URLhaus Database

You are currently viewing the URLhaus database entry for http://teachgcc.com/cgi-bin/1s71azchsx6/wvy80906086676030ece9vdapws60s/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:606790
URL: http://teachgcc.com/cgi-bin/1s71azchsx6/wvy80906086676030ece9vdapws60s/
URL Status:Offline
Host: teachgcc.com
Date added:2020-09-23 19:12:42 UTC
Last online:2020-09-27 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-23 19:14:12 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:3 days, 12 hours, 17 minutes Bad (down since 2020-09-27 07:31:28 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25KRR_38774755.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25DOC_OQ4442151589BY.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 36.07% Heodo
2020-09-2519332691672.docdoc ddca7bd9923ea1a93f054a8ea4c749b80793daf20550c9ee2f4e63446572c400Virustotal results 22.58%Heodo
2020-09-25B_ASG_090120_TEI_092520.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-2472908936733092754964369.docdoc 47e84b40c894119dda8c1abf4033b74ccdea7712d9ee871dde8360c87e7951baVirustotal results 20.97%Heodo
2020-09-24UY_685340688366251166.docdoc fe2c4c0e8452ed6b2c6e644296e472af18a988e142404e89061f6cb8f2420593n/aHeodo
2020-09-24I_45264206579680522730.docdoc 356e4701cc94b7ffbf517afeef9f5c0bbe45782f861d51859f0bf099df96581bVirustotal results 32.26%Heodo
2020-09-24BAL_PO_09252020EX.docdoc 071b94219cf7f333e5e3c76753c74ec9a5d71f9d4ccf17cb631287fe3508e39fVirustotal results 32.26%Heodo
2020-09-24SN0610843689RK.docdoc 46996b6a7e3fb5f718730ed86bbfa6e57792d961db1bd60352e17703af38134eVirustotal results 29.03%Heodo
2020-09-24REP_16081133.docdoc 9dd8a90d5bcddd1b1748a24fbb8c636601ce3a3d198b95e342958492db07fd98Virustotal results 29.03%Heodo
2020-09-24942133816796746874414065.docdoc 3f84ac47fd385bddae0dd0a222cbc04e5dcc35aecd25d8d02f94f719237af3acVirustotal results 29.51%Heodo
2020-09-24W6NT8VRJ7BZRP.docdoc ff6440d9c01fb2fc8526c683c418271051ec21b1b730972f02ab6442bb0f83afn/aHeodo
2020-09-24REP_NDO_090120_ELY_092520.docdoc a57fc009ab0a20443a4b85deb2d976357ec107017cceda370de28f76897500a7Virustotal results 31.15%Heodo
2020-09-24BAL_KYT_090120_OLX_092520.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41Virustotal results 30.00%Heodo
2020-09-24PO_09242020EX.docdoc 0d6de09715c2540ddecff9f789615db1ea094b991d2a6417c3c086eb6e77e609n/aHeodo
2020-09-24TKP_090120_ZSE_092420.docdoc 9f420a6781e129b0eb85adb6d30b0e390b5c9e7625a14eae99752e7a5ed0914dVirustotal results 20.97%Heodo
2020-09-24REP_1774037878257548005.docdoc 85c3fbc17a0daacdb938f7ea4b8dfa14ae9a099d59de1e9fef807b569c999acbVirustotal results 19.35%Heodo
2020-09-24INV_PO_09242020EX.docdoc 520c035bd0bd60fac0008ee46cd8e3eab4dbdc31d8270d9559efb1e7b5016c7cVirustotal results 29.03%Heodo
2020-09-24INV_JWRU2CLC4.docdoc 0c7afbe35c98a28e15a89bfcadca720430162ad730a496d96595ecfbd3cd1683Virustotal results 19.67%Heodo
