URLhaus Database

You are currently viewing the URLhaus database entry for http://paulscomputing.com/CraigsMagicSquare/Reporting/hfjbaf5b/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:597497
URL: http://paulscomputing.com/CraigsMagicSquare/Reporting/hfjbaf5b/
URL Status:Offline
Host: paulscomputing.com
Date added:2020-09-22 14:25:34 UTC
Last online:2021-02-17 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-22 14:26:11 UTC to abuse{at}he[dot]net)
Takedown time:4 months, 28 days, 4 hours, 2 minutes Bad (down since 2021-02-17 18:28:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24E_VJH_090120_WIC_092420.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24BAL_PO_09242020EX.docdoc 3321abc9c460868cfafe80f968ccea4254b02ede808bcabe4dd58055ffddb358n/aHeodo
2020-09-24DOC_KRB_090120_KTH_092420.docdoc b8a9d5f54e75467b003cb37db317d9537fc49705aa3334531937929937b0eaaeVirustotal results 29.03%Heodo
2020-09-245LPAPJR1U.docdoc 418535f82699ce0df10d39ac2798fcce30da6070fb7b9b0f28562d1146f49e69n/aHeodo
2020-09-24XC5D2SIGZ5I0SYE0.docdoc 33c770f81db667213e95c2c605c64bbb8aaedd59dc212d411eee46171f3020a3Virustotal results 22.58%Heodo
2020-09-24REP_NHV_090120_BLQ_092420.docdoc 1c66ec5827934e0744220674a8ae91d47bfa027376d756dd4722ecc165f09878Virustotal results 22.95%Heodo
2020-09-24BAL_PO_09242020EX.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-24DOC_53427489.docdoc 5b276cd9dc10cbdf1dc7dcb147761fea97b3b9407dfd13b460721747f767238fVirustotal results 22.95%Heodo
2020-09-24REP_615244480556417862.docdoc 9530d202be6692b15721f936a6cd20a7319a5dc92e97e12b532ceb3d74641753Virustotal results 20.97%Heodo
2020-09-24PO_09242020EX.docdoc e29c7182354a985eaf81940489c20229a695c30d38a91d01c8581955e5b1e455Virustotal results 20.97%Heodo
2020-09-2434908029423660656359836.docdoc 54d6881837b3fcb6a0b3e639c58f6e159abb745d0862e1f5cabe6c7df3a3da12Virustotal results 19.67%Heodo
2020-09-24WAF_2042954757013834199623256.docdoc bc8c5bed53bd39445e8df6c75cbd7aefc5aeb6fc2e735692ff898d28c43e61d1Virustotal results 41.94%Heodo
2020-09-24BAL_89235823.docdoc d522d2f16aa3e16dc127e4340ff8bfd23ab4de894995c8dbb75b31bd4b4d73cbVirustotal results 41.94%Heodo
2020-09-24S_XGM_090120_FHF_092420.docdoc a92c46f200df0158c9798071b11a95d81eea54126f75084d6b9b381d992d4d0cVirustotal results 40.98%Heodo
2020-09-24DW_2839338789621886091819.docdoc 21d6462af9e28cac11c5b8bc20c9f07e953c7af99c15966175e8b8cfc8ee9363Virustotal results 38.71%Heodo
2020-09-24J_82CLT46BZ.docdoc 3b2da1783943899a3e23e20477670990adbde1f6edb9bb2e2ec1aa640c601f3dVirustotal results 35.48%Heodo
2020-09-24B_CNA_090120_OEJ_092420.docdoc c157afe5eb9208b3fe20c864292c3f7a3c1eb02486f1a6b31fd8ef0349a9f3faVirustotal results 37.93%Heodo
2020-09-2493075173.docdoc 109faa9ffefc2e21ff1a72efcf3e665b4be5820282f07f8fa54c14bc9f243803Virustotal results 34.43%Heodo
2020-09-24XJ5JO79CLG04.docdoc 505eba500eb177462772c3c20029c6a8da6ebae013e23593e8647b31eca13dedVirustotal results 37.70%Heodo
2020-09-24LWI_090120_CXS_092420.docdoc dd05de775c3c07e1c25cf767154016406cb4c3fc2b20a4824593c30830e79583Virustotal results 35.48%Heodo
