URLhaus Database

You are currently viewing the URLhaus database entry for http://librosporfavor.com/wp-content/swift/uid5bmt/547jbnw6kkyl6m2f/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:693903
URL: http://librosporfavor.com/wp-content/swift/uid5bmt/547jbnw6kkyl6m2f/
URL Status:Offline
Host: librosporfavor.com
Date added:2020-10-14 19:00:04 UTC
Last online:2020-10-19 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2020-10-14 19:02:05 UTC to abuse{at}amazonaws[dot]com)
Takedown time:4 days, 15 hours, 3 minutes Bad (down since 2020-10-19 10:05:07 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-16BAL_13837725.docdoc 5c6f2d9a882fc281752198cd5c713aab468bafe4a0ed461ed70556a8dd12b900n/aHeodo
2020-10-16BAL_AN3455027471IR.docdoc a2864ec0d73578ac81e51cec11d7ebaf531bd59f579c05e796110a99e0d20e88Virustotal results 43.55%Heodo
2020-10-16HMX_49PG69CWI.docdoc 2c1c8cab0d411952c802de9667aca0d5ce72024da289e07685554f1a17ef5e73Virustotal results 45.90%Heodo
2020-10-16REP_65338332.docdoc b285a4eb97b84d68240929ecbe902577a607c7e7b0abe299ef3ff2a6fa3e9eb7Virustotal results 33.87%Heodo
2020-10-16UP_YM8NBZA8F7.docdoc c776db8d620c054dfc36df81dcd693dd59598cce84323f83c4677fec5fc8eb4eVirustotal results 37.50%Heodo
2020-10-1691582221.docdoc 50582c9e06f7726c40ab166de684e95a6f0de3f3fe6a0d8a749e6b18a5047f23Virustotal results 42.62%Heodo
2020-10-16Y_WY7888424549BB.docdoc 80f4eeab6a06e618009ae98f990dcbebc222213491d87a9f59c98daef7ff882fVirustotal results 40.32%Heodo
2020-10-16PO_10162020EX.docdoc de1e044b0692b4790189c84a6a3bff006ea424fc6ab7a94f3063c76dcf38b463Virustotal results 37.10%Heodo
2020-10-16REP_XF1351630831KQ.docdoc dcdafcf9ad3d06aef3a381823d42a40d517e4151a657d52a07b7f64f2cec9dddVirustotal results 37.70%Heodo
2020-10-16M_PO_10162020EX.docdoc 85cafbd8a7231965377fdf168bcf3ebbf41b13c90266dd1bc18d4b20ca6b5f61Virustotal results 37.70%Heodo
2020-10-16FILE_JNO_100120_BQZ_101620.docdoc 01f98b1a31eaf93128b65347f3fc0e25b853d2535e9d828263002b80f0e445a0Virustotal results 31.15%Heodo
2020-10-16REP_02829829.docdoc e740fc6270797a0066f81948906ef8e53161c3fce038be592daa80d3f8c92516Virustotal results 30.65%Heodo
2020-10-16FILE_PO_10162020EX.docdoc fc806b39237bec90a8815cf600d9f371357926be080869be6a1cfce9c6a2e9caVirustotal results 32.26%Heodo
2020-10-16Y_NI8098507476RV.docdoc e1657e2b9da4fc39004ca0c0c681b59985f94ca16d04c3f363122de4bb444099Virustotal results 32.79%Heodo
2020-10-16DOC_PG4279257710LR.docdoc 9e16a1c487318559bca602d0c341d760109650549d600ab32ea6c5b07b9c838dVirustotal results 30.51%Heodo