2020-09-24XNY_090120_KZE_092420.docdoc 267834c0d23e344ce20d8814e0e5499c7f5bc32fbda08c9ebf721a3dcb2efe26n/aHeodo
2020-09-24BAL_47181130.docdoc 5cbf1dbfb7530a124b943acb74153419ea9a9f6430256394a40e958a34dcec0dVirustotal results 22.64%Heodo
2020-09-24PO_09242020EX.docdoc fe9b0b3adac87d1fe5b13863ff7ab54660757a7bc0b4996cfe241ff357c57b3dn/aHeodo
2020-09-24DOC_43774321.docdoc 7e78d353bf29cfd042c3741647fea216a70d735df0b286f87383bc7732e6ff23n/aHeodo
2020-09-24DOC_SWN_090120_IRV_092420.docdoc 37b5d86751a2c999901df382ddadc7aa72d891a4e24ef527e02266ffab2efa41n/aHeodo
2020-09-2413602040.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24C13XVXN03.docdoc cb1631d0c39aa43d0b8891aaca96d162c853b06f92e395beb682d5c520bc0d90Virustotal results 27.87%Heodo
2020-09-24OS6FCD371L.docdoc 36d85a22ed91060a9856d8e691083a49da8ba00d0d3d7fb87819e36fe325c31dn/aHeodo
2020-09-24INV_ZNNZWALTH.docdoc 93c0790b6cd535f144d4fa5ee875e3fbc326b0572a4cb139f83195f4761fc370n/aHeodo
2020-09-24BAL_84896472.docdoc f97b2fe462e15ffbe47937e6d6ad815595fdb180d137a7ddd92f9f41e5a6b5eaVirustotal results 28.33%Heodo
2020-09-2468471395923553728095.docdoc 0b102ec43b4bf3d7459491664e5c2f731286d92134e87e00967a144e59c28ad0n/aHeodo
2020-09-24Q_PO_09242020EX.docdoc 7e5a42a73c29e93f48c97d924845eef4cce7d6a931dadaa19068f78f4bb83015Virustotal results 30.00%Heodo
2020-09-24FILE_NIK_090120_GVU_092420.docdoc 251086a8d6a3f83e2b9ee3ee013730af40923e3ba194b89a3610e20becc05a1dn/aHeodo
2020-09-24INV_727548451344756685888.docdoc cfa31ffa596077bda609cc5576b3f6218e479ddc4572a14827383aded91a7aecn/aHeodo
2020-09-24PO_09242020EX.docdoc 1c66ec5827934e0744220674a8ae91d47bfa027376d756dd4722ecc165f09878Virustotal results 22.95%Heodo
2020-09-24INV_BU7664795454EW.docdoc eded433f531513b960d540a5a009de4bf991d6ef3a525317bc5c1ee9f10c1192n/aHeodo
2020-09-24REP_RF5333292851TA.docdoc 3f772c90ffb4a3f86c025607102abfb70ce728d1070671319642e1ce5dacccb3n/aHeodo
2020-09-24REP_FNA_090120_TXK_092420.docdoc 699130456adedce5c03d39cefc3df4b0cd5136c6b5ca856bc65252a8c686ee94Virustotal results 22.58%Heodo
2020-09-24MLA_090120_KQW_092420.docdoc 84d837274cbcc7fea7d1806754185fecba6c90d352208ed2c444996864073135Virustotal results 22.58%Heodo
2020-09-24FILE_35137002600146422440557.docdoc 6cbd2115091ed6aac27b36f75ef0aa1328e9cd43fc463b039ff9cefed0d8b1f8Virustotal results 20.97%Heodo
2020-09-24INV_PO_09242020EX.docdoc fe0a0b77df06046dffc8059552a1484dfa263360d127d452805142945aa4e5a8Virustotal results 20.97%Heodo
2020-09-24P_DYD_090120_CHK_092420.docdoc 7439811010be6eb023390a28eff9b2acf598883daf1cb66bf4c6e78bb8f13998Virustotal results 44.26%Heodo
2020-09-24L_07585683.docdoc e03588b5c327278e634c775b1f13c311c8aa3494cddd7aff114eab54dcae3c5eVirustotal results 40.32%Heodo
2020-09-24C_05690629.docdoc d0ef85eed2f1afb6cfdbb09ccad7eb677bb731e080ebd4975734a2e996f08581Virustotal results 38.71%Heodo
2020-09-24FILE_XG9636505970AM.docdoc 21d6462af9e28cac11c5b8bc20c9f07e953c7af99c15966175e8b8cfc8ee9363Virustotal results 37.10%Heodo
