URLhaus Database

You are currently viewing the URLhaus database entry for https://gileadappbackoffice.com/network-security/public/8pdrwfwlx/c7bwicm844vqth/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:698664
URL: https://gileadappbackoffice.com/network-security/public/8pdrwfwlx/c7bwicm844vqth/
URL Status:Offline
Host: gileadappbackoffice.com
Date added:2020-10-15 21:55:06 UTC
Last online:2020-11-18 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 21:56:02 UTC to abuse{at}webhs[dot]pt)
Takedown time:1 month, 3 days, 14 hours, 38 minutes Bad (down since 2020-11-18 12:34:21 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17MEL_100120_NEM_101720.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-17KG6197081131JH.docdoc 39ba6406fa7f104c5275ad449ef4bf5f319caf7089cf553da10dc8ac12387f18Virustotal results 52.46%Heodo
2020-10-17INV_KZ0350049436EW.docdoc b0f945ed6afda303421f9501b2b2d1d2996a132eb27486911019cb9996538460Virustotal results 54.10%Heodo
2020-10-17BAL_JNG_100120_BEO_101720.docdoc 5ab2456a7a5d44a28ef32f5ac8c55e8eaf4b24802b2d326a29cd9aa4199e0b97Virustotal results 53.33%Heodo
2020-10-17BAL_54625728732802143.docdoc 83af4eee8013969fd28932937f24ed1bb6031013a525dcd161ed6914b41feba5Virustotal results 53.23%Heodo
2020-10-17844956059333.docdoc fa3c245c0bfe5a4b95d229481cbdac5dc3798f1948badeecb3dc692f589c5f7fVirustotal results 53.23%Heodo
2020-10-17T_5785568859.docdoc 2b95f52b2f665277c1b271f68b7ac017b7653d398e73877b7c8db4bf2ccaa52cVirustotal results 53.23%Heodo
2020-10-17KBX_100120_YSX_101720.docdoc 4ff23dc1f01527658819824659e03edb6ee7d16cdf8704e61548acf040415238Virustotal results 48.33%Heodo
2020-10-17FILE_KDHNGNW.docdoc 797ebeb27b3af7fa872d899601baf807800f85a84371fbee97e2232f841c4ae4Virustotal results 53.23%Heodo
2020-10-1752TIXKLR.docdoc 8b422df815c80e86241a4670a69918c21bf0fbdde61aaa753f84e0af70d9f4a4Virustotal results 53.23%Heodo
2020-10-17TWE_100120_EDV_101720.docdoc c0f957552ea0bfa9ec43b903ee17f870d19d10026a6e967b5ba434e26758232fVirustotal results 53.23%Heodo
2020-10-17I_PO_10172020EX.docdoc 9e5f94414bcc33c4f9405dd2c0747ccc8c79921dbaab834a1ce8cd0205bb1f9bn/aHeodo
2020-10-17FILE_OHV_100120_KTV_101720.docdoc 6d5ed047cba0f40a2bd108fdb285520a5590c29ac64b7a9d32a20719905f1e7cVirustotal results 53.23%Heodo
2020-10-17REP_GYH_100120_ENJ_101720.docdoc 85a42a8d612d20af55e105cdd7caa6c881ebae398c26dea03e0cf147e543f917n/aHeodo
2020-10-17FILE_90979809653.docdoc d718b0058aaa9406fd6bfdf6d7f13e8963789c2c0b331e70fd6e8edd6b1f22ebn/aHeodo
2020-10-17DOC_6QIGLNYW5.docdoc 4f1b55b5cbbaa28b0d87b93dd256cebd16df18a51e081378940ad152fd24da8eVirustotal results 54.84%Heodo
2020-10-1741108655.docdoc 58a95bd14fdfe2c4e30b7bce237de2fa3351c1bcf0328c91c9333a29a8be15d0Virustotal results 51.61%Heodo
