URLhaus Database

You are currently viewing the URLhaus database entry for http://magdalukas.com/build/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:610199
URL: http://magdalukas.com/build/docs/
URL Status:Offline
Host: magdalukas.com
Date added:2020-09-24 15:09:17 UTC
Last online:2020-09-28 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 15:10:28 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:3 days, 23 hours, 19 minutes Bad (down since 2020-09-28 14:30:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25D_RBO_090120_QKH_092520.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2n/aHeodo
2020-09-25PO_09252020EX.docdoc 32e608f5734fcb68970d54ede47ece4cf463eced4316ce2fd04fb7869d2072d3Virustotal results 29.51%Heodo
2020-09-2574190544.docdoc fe2ee906d8d8678d7ec22ed99ec97b47b6bc55850eefac61f9ec622f2a049bb1Virustotal results 25.81%Heodo
2020-09-2539ZYSC0YRV.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-24FILE_PO_09252020EX.docdoc 30a0c59711e06c411f4e1a20c649f507a1ef69742192df4ede24d92289aee591n/aHeodo
2020-09-24INV_36993992.docdoc 733d8b10af3308cfd8ebc53724d8bcc6b47a2a8652e46f3dd15d87ab5ef7f123n/aHeodo
2020-09-24BAL_PO_09252020EX.docdoc 029de7c595a68b46233e28bbff65f065f8baf48178b6998928ebadafb8d3368cn/aHeodo
2020-09-24430841550020933023964.docdoc 46996b6a7e3fb5f718730ed86bbfa6e57792d961db1bd60352e17703af38134eVirustotal results 29.03%Heodo
2020-09-24JDZ_090120_GUP_092520.docdoc b77cd70861b08e97e103e926c367d38fb18c9588b70cce776fab3c7b9888c31cn/aHeodo
2020-09-24DOC_10673553.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 32.26%Heodo
2020-09-24FILE_L3FYIFO.docdoc b9211d9fdc8cf882f69237754fd387b887bd80a07f2abe12c2f687dd04ec3ad4n/aHeodo
2020-09-24REP_NVL_090120_NOJ_092520.docdoc d25aed1074e6086a1e8ee4fb6885c8accddd96469d110e343f36d2e13aaebee2Virustotal results 29.03%Heodo
2020-09-24BAL_FMUEWF3YAM4ZB70I.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41n/aHeodo
2020-09-24VL9576442605HP.docdoc e8920178a654a05f4d58c417ab5df624d778f70deb69ef450e79c6511c72e55bVirustotal results 21.31%Heodo
2020-09-24BAL_08364960318382190380607.docdoc 7ef0c540f3c535a1789981bcbe5e3dd3ba3809e8d6ef1a9745f00ccd018db031Virustotal results 29.03%Heodo
2020-09-2466318458.docdoc e065d7a8263671a9d5afd66e671dd1d8cb12ccadcde39686f63b37c411d977ddn/aHeodo
2020-09-24REP_FL3515725745OJ.docdoc 9c92b09435e053ed7b07f0d33360b840b95e0bbd64092e06bf09020307e84b9aVirustotal results 30.65%Heodo
2020-09-24DIU_090120_IZJ_092420.docdoc 8ffd33471d8e180b9ff498aaa84ef11bf50e846252c62e42e416fe68c1698d06Virustotal results 25.81%Heodo
2020-09-24G_PO_09242020EX.docdoc df802c906676713581817048e135afe20200029ac5ff1c840ba82b5bbcda75caVirustotal results 22.58%Heodo
2020-09-24REP_EYN_090120_DPJ_092420.docdoc 32bbcef052b442f62a2fbb0c5dad498dcb779148f31f2e51d4f7a38245024f8eVirustotal results 20.97%Heodo
2020-09-24DOC_21513393.docdoc 8b90ba12e56de7cf064ee54d147a39175bea9149cef12b45b5fcc04b43808d9cn/aHeodo
2020-09-24DIF_090120_EJZ_092420.docdoc 43204d25bd95979baf79eb7193cc7466a0fd658e87c94d666d71b88ac6979e88n/aHeodo
2020-09-24G_92682089.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo