URLhaus Database

You are currently viewing the URLhaus database entry for http://advancecore.com.sa/ewodjf/Document/SKarRrUUJC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:630126
URL: http://advancecore.com.sa/ewodjf/Document/SKarRrUUJC/
URL Status:Offline
Host: advancecore.com.sa
Date added:2020-09-30 13:58:06 UTC
Last online:2020-10-03 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 14:00:08 UTC to abuse{at}alchemy[dot]net,dnsadmin{at}alchemy[dot]net,support{at}vitalix[dot]net)
Takedown time:3 days, 3 hours, 37 minutes Bad (down since 2020-10-03 17:37:56 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-01DAT_2020_10_02_LPE135087.docdoc efdb64f4eafe393a493062e5093db0bbca7ce0e1ec67823dafa99954fa3d1d3dVirustotal results 22.95%Heodo
2020-10-01rep-2020_10_02-IY0181.docdoc 17a74d63351431ab60c6c523b17851fbc58d395af4f574b6c48a4383441f55b2n/aHeodo
2020-10-01File_2020_10_02_IP224.docdoc 179cbf578c9346ba1f910ca3fffceb4b8742fa9a14e22e8840f6aeb327d3d216Virustotal results 22.58%Heodo
2020-10-01LIST 2270426.docdoc 6abc2d7240caf424804c664b0a1dd93ea28cbbc13c85990a392272d85b658eaan/aHeodo
2020-10-01Arc_2020_10_02_3343.docdoc e84e38f11c2ac4645ca6aa5ac574efb96531176ed43012aeb8e853fb53725952n/aHeodo
2020-10-01Attachments IZ245.docdoc 2107f6f0e72299c2de738a72439bb6cde55017598205cfb4bb904def95c32fcdVirustotal results 20.97%Heodo
2020-10-01REP-2020_10_01-B101.docdoc df7dc0695f70aa4ce8ee2a304d00d7670fad4b6facf671e8650029d89d49d972n/aHeodo
2020-10-01UNTITLED_2020_10_01_C81299.docdoc 4cc03286887ef16ec1f7d90097c9d4ff1e5c107a7db438416fa2ccd1518638b6n/aHeodo
2020-10-01REP KS87545.docdoc 762ff0b38d71b679ea9cc4111562791f2877ca2568912bd290450f0de347534fn/aHeodo
2020-10-01LIST_KA666.docdoc e2bbfd4b4a3aa114d07547fbd320b2acc5ad730eb1f450a93f6a49d1e470e57fVirustotal results 19.35%Heodo
2020-10-015744674-20201001-626.docdoc b867e659335bf24f0de8e731edacd80e2d8293f8c17de793612ae9bd76281b1an/aHeodo
2020-10-01Mes 2020_10_01 RVJ740.docdoc 7864011d471f60276a1a8f1f3d6e7578a2aa50df32a139c796cdb0ea92b311afn/aHeodo
2020-10-01File_NBO674.docdoc ef39d0cacdf367b0606fc63082917413b6d4bfa309e4e8ebf076f9c776777949Virustotal results 20.97%Heodo
2020-10-01Inf-20201001-EQ29362.docdoc e65b0b124b97f0e70a3fe0a7f527aa66f43366c831e9eb4f470c89c647b4cc2dn/aHeodo
2020-10-01file B57049.docdoc d69c55c3fd6ac15d34a268863676ba3c6ab5432022fadb56a326e19d6c194c97n/aHeodo
2020-10-01Arc 23929.docdoc 6e479b2ad5944afd22a2e516b58a97af6cf1e4ee558ab6c7e4302d2c9928b878n/aHeodo
2020-10-01Attachment TW67673.docdoc 5dc35d0f237e44b3377a6e13ccea24f31517bc05dfc92d75a91a5343b6c1a9ebn/aHeodo
2020-10-01A474 2020_10_01 253018.docdoc 429640344ceeb02f20848b6aa0881bb97191972235419d97859adf9e6762369bn/aHeodo