2020-10-16DOC_4551101998285256876.docdoc 6e1929d0be05fef19f8c294a2323971b7e2127acf7000f5e02e0a1a6555abee0Virustotal results 32.79%Heodo
2020-10-16DOC_PO_10162020EX.docdoc 59353c49c62f983f096262d073e811f1b5b3f843352fc3cc78ff2a20e7aee458Virustotal results 55.74%Heodo
2020-10-16W_909379362519154.docdoc d22ae8bce1c58f49acf052afd9fc15bcb9f31f7849b5cc3812ac610c97b3d984Virustotal results 50.00%Heodo
2020-10-163DR5MITZ.docdoc 8c5946d83496491e60468ec85aa90964c00945bcbd8e72e8b05b9f230d85f7f4Virustotal results 50.00%Heodo
2020-10-16BAL_RX8034373326NY.docdoc 72b44b8e255ace9d74a54f19671fdcfa1b296bb221e038ab578044b55b309afcVirustotal results 51.61%Heodo
2020-10-16FILE_AZN_100120_UEB_101620.docdoc 551880e02b296af7914d070f4040b2ff350b298b8c64b1f7abb096514add304an/aHeodo
2020-10-16BAL_08625809.docdoc 841460ec1cd34748b08eddabd123e6f367a7e01ea4768d7d8caaa8a8d765c8cfn/aHeodo
2020-10-16BAL_7017544484504488.docdoc dba29a78e7fca48b133d315c553587d7ba8ed5185ea92e7630d507c84e74ea41Virustotal results 47.54%Heodo
2020-10-16Q_OEF_100120_RVR_101620.docdoc 98d7c4d63fcd23e0417a08c9645e5bb0729a1fe136941495b001db7126726608Virustotal results 46.77%Heodo
2020-10-16638595476796.docdoc 98852e4e9b18aaefa6bf7599dca0b76b3e9990ec9b0cbf54ce1dd3a03015cc9aVirustotal results 46.77%Heodo
2020-10-16HFC_100120_VLG_101620.docdoc 29d8f14d9aad7f7303bfffcff57109e4a24983050638c356af826bf4febc04a2Virustotal results 52.46%Heodo
2020-10-16Q76VCZ8NRIF9.docdoc 2fc8f20d9cf100c7de1244d5ccb17f14230e534ff24921e0cb537ebce7668908Virustotal results 48.33%Heodo
2020-10-16BAL_12017545.docdoc 28a6bdd824538dcbdc61dc5ffe9d61ccf016e4a4bb027becec2d522503ec8b0aVirustotal results 46.77%Heodo
2020-10-16438816989363544579103389.docdoc 4175a2dd2295146108a2fb6d370f0d24239715d3709a82c0c6ec420a962efe90Virustotal results 48.39%Heodo
2020-10-15K_PO_10162020EX.docdoc c092eeeaefd8e9d4c328cc78e77530cb40fc820d921ce06c271c47781aae2da4Virustotal results 48.39%Heodo
2020-10-15INV_05326734.docdoc 590e91cfd2bc7164b8528b3e845e9d45e8328e9148b90c0836936e9d870ca895Virustotal results 50.00%Heodo
2020-10-15FILE_XY3019997601GQ.docdoc 0ab272f979fa9aed2035beb2f578c7dd1b689f64452457def9e7aca2d1c91a3aVirustotal results 48.39%Heodo
2020-10-159022688297637220869.docdoc d9dee0ffa4b0f9f8ae5c312de758420aef5fa12d4489a8c5f3e5ee627ea966daVirustotal results 46.77%Heodo
2020-10-158361230351830254072130.docdoc 197ff18c407c279e436240984c946009e24dc90b17cb986b9bf9554278a8a699Virustotal results 46.67%Heodo
2020-10-15P_PO_10162020EX.docdoc c9570917c32ecb1c6b6e8ffa9a486d3aebc0d0dca67ae6021b1c5a39f22e69baVirustotal results 46.77%Heodo
2020-10-15REP_CDT_100120_JPG_101520.docdoc 966af50d9ffd82cdc2a4fa693620dfe90172ef15047cc10d3b35fcd47ae47c4fVirustotal results 46.77%Heodo
