URLhaus Database

You are currently viewing the URLhaus database entry for http://luxcarsdetail.com/site/lm/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:618901
URL: http://luxcarsdetail.com/site/lm/
URL Status:Offline
Host: luxcarsdetail.com
Date added:2020-09-28 20:46:07 UTC
Last online:2020-10-01 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-28 20:48:04 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:2 days, 8 hours, 25 minutes Poor (down since 2020-10-01 05:13:39 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30TD5180490647QB.docdoc 7d2c8d827a62c501876d11119d9989eae86dc953f1f0ced0c65a9567cb616fbbVirustotal results 22.58%Heodo
2020-09-30BAL_RD5971353558IQ.docdoc fc6f0ac3e38b970866e30342911b1f72bc2a028a33a093badc8c5694321d5808n/aHeodo
2020-09-30INV_KZF_090120_QXK_093020.docdoc 8c898e6465f4f641ea5dc6095375eb50772f4b2d7b0d50f197f74567af847cf8Virustotal results 43.55%Heodo
2020-09-30INV_PKNFAVDZZHV.docdoc e9ea0a15b6b1599685f85932e8f8621ebe49b8a64c3376cb3819d4b9f5b536beVirustotal results 44.26%Heodo
2020-09-30INV_8UTKW87TYY.docdoc f69c957e912e4eb54ca00ba379a5808d47ebcb4667393b4b986d2d50ee35e7b6Virustotal results 43.55%Heodo
2020-09-302396043320992291080804.docdoc 3d322e72fd831b7624674c0a9ed650c75bf0cf2d05e5c2dcf7746ee4187260b3Virustotal results 45.16%Heodo
2020-09-30488614395665.docdoc 896b1086164f16900fa21fd364f85761da882abeb87573d0eac49e7dfaf2524bVirustotal results 43.55%Heodo
2020-09-30REP_41982665.docdoc 42c1f3bb9e1fae138c02e1447a93ea34c9c4859fca0078bdd3ea01145c4ed12bVirustotal results 37.10%Heodo
2020-09-30O_66321468.docdoc 1854226276e84dabaf5ceaefe8e33cd56360b60752eef6ff1a0e8e1657931e53Virustotal results 37.10%Heodo
2020-09-30C_HE5625795968DT.docdoc 8d0311de9248f3fc0efd38e822a2d51fb26ec893e9cef6a0f81a2c2b2ea62bd6Virustotal results 36.07%Heodo
2020-09-301384660068.docdoc aabd54aa244d3a19daa025d685a63495581f02a35c44e11bdb76ea7bbf7360baVirustotal results 32.26%Heodo
2020-09-30BAL_MYE_090120_FMY_093020.docdoc bf8dca92c415f9441d506b7b5aace8b6d6bfbd8d67351b32abc27e2ef1e242efVirustotal results 32.26%Heodo
2020-09-30R_87988319.docdoc b3e10600287dfaee56f53325acb38c44c75d92fdda24bce58c9d231eebc0bd06Virustotal results 32.79%Heodo
2020-09-30SO_ZMH_090120_DJD_093020.docdoc 48e23cb77f6629ddf1c1b70ff1af00789fe9ed39014db2e97b4be24c2e13a168Virustotal results 31.67%Heodo
2020-09-30ZO9716416673AG.docdoc 4a9f3550003b6a5732c04dafb0112c4a68a0e1b9b00f0244bbf65efc7561823eVirustotal results 31.15%Heodo
2020-09-30BAL_015208323.docdoc 96658effd966024181bb6c0128804f37e523120f12108dcc80230e636aa0e291n/aHeodo
2020-09-29BAL_87326461.docdoc b11de73e98459e676a482af2c4e52dbbaf7d6cc9fe43b57ab758f3ffed754223n/aHeodo
2020-09-29UA3968532762FB.docdoc 5d9881c8900498814ca049d263ca3339b113198bfe781ccb5e5ffbc2b23eb325Virustotal results 30.65%Heodo
2020-09-29H_HBT_090120_WWY_093020.docdoc fbdacf9e30368d59414b52f459d935964b7833d6d8467bf0eb4ccfa97f71e4d6Virustotal results 29.03%Heodo
2020-09-29ABORBWR24GTM2ONW.docdoc a863d09af176344fa94c7820a54398bd505f2ee93f7f66a6f05d3e60b71479ecVirustotal results 27.42%Heodo
2020-09-29PO_09302020EX.docdoc 16b031e38044afa7252dbfb56c762b3723de1cb4b3535a8c76bd5d4f10a2819bVirustotal results 29.03%Heodo
2020-09-29W_DW0515692342VA.docdoc 76d3bae4ebe683a5d3ff0d90971119c287a3acbab073e28b979ad7eaa60e37bfVirustotal results 27.87%Heodo
2020-09-29BAL_079862299418514899.docdoc ec406f315de493ed38f3fc8e7bdd65664965b74a7215c69123b3e1c08ec28fc8Virustotal results 32.26%Heodo
2020-09-29FPD_090120_QLD_092920.docdoc 80c77811d31daab98c1ec0882d3c59b98ad3faadb511c21e4ac662cb9673e1b2Virustotal results 41.94%Heodo
2020-09-28REP_QZFQSBS8.docdoc 582f57c091cdbeb80216ba0b447cb9e9524da65ca308a91662202ff6966d3703Virustotal results 30.65%Heodo
2020-09-28BAL_PO_09292020EX.docdoc a2d98ee1792c2c1cf3ac1d73267579b9a649b5e9182003f74fda6c5e52f6d4den/aHeodo
2020-09-28INV_WP7180452251IB.docdoc bb1c8d5e2b2f72671c1165a85bc0af3f4f139edddd917ee3ca16c3f541bdd639Virustotal results 29.51%Heodo