2020-10-01arc 20201001 YSD19033.docdoc 9c4dcc624121d30a89b27550ea41778503a0fae6ee34481b84b0640c3d02ba38n/aHeodo
2020-10-01DAT_2020_10_01_LC05554.docdoc fb67d18808f34180ad4381fb4f25f4f5f2d5888b7f1754fe0e37450d145f1f55n/aHeodo
2020-10-01rep 07636.docdoc d5618e9d3e616ad7e4d495a6451f542ef2c48ddabdf4a13ef17983f090364012n/aHeodo
2020-10-01FILE-20201001-530.docdoc 1dc7a05059b493b7c2348a9af36eadf9c1c424cc0f36868ddf8823dfd1927dcen/aHeodo
2020-10-01722503-20201001-538.docdoc a7134dc9561f5091c02db461b27ad58cad2ba199d2dcc5d7b921e6b4a7e38ce1n/aHeodo
2020-10-01REP 20201001 62808.docdoc 2028d50aa60770569515be9c7278c67fc6d574e9101223e71c10edf13bf805e8n/aHeodo
2020-10-01List_20201001_GSS692125.docdoc 773eb4699e335149fbe06fa6602bec0ad81afba14348cfddc1972bf6f04f6a2cn/aHeodo
2020-10-01INF 20201001 H895.docdoc 3f5284458a0d2d7d50d7487391aae521f625a8920bfe03a7c88d412f8c17699en/aHeodo
2020-10-01mes_20201001_PE62973.docdoc 669d870ef1af2ece0fe6ebe9aecf34352cd6beef3502e50ce0940bbd830e76een/aHeodo
2020-10-01843CCU-138.docdoc 172501fc94085c45c6767dfe4c639f3cf899a1e5ed1fd55fe64f24246ac7abf0n/aHeodo
2020-10-01ARC 2020_10_01.docdoc 52a9bd05cde43182553fb872699d2595d0a84299ffe4b707c3e1cc25844c8102n/aHeodo
2020-10-01list 20201001 5937.docdoc 18f2118a132f1b42ed952b55ac0269544b4d83055328315baef7adad73c07c37n/aHeodo
2020-10-01dat_ANI073.docdoc c0ec58a4cd1f2ee0523886c2d9ff71483c46731339d31403176e4210eea4429eVirustotal results 29.03%Heodo
2020-10-01Arc-2020_10_01-AKG653812.docdoc bbc0d58af6d93f43a62b12eaa5294dab4df1e77ffab6ae50129ecad193de8a17n/aHeodo
2020-10-01File 20201001 052316.docdoc c6a5e92e0cb32aa9793cecb37169e0f19bfff5a681eb8afabb7fdfa50b3460b6n/aHeodo
2020-10-01Mes-20201001-4485292.docdoc 5386687f8ecf0d93ea17a7f896ddbdde5a43e2f46ef95bc8297ab7483986816bVirustotal results 29.03%Heodo
2020-10-01List-2020_10_01.docdoc 082cfd95d0b520f52fee520762fa4c4620f7f343195f65a72da3cf34422119b9n/aHeodo
2020-10-01Mes-0552867.docdoc f685aa8cf1ff2ed10ad6a26aedef21430e2e232ba17e79dc31c4ab50655279c9n/aHeodo
2020-10-01inf 2020_10_01.docdoc a781877d21e10d3d41927fa45111c52a960125350e3113661f2a35d4d0c03a05n/aHeodo
2020-10-01Dat 2020_10_01.docdoc 8fe81e1ef89033a5b0d49b07f90a5e3642117bd7fe3de8d0dfdcad5e740b9160n/aHeodo
2020-10-01Arc_2020_10_01_2864.docdoc 33ae552bfec33fe70cf9ad77e96a4cd86ab0b6e5d217b98f2a6ae23cadb10f8bVirustotal results 29.03%Heodo
2020-10-01REP_05362.docdoc ba2337f892f6e152a808fa61c96c4c2c09076c2d493732b697082f41dfab0f84n/aHeodo
2020-10-01Attachment 20201001.docdoc f8681df2fdf20a60cfbc6bc9da657e2354f6ad0657d8ee087cf2fe50dfa09a21n/aHeodo
2020-10-01Doc-2020_10_01-327.docdoc d9438be0f59419eba96b4dbf40c05780a139926e79524dcd3fd80b2988694530n/aHeodo