2020-10-15GA_TZG_100120_DXU_101520.docdoc 677cb2fc5d7a4e66220d66445d3a7fa7129fefcfad236744a558140e65d7264cVirustotal results 48.33%Heodo
2020-10-1527369473.docdoc f0abef25579afd4a06a70b4a55ce9b492df87c17b66b1949f541f679f6376b84Virustotal results 46.77%Heodo
2020-10-15REP_56149308.docdoc 200fd063fbce58987452058b68b6f0d32d9fd51afddd74f6ed466124627fc51bVirustotal results 46.77%Heodo
2020-10-1589662372535.docdoc 70652370e67cef224785a44a3bb57d19f00a8b000714cf7117ed9dec27b3c920Virustotal results 45.16%Heodo
2020-10-15YQ2099844065YZ.docdoc df301a07bada1a07adbe33c638f8c00159a565bafec1b7fc1ff5ff69b6a7946cVirustotal results 49.18%Heodo
2020-10-15DOC_12484616.docdoc f3aecd021c57be4a051eb58488f96cd6183ea34153cf79876db7f699d5ce1032Virustotal results 45.16%Heodo
2020-10-1598035710.docdoc ab321ed0f56034ac636d328802440c291af5a379fee4ff6b31fbc859ab2d9004Virustotal results 43.33%Heodo
2020-10-15REP_123560793464256262036291.docdoc c584c1bd086b6f8007e1a594498dd51149f97a492dd8113493a6dd21f9134ad6Virustotal results 46.77%Heodo
2020-10-15U_08720344.docdoc d9b7b5c042c7906658d29f0f2ce9d72212853dba41328c900b11987b9c264639n/aHeodo
2020-10-15DOC_CG2870029660LS.docdoc 3f6955a4c8030234f81c5371a9fe055356a777586aec5021a269eb74083d6ce6Virustotal results 40.98%Heodo
2020-10-15K_2049971340435147.docdoc 5054c0740abc74c3d953105c380fd564a4a6ed4ee869aea2d48102b7f9feb1a1Virustotal results 41.94%Heodo
2020-10-1508385237.docdoc dbd52eeae1181eeddab6c7e1fc6a63564fdf6c6ab43a2ce880a8f1af89531022Virustotal results 41.94%Heodo
2020-10-15FILE_MJA_100120_QBD_101520.docdoc a03ff18b9f7a2ceeb1d3067a8c8f377ea38c8f002a4d32776856c020705c32f3n/aHeodo
2020-10-15DOC_AO4403094094ZG.docdoc d04f49d5a7da98df4a83199f7e7774d37e26204185184aa8a05abaab485874aaVirustotal results 39.34% Heodo
2020-10-15E_93VQ9N25EK2W.docdoc 4e6a0c30dbcc9c81697110910d0edcbf9a9f5442eaf0fed07248c448429580f5Virustotal results 39.34%Heodo
2020-10-15BAL_ML9999308259VC.docdoc fac59c311d502bd79eeed90be635654883567581760cae6102e5e888e7722985Virustotal results 38.71%Heodo
2020-10-15DOC_92623720.docdoc 2fc868b7dfe38093c8411f006529059b21ed00be6e8911b38580e68af346634cVirustotal results 40.98% Heodo
2020-10-15INV_PO_10152020EX.docdoc 7697faf6a3ac06e7f465152759a63f92d67946fef445bd4c26c487b579ff857dVirustotal results 40.32%Heodo
2020-10-15O_NH0466575274QD.docdoc efe93d6ad36d611d66a955331e5f6443444d48cb2b68aebf2e9dca645f35140dVirustotal results 38.71%Heodo
2020-10-15INV_782545610620609633719114.docdoc 8b14dfc88c1f7decae96fd4a01fbf7f68a08a377520966c966f7da397bd18225Virustotal results 40.32%Heodo