2020-09-24PO_09242020EX.docdoc 8c2167e0297ffcef1e67f0aed9f87dd7de95a4b552865584b7bd0185ac8f98f9Virustotal results 35.48%Heodo
2020-09-24REP_PO_09242020EX.docdoc 80bbc6addbc3d97abecb341c4441b7963d70a2a863d25cf0d35137632a841fa4Virustotal results 32.26%Heodo
2020-09-2477543152.docdoc 3482064d619a9c734533009937366a4864fecea1851ae5ebeb2998b8b40b0bf1Virustotal results 29.51%Heodo
2020-09-24REP_RH1142650953KE.docdoc 63a21ca1981314f43015cca1b3f053dfde7f225e00d9efa0e76816c438ab00ceVirustotal results 29.31%Heodo
2020-09-24EL36TAJ6ERS.docdoc 299e08ed38b367c0db78b21b67f5fe0cd2c2d4505726b00e76e1e3da495f6a1bVirustotal results 31.15%Heodo
2020-09-24FILE_3IN85NWP9P52O4.docdoc a279b3d82c086e59725b814eb8f6ddde5387efb28b19f197dcb6a82e239f9906Virustotal results 31.15%Heodo
2020-09-2411972510.docdoc 324337642923507f95f8882431a523b118e670bec80dc82ea989321c6abd2e37Virustotal results 27.42%Heodo
2020-09-23INV_TO5273567379LV.docdoc a5cefc7eb57545e36ce9f959ac252dd0901cbac2b6d83bae4a92daaef93f383an/aHeodo
2020-09-23PO_09242020EX.docdoc 13b44fe04aec7fdc7dce67de3a987317ad25ab9301110382847ca08bd645f2beVirustotal results 27.87%Heodo
2020-09-23PO_09242020EX.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23C_PO_09242020EX.docdoc 73d98ba498bba17ab8a9710b1d048fedb57792f57611200a4e5e9574c33fd298Virustotal results 37.10%Heodo
2020-09-23U_43XYH9FCDP0L.docdoc eabfce0e3ace401756754cf86b0f1b5f1057f2a9466eb1b74c4bb1cc0c134d71n/aHeodo
2020-09-23DOC_WTP_090120_DJM_092420.docdoc 041b85d1cb2334283a438b090ea744a36f2a1a8dee2a8d28694be9f16ebb6aa1Virustotal results 33.87%Heodo
2020-09-23DOC_FL7857157886LS.docdoc 887fa6a834121789518a2119d59559b212de2d235e454fd67d1e000e8ee7df1dVirustotal results 32.79%Heodo
2020-09-23DOC_2902257527286.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1Virustotal results 35.48% Heodo
2020-09-23INV_G8EJFVS8G.docdoc 3d0062b20db4e52a4f9612964699a06f8920aa931e2126424d8190273b7eb948Virustotal results 35.48%Heodo
2020-09-23FILE_043482986754.docdoc 84d892d9a7fb0b13d3688390c0e4c1eda7945a7531348d664924f48b38e67cdfVirustotal results 33.87%Heodo
2020-09-23INV_PA7881153825XG.docdoc 5d0b46e5ac5ae916c339102eb13396bf43d1c7c757bc63c6ddad859b8ba97f05n/aHeodo
2020-09-23MM5MPO7Y7DWA.docdoc 15c9d94e300b7177907171c24a7cf8cbdf3ae42a1bace42390eaeceff66d89b6Virustotal results 33.87%Heodo
2020-09-23DOC_PO_09232020EX.docdoc 22aa434e3a4d0f635bf148f1f870c5a5a3847bcf2517470e76299e86dd047320n/aHeodo
2020-09-23REP_GK4081262204YD.docdoc b1d1c08b520e22fcababa993c5280c6d4ee437f6b8d975b210780fe78530e581Virustotal results 36.07%Heodo
2020-09-23AQLMQ3W0S7XL5.docdoc e59549b96cdcadc16e777d0a62eb4b96353dd65ff6714e68f61e75ce526e7178Virustotal results 37.10%Heodo
2020-09-23JRT_090120_IDS_092320.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23FILE_99526811.docdoc 0e75f83d188cce264243b1d4f3674c4772e6aeb39415aeba5a32b20362127e33Virustotal results 35.48%Heodo
2020-09-23BAL_WMS_090120_BWB_092320.docdoc 50c9d530111fe31904255db5abdbabd939542a19af71c656dcdfd44c9fe2b4b0Virustotal results 36.07%Heodo
2020-09-23FILE_23878834.docdoc 15b6e8645e321e35774c5f7b9e295ba0e3d31d3f116e7a67724e6e0e5f8f3ed8n/aHeodo
