URLhaus Database

You are currently viewing the URLhaus database entry for https://rubikservice.com/wp-admin/report/8ercx0bw9gk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:625352
URL: https://rubikservice.com/wp-admin/report/8ercx0bw9gk/
URL Status:Offline
Host: rubikservice.com
Date added:2020-09-29 22:27:06 UTC
Last online:2020-10-19 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 22:28:07 UTC to abuse{at}du[dot]ae)
Takedown time:19 days, 11 hours, 8 minutes Bad (down since 2020-10-19 09:36:34 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30PGF_515484929860.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30DOC_Q4819YH3F5KBP4.docdoc 63d11b10d793151af69aa10ba45dcd9de40ca61834d018e42474786090043655n/aHeodo
2020-09-30UP7949788823KC.docdoc 74824146908abe5c7caad5b6c9c7f86a6aa087b0422fc5066abd490ae864f456n/aHeodo
2020-09-30DOC_PO_09302020EX.docdoc 728b1a60c5af8cf394d48d6bc7a6a273117da463ab6316c2b43a2fe72b26709cn/aHeodo
2020-09-30PUS_KEX5OIX.docdoc 86f7e3cb36503bd4d36820857fa1cf349e4e14af26612ebbf4855fe68b2fde22Virustotal results 25.81%Heodo
2020-09-30C_28625144.docdoc c86715ec898705b4f96afa145de31fef0c732dd66d0e2707407cb453731f9facn/aHeodo
2020-09-30BAL_JYB_090120_GMG_093020.docdoc a6bda5016faa4796392e20bb0d8076147b2d6ea0f899019aed66cab6a4ad220fn/aHeodo
2020-09-30E_93373355.docdoc 340edbbc6b875bfedadf402c810c9fbdde4fb3d9fee5d5f9996b9723d9fd5c94n/aHeodo
2020-09-30DOC_GCW_090120_SYR_093020.docdoc 0d76776775bf2a2cabdb6e870b77c93df8a87261dff0fe4186297a4a70d37b0aVirustotal results 22.58%Heodo
2020-09-30PO_09302020EX.docdoc 67d5b3c3ed94416daadf1bb5fd4eba9c72b57c7b8f1d7d1e40a7a3def981adc4Virustotal results 22.58%Heodo
2020-09-30PO_09302020EX.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52n/aHeodo
2020-09-30OYJ_090120_QLH_093020.docdoc 2d09a2c2cc27e1e5e697d5c7fd6e7cbba00b82f6e118d417147a336d7c4fe92aVirustotal results 22.58%Heodo
2020-09-30SYG_090120_IXQ_093020.docdoc a8dae6d86f2ae529335810a70a6f959f195bf9fd10f2ade7549334ff2767cd04n/aHeodo
2020-09-30EYP_NN7176134306VK.docdoc ba44584c1f1d349168d9003b0bd7fcd9d738c17877427c3f02ad492598d5c637n/aHeodo
2020-09-3028632639956216.docdoc 3e6e31b97b51015205df9e5043f01adddd0e5cd8248bac5bb0a7e7d75b5684bfVirustotal results 22.58%Heodo
2020-09-3016637807.docdoc 245b4b0db8f80967766d7944e85fc5aab6b86fb0fc9617324efb7fbfffa03c4aVirustotal results 20.97%Heodo
2020-09-300240117670993244458499958.docdoc 8a28504fcb36f233a01a36c1c90230bae3dd51d22bce884a6892b4354c922f96n/aHeodo
2020-09-300664885145393.docdoc e67c373437e7408c177a503ca9bcfc8ccce61d14cfc636074bedb0937c41eb67Virustotal results 21.31%Heodo
2020-09-30DOC_1KA1KY89Z2M390K.docdoc f643ca2e24eeeed79a8eb15590b5adfe2d738c667c2771df28474060408f703fVirustotal results 20.97%Heodo
2020-09-30BAL_44232808.docdoc 786c646aec87e25c98dfbac09f886f13f05a1e6690baf9974f99f1b37b6f3713Virustotal results 20.97%Heodo
