3953fba2121f846171524d92ef27569d72e891d3a175cafa647Virustotal results 49.18%Heodo
2020-09-22EHB_090120_DTF_092220.docdoc 2a015f2abc55dcffd1ce46798d54c98d3c4f5b2aaed71c349a21e7a0abc3a792Virustotal results 49.15%Heodo
2020-09-22I_175634606199.docdoc 58af25b2cb1ea8c3a64102c1f8027766a08fea7b4faf1b4c16e11daa80df8aa7Virustotal results 50.00%Heodo
2020-09-22GI8578864273MM.docdoc db850ad7899f9d7b77e6a749543643030596ff548f4ebc57d463cac0a52a6ef3Virustotal results 50.00%Heodo
2020-09-22DOC_TY89O2IDHPG.docdoc 748c41d1a000aea514c6a37f5c1e4f0c856109a038d5303337d2564bd75c21fbVirustotal results 49.15%Heodo
2020-09-22ODP_090120_QDB_092220.docdoc 0c1cc5960132333aeb60b0be9cbebd1dd6111da0266048bab71719914353e512Virustotal results 48.33%Heodo
2020-09-22BAL_PO_09222020EX.docdoc dfc0eeec857c03af491878b0b6e9a4fe2dd417135410856677216baf78681909Virustotal results 48.33%Heodo
2020-09-22REP_YZ3MI31VQ2.docdoc 5113e330fdea6c93e3ef5a610817655f04d59be9bb5fa3a4f4167f8ccbb01d48Virustotal results 44.07%Heodo
2020-09-22Q0PZN95S0.docdoc 6b58f3d639dbfd3f04c2534bac10583c7e2d0ba1e88ef31ebe443fc18f409a76Virustotal results 46.30%Heodo
2020-09-22INV_CYENZBJ5.docdoc 8d49090e5ad1ca487645e8dad8b6e90d267b4a7f5d4cdf4d9c4441d969f088caVirustotal results 45.76%Heodo
2020-09-2280124183.docdoc ec2ce44f2fbd4e3dae1a7268da4de197bd006a620ec08af7122f25557cd49196n/aHeodo
2020-09-22DOC_28195761.docdoc 2441d3572b85985e60886402e103e4f699b34844f25875813f617c2ac28618daVirustotal results 40.98%Heodo
2020-09-22OW0380907430KY.docdoc f574d141e50f5f004b6d5b2932ce746ef012404c5bf46933947ad0ce3b397665n/aHeodo
2020-09-22DOC_48841900.docdoc 9607e3321e8b588ead936b5c46607981cf642a9a5abc9a7d1d0f7474dea3b6fan/aHeodo
2020-09-22R_PO_09222020EX.docdoc 863a67fda8f1051e42a5caca1a89f4bd895d01947127dceebf7acb4eb4b881bfVirustotal results 33.33%Heodo
2020-09-22NW7361753912DB.docdoc 3ed5e00e046ce19a840746219ff3efcd6fcc4ddd0b608e51203398bfe2360da2Virustotal results 31.67%Heodo
2020-09-22BAL_NVR_090120_CLK_092220.docdoc 58dca36db6814be3bc7016599693d84cc074f17451bebe7eb98baee99cef0ac9Virustotal results 32.79%Heodo
2020-09-223902149694502.docdoc 9e25ce36733cb087f13b4a1c744a28856f2e1e878782893ac18e682ad0f2e842Virustotal results 32.79%Heodo
2020-09-22DOC_PO_09222020EX.docdoc d1083829516cf0b07a7ebf52d747d76ab73da99f9cb042d583f241687917a433Virustotal results 33.33%Heodo
2020-09-22REP_NGB_090120_XVH_092220.docdoc b9ae26c8fc56943d82223a7d3c26671f4247a42d3d56fc25a455217cb84674b7Virustotal results 32.79%Heodo
2020-09-22REP_QV6666659208UN.docdoc 6696d2b4bda784271bb22b8bf2ee6db7547f366940a5bba7444ec265cbc1b0e1n/aHeodo
