URLhaus Database

You are currently viewing the URLhaus database entry for http://www.dou-boumerdes.dz/_wildcard_/Reporting/AzCOPSEU8cn64pgs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:624715
URL: http://www.dou-boumerdes.dz/_wildcard_/Reporting/AzCOPSEU8cn64pgs/
URL Status:Offline
Host: www.dou-boumerdes.dz
Date added:2020-09-29 19:38:34 UTC
Last online:2020-09-30 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 19:40:04 UTC to abuse{at}ovh[dot]net)
Takedown time:9 hours, 33 minutes Good (down since 2020-09-30 05:14:02 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30File HQS04959.docdoc 26979e8912dc25e20f622985b767028de865e5719a3a559353389878b9fa0b64Virustotal results 45.90%Heodo
2020-09-30Inf_2020_09_30_8863.docdoc 892d8f9cfb26bae3277304d3396027dd55d0899e78181a1431bb43e29dd3e857n/aHeodo
2020-09-30Rep-20200930-3643606.docdoc 9d14d3ff8abad95d71af0043f19dd1644cfa14ceb0a6ba617a49f3bd559523cfVirustotal results 40.32%Heodo
2020-09-30mes-UC963220.docdoc 10294374734e4bb56cbf03eba2d257784ac87c057586d27a97c2b8b30f1f0f6dVirustotal results 38.33%Heodo
2020-09-30file_359768.docdoc f337a65984d1b07d592fa829984e4cb8f3a51e2005d02c82dbe1573a33d1b72an/aHeodo
2020-09-30mes.docdoc 058c2e8f57729727ed29b3c713fb0147a3b79eb1ca1360453aad3185f45e41c8Virustotal results 35.48%Heodo
2020-09-30Inf D059776.docdoc 3f2c230c00d8140a1297b360252ccc7a30d002e039359b9a9d3c08cbfd378fc6Virustotal results 32.26%Heodo
2020-09-30Arc_2020_09_30_8630.docdoc 1b7ae75c0843e24188c16e98283ae53b2d5d441a3149a30eae0eda9db7781220n/aHeodo
2020-09-30rep-20200930-688059.docdoc 0cbe205dde93631435eaf136feea1e35c86b49f20a0067c26fde038b48e2d725Virustotal results 32.26%Heodo
2020-09-30Attachment 20200930 QP130946.docdoc 07f05248ebd561f95c8b5988fddd0396c6d3c0a61015e3cf154e1e97f2af015aVirustotal results 31.15%Heodo
2020-09-30Doc_20200930.docdoc 02c3c1d0653a24c203ad1bcef154e65e155db910100619634569eed5982b5d26Virustotal results 32.26%Heodo
2020-09-30inf 2020_09_30 EN6198.docdoc 8b094b3853afcb79ef514333bfa570faac9b7996f06500f174020ce0e5a31751Virustotal results 31.67%Heodo
2020-09-29Attachments 2020_09_30 3551.docdoc dc873a463b8cbee41eb8683d98db5a331553402391ba1c16e664c7034eb1acafVirustotal results 30.65%Heodo
2020-09-29Untitled 2020_09_30 MT067768.docdoc 9a24d61f24a1211065b986def505c02b66a94f2b1cbde8fc6ef868391c24d4f3n/aHeodo
2020-09-29arc-2020_09_30-P1181.docdoc 1d742e585ed7b4c237726a945da11795c46da01716e9da561d98fff100ee938fVirustotal results 31.15%Heodo
2020-09-29REP-GJ3567.docdoc 2e0fc31a6ff8f20507c6979fa9b5be9e11f13d424e2962ec30f1fc596c069898n/aHeodo
2020-09-29MES-56568.docdoc 87687f422879d033f49c258046d04d4456ca8476353a750ba425c6642d61d3f2Virustotal results 19.35%Heodo
2020-09-2972563LWG 007.docdoc 004d7159e2360d1569de7849fbd5ffa3e63968d011834c565255ade18fcd54cbn/aHeodo
2020-09-29arc_20200929_G6175.docdoc 65b6ad21a24f882ef5e67c7126644c2427a2ede7bba65315180693daa77fb5f8Virustotal results 19.67%Heodo
2020-09-29dat-26242.docdoc 6194e7d3103ec7b0b5b6cfd8e1af03fd2df8ee7769deae970acac611b50238d6n/aHeodo
2020-09-29list 2020_09_29 7884165.docdoc 685e3e4ea0851f195ade4ba3673387a5c69eb1633d3daae4666e5aad9dabaf7eVirustotal results 19.35%Heodo