URLhaus Database

You are currently viewing the URLhaus database entry for https://myinstantguru.com/wp-content/Document/egiq5094740490569884fo6l17pc0ufbbghwf8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:610195
URL: https://myinstantguru.com/wp-content/Document/egiq5094740490569884fo6l17pc0ufbbghwf8/
URL Status:Offline
Host: myinstantguru.com
Date added:2020-09-24 15:09:12 UTC
Last online:2021-02-16 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 15:10:15 UTC to abuse{at}subrigo[dot]net)
Takedown time:4 months, 24 days, 22 hours, 54 minutes Bad (down since 2021-02-16 14:04:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25PO_09252020EX.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25ZDT_090120_ZSC_092520.docdoc c12a24dc51b89166e734d3ff2969cb866132c5865e0f5aebe7d442fd57d9e4b6n/aHeodo
2020-09-25SE6700186055LJ.docdoc 5527db4d50b16756417124cf891df4ce3d61c561eb2782f339973dc75c73390bn/a Heodo
2020-09-25FILE_67901839.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-24INV_FY9376174013OG.docdoc 47e84b40c894119dda8c1abf4033b74ccdea7712d9ee871dde8360c87e7951baVirustotal results 20.97%Heodo
2020-09-24INV_REP_090120_KVP_092520.docdoc d4aeeadcea8487c5cde690583d8fb442c9334208e54fd53d3714e0ec9bf0da91Virustotal results 31.15%Heodo
2020-09-2422466269.docdoc cdd71002bc856432c4601d28ab82f21a59cc5dfd779119a556b6e353a3a9f5efn/aHeodo
2020-09-24BAL_XBD_090120_CRU_092520.docdoc c8e1fe8c16784222fdc737735ed29812a5f1721e61b75f3386fa6ea802c9b525Virustotal results 21.31%Heodo
2020-09-2499102124.docdoc 46996b6a7e3fb5f718730ed86bbfa6e57792d961db1bd60352e17703af38134eVirustotal results 29.03%Heodo
2020-09-24HTEYA0FSBBZ2.docdoc b77cd70861b08e97e103e926c367d38fb18c9588b70cce776fab3c7b9888c31cn/aHeodo
2020-09-24BAL_JL3797512495HK.docdoc 7e1935fab86166df5d6770468bf12c57a50720c0b7ba90e21accf2ca8493ce15n/aHeodo
2020-09-24INV_PO_09252020EX.docdoc 7b5d921ddbc165e0f75ae5769137ef1546084f5d3fad75d9304b97495a5966a0n/aHeodo
2020-09-24INV_VB6445218749IK.docdoc 96d9b3d02df7aea418bb5629677cc35f0eaee5ea68e2373e23a730378f5f5297Virustotal results 29.51%Heodo
2020-09-24DOC_48287394.docdoc 27e7e0f85c78285a86b3f66a5594a39f650bb2fc35c1aadafcb56b4f475ff7a4n/aHeodo
2020-09-24BAL_80887270.docdoc 715f9dc1efa5fca591ca9ec3b12ea2cbfb023fdeb8f0964988c191a7be6166c8n/aHeodo
2020-09-24REP_QLG_090120_CUO_092420.docdoc b638a54fb8b1ae9d64723adeea13dfada5ef1ad4d4c606ed9a34370f4d216d09n/aHeodo
2020-09-24714559809287408.docdoc 7ef0c540f3c535a1789981bcbe5e3dd3ba3809e8d6ef1a9745f00ccd018db031n/aHeodo
2020-09-24DOC_ZXA2HOQCC.docdoc 2c9f95721bca3535da3fda89ec8fe49002a06a7fe0aa92c9dee5ad34872c388eVirustotal results 19.35%Heodo
2020-09-24FBL_090120_WRJ_092420.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bn/aHeodo
2020-09-24DOC_TM9XMLJ7J5BX9.docdoc 267834c0d23e344ce20d8814e0e5499c7f5bc32fbda08c9ebf721a3dcb2efe26Virustotal results 24.19%Heodo
2020-09-24REP_MFY_090120_ERX_092420.docdoc ce2603e03a1742baf5735e994899aecaa1075b7d6a3a811070455dc802e8df15n/aHeodo
2020-09-24LY9079KVXJ9QP.docdoc df802c906676713581817048e135afe20200029ac5ff1c840ba82b5bbcda75caVirustotal results 22.58%Heodo
2020-09-24GP_BV9084902745ON.docdoc 7f2909dbaff2ca4d076322b968a100de8c38b257858149d44dc8976189d2571fn/aHeodo
2020-09-24M_685693825.docdoc 8b90ba12e56de7cf064ee54d147a39175bea9149cef12b45b5fcc04b43808d9cn/aHeodo
2020-09-24FILE_6MYTVOAL6J33A.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo