URLhaus Database

You are currently viewing the URLhaus database entry for https://egosalers.com/opinion-outpost/Reporting/h7o2n8ygn7dc0c/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:698624
URL: https://egosalers.com/opinion-outpost/Reporting/h7o2n8ygn7dc0c/
URL Status:Offline
Host: egosalers.com
Date added:2020-10-15 21:28:06 UTC
Last online:2020-10-16 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 21:30:06 UTC to abuse{at}multacom[dot]com)
Takedown time:5 hours, 39 minutes Good (down since 2020-10-16 03:09:40 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-16FILE_7RHY2MTDW0.docdoc 197ff18c407c279e436240984c946009e24dc90b17cb986b9bf9554278a8a699Virustotal results 46.67%Heodo
2020-10-16INV_456106701851690.docdoc c9570917c32ecb1c6b6e8ffa9a486d3aebc0d0dca67ae6021b1c5a39f22e69baVirustotal results 46.77%Heodo
2020-10-161WVADPHOK2.docdoc 5611d69fb48d899f85406429e354830c4c4f33259af76c16a74afbefa925fd1bVirustotal results 46.77%Heodo
2020-10-16D_9FNUYIQH6O5A.docdoc 28a6bdd824538dcbdc61dc5ffe9d61ccf016e4a4bb027becec2d522503ec8b0aVirustotal results 46.77%Heodo
2020-10-16DOC_9857254604221332.docdoc 3a3dd7687c72a79fe44ec05be24ef77e62e6b1cdcf3f202251d6c12e94475dcdVirustotal results 48.39%Heodo
2020-10-16NC_JBX_100120_YOE_101620.docdoc 4175a2dd2295146108a2fb6d370f0d24239715d3709a82c0c6ec420a962efe90Virustotal results 48.39%Heodo
2020-10-15SFL_100120_JTM_101620.docdoc 70652370e67cef224785a44a3bb57d19f00a8b000714cf7117ed9dec27b3c920Virustotal results 50.00%Heodo
2020-10-15REP_7976221534999606.docdoc 00534d43b370927552e8c71deae866472d34d67e1af2d02b93067c8b2fbc279fVirustotal results 50.82%Heodo
2020-10-15026583798984025.docdoc 590e91cfd2bc7164b8528b3e845e9d45e8328e9148b90c0836936e9d870ca895Virustotal results 50.00%Heodo
2020-10-15INV_49195700.docdoc c584c1bd086b6f8007e1a594498dd51149f97a492dd8113493a6dd21f9134ad6Virustotal results 51.61%Heodo
2020-10-15FILE_508785128028.docdoc 220ac344a6cec573fee38bce085d019effbac440a1edc4f463c1f5b676b6d082Virustotal results 46.77%Heodo
2020-10-15Y_V4DIV1YES0CJK.docdoc 766e921c13edd4367d95fd44b3070b9d4bbee1886ba2e298fc91f030e5e034acVirustotal results 47.54%Heodo