URLhaus Database

You are currently viewing the URLhaus database entry for http://ad-avenue.net/-/statement/30kq3hsjilnksk5nco21ysa4btb70b/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703074
URL: http://ad-avenue.net/-/statement/30kq3hsjilnksk5nco21ysa4btb70b/
URL Status:Offline
Host: ad-avenue.net
Date added:2020-10-16 17:42:16 UTC
Last online:2020-10-19 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 17:44:32 UTC to abuse{at}ovh[dot]net)
Takedown time:2 days, 15 hours, 6 minutes Poor (down since 2020-10-19 08:51:15 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17REP_EKR_100120_RRM_101720.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 54.10%Heodo
2020-10-17DOC_GF6116270895EL.docdoc bf7d2c74845e2e6006ed753d93f64d23813dba57c4f443be01f59915f96aaca4Virustotal results 53.23%Heodo
2020-10-17NPPX_EN1WQ6E0XGRJO.docdoc ea065a0dbc3ca645237d0c98e82887ca636451f3fa822c6c0a087a2fe98c230fVirustotal results 53.23%Heodo
2020-10-1703638349182.docdoc 72e665a7d43027e4ad6206ba82bfb44f113e89c81b249b2c9ea29c45faf022ddn/aHeodo
2020-10-17U_YAW_100120_JDR_101720.docdoc 7f7aaae8116f26c7d91c5c3d87ab7c7a752e628195c25563cc7c3074669e6c7an/aHeodo
2020-10-17OZLJ_PO_10172020EX.docdoc 127e5f88e44a1886181820087f5a2d1bb09ecec7ca49c027c33c9cdead79c1acn/aHeodo
2020-10-17643156885240.docdoc d718b0058aaa9406fd6bfdf6d7f13e8963789c2c0b331e70fd6e8edd6b1f22ebVirustotal results 51.61%Heodo
2020-10-17BAL_35900134.docdoc 4f1b55b5cbbaa28b0d87b93dd256cebd16df18a51e081378940ad152fd24da8eVirustotal results 50.82%Heodo
2020-10-17GF28A9JGAWZ.docdoc 7563b098e425087d70e59bc0ad1d712d39ec6286fc63eaa9a9eea68f9a7ede26Virustotal results 51.61%Heodo
2020-10-17INV_ZT8527478467TT.docdoc 252e05a52d4bc9d3d266533b1a75bfab674989b8d3a4f0ff8d898529379329afVirustotal results 51.61%Heodo
2020-10-17MH_PO_10172020EX.docdoc d1e952f7b8eac274a9eb54c0ce6e8c6542aaa16cbdf7345c10c79852c2d5bd0dVirustotal results 50.00%Heodo
2020-10-17REP_65MHMTEFIM20N68.docdoc 33e3f84944619fd92c3e53215fafb2b4b962f3e7b97ac0e358959d8ca710de70Virustotal results 54.84%Heodo
2020-10-17REP_DY9490435659KZ.docdoc 02730b23749bb5e945d78771425520fe94a15b5647f34a7efeca54a72c9297c9Virustotal results 52.46%Heodo
2020-10-17L_NM7918500852ZE.docdoc fd0ec2733cb7fc4d8f934cf81b56a9a6fd2dd7290c257cdf4c2a1b3da2bcfc10Virustotal results 51.61%Heodo
2020-10-17R_1219211835868655897889559.docdoc 055030f2d18fed27b4bc4f3e461f0eceb8308cbc3182ec2eca899c70d9aee715Virustotal results 51.61%Heodo
2020-10-17G_TG9493261930PO.docdoc 4f6043ed53481592c3b9db4608a157df568b466062cba2018b8e5c59bfb40563Virustotal results 52.46%Heodo
2020-10-17INV_PO_10172020EX.docdoc 72bc6543f22de398e1374caed638e9a1d24ec0b37a5fa9b5ac10ade7559ab839Virustotal results 50.00%Heodo
2020-10-17NPL_86912773.docdoc 8d9046f3f3aef8eaa74dbcc4aa33811b0f06438b3c4fd36bda76c6190da4f669Virustotal results 50.00%Heodo
2020-10-16REP_PO_10172020EX.docdoc 8e0082cbc47e4f5638313b20400e4874bb6371c424ee7ba8eb29009692653676Virustotal results 50.00%Heodo
2020-10-16BAL_84761900360.docdoc 53467ef76cb2d0f4cc9404439089220dd6d34680c167f2f062307713724ee9bbn/aHeodo
2020-10-16BAL_SMO_100120_GQP_101720.docdoc bf79372e0c3a2b7a3b0df0f3994621206443404f5c382b8ad5e5c609c6b0e043Virustotal results 48.39%Heodo
2020-10-16INV_70796874.docdoc 6539d2ac4a847b3444866e22b642a335e3d8b92d40031a090fa315aef1af2930Virustotal results 51.61%Heodo
2020-10-1676511516.docdoc 1b2a426d5d7d5a0185640c82655ec40245f89ff62644ec1a04de9894a169114cn/aHeodo
2020-10-164449239163.docdoc dae05fe983f37d53c614de68c40f3da714bccb7dd377adecaf6a7592c31cdc4bn/aHeodo
2020-10-16RV2522716989AY.docdoc f8b980774cc06cbfa822245a47e48d9bd3280bf6cf2bd96628d02e54c84baf3aVirustotal results 51.61%Heodo
2020-10-16CJEK_17606224.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfeVirustotal results 50.00%Heodo
2020-10-16INV_14334633.docdoc 80605d4761a1447fe034eb12aa555f3c47129991eb479b0d4da31493633ee464Virustotal results 49.18%Heodo
2020-10-16BJ_OW9748988431NV.docdoc ba3ac6b60b4acb6aa9b534e4cdbab1c537fdb07b6fcd10d5e16f076fac5fbf1dn/aHeodo
2020-10-16PO_10162020EX.docdoc 8b5585bc3f128dd3a3ef10f180c3a5cd06e2f68e9894551fe177b09b5b1ee0c6n/aHeodo
2020-10-16DOC_7061996103.docdoc a556f655a5fe240f6e969c6e0c449f47d357b453c5940205ce2d867f7ca64e4en/aHeodo
2020-10-16RU1062415954KF.docdoc 66039545c0341ab69ac7dac547c88d087e88a6fe13ea338a5fd0397364c0350cVirustotal results 44.26%Heodo
2020-10-167G1H0EJXDYWFTHW.docdoc 0a0ac374574dd78365ae4b5e84357a2387d99dd14752f6a53391324841412b19n/aHeodo
2020-10-16XWDR_2812546053119905.docdoc ffa06f345711cab1bbf64ad42a6ab9b9264655ec20d39fd3ab37d4e950c98b8aVirustotal results 46.77%Heodo
2020-10-16REP_PO_10162020EX.docdoc 69723a53775c6a9e152a508cdfa347a0e07201d2efca1c2c0ac1112748a9fcd6Virustotal results 48.39%Heodo
2020-10-16EYX_100120_SST_101620.docdoc 45f7ed6acb52b3f758297672fcb90f410da0edfe48718c002c3b97016ac99d81Virustotal results 40.32%Heodo
2020-10-16INV_MO4339903460YL.docdoc 89157919f283aad6306a78ae43e54b55c2431a0a64dbfcef22df553bf09ae681Virustotal results 40.98%Heodo