2020-10-0191268PRK.docdoc 9f2b84e3636d99a49ea3ae417c564253d9a351cc49c756a61c63acd530fd3748n/aHeodo
2020-10-01Attachment-2020_10_01-179250.docdoc 68a9aec657c1f8328678d879279fb90a5c21f9f527f0c08b1a23a3f576dcbee2n/aHeodo
2020-10-0199700886-ET08511.docdoc 4e29f93d23065a600d39a4f1db754b951bd6a38706c145d990df65d6ebf5b6dfn/aHeodo
2020-10-01Untitled_2020_10_01_QBB088.docdoc a12571b616d1499b09566b0d42aa974633c3772d339c768a443017702baa86c4n/aHeodo
2020-10-01LIST 940413.docdoc 46a59f3fe0efcffcdfcd2c366c3cda5205ab4f7c79e6c11c1bac4ea7247906d5n/aHeodo
2020-10-01J3918 MM305929.docdoc 70fb53e73b6f88f473daeff54fd683ca2520516013df40ed5446b86bfc4a097en/aHeodo
2020-10-01DAT-Y0536.docdoc bca937c5b07cf43a6469fae63640f655c5bbdacff9c671b53965974a5203c262Virustotal results 37.10%Heodo
2020-10-01Doc.docdoc b855422066b3952f9afdc17addaf83d5c9990efc1dbe30f2de5639fd56390078Virustotal results 37.10%Heodo
2020-10-01doc 778518.docdoc 4b931434cdbde8e532c7a09e37b78dd2166f37a0fecbabaecdd38a2217049341Virustotal results 37.70%Heodo
2020-10-01MES-20201001-LX5539.docdoc b3776f674d9ce6db3d98ad056a43c66c185a8109320db88ec042c4224ff2d5ffn/aHeodo
2020-10-01mes-0115002.docdoc c831c106f8014dfb9f2010acf1b27a73896a4def52607e403a2a9740926ed0beVirustotal results 37.70%Heodo
2020-10-01Mes_ZWC491.docdoc 9e7eb5c054266ca1a3d77392105c1ed43183fcc3d7ad1883f6b627b06b0dc1c0Virustotal results 35.48%Heodo
2020-10-01file-20201001.docdoc 85226bf4b5aae875eb53ec867bf5e5349c57c45cca5e2077e05eb090328c4d61Virustotal results 35.00%Heodo
2020-10-01FILE-DO92202.docdoc 34bce035f84a22c00827f1722c2caaedd1f3d7ea059b4a4a695e8867874de5b9n/aHeodo
2020-10-01INF-20201001-648226.docdoc 6ffe1f1e0b366f49f5644ef9775e58ea1aa808bdfea4ced1aa367e2e44cded16Virustotal results 31.15%Heodo
2020-10-01Attachments-2020_10_01.docdoc 87441c831ad7808d1f9a4fc6533c65071a13b9ef979ab68ffd24565426558597Virustotal results 28.81%Heodo
2020-10-01doc_2020_10_01_315.docdoc 1127939b95fc439579b8513866e2a50ebeb5657a717a1d6425d49782213b55aeVirustotal results 29.03%Heodo
2020-10-01list ZGF209498.docdoc d0b0c89fd70b604e0abda15a2af6e8d0fcef712db05d5b15705862e2dc1120f2n/aHeodo
2020-10-01inf 2020_10_01 081664.docdoc 750f3ddf6c6bd8e7cf26c3d8103a0dd26becbf4a754fbd78bcb33a8bd165741fVirustotal results 27.42%Heodo
2020-10-01dat-58053.docdoc e79f250400c358da91a7a87f73902980819c94e0b51c91323cb3b3b77fcd4283Virustotal results 27.87%Heodo
2020-09-30file_2020_10_01_WU719271.docdoc f7454110fc14b94a8de1a15f118873db33d5dff0040b860e7a74775a986c8196n/aHeodo
2020-09-3031098985-2020_10_01-M3661.docdoc 22fe0364950c229cd81ec4900c5082c63179d87b3475e0ba2533f7d02d0a9658Virustotal results 27.42%Heodo
2020-09-30Attachment_265129.docdoc 111272b4f9fa36b17efc27ee4685f0300764cbf2aa0f028174a6d6f249393844n/aHeodo
