URLhaus Database

You are currently viewing the URLhaus database entry for https://www.magdalukas.com/build/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:608580
URL: https://www.magdalukas.com/build/docs/
URL Status:Offline
Host: www.magdalukas.com
Date added:2020-09-24 03:11:44 UTC
Last online:2020-09-28 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 03:12:12 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:4 days, 10 hours, 36 minutes Bad (down since 2020-09-28 13:48:27 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25BATEOMV.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25471730566154047320.docdoc 870bc543d566751893f393fcf0c7abd3bceadb183ce2f7384e8922bb56a5bbb9n/a Heodo
2020-09-25166602088758971.docdoc af8ff28fb4ea041b8cbe3e93a2c9984e483b0fbda6945bc0172d0946d5c1cb7dVirustotal results 22.58% Heodo
2020-09-25REP_WO60QPOAX3WVIUUY.docdoc ddca7bd9923ea1a93f054a8ea4c749b80793daf20550c9ee2f4e63446572c400Virustotal results 22.58%Heodo
2020-09-2539ZYSC0YRV.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-24INV_467732911682874456197.docdoc 47e84b40c894119dda8c1abf4033b74ccdea7712d9ee871dde8360c87e7951baVirustotal results 20.97%Heodo
2020-09-24REP_CAR_090120_EXQ_092520.docdoc 777b616a49cad6687f1706ed066ad7879d80844e9e4529a7a2416d6e0804f4e7Virustotal results 31.15%Heodo
2020-09-24PO_09252020EX.docdoc 356e4701cc94b7ffbf517afeef9f5c0bbe45782f861d51859f0bf099df96581bVirustotal results 32.26%Heodo
2020-09-24BAL_PO_09252020EX.docdoc 029de7c595a68b46233e28bbff65f065f8baf48178b6998928ebadafb8d3368cn/aHeodo
2020-09-24430841550020933023964.docdoc 46996b6a7e3fb5f718730ed86bbfa6e57792d961db1bd60352e17703af38134eVirustotal results 29.03%Heodo
2020-09-24INV_NXQ_090120_HQD_092520.docdoc 7e1935fab86166df5d6770468bf12c57a50720c0b7ba90e21accf2ca8493ce15n/aHeodo
2020-09-24DOC_10673553.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 20.97%Heodo
2020-09-24PO_09252020EX.docdoc b9211d9fdc8cf882f69237754fd387b887bd80a07f2abe12c2f687dd04ec3ad4Virustotal results 29.03%Heodo
2020-09-24D_PO_09252020EX.docdoc 2a3395e9459dc5f0fc72621c2299e98b4226e6b99cf6069d89004e3d430a219dVirustotal results 29.03%Heodo
2020-09-24REP_PO_09242020EX.docdoc 715f9dc1efa5fca591ca9ec3b12ea2cbfb023fdeb8f0964988c191a7be6166c8n/aHeodo
2020-09-24BAL_YHQ_090120_FKL_092420.docdoc 5bbcb03cbdf0fa9eb5854ee7d5c7d3669e469fbde2dd1cfe0b6c4767dd19d138n/aHeodo
2020-09-24PO_09242020EX.docdoc a72430246d4ff63a287ccdb3d3eb1eea24af39ec67b6452658454f115f5a146cn/aHeodo
2020-09-24DOC_HRNJ7JHG0VK.docdoc 85c3fbc17a0daacdb938f7ea4b8dfa14ae9a099d59de1e9fef807b569c999acbVirustotal results 19.35%Heodo
2020-09-24PO_09242020EX.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bn/aHeodo
2020-09-24FILE_735862951233.docdoc 267834c0d23e344ce20d8814e0e5499c7f5bc32fbda08c9ebf721a3dcb2efe26Virustotal results 24.19%Heodo
2020-09-24REP_23867750.docdoc f6f1cf12aa5337999c20c4cfd641254575e981ad7c463944cfe676ec92a23165n/aHeodo
2020-09-24022498687004295051447964.docdoc 29f8908fad78f532f3e53d23cd10d6289376b52c559e2398ab3a2ceb671ba1cbVirustotal results 24.19%Heodo
2020-09-24DOC_41167738.docdoc fe9b0b3adac87d1fe5b13863ff7ab54660757a7bc0b4996cfe241ff357c57b3dn/aHeodo
2020-09-24FILE_83641731.docdoc 60b9c51a988490875a152231c3217de228b7406a1378ab07263aea7f02ecd3ccn/aHeodo
2020-09-24REP_HJE_090120_CBP_092420.docdoc a448553c9afd57c49a33c314f51f722d61923249e07fca42997522d63e4bfa9dVirustotal results 20.97%Heodo
2020-09-24REP_337401850715075014812048.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 26.67%Heodo
2020-09-2410175873.docdoc f1d7646cf6abe9a746a6dab251be541e66a294060a1f32665b7e1c5d54de17dcVirustotal results 29.51%Heodo
2020-09-24BAL_BLI_090120_ERR_092420.docdoc d038ad9d31d6764ec9e5ad2246c2f2a99e0c06ca8798bd54e73deecb05dab14dn/aHeodo
2020-09-24ZZ6482842091VE.docdoc 418535f82699ce0df10d39ac2798fcce30da6070fb7b9b0f28562d1146f49e69Virustotal results 29.03%Heodo
2020-09-24FILE_138079376376663179360.docdoc ab91db60823e2094091fd21a60eda971c965e334da7b12f08b02334d781397e4Virustotal results 24.19%Heodo
2020-09-24DOC_WOJ_090120_TTR_092420.docdoc f57bae29b433bbff72dfe50e3dda325580fedc58d7c032948cf5360ce803b390n/aHeodo
2020-09-24REP_35Z5HD5NJY.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-24FILE_393903531.docdoc f2566951b2f270b88cd2a864576ae53db3bd5f3fcea221a1b088b8ec0d6f6eedVirustotal results 22.03%Heodo
2020-09-24INV_PO_09242020EX.docdoc b1ba77be7809b33fe1f34d2a388f0d8397bac88ac18ebf4fab88748d6fe2edf2Virustotal results 21.31%Heodo
2020-09-24REP_714206157.docdoc 69ff6eb0a71090b17e21b2829b6108b2eebf8bd12b92fe587ce103a4c5cc0f3dVirustotal results 21.31%Heodo
2020-09-24REP_44916864174.docdoc 3aa1d5ce7ed49ce9dba790282a20ea4768c173c06418f513522ee6d401aa527aVirustotal results 20.97%Heodo
2020-09-24IIM_090120_VWR_092420.docdoc bc8c5bed53bd39445e8df6c75cbd7aefc5aeb6fc2e735692ff898d28c43e61d1Virustotal results 41.94%Heodo
2020-09-24FILE_PO_09242020EX.docdoc 55d2d07c2dcaff03658304df8b3b1b80946d30f441ff14743dd2ea7130333746Virustotal results 36.07%Heodo