2020-10-17DOC_IUO_100120_XIF_101720.docdoc 8358ae3aef04560a786b84a17aa88a981d700993291a3b11aa001fab16829ad9Virustotal results 50.00%Heodo
2020-10-17REP_34008446.docdoc d1e952f7b8eac274a9eb54c0ce6e8c6542aaa16cbdf7345c10c79852c2d5bd0dVirustotal results 53.23%Heodo
2020-10-17INV_PO_10172020EX.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1Virustotal results 51.61%Heodo
2020-10-17FILE_7009799966978861687088013.docdoc 8d13034de40b71141b07afd251984bb9b827f62b140815127683e779ebb9ab43Virustotal results 51.61%Heodo
2020-10-17ZD8531022523BO.docdoc db234da6bba5f671c8a6fad07cfc6ad7ce1b078a32f920e2edb4b142167e18dcn/aHeodo
2020-10-17FILE_3645904829455363932966876.docdoc fd0ec2733cb7fc4d8f934cf81b56a9a6fd2dd7290c257cdf4c2a1b3da2bcfc10Virustotal results 51.61%Heodo
2020-10-17JYX_100120_GJN_101720.docdoc a106e1da9cf3b1b5b2f7211307b55422cf772fb176003bd02070def6d3b1c13eVirustotal results 52.46%Heodo
2020-10-17DOC_NC9153561507KH.docdoc 4f6043ed53481592c3b9db4608a157df568b466062cba2018b8e5c59bfb40563n/aHeodo
2020-10-17BLX_100120_DKR_101720.docdoc 72bc6543f22de398e1374caed638e9a1d24ec0b37a5fa9b5ac10ade7559ab839Virustotal results 51.67%Heodo
2020-10-1750968885.docdoc 71c1be4d00ef4ec74c73abf05187dacf0335a393a145eff2b2efd68cbaa91b67Virustotal results 54.10%Heodo
2020-10-17REP_1TQV2YRB.docdoc 8e0082cbc47e4f5638313b20400e4874bb6371c424ee7ba8eb29009692653676Virustotal results 50.00%Heodo
2020-10-16DOC_INR_100120_MBJ_101720.docdoc 2d4a3ae690cd64017a114de08ffb095c8208ca65f5647809600f6caf8ff7cd97Virustotal results 50.00%Heodo
2020-10-16DOC_KBJ6H5FK.docdoc bf79372e0c3a2b7a3b0df0f3994621206443404f5c382b8ad5e5c609c6b0e043Virustotal results 50.00%Heodo
2020-10-16REP_TZ0510041199VR.docdoc 39dced6aa4d3785efffcddc9b87bb1744c386d811cf509ac1baef383eb0c38ceVirustotal results 50.82%Heodo
2020-10-16BAL_DK6585352417QP.docdoc 23600bb2ceb80154b049764a263e10cc02148048a332d10edf6458fc4b2cc34cVirustotal results 46.77%Heodo
2020-10-16REP_ED6547298196ZW.docdoc 59330f6abd11ccf8373697955746b598be71ca8c69774640b41ebd9650abb398Virustotal results 45.61%Heodo
2020-10-16UIC_PO_10172020EX.docdoc 2fbf73e1a8260214e5654186383efb89efb8590b71bcb92848290ffb06b90c8cVirustotal results 51.67%Heodo
2020-10-16FILE_SD0QSPI2A.docdoc 30e4cb15ec8c1e838060a3e4fa642919313c6b9c0e9b3eee6cb507eee695f828Virustotal results 46.77%Heodo
2020-10-16REP_JFL_100120_GTE_101620.docdoc 42b0f6b8bb6f89af3b0522edf491d6fd823bd44170bd828f1864212eab862edaVirustotal results 51.61%Heodo
2020-10-1669620768.docdoc 01b41659d4b3ca5ad9f986d2029f5aa621310edb658267e5f478bd784df82874Virustotal results 45.16%Heodo
2020-10-16PBI_25JRVTB3.docdoc a556f655a5fe240f6e969c6e0c449f47d357b453c5940205ce2d867f7ca64e4en/aHeodo