2020-09-23REP_QGC_090120_SWC_092320.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.87%Heodo
2020-09-22INV_RM3661721535CW.docdoc fa7f4b3fa89ce1e3cf1f45674f36346e729aced2de513c5a058f935c65b3cffcVirustotal results 27.87%Heodo
2020-09-22M_NK4516714925CR.docdoc 0bf81a6e813d1474fb8f3bc1b2071f479aa978b3e536a2c960d60226fd1ebaaeVirustotal results 30.65%Heodo
2020-09-22SR2225854028ZP.docdoc 158dba6d537edd9c1fb56cc2c1307f00634cf5188667321946c2247e02eb6c40Virustotal results 29.03%Heodo
2020-09-2205958873386781.docdoc c4ed4d279282ab289d7a00ba9d05f1f31af4a3dafbe02ae91aba6585d55506cen/aHeodo
2020-09-22BAL_93906563459.docdoc a7305cf8e088408136fdfd5deadd230a7d00a03b1cc3fc12fc0705a30b4e0ae7n/aHeodo
2020-09-22FILE_PO_09232020EX.docdoc 5503f97a821a1c8dee9c3e1bcdc31e1fc7d98157b552c7cc79605a9d68dd8b12Virustotal results 27.87%Heodo
2020-09-22DOC_GMWT24J2WIQONV9.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066en/aHeodo
2020-09-22RLV_090120_JWN_092220.docdoc 96d1563a935b2b69580ef4ad19410bdb741917fc4d0aa8855e4eba258db0645fn/aHeodo
2020-09-22BAL_J6EKLNC7PFTKJGG.docdoc f929a641d61afcc3da16efb268321fa3a98a19ed3cacd0d1b6b2a98c5de37d35n/aHeodo
2020-09-2260062502.docdoc a306f78cac809e60ccf84e607470e4c43f0de4efe4dcd2f0e470786a5f672a35Virustotal results 27.87%Heodo
2020-09-22REP_PO_09222020EX.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 27.42%Heodo
2020-09-22BAL_AE4845852110VS.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 21.74%Heodo
2020-09-22BAL_4124667190.docdoc 698748ed65c5d697095b866208160f8b4142e8d3e66a8cf826de1601fb3b080bVirustotal results 27.12%Heodo
2020-09-22GVT_090120_FZC_092220.docdoc af31068680a432b4d1d2164488f6353795fbb745479373bbafc6a60e9cf25169Virustotal results 27.42%Heodo
2020-09-22FILE_888099990171346352.docdoc 02503f6546f32015f98eb839efb8b3d86d56b8ab5de5a30b5d6e99b4bd41802dVirustotal results 32.26%Heodo
2020-09-22FILE_2835317985691.docdoc d75a00b374e19973a894a4dba2d79f146e8f3745a82478ec933f2fd58471786fVirustotal results 46.77%Heodo
2020-09-22DOC_5KSSA0Q9K44.docdoc 944e1d93b3a20dd3f16bcb0a36fafcfb833c3a86dccd514d812e830a9a78c6d5Virustotal results 47.54%Heodo
2020-09-22DOC_711143077659820359688.docdoc 5edac9eba4b9acb19c34761cd2f8631ea31814b300b760c31c1d42569fb7c50aVirustotal results 33.33%Heodo
2020-09-22INV_EM2015139238NE.docdoc a9eaf02d745472a4b410b1baef20b073bce933c2e1c7a99fb183e33a47a2e622Virustotal results 44.44%Heodo
2020-09-22C_05640750.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 46.77%Heodo
2020-09-22REP_219061491409065.docdoc 868edec3ec279aeead8acb68afa154463ee9c468e59e7a39c2ac8cc532356c27Virustotal results 46.77%Heodo
2020-09-22DOC_95171393.docdoc 9b11606a300700f5efcfe21ec1403b6308a09a7758da7d26c85ef9129ea4872dVirustotal results 23.33%Heodo
2020-09-22AQQK_QLEKEGB0Z.docdoc d2c138d20e5b01e5408d4026819c1369a562ca8eb3c75f0f965118e055595898Virustotal results 25.00%Heodo
2020-09-22T_7ZQBTW0RWTT6Z4.docdoc 49d748e6ee7deafcab1482e5f85500d1b5ac91640cd12f9a014286b0563e735fVirustotal results 24.14%Heodo
2020-09-22FILE_IOV_090120_RCX_092220.docdoc c644ecae09d26a7e2d91c741f78016ac572f541901955f91642e77b55cdd4f74Virustotal results 33.33%Heodo