URLhaus Database

You are currently viewing the URLhaus database entry for https://office.horussolution.com/files/Document/m2yp4zn91rr6ej/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:702029
URL: https://office.horussolution.com/files/Document/m2yp4zn91rr6ej/
URL Status:Offline
Host: office.horussolution.com
Date added:2020-10-16 13:31:07 UTC
Last online:2021-03-09 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 13:32:33 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:4 months, 24 days, 9 hours, 4 minutes Bad (down since 2021-03-09 22:36:49 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17AHQP7094AOSB.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-17INV_E7WUCOVL3UOBLYS.docdoc bd5e318573106192eca830985c93ad07583928c7ba9b1f752ee5ce3e38eea593Virustotal results 53.23%Heodo
2020-10-17BAL_NSP_100120_TPV_101720.docdoc b0f945ed6afda303421f9501b2b2d1d2996a132eb27486911019cb9996538460Virustotal results 51.67%Heodo
2020-10-17DOC_18762533.docdoc 36d4d0f8ba694e3a45ac3fd858e3312538bf61d501403dcbe763638f043ab3a1n/aHeodo
2020-10-17DOC_57331659.docdoc 83af4eee8013969fd28932937f24ed1bb6031013a525dcd161ed6914b41feba5Virustotal results 53.23%Heodo
2020-10-17L_UI2397263979LF.docdoc fa3c245c0bfe5a4b95d229481cbdac5dc3798f1948badeecb3dc692f589c5f7fVirustotal results 53.23%Heodo
2020-10-17QAD_PO_10172020EX.docdoc 2b95f52b2f665277c1b271f68b7ac017b7653d398e73877b7c8db4bf2ccaa52cVirustotal results 52.46%Heodo
2020-10-17FILE_18436482800676.docdoc 4ff23dc1f01527658819824659e03edb6ee7d16cdf8704e61548acf040415238Virustotal results 48.33%Heodo
2020-10-17P_LFZ_100120_HML_101720.docdoc ff9996026d66c80170010bab3d84d0ba1ecac3a6b87f8e694008feb0bc0b3d4fVirustotal results 53.23%Heodo
2020-10-17DOC_9YHA1C5ZOI19NW.docdoc ea065a0dbc3ca645237d0c98e82887ca636451f3fa822c6c0a087a2fe98c230fn/aHeodo
2020-10-17INV_PO_10172020EX.docdoc c2a2d6dc4e3b3dc13a558016e20a527bf4dcf55a75375a1b4544b23ef8a1adf0Virustotal results 54.10%Heodo
2020-10-17BAL_18758051.docdoc cab952f8c6436054516b7fb9b6dc980a0921858a4a312229099f2817b9846340Virustotal results 54.84%Heodo
2020-10-17ME4300502954BZ.docdoc 7f7aaae8116f26c7d91c5c3d87ab7c7a752e628195c25563cc7c3074669e6c7aVirustotal results 54.84%Heodo
2020-10-17F_IZP_100120_ONZ_101720.docdoc 127e5f88e44a1886181820087f5a2d1bb09ecec7ca49c027c33c9cdead79c1acn/aHeodo
2020-10-17REP_2Z8RX4M37KDTH6B.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6n/aHeodo
2020-10-17INV_OZ3YEO5.docdoc ca5d768289c225dea34f82176591548fc03963cf653f0a8ea0b6e0f9f71ca3aaVirustotal results 54.84%Heodo
2020-10-17ST_9031731158262.docdoc d475df1f773d7613eb0737655576c72e27384c8dcd3f851df9ab4ef978049108n/aHeodo
2020-10-17FILE_08769933.docdoc 8358ae3aef04560a786b84a17aa88a981d700993291a3b11aa001fab16829ad9Virustotal results 51.61%Heodo
2020-10-17S_16727794.docdoc 3cf860a4fc48852cfc15307168a655fe09d970de805123a370c888f18b949aaaVirustotal results 50.00%Heodo
2020-10-17FILE_UAH2MCHT66W90.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1n/aHeodo
2020-10-17P_750816120699496641679411.docdoc 61cf4ff84de3e35dd24e8df00464aa832912b8c378cbffc5da91abc576c809fdn/aHeodo
2020-10-17PO_10172020EX.docdoc cad389f338446345616f9a4f005b47f186be55fdd914d1b88f42bc4f26220685n/aHeodo
2020-10-17INV_PO_10172020EX.docdoc 055030f2d18fed27b4bc4f3e461f0eceb8308cbc3182ec2eca899c70d9aee715Virustotal results 51.61%Heodo
2020-10-17INV_XXUXDROMY.docdoc eb06448eea7b0d73132945671275ea572688e13de195a89974d8315900ff8cb7Virustotal results 52.46%Heodo