2020-09-30UNTITLED_2020_10_01_7843.docdoc 4775719b443e192325610b1eb79d188314e42c2dbdd27c3d2aaee14a082a5176Virustotal results 25.81%Heodo
2020-09-30dat_2020_10_01_X53718.docdoc 59218dd633aa6e55d901c1a8227ace241e21d80c34af6fbd4dd99400832ef122Virustotal results 25.81%Heodo
2020-09-30arc 20201001 FVX7924.docdoc 7b2561cccd85d4a2dd4d7c8c873b6e498f1030c959b48a8899a4032502d0c4c4n/aHeodo
2020-09-30list 20201001 6719503.docdoc fe188a82b959918eac4007d04f619ee4ad081730eaa6da718e8e4e0cd9d594a0Virustotal results 25.81%Heodo
2020-09-3037523_78164.docdoc 32a1991f3cccd7f0d787d1fd9ef745328cefd8d134d25a6a2e12d49808143952Virustotal results 25.81%Heodo
2020-09-30Dat-2020_09_30.docdoc 7894db05f1e0bf0341427a40ee7bac8f5ef35bc7acac378caa332c08586b9514n/aHeodo
2020-09-30Attachments-UQE329790.docdoc e92f158f2faa36f1af7c6995a3e4433ef891eb4dcfa6a15c6ad994527c01d680Virustotal results 24.19%Heodo
2020-09-30FILE-2020_09_30-13277.docdoc 9d324dca782f0c31fabf90945e2299934a2a4a5f08c328100843fa3c06380300n/aHeodo
2020-09-30arc-415157.docdoc 02198f1315ee82122a2ea1c3eca55fbe9a061bf7d75e9db6c7b0e49bbd7108fdn/aHeodo
2020-09-30File-2020_09_30-44062.docdoc 5f1b7ea2789bf23bdbd87c87daded72bb53aad07fc776bd6622709482c002b33n/aHeodo
2020-09-30ARC 2020_09_30 GLR9016.docdoc db58a47589968fc0aaeaca53d1f70a4e1eda3577ef1304fdba9745809989804bn/aHeodo
2020-09-30Doc 20200930 I501.docdoc 6d252cf9f5ba5ca72addfd64afee22e96d0205e1f0dce0fee750a463e1f3166bn/aHeodo
2020-09-30DAT_20200930_G435876.docdoc a6939a0d29def5129bbd46b4368e98aa137fc72bb23620be065261d8f19dd633n/aHeodo
2020-09-30File_2020_09_30_WGZ5424.docdoc f47d11699a95847586f0da23f16b981f953514459199b7edd30f723054c057f7n/aHeodo
2020-09-30Rep-2020_09_30-4559929.docdoc 78c3d9c43524e6cad2289a2edef0f563b37f586414c83c73c0e57050d79f6f58Virustotal results 24.19%Heodo
2020-09-30arc-20200930-2949659.docdoc cd4e40d3b639c11b89ee51b90d700ac2d0036337b64bf354c10703b23923e621n/aHeodo
2020-09-30Attachment MK1162.docdoc c69355e7d2f37fb8a04b2808e24c6abe076f296b1063e2fa5eadb435d4105da3Virustotal results 22.58%Heodo
2020-09-30416KKO-30908.docdoc 9bb6af66db7bc220db800f2603c9b7be39fc865d85a75d9ddfb7a2ac031b0d19n/aHeodo
2020-09-30168T-067596.docdoc 183bdc9a0c04a6bd49b0c4195ba0d2de5a30fe17530dbd5696dd418ddd7b6a86n/aHeodo
2020-09-30FILE-20200930.docdoc 5f9950d2d8a5a93da4a5abf76b023aa395391216465cc9f6a8bc953466d81d25n/aHeodo
2020-09-30INF-2020_09_30-07197.docdoc 4038d38d4c957482462c94556199ce2c3724320b291a7141716e0ca752915298n/aHeodo
2020-09-30file_20200930_X531418.docdoc 58b19e6c55395ca36614743926ebd8ffde9a7c1d23c19ddc8b9930b6d5cfc5c7n/aHeodo
2020-09-30ARC 2020_09_30 7733.docdoc 84b8f4207b9b18ec8ead0aad0e1e33cbbec46a2a798c22e677f7e95dddd38c45n/aHeodo