2020-10-16BAL_SD1126815887KS.docdoc 983555bf6e5340b9a14130644379b3ed4d7c6ccaf937b3e800ae1c1b1164dc25Virustotal results 50.00%Heodo
2020-10-16INV_A58XGA8GP5XXD.docdoc 334cbaeae02aab74b5bcf567ec6fb87be96ca6deead23214dcfb4fc36598b5f7Virustotal results 43.55%Heodo
2020-10-16REP_5717082459399906590360675.docdoc aea241f3329677966d3248a45a28963b925735e86541501338bd8f27590ab88en/aHeodo
2020-10-16DOC_PO_10162020EX.docdoc 77cdfff917a2408f0ee9abbc0f607fe7cb8967b25ea422571c36ad69debc73e2Virustotal results 46.77%Heodo
2020-10-16PO_10162020EX.docdoc eee6727eb427510fdf3fc2a8dffc94ab47b897f5c20b69a87cff6f9a5024fe89n/aHeodo
2020-10-1660993561.docdoc ee640ad9d020dedce3c3a18efe2a6a9a14ed4cf50ffa64ba27090765dfb3cc6bVirustotal results 47.54%Heodo
2020-10-16FILE_CC2174263227VU.docdoc 055c0768feaa5f21bc4c430d586190b390dfcb0f18a8c908bf9dc4fa01bc99d0Virustotal results 37.10%Heodo
2020-10-16INV_63913283.docdoc 5c6f2d9a882fc281752198cd5c713aab468bafe4a0ed461ed70556a8dd12b900n/aHeodo
2020-10-16FILE_MYN1W6UVO8.docdoc 08c39bc35902925027d9fbcb94add1228e58eb5c4b52c63564ff142b0e186970Virustotal results 45.16%Heodo
2020-10-16D_22024147.docdoc 84e8abea7d9cd4e2d9c01114ed11fb7e62c9ca8ee2b0f89c9d99430189e2b02fVirustotal results 37.10%Heodo
2020-10-16817959240255618701039.docdoc e8cf2d2aeeef9972177572c05c58a7659515a991f2601167d7512ea389672c6eVirustotal results 40.98%Heodo
2020-10-16REP_WBG_100120_YHC_101620.docdoc c776db8d620c054dfc36df81dcd693dd59598cce84323f83c4677fec5fc8eb4eVirustotal results 37.50%Heodo
2020-10-16AZ_FK2020687767KT.docdoc aaa0b201b6ecd9225b9f151fef9ab72ef2b37f5b2a35ae38b130f2b9b7cc5e8bVirustotal results 40.32%Heodo
2020-10-16KM8451062498GS.docdoc 31d6b7258df89266703cadb66afc3728ffbd629f68ca60c950bd3b27d4cae086n/aHeodo
2020-10-16FILE_SVTV1WJOC2Q0SU.docdoc de1e044b0692b4790189c84a6a3bff006ea424fc6ab7a94f3063c76dcf38b463Virustotal results 37.10%Heodo
2020-10-16AK2184395199WI.docdoc da2a69c132b4eabb8906babde63fe2c5d82fb6fb40d94a025e2794eb845dae32Virustotal results 37.70%Heodo
2020-10-16FILE_5P8913Z0R3UE0V7.docdoc cd26ab187d5f4f2fb4fcb48799e6fa9d43fbe49c83a2e0b719ca6547134ad108Virustotal results 35.85%Heodo
2020-10-161538081272269168447383.docdoc 74f63318ba7dd16ddae51e0b9e1e8a253d02156b7ccdbc947aa9559b49ed49a4Virustotal results 30.65%Heodo
2020-10-16C3QXDSZU5R1M.docdoc fc806b39237bec90a8815cf600d9f371357926be080869be6a1cfce9c6a2e9caVirustotal results 32.26%Heodo
2020-10-16REP_737717504385695.docdoc aa3af1b21af839268143b000b0e8f4a431079b94f69c8025f31315e8ceac2b47Virustotal results 31.15%Heodo
2020-10-1694509404.docdoc 06e060a5282c8d2f693c8ba4aefe1f43fbe3e421913e3c26acb895b10250a4caVirustotal results 32.26%Heodo
2020-10-1658139473.docdoc c4e5490b2508ceaa3f196549d3c7d2865225ebbd56af97bc4a753542204c6641Virustotal results 32.26%Heodo
