URLhaus Database

You are currently viewing the URLhaus database entry for https://shibuifolders.com/assets/2pxtijp19551430551578771gqps1eox51t/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:589803
URL: https://shibuifolders.com/assets/2pxtijp19551430551578771gqps1eox51t/
URL Status:Offline
Host: shibuifolders.com
Date added:2020-09-21 20:49:09 UTC
Last online:2020-09-24 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002950135 created on 2020-09-21 20:50:08 UTC)
Takedown time:2 days, 14 hours, 37 minutes Poor (down since 2020-09-24 11:27:49 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-22FILE_RAU_090120_FNJ_092220.docdoc fb7120cd04c6c488c5a564bb24d9d155389d7cb8a0293e552dd385110bc6ec9fVirustotal results 31.67%Heodo
2020-09-22REP_6ZH7Y6MJQ6QUN.docdoc 3ed5e00e046ce19a840746219ff3efcd6fcc4ddd0b608e51203398bfe2360da2Virustotal results 31.67%Heodo
2020-09-22REP_531334267397.docdoc 58dca36db6814be3bc7016599693d84cc074f17451bebe7eb98baee99cef0ac9Virustotal results 32.79%Heodo
2020-09-22REP_PTY_090120_LYY_092220.docdoc d937aee7869b57f5784a642a274c6c32b57ed26aaf0594e7adbbf3f980c4ff98Virustotal results 32.79%Heodo
2020-09-22REP_UQI_090120_IOS_092220.docdoc 7cb0e900a796ae5c53375b1dca69897de5ffe140cb72224a428bcb8327937f23Virustotal results 34.43%Heodo
2020-09-22Y_MO4707613681HN.docdoc 81f0521a22118d4b0d1ab491183c0e961d22f56fb43d063febfdbf53348add1fVirustotal results 31.15%Heodo
2020-09-22PO_09222020EX.docdoc 23184d215b3db4bb670b2c1e70e1b7f81760cdec7e35b8a0a90cebc4a6797eccVirustotal results 31.67%Heodo
2020-09-22M5JW0IX2SD.docdoc 9addba96a219cf69e04822cf43a65d6b7da0f848ac179d2276ef2a448ca362cbVirustotal results 34.43%Heodo
2020-09-22DOC_965189686836.docdoc 43b978d85da34d8b60a7555d0c1ca67e51817214b70f29e321eacd4c96f35051n/aHeodo
2020-09-22FILE_UW5NQIYKV0P91.docdoc 7bb2b4a62517503be95b36a3562986f98d607a5eef79d8a7edd5e59f9d3f3badVirustotal results 31.15%Heodo
2020-09-22FILE_13085610.docdoc 1f334e20b45cf7543e44000e09943a75200b0ede54423ea0d4b7b263f721fc3cVirustotal results 31.15%Heodo
2020-09-21K2HQ1UGX.docdoc 0ecb8f0ac3c2c27f213dff3752b70d6832343dd6e1ef7e95e066e0446ef384f8Virustotal results 31.15%Heodo
2020-09-21DOC_EHQ2GG0LZDTXS18P.docdoc 3366930cc13338eb0661795bbde1d36e686105df071793c4080d1483b27d2d84Virustotal results 29.31%Heodo
2020-09-218C4EISUQN2DCQ.docdoc eed638e68fb63c08e3dbe230dc2a66544170ba12c92aacb9571a99fe355f0878Virustotal results 31.03% Heodo
2020-09-21SY9120501527VL.docdoc caefda78ff290b2ad9de3f8ee864f985144a3caeb6e307e034427b5f621184daVirustotal results 31.15%Heodo
2020-09-21DOC_18204305.docdoc 04b6915557c386d4219e56049dca6eeef6f30b41f45fb525d36977e248fbf4ecVirustotal results 31.15%Heodo
2020-09-21REP_739833363.docdoc e5ef583d80780947a6660111040fef17af94bb4a2b32611f0ad9605d8815e17eVirustotal results 30.51%Heodo
2020-09-21BAL_ECP_090120_FIU_092220.docdoc 5ec6bed566afb4a94fb1fa92fbc8b964ed670f2627e8de8df3eaef0dee7e7f50n/a Heodo
2020-09-2113004536.docdoc a90a365b3c7a945f46b9fdd9cefcaf5c9d8bf91969bd48b47d8454bee53e1425n/a Heodo
2020-09-21BAL_AT43IFFF.docdoc 292a48621b6f7863d1a7d04f25cd2c6ddbcbf5abac1282941d3ba20ae076b776n/aHeodo