2020-10-15DOC_51648333.docdoc 832d456b57cda198dd3a21201f33c236a82d272d4780ba484a97e544f7ef998an/aHeodo
2020-10-15DOC_PA38BC6GC.docdoc 41256efd7894629afb3dc541f59a761925108b7b28b51cdd6e62270fb238d671Virustotal results 39.34%Heodo
2020-10-15Z_LEV_100120_PUT_101520.docdoc e243387f9d6d14d042a3822b4b370d2f85701e0d74374cd84b3c08bc5d87aab1n/aHeodo
2020-10-1509975948.docdoc d30ec2dde96e92164e6be1b42ad79b2b25464da4be6140e0965cb115a5d9e8ddVirustotal results 32.26%Heodo
2020-10-15DU4262802989SO.docdoc 5d3017d4878e28f04f39fe176de060a002b3f4752644eeb98f04ee2593d259dbn/aHeodo
2020-10-15BAL_WYC_100120_NSP_101520.docdoc a8a34a6c37f7c220879f3022dee62f83c2f21e3285d534f65111131d363ac379n/aHeodo
2020-10-15INV_PO_10152020EX.docdoc 74162fa1b634bfdde5cbbc8882362c3d5083368cbea1e88ab8c413863cab2ac3Virustotal results 32.26%Heodo
2020-10-15NLM_90018738.docdoc 6dd48bb5636ef582e56dda06c2c3bf04defa7e64b1369dec7de673098b94efa4Virustotal results 32.26%Heodo
2020-10-15DOC_2ZL3IDOO.docdoc 80c025b2d6a2583c14ce7a33a18b2925953d29b7809e0ac305b3ccad81d4713aVirustotal results 33.90%Heodo
2020-10-15BAL_FES_100120_YCM_101520.docdoc 1f072b17e37be55625aff57161b8ac013692ac5b2e621133d1fc6ed1ad3b20b8Virustotal results 33.87%Heodo
2020-10-15F_FK2724894326MC.docdoc 48caa70a3b31ff976df78f2b4525b27307a53e88d1ce4f1846dd5801dd2c9b76n/aHeodo
2020-10-15DOC_PO_10152020EX.docdoc 40cd7ad9c0ebdf03adc1f14bb7d6554f74a043088f9aab4a39e2bbf0daa01932Virustotal results 37.70%Heodo
2020-10-15FILE_FBO_100120_FQW_101520.docdoc 599c5a96c48cab303ee9a8fedda331cf66f2db8f076733cf715d00c5c4278e20Virustotal results 29.03%Heodo
2020-10-15INV_478671890671.docdoc d2d28ce9e628712a8478ea1439e111036497efe3d10a12bba622baf2952ded06Virustotal results 35.48%Heodo
2020-10-15BAL_YE9169827729OB.docdoc 4daef1037d2e8f34834dfda50a4bc9fd7b5e30aea3c2d6b666d85824bb90d79dVirustotal results 40.98%Heodo
2020-10-15NBHTMWZCD5Y4F8ON.docdoc b716ead26e4edc1ca7925f26ba16cdbe932e9cff3fbb636630f3d7bad4ad487dVirustotal results 32.26%Heodo
2020-10-15IFXB_26297937362420.docdoc 03afbf9b046ee6d340253662dfb45f59e4fb6e75b28dd8bf52bb8becb58145b0Virustotal results 33.87%Heodo
2020-10-15A_2NRL9OU1WGVLI.docdoc f71ae94d242b3462c842f1437cae8812ed520d8707566c04c3570859cc609937Virustotal results 33.87%Heodo
2020-10-15DOC_GUV_100120_NVQ_101520.docdoc 0acbd96443e33ed3c7bb5928e381f4440eb99308be50ab1a869a7bc118e57076Virustotal results 32.79%Heodo
2020-10-15G_YP8404697979EO.docdoc 25aa35b354712a75a1fa86936a9f4195ea8e3c08a6e6f2c3b9820cb4dd28209dVirustotal results 37.10%Heodo
2020-10-15FILE_9828579008.docdoc a81218fa6f93ea8937a48dd0a2f9e44226d1cc1d0c14f973d4c4b2d8199aaa8dVirustotal results 31.15%Heodo