2020-09-22REP_22639197.docdoc ccc41f0194e3ea4cd0460cdb76391a4edf6732e895a600acaeb6099a6796c558Virustotal results 32.79%Heodo
2020-09-22FILE_OR4668966619DT.docdoc 43b978d85da34d8b60a7555d0c1ca67e51817214b70f29e321eacd4c96f35051Virustotal results 31.67%Heodo
2020-09-21UXLN_45259029.docdoc 62f036b925c8b4c5c90b88eaf15e774481a952ac6e1c7596916e10054b82daceVirustotal results 30.00%Heodo
2020-09-21ZVID_3564592379620405569.docdoc 6aaa5d1200a0ddb1900acfe0f5b79eac2ce5b928d30db37c4f21e43cea55d69eVirustotal results 32.20% Heodo
2020-09-21EH_9792224489562078538956041.docdoc 61ba6999ffd23a0f22f6827b577e773e9d6a79ef366b3260a6b55a792c98d519Virustotal results 32.20%Heodo
2020-09-2141181000.docdoc 86a8ee1c5f1f5ce84a8f3b31c04f51e324a47d2de0936339357ee0e9a139e0c6Virustotal results 31.15%Heodo
2020-09-21ECE_XF3179797679TC.docdoc 5bb3e05266ae1854d7bd5732eface0a2f45a896e99c1d0ae15f6e70423b2a2d1Virustotal results 32.20% Heodo
2020-09-21WY5171342995DX.docdoc 04b6915557c386d4219e56049dca6eeef6f30b41f45fb525d36977e248fbf4ecVirustotal results 31.15%Heodo
2020-09-21DOC_OA1752143810NK.docdoc 39de97c9d5604bd29ee471559a22ce1c35ad2157fb4d71802c96e7621cde7fe2Virustotal results 30.00% Heodo
2020-09-2168113983863.docdoc e5ef583d80780947a6660111040fef17af94bb4a2b32611f0ad9605d8815e17eVirustotal results 30.51%Heodo
2020-09-21G_KUY_090120_WFV_092220.docdoc 35f4f4709b6981bc96ad057a270f1bda933dd3b0579302a2e32079863ebc923aVirustotal results 30.00% Heodo
2020-09-21OOE_29797773.docdoc 5f48ec62b70130e2ebbdf504c0de8057499f87bcf6bda3462f498f3d2e08c22bVirustotal results 28.33%Heodo
2020-09-218421321171928228.docdoc 292a48621b6f7863d1a7d04f25cd2c6ddbcbf5abac1282941d3ba20ae076b776Virustotal results 27.87%Heodo
2020-09-21BAL_PO_09212020EX.docdoc 2fb1aaab163c5d674f32a4afd442561b6333e3fe377c272f69c96090d934ac93n/aHeodo
2020-09-21FILE_07224021.docdoc a26de4ba071b2f3d5f5fe238c0fcaa9d641019a4593ede7bf28e04a62f26c2dcn/a Heodo
2020-09-21FILE_91769182.docdoc 20c91a51721e21851a9378758513e3d0ec631985cab6f862b783627792f1f127n/aHeodo
2020-09-21392833542325940.docdoc 2d6a5431e61158153fef1258729585f1e960289a985c131147dee0f8918b40f0Virustotal results 27.87%Heodo
2020-09-21PO_09212020EX.docdoc 3ab0702a3d820e15619e9125350d5275da998abed6d3231e31428a8443a2b604Virustotal results 27.87%Heodo
2020-09-21INV_8717952239859455.docdoc 523df645555c6aa6bac44a44298fc5049aea8ba9d530b69a6d6756a1960ddf74Virustotal results 27.87%Heodo
2020-09-210425857187921626216610425.docdoc ea13635d8fae6f813f3021e4d264e12f874aba0cadf496e53a82fdd80faf37e5Virustotal results 25.00%Heodo