2020-09-30P_1847095972679693705.docdoc 119dab813d43139ec7ee0f953f68341391776f7f5cdbc1fc6eeabf95356a8a21n/aHeodo
2020-09-30L_LFRNVWCT0.docdoc 070fa7b00421948236bfb6bd84797e0ffa8f842cf034d0086b4d9f3fb5391649n/aHeodo
2020-09-30BAL_94362165020062630.docdoc f8fb4db3104cc2c9f261f3b3b43acb4132f5759f8e485677651a52478610f5bcVirustotal results 20.97%Heodo
2020-09-309014809057156.docdoc fc6f0ac3e38b970866e30342911b1f72bc2a028a33a093badc8c5694321d5808n/aHeodo
2020-09-30INV_VE6639164404AP.docdoc ecc336e27a1ff6eba45106abf4d47adf3ed98c94f40a5dfc80e9e3287d79c099n/aHeodo
2020-09-30FILE_PO_09302020EX.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081Virustotal results 44.26%Heodo
2020-09-30BAL_30322119.docdoc e9ea0a15b6b1599685f85932e8f8621ebe49b8a64c3376cb3819d4b9f5b536beVirustotal results 43.55%Heodo
2020-09-30PO_09302020EX.docdoc f69c957e912e4eb54ca00ba379a5808d47ebcb4667393b4b986d2d50ee35e7b6Virustotal results 43.55%Heodo
2020-09-30FILE_UA4246321891RH.docdoc 267635371e8ce155728f5a57ac788f36284669033c41d39c1bd6f1168b3c469fn/aHeodo
2020-09-30FILE_93144108.docdoc 010d313ef5a6680acc6fcdaca0eed3e19f256a23cac861684466d6e7f7138030Virustotal results 41.94%Heodo
2020-09-30RJK_YDS_090120_MZN_093020.docdoc 42c1f3bb9e1fae138c02e1447a93ea34c9c4859fca0078bdd3ea01145c4ed12bVirustotal results 37.10%Heodo
2020-09-30BAL_PO_09302020EX.docdoc e2689c227ea6d5424060e6fce6deab414a52c4d27719a2a2f4a2b9eb635d4f9an/aHeodo
2020-09-30FILE_74103484.docdoc 797ac0be9b6e1c912dab41fdf6c487642e027c1a24c2a6510ee3a1a326ef7bb0n/aHeodo
2020-09-30REP_5R9L3NAMG09BVO0.docdoc aabd54aa244d3a19daa025d685a63495581f02a35c44e11bdb76ea7bbf7360ban/aHeodo
2020-09-30924674720353713425.docdoc 8649c9f23563646d5b0033bb729307388ddb4396da639cbf0385c08ec0a01cffVirustotal results 32.26%Heodo
2020-09-30REP_PO_09302020EX.docdoc b3e10600287dfaee56f53325acb38c44c75d92fdda24bce58c9d231eebc0bd06n/aHeodo
2020-09-30BAL_8VBKDYJX8LCDOC.docdoc 9503120eff8e09bde10d7341fc02b19428bf024bfa48b4db12e902ce9895be55Virustotal results 30.65%Heodo
2020-09-30REP_83849186.docdoc 75f032ed1b4c5d9738c4ebee1d878f1fe5307cba5c43dc44ce2443a640e7fb2fn/aHeodo
2020-09-3080090628.docdoc c7e94b09a7bf83d363a7949d7aef5bba5516bd5b0e0c149bbd1dc341b9cd5180Virustotal results 31.15%Heodo
2020-09-29AC6073457943GI.docdoc 5bc9314961b874f09854775cf9f6bce09cc9c8106200074edb961cd544efb675Virustotal results 30.65%Heodo
2020-09-29REP_QAZ_090120_MPU_093020.docdoc ad21f91ac048eeb669e0a9cc8199225d755cf89a9f5d79d7fb39ef2659f04a9bVirustotal results 29.51%Heodo
2020-09-29DOC_CC5236944983OX.docdoc a0269d67f007490795637a732bf26ce5976a2b4039df3d784930ef9109697365Virustotal results 27.42%Heodo
2020-09-29FILE_VS0985486168TH.docdoc d59faf29c8fe5f632a3b7d91802b08434241b502d47b2bcdf2276dc68e4e7d48n/aHeodo
2020-09-29BAL_SP3689772227MW.docdoc a7bac9b6662da2eb4c3fa6f12c10d790ab6b8ef1735241fcd2a4d35a152a8965Virustotal results 27.42%Heodo