2020-10-17NYV_100120_BXP_101720.docdoc 5990f98a0aeffb24181deb144a8519e54f7695794e545b9ba0cb52fe28e3f987Virustotal results 50.00%Heodo
2020-10-17HP_P5SVDSDMAN9O7N.docdoc 99acccb026919eac0d3249c8a9207a71d032fbe59c7540c12aee398ae86e6780Virustotal results 50.00%Heodo
2020-10-17FILE_28144486.docdoc c40e490d1149a43b982a7c65d5f04d36117a86623374f75bf8d47f31090f8b18Virustotal results 50.00%Heodo
2020-10-17FILE_PO_10172020EX.docdoc 8e0082cbc47e4f5638313b20400e4874bb6371c424ee7ba8eb29009692653676Virustotal results 50.00%Heodo
2020-10-16FILE_GUV_100120_MYN_101720.docdoc 53467ef76cb2d0f4cc9404439089220dd6d34680c167f2f062307713724ee9bbn/aHeodo
2020-10-16REP_75488320.docdoc 6647111dcc98f3a01470eee7de5a3b93b579a08c585cd3553cbfbdf3d54db556Virustotal results 48.39%Heodo
2020-10-16V_PO_10172020EX.docdoc 39dced6aa4d3785efffcddc9b87bb1744c386d811cf509ac1baef383eb0c38ceVirustotal results 50.82%Heodo
2020-10-16Q9EQ25U.docdoc c829616c0d226e76bf936406e344c75c3abea9656fdf7b4b1d73934e6a853b3fVirustotal results 51.61%Heodo
2020-10-16FILE_DDH_100120_RJF_101720.docdoc f8b980774cc06cbfa822245a47e48d9bd3280bf6cf2bd96628d02e54c84baf3aVirustotal results 51.61%Heodo
2020-10-16Q_PO_10172020EX.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfen/aHeodo
2020-10-16REP_754018068698766504660498.docdoc 66c7e2fbf3c8c1188e708104ba2e10cb445c38f0aba80cf91527d2d1a36f2be9Virustotal results 45.90%Heodo
2020-10-16J_PSFFFHTFMSUC1.docdoc ba3ac6b60b4acb6aa9b534e4cdbab1c537fdb07b6fcd10d5e16f076fac5fbf1dn/aHeodo
2020-10-16PO_10162020EX.docdoc 2069708e26eb58f872b15305b2443d1fd546458a653b01f5f0fabb291e3d4deaVirustotal results 50.00%Heodo
2020-10-16DOC_DBR_100120_QWT_101620.docdoc ba25bd51dddd6e6b5f359d2e79ac6cafab5ec98ac623f412764253be9e449833Virustotal results 43.55%Heodo
2020-10-168187636528.docdoc ebb3b2f3e028448f7177bbd45d2de8b72115e600efa71bc4f649ef66cb30e2ben/aHeodo
2020-10-1637299444874.docdoc e4c1c671c5a35d55de0ae7e2ac20beabe562eaa22291d214907a9d0f7cd9b3a8Virustotal results 50.00%Heodo
2020-10-16BAL_PO_10162020EX.docdoc ffa06f345711cab1bbf64ad42a6ab9b9264655ec20d39fd3ab37d4e950c98b8aVirustotal results 46.77%Heodo
2020-10-16INV_PO_10162020EX.docdoc cb781c9123caaf90b0aa1ccf875c58492ab61503576a1c169840b6ee881a95a7Virustotal results 46.77%Heodo
2020-10-16PO_10162020EX.docdoc b8031f04cccc6be26a29ea7f8ce5296fcad48e7a2aa335b460b4c62015004cbeVirustotal results 40.32%Heodo
2020-10-16BAL_GN8899167187VA.docdoc 89157919f283aad6306a78ae43e54b55c2431a0a64dbfcef22df553bf09ae681Virustotal results 49.18%Heodo
2020-10-16ZS79IAQI1C0WXM.docdoc ccaca18fab3cf85f49be61cdac5f891f12961393dcfe120af01e6a75b3768b71Virustotal results 45.90%Heodo
2020-10-16FILE_52834526.docdoc 4bead4acd3e94b0d94cb2d3be3f50f5d9b5dd425a0d5d5caf6af43b13539d717n/aHeodo
2020-10-16FILE_QP87ZSUM.docdoc 2882ae473d8140a4919487e5c39d6cb78a594f4d99e5e9a7bd77a568ceacc67en/aHeodo
2020-10-16FILE_MEE_100120_ZYC_101620.docdoc e33080e4baec5f692b6a9902fbf0661cef6fd33fdc1ace3cd95e64fe9c70118eVirustotal results 36.07%Heodo
2020-10-16MM9197698399QT.docdoc 5d3294aeac345f3c7f5fc36fafe0997b3a7140045bb1b001649713f9ecf5002bVirustotal results 41.94%Heodo
2020-10-16JRB_035075684.docdoc b285a4eb97b84d68240929ecbe902577a607c7e7b0abe299ef3ff2a6fa3e9eb7Virustotal results 33.87%Heodo
2020-10-16BAL_PO_10162020EX.docdoc fd965285c7763ba89396757d0d3a21d013c1f0ec33856514ca688534587f0726Virustotal results 33.33%Heodo
2020-10-16027266879392237156.docdoc aaa0b201b6ecd9225b9f151fef9ab72ef2b37f5b2a35ae38b130f2b9b7cc5e8bVirustotal results 40.32%Heodo