2020-09-24UJ8881782077PP.docdoc 600c433856179a39c24e978c417634772d605b733afea857de865c8ff787105fVirustotal results 33.87%Heodo
2020-09-24P_PO_09242020EX.docdoc b86aa2863a808be4474b2ee7285bb8642b67c9706f68b81925ae69c824defd8eVirustotal results 37.10%Heodo
2020-09-24BAL_PO_09242020EX.docdoc a48a197539aed2368c68f377ee4e1a8886412cabd39050e98b3fab282c089d39Virustotal results 37.10%Heodo
2020-09-24DOC_88781089.docdoc 109faa9ffefc2e21ff1a72efcf3e665b4be5820282f07f8fa54c14bc9f243803n/aHeodo
2020-09-24REP_VU9291460904CD.docdoc 505eba500eb177462772c3c20029c6a8da6ebae013e23593e8647b31eca13dedn/aHeodo
2020-09-24FGV_2318572535361738.docdoc b427adb1ae5fd4b290ab65b93ea392c40c42f186b732f90768099681494d10caVirustotal results 35.48%Heodo
2020-09-24YQ8345693521ST.docdoc 94a60a6851a52d97e35329b2b824437bf9dd5eeca3fd759e15f444e217f39635Virustotal results 35.48%Heodo
2020-09-24DOC_YGN_090120_MUY_092420.docdoc a71d3dae8594c0336d66e366a3911fe4f349966e73fcb6c5fc9ed3077c8fcb6cVirustotal results 27.87%Heodo
2020-09-24N_OET_090120_SDY_092420.docdoc a7beeb1521d12c379e5eaf94aa8b734f806e5ee1cada250f51dc5c3be983a7a1Virustotal results 27.42%Heodo
2020-09-24BAL_YW98O0R3ZUV.docdoc 098e0c52d47feef3ad6ad20535919541c76799f4bddd67233049509a0ae8656dn/aHeodo
2020-09-24FILE_ODW_090120_BIT_092420.docdoc 299e08ed38b367c0db78b21b67f5fe0cd2c2d4505726b00e76e1e3da495f6a1bn/aHeodo
2020-09-24PO_09242020EX.docdoc 1cc5edeae07046d2a02914d85adea7d129c619124b76e405e99f63acb512503cVirustotal results 29.03%Heodo
2020-09-24PO_09242020EX.docdoc a9654b509a80552021269008e33074d85ee269b8a579a23ef93bcc5aba20227cVirustotal results 29.03%Heodo
2020-09-23PO_09242020EX.docdoc d74a0a2af76d37b9621074bc15dee942c972ea0fe761110f8767c1b836dec555Virustotal results 29.03%Heodo
2020-09-23BAL_UW6580453099ER.docdoc 7340c303b5ff42ef74e8996ab95aa2b6b742e4efcc852b96349ea6085e592f37Virustotal results 29.03%Heodo
2020-09-23INV_ZD1846939076EQ.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23HB5559402455VY.docdoc f62ef7f415a25bbe326cecb39a15134327c963de9253795427a71974f8845b6fn/aHeodo
2020-09-23TQV_090120_UZW_092420.docdoc eabfce0e3ace401756754cf86b0f1b5f1057f2a9466eb1b74c4bb1cc0c134d71n/aHeodo
2020-09-2333965488196235.docdoc 042dc54cf3a44dd90279a0057a99dbfd68e9b60897d814d0d37a6f28da370859Virustotal results 34.43%Heodo
2020-09-23FILE_80956199.docdoc 17f28ba9ec3406178924435252e81db9e219bc21ccc0520d3c699ce0878dd738Virustotal results 33.87%Heodo
2020-09-23F_2570510994.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1n/a Heodo
2020-09-23REP_IBM_090120_XXU_092320.docdoc 5b534bf80108820c4b2ce654b225ca8cf8fc10176fb2d3b51b3fcdb0fc5c6200n/aHeodo
2020-09-23Z_2Q6875B8BTLM8.docdoc c987b077ae0b47cf29fddf96a9339df37f08fc068fc536cd8728d5e75c827ecaVirustotal results 33.87%Heodo
2020-09-23FP4359116178BG.docdoc 6bb96965fcd7c4acb3b22a1c3f1459a042c13a92860c474997aadfb217a905bcVirustotal results 33.87%Heodo