2020-10-16PO_10162020EX.docdoc 5e68650f2243c0318d2a6e551b02d3294164edaa15b2fa7700e05337dd9eb4d3n/aHeodo
2020-10-16BAL_OSDZHN5M5HMX07.docdoc 44b5ac3a1688e978f2ab497cb9a2b77b9a4a27edb617212e27b63035becfb148Virustotal results 50.82%Heodo
2020-10-16ZP9727899580CE.docdoc 83f30b3a4a10e5a1a7c91c9ca69d9bc4551924e63d41ca17faf0be34297659daVirustotal results 50.00%Heodo
2020-10-16BAL_YGH_100120_BCO_101620.docdoc 147b9616588be0def766828cbdc415348543d772fbf13e9a7fbe0b37b0ebf3fdn/aHeodo
2020-10-16F_PO_10162020EX.docdoc f677579d45117ccb457830413b6ee450bfe97425e2b31f2b582368410b0b78e9Virustotal results 50.00%Heodo
2020-10-16C_PO_10162020EX.docdoc 862a3557cbd080c1e4b737d044d2a849ffc1fda3cd46e474ff947ff583357464Virustotal results 50.00%Heodo
2020-10-16FILE_NE1091824125IX.docdoc 7e1333c6529018473221519532ee51d04523ad9354f66d62ea599d4bcb9b4a8an/aHeodo
2020-10-16B_MT5694105371VD.docdoc 6bd70c37738737b137dddf5e137cff39eb5baeca80217787c95d5ce885c5854aVirustotal results 47.54%Heodo
2020-10-16CT8444521003SJ.docdoc 98d7c4d63fcd23e0417a08c9645e5bb0729a1fe136941495b001db7126726608Virustotal results 46.77%Heodo
2020-10-16PO_10162020EX.docdoc 98852e4e9b18aaefa6bf7599dca0b76b3e9990ec9b0cbf54ce1dd3a03015cc9aVirustotal results 46.77%Heodo
2020-10-16BAL_72113455.docdoc 69f9016515fae6fcbd183373fc2264cde1b32149aeccfe75d2f248beb80c5d5dVirustotal results 48.39%Heodo
2020-10-16P_790781019932676.docdoc 9ff3fa5bcfc5a9b21abf19a4f8f3c406f0874fd93f8508c58e42529f672a6d23Virustotal results 48.39%Heodo
2020-10-16FILE_618066365543568.docdoc 2fc8f20d9cf100c7de1244d5ccb17f14230e534ff24921e0cb537ebce7668908Virustotal results 48.33%Heodo
2020-10-16FILE_3RVJ2BUGCPG4WV.docdoc f0abef25579afd4a06a70b4a55ce9b492df87c17b66b1949f541f679f6376b84Virustotal results 48.39%Heodo
2020-10-16DOC_GT8097535976BJ.docdoc 200fd063fbce58987452058b68b6f0d32d9fd51afddd74f6ed466124627fc51bVirustotal results 50.00%Heodo
2020-10-16FILE_V69TKC28.docdoc 4175a2dd2295146108a2fb6d370f0d24239715d3709a82c0c6ec420a962efe90Virustotal results 48.39%Heodo
2020-10-15Y9APFJ5O6GS.docdoc 70652370e67cef224785a44a3bb57d19f00a8b000714cf7117ed9dec27b3c920Virustotal results 50.00%Heodo
2020-10-15NKSJA4AHK.docdoc 2889aa2818bb6b697ece0258b29a039f5f46f85444792ecad4d3667806bb5610Virustotal results 50.00%Heodo
2020-10-15BAL_KNL_100120_OYV_101620.docdoc b1ebf8efae5ce8d163d465c5ed7b819bdcc16fdbe03f723da2d0b61114721d04Virustotal results 50.00%Heodo
2020-10-15REP_77185819359334447800333.docdoc dd30e8495694397703816d63ba5a77f3eac6a41216b2d2d536d627d85f015c87Virustotal results 48.39%Heodo
2020-10-15VF5023808675IN.docdoc 220ac344a6cec573fee38bce085d019effbac440a1edc4f463c1f5b676b6d082Virustotal results 46.77%Heodo