URLhaus Database

You are currently viewing the URLhaus database entry for http://mentoringcue.com/cgi-bin/Documentation/0j69rgioybwgpolav72u6qat0qhgb3/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:626131
URL: http://mentoringcue.com/cgi-bin/Documentation/0j69rgioybwgpolav72u6qat0qhgb3/
URL Status:Offline
Host: mentoringcue.com
Date added:2020-09-30 02:01:28 UTC
Last online:2020-10-22 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 02:02:35 UTC to abuse{at}lacnic[dot]net)
Takedown time:22 days, 10 hours, 25 minutes Bad (down since 2020-10-22 12:28:02 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30INV_0081248709045364.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30FILE_08171647.docdoc 530127d3f61abec3c59e2202a0ddfa9b8f5623205bb7c115b951ef7af56cdcd8Virustotal results 25.81%Heodo
2020-09-30PO_09302020EX.docdoc d46320a38b414b43c59ca8d4290d2da2129bafa4cacc5de0162242e761f1dffdn/aHeodo
2020-09-30BAL_9025079292032411146.docdoc 087b9ff622ebe92583a05a548a41b6384ca243ee1e54af69e35281cc16c6ee83Virustotal results 25.81%Heodo
2020-09-30KL9687065824XZ.docdoc 05917a3d7daf2bc7de49c374fe7ec364e19f2aa1b60480a666ed224053f0fe1dVirustotal results 20.34%Heodo
2020-09-30YAY_090120_MRJ_093020.docdoc 25ea63c6b2b40a9e3cd16e7ff7bef353fc6d0a0d87b8a661aebc9e377439f8efVirustotal results 22.95%Heodo
2020-09-30FILE_BX3278287335SU.docdoc 340edbbc6b875bfedadf402c810c9fbdde4fb3d9fee5d5f9996b9723d9fd5c94n/aHeodo
2020-09-30WO7797170067HF.docdoc 539ecc7287a68226e1bdd0520eea775a58754f306ed17c7a8bb6c48193b7f64cVirustotal results 22.58%Heodo
2020-09-30PO_09302020EX.docdoc 0d76776775bf2a2cabdb6e870b77c93df8a87261dff0fe4186297a4a70d37b0aVirustotal results 22.58%Heodo
2020-09-30REP_YQF_090120_RPO_093020.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52Virustotal results 22.58%Heodo
2020-09-30DZ4WIG47Q3.docdoc a4ba9b07b2355a1be394ecf01c4d26aae440491439fa0db4e7905eaa82a79e81n/aHeodo
2020-09-300539579781419.docdoc 2d09a2c2cc27e1e5e697d5c7fd6e7cbba00b82f6e118d417147a336d7c4fe92aVirustotal results 22.58%Heodo
2020-09-3047972617.docdoc a8dae6d86f2ae529335810a70a6f959f195bf9fd10f2ade7549334ff2767cd04n/aHeodo
2020-09-30FILE_86805105.docdoc 380569af88b834f9d208236fa12e84cab31e0caf8793dacf54e7d8bcb290e5adn/aHeodo
2020-09-30QE8279155047UC.docdoc 3e6e31b97b51015205df9e5043f01adddd0e5cd8248bac5bb0a7e7d75b5684bfn/aHeodo
2020-09-30REP_46973867195236.docdoc dae3de0260b268fd89734a96196759e0a878835e38a868db1ec44194c212e1f0Virustotal results 22.58%Heodo
2020-09-30A_MOHWGA63P.docdoc 950f9c4f6561a52ab6850b63b0551b2e75c7232b28c11aa0e470001d770dd194Virustotal results 21.31%Heodo
2020-09-30BXSZ_6019573009657254969.docdoc 19377355e91331d5f2438275b1af46c6f266bd250c9e6a421feb6deaa86f7cadn/aHeodo
2020-09-30BA9271685280WP.docdoc f643ca2e24eeeed79a8eb15590b5adfe2d738c667c2771df28474060408f703fn/aHeodo
2020-09-30R_UTX_090120_WGK_093020.docdoc 786c646aec87e25c98dfbac09f886f13f05a1e6690baf9974f99f1b37b6f3713Virustotal results 20.97%Heodo
2020-09-30INCLMCFGE5Z00FI.docdoc 7f4bb0819805fa0971334e3d8eca32699464c4fece26826d78d8df5a6441c071Virustotal results 20.97%Heodo
2020-09-30BAL_CL83TGV4O.docdoc 070fa7b00421948236bfb6bd84797e0ffa8f842cf034d0086b4d9f3fb5391649n/aHeodo
2020-09-30ZS_97875187.docdoc 5535272f513a3009b7bfb9a6614f96d6d4ed1c65fcfd7c416583ff2f35173267Virustotal results 21.31%Heodo
2020-09-30BAL_UF7914020973IW.docdoc fc6f0ac3e38b970866e30342911b1f72bc2a028a33a093badc8c5694321d5808Virustotal results 20.97%Heodo
2020-09-30PO_09302020EX.docdoc 8ab2e6cb8892b88bad960fc01887038298cebc93804c11f3bf92624541fd00deVirustotal results 21.31%Heodo
2020-09-30FILE_PC8611112865GZ.docdoc ecc336e27a1ff6eba45106abf4d47adf3ed98c94f40a5dfc80e9e3287d79c099Virustotal results 45.90%Heodo
2020-09-30BAL_YVN_090120_KUX_093020.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081Virustotal results 44.26%Heodo
2020-09-30DOC_OE4749822613HL.docdoc c648f66670c65dcb17a1ec6a90617481190da0ff1eced41135b2435893b66c22n/aHeodo
2020-09-30FILE_380173251305370.docdoc 6ade151a37ef13bb683d1be47f8223f2c15ce7e77165fd2e9797e7af35a40ae9Virustotal results 45.16%Heodo
2020-09-30BAL_028775169.docdoc 3d322e72fd831b7624674c0a9ed650c75bf0cf2d05e5c2dcf7746ee4187260b3Virustotal results 45.16%Heodo
2020-09-30TK4964658125TR.docdoc 5b04551305572c828c0ac8143249ef7e94223b0fbf7d12b43f77c4e3da8bda45n/aHeodo
2020-09-30V_PO_09302020EX.docdoc e2689c227ea6d5424060e6fce6deab414a52c4d27719a2a2f4a2b9eb635d4f9an/aHeodo
2020-09-30REP_TYN_090120_KMK_093020.docdoc 797ac0be9b6e1c912dab41fdf6c487642e027c1a24c2a6510ee3a1a326ef7bb0Virustotal results 37.70%Heodo
2020-09-30FILE_PO_09302020EX.docdoc cf47fcf596bf3abee5508f311666cec1399ab7e9b1f1632056db94a3e3a54468n/aHeodo