2020-10-15DOC_99085652.docdoc 9954017c3108e9f6fd524436830144dcc04c49f339486dba48e2d3dd3dfbd0a7Virustotal results 30.65%Heodo
2020-10-15FILE_570771789.docdoc a9e9fd09c8758fd9bc32c4f3cdc9b19afafdeb894a288778c2a4df42944be7c0Virustotal results 35.48%Heodo
2020-10-15REP_PO_10152020EX.docdoc 1790c5fab1f40df300b33f400baa6f3981447142c4368a43e01a5b76b1beed3an/aHeodo
2020-10-15REP_PO_10152020EX.docdoc 6d531c0d2bfa18875d304220ef3fc95e74bd8f98c539ceb1755245c2394e0b31n/aHeodo
2020-10-15388488828883127881790793.docdoc 1c801dab1da2fe35b4c87872baf097cb7b5500b886bc75cc29cd8aad2e83d2d4Virustotal results 35.48%Heodo
2020-10-15REP_15571042.docdoc fc6514ef333a9a7df16243a938d3a6e2c9fcf1410d492381598062d92b267346Virustotal results 33.87%Heodo
2020-10-14FILE_9540780891419980.docdoc 3e222a87ae7cd1bbffb29335e25d2af2896c60be6575ff6070da3341b33b4c66n/aHeodo
2020-10-14BAL_PO_10152020EX.docdoc 0d6731404ab523678e4e70272959a38c04c12861e5d94284b88316c3830f0b9bVirustotal results 30.65%Heodo
2020-10-14DOC_64538197.docdoc 766cbde7ddad3ff7d55d13146e76bdfdd1699d56ad5886d619dc2e74f2889d1dVirustotal results 29.03%Heodo
2020-10-14875840428751493253.docdoc 9670351cda3385021054e49a74fab0df1f24d4e7d1344baddab81bfc1a4ae963n/aHeodo
2020-10-14INV_M1W1J2HMPOF.docdoc a68e59e985de5290d76c27b23438157a0e16a0df7104abff03c1407e136c70beVirustotal results 27.42%Heodo
2020-10-14RAU_100120_OOZ_101520.docdoc 2db09244b9d18d65a315426e7c2ac5e9c7a367665b994907631f2d92a7920052Virustotal results 30.51%Heodo
2020-10-14FILE_40995767.docdoc 521a53d518e84c5c1975c7019ce22c19f8a9e56401c060a2228768825a495411Virustotal results 29.51%Heodo
2020-10-14BAL_PO_10152020EX.docdoc 71fa0aaad2c5cd2e5e01af73667f97eb339a574575e69a2086b5f4c84ea05800Virustotal results 27.59%Heodo
2020-10-14DJGO_3179303426693672859369448.docdoc ddf5dc01672e436635664913967a082edb4a0efe0bb3c4c29ffe7e0016cfd353Virustotal results 27.87%Heodo
2020-10-14DK0640317752QP.docdoc 0d4936ae5e3283118f9e06740ac00c8fb354fd8ae5abe43d0ee6b3bdd1cc56e9Virustotal results 32.26%Heodo
2020-10-14BAL_30239260001448021614.docdoc 064adbd5640ef3fda23824886ee23921c5a3e50d8e7a2906bdd636e1c982aa9aVirustotal results 27.87%Heodo
2020-10-14BS8Y4JN4T38P4.docdoc aa08af368a5160b9286b65057e96e42aba63933c677ed3bc930d3357d7b40176Virustotal results 26.23%Heodo
2020-10-14REP_ICEYQEAT9U9XJ0U.docdoc f8666587a1ec8ae87ba5d425aeb180960f97608a84b764099910f22376a91376Virustotal results 27.42%Heodo
2020-10-14DOC_EMYIK3GGLRP.docdoc 11b6433cc50996eaa60f48be87ac8627f7ef22e82111415e743daee3d32b613aVirustotal results 29.03%Heodo