URLhaus Database

You are currently viewing the URLhaus database entry for https://itwasntmyfault.com.au/agsclaimform/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:609290
URL: https://itwasntmyfault.com.au/agsclaimform/docs/
URL Status:Offline
Host: itwasntmyfault.com.au
Date added:2020-09-24 06:15:36 UTC
Last online:2020-09-25 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 06:16:02 UTC to support{at}servermule[dot]com)
Takedown time:1 day, 3 hours, 29 minutes Poor (down since 2020-09-25 09:45:55 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25BAL_ITDPG2SLOMDANSY.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25DOC_94127145.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 27.87% Heodo
2020-09-25OCL_090120_KYK_092520.docdoc fe2ee906d8d8678d7ec22ed99ec97b47b6bc55850eefac61f9ec622f2a049bb1Virustotal results 25.81%Heodo
2020-09-25FILE_RK4366938821MW.docdoc fe3018c09ebbc1ba8e04839eafcb353384ffb23b0be6729808a820abc068b280n/aHeodo
2020-09-24INV_QY7242713536FV.docdoc 30a0c59711e06c411f4e1a20c649f507a1ef69742192df4ede24d92289aee591n/aHeodo
2020-09-24HT3355854917TT.docdoc 777b616a49cad6687f1706ed066ad7879d80844e9e4529a7a2416d6e0804f4e7Virustotal results 31.15%Heodo
2020-09-24VIZ_090120_FWO_092520.docdoc 733d8b10af3308cfd8ebc53724d8bcc6b47a2a8652e46f3dd15d87ab5ef7f123n/aHeodo
2020-09-2496345649.docdoc c8e1fe8c16784222fdc737735ed29812a5f1721e61b75f3386fa6ea802c9b525Virustotal results 21.31%Heodo
2020-09-24INV_692603269281491.docdoc 35774d12164e3314ec57dde2f5948d18c0e60439fd49b21753e4e0954b3325d3n/aHeodo
2020-09-24REP_XU7650123793ZP.docdoc 7e1935fab86166df5d6770468bf12c57a50720c0b7ba90e21accf2ca8493ce15n/aHeodo
2020-09-248494689293627584.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 32.26%Heodo
2020-09-2416658891.docdoc b9211d9fdc8cf882f69237754fd387b887bd80a07f2abe12c2f687dd04ec3ad4Virustotal results 29.03%Heodo
2020-09-24VWLO_GA7345019074ZB.docdoc ff6440d9c01fb2fc8526c683c418271051ec21b1b730972f02ab6442bb0f83afn/aHeodo
2020-09-24BAL_DVI_090120_XSW_092520.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41Virustotal results 29.03%Heodo
2020-09-2422519848.docdoc 5bbcb03cbdf0fa9eb5854ee7d5c7d3669e469fbde2dd1cfe0b6c4767dd19d138n/aHeodo
2020-09-24VA6A0VVYM1BSV.docdoc e01196c04524311bae1b2b2ab4a49a03bcd266c6ba9f9b5a2fdf3804e9bf71d6n/aHeodo
2020-09-24FILE_ZVX25AZAJ15CX2.docdoc ea20a59b71ee8c21c84eece43e58023ef1be9265e0198df81b95d6af3b4d38e9Virustotal results 29.03%Heodo
2020-09-24FILE_JCS_090120_JRH_092420.docdoc e065d7a8263671a9d5afd66e671dd1d8cb12ccadcde39686f63b37c411d977ddn/aHeodo
2020-09-24PO_09242020EX.docdoc 35ef0a522e2f7f98db76cd53d203d6389d65b2c0337b598482f1ca0fcfe5953dn/aHeodo
2020-09-2427102098.docdoc f6f1cf12aa5337999c20c4cfd641254575e981ad7c463944cfe676ec92a23165n/aHeodo
2020-09-24E_PO_09242020EX.docdoc df802c906676713581817048e135afe20200029ac5ff1c840ba82b5bbcda75caVirustotal results 22.58%Heodo
2020-09-2460068901.docdoc 32bbcef052b442f62a2fbb0c5dad498dcb779148f31f2e51d4f7a38245024f8en/aHeodo
2020-09-24BAL_HIULEFR.docdoc 7e78d353bf29cfd042c3741647fea216a70d735df0b286f87383bc7732e6ff23n/aHeodo
2020-09-241297453025600752278.docdoc 37b5d86751a2c999901df382ddadc7aa72d891a4e24ef527e02266ffab2efa41n/aHeodo
2020-09-24INV_JTEEDBP75DA3UT.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24XDK_090120_CIT_092420.docdoc 3321abc9c460868cfafe80f968ccea4254b02ede808bcabe4dd58055ffddb358n/aHeodo
2020-09-243802987536326281883571.docdoc bf6caeac64ebd3eca96f936635d26ea90e62f1093b72146a98a20623a13688cbVirustotal results 27.87%Heodo
2020-09-24BAL_M9U1J0OGJ73HRV46.docdoc 14d3028b892573f0d8b812deb455b13424beb8580cd1d928cabdbe4c613a7e22n/aHeodo
2020-09-2435311255929788472410533.docdoc dc23f6e5f31c7c3ce882dad5d90a145687e954e34019d5cfa3fcc72afe96bb52n/aHeodo
2020-09-24DOC_4FS4K31C16HM9JT4.docdoc 1b0522ef94f38e510dcc9cef4fcd477690c2c18de3cab3d1f534d2a2cc4c32afVirustotal results 25.81%Heodo
2020-09-24SAG_473481764894874120.docdoc d9e5e99a04e37db7783f369c532e2e6d5171b90a286f2c397fcd6356a1abcce9Virustotal results 25.81%Heodo
2020-09-24R_PO_09242020EX.docdoc cfa31ffa596077bda609cc5576b3f6218e479ddc4572a14827383aded91a7aecn/aHeodo
2020-09-24BG2208411852OH.docdoc ab91db60823e2094091fd21a60eda971c965e334da7b12f08b02334d781397e4n/aHeodo
2020-09-24D6LN2DGWLCQ1LYQH.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-24BAL_E06O3OUH6M7.docdoc e5b9b4889b3cad8f0920a0d4153cab5517ce077683139476f36bc1bf91652725Virustotal results 21.31%Heodo
2020-09-24XHE_090120_MLT_092420.docdoc 699130456adedce5c03d39cefc3df4b0cd5136c6b5ca856bc65252a8c686ee94n/aHeodo
2020-09-24PO_09242020EX.docdoc 69ff6eb0a71090b17e21b2829b6108b2eebf8bd12b92fe587ce103a4c5cc0f3dVirustotal results 20.97%Heodo
2020-09-24T_PO_09242020EX.docdoc 3aa1d5ce7ed49ce9dba790282a20ea4768c173c06418f513522ee6d401aa527an/aHeodo
2020-09-24FILE_HUJ_090120_CJK_092420.docdoc cfbd97481c83537fad9115e2c33ad3cdb1c05c7cac4aec15f2aaaf6acc3d1006n/aHeodo