URLhaus Database

You are currently viewing the URLhaus database entry for http://blosh.nz/wp-content/446/0bujw86u7jiu2i/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:717930
URL: http://blosh.nz/wp-content/446/0bujw86u7jiu2i/
URL Status:Offline
Host: blosh.nz
Date added:2020-10-19 13:28:10 UTC
Last online:2020-10-20 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 13:30:21 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 4 hours, 6 minutes Poor (down since 2020-10-20 17:36:43 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-20REP_PO_10202020EX.docdoc dc5f20efe5aed77fd6068af54bfd5d3182c935aaa3c825308f2b0152118a4ffdVirustotal results 39.66%Heodo
2020-10-20208531433788215312173742.docdoc 3a8287a81d763e34609872325add4dfcccd8609540be210a698596e019647947Virustotal results 38.71%Heodo
2020-10-20DOC_MK4221918318AQ.docdoc 7a8b2c156f080eb853a85b4e9beece21fb85945a3c4e0a3ecdd548ba52b88de1Virustotal results 40.00%Heodo
2020-10-20BAL_PO_10202020EX.docdoc ad758bc59fac01bf0e88ea434324c0bbc246df3cbd4feb1a6f6080d05dc10d35Virustotal results 38.33%Heodo
2020-10-20INV_ABE_100120_YZM_102020.docdoc 9c079737afb3eb5b8f0bf171052b84b12b1fe03fc0a1687968d82a62b123417cn/aHeodo
2020-10-20BAL_24440897.docdoc 409c5c20a9fe7868ad61f9ba804de18908e9b94503134e2827bc7b4b0208b137Virustotal results 33.87%Heodo
2020-10-20BAL_EG3R5OL.docdoc ef809a2b364f20ed3160030bf3cf422976b5e0d27a69ecbe892664641bc9b746Virustotal results 40.32%Heodo
2020-10-20INV_PO_10202020EX.docdoc 40acf5c1261d6d9139f62df39cfae30d1514dc9b507ce21ac857069a62b2ad95n/aHeodo
2020-10-20BAL_757651766379871368565232.docdoc caf89826a3f6bded5f2fc6f8ef3cb20fceed492cf72bcd35e533834033f4685dVirustotal results 37.10%Heodo
2020-10-20DOC_PO_10202020EX.docdoc 7b2217eabe518a8d069b89bc057a59124420e7895ca2b20cfc342f227c6005f4Virustotal results 48.33%Heodo
2020-10-20FILE_O3H7I5QJAH.docdoc 727b533c2d5e89c6f6a3a402bbdbc4abb5d48514953c650d870a9b5a2a8b19edn/aHeodo
2020-10-20REP_PO_10202020EX.docdoc d4efb2abd5dee8979636f5811f9e9cbfb4fc4618a6a1ab86e87d93891675c834Virustotal results 49.18%Heodo
2020-10-20J_NEG_100120_ZRN_102020.docdoc f5434fc590101707d60839d45f0da90b59a859ea342ca10fb508fe6dc8e6366eVirustotal results 48.33%Heodo
2020-10-20FILE_WRR_100120_XHF_102020.docdoc 0b50109aa3bc171ff9f379afe7a80a952c4255a6ef6c82aa8dfd5f2d988dfe42Virustotal results 49.06%Heodo
2020-10-20FILE_BIEMYIK3GGLRP8T.docdoc 49795d33d7c679a6a191590c742647402c2dcc89598c51f466f5e7a50d64f027n/aHeodo
2020-10-20BAL_902549667870.docdoc 59b11da7af351898590c99795dabaa6165941fec5c5e377a4b8edab164b057ddVirustotal results 48.33%Heodo
2020-10-20INV_29262159372715395.docdoc 731f9c60c47914b2dcc22536d709f5bf0aae0176c27bde61e5428e9a1afdc602n/aHeodo
2020-10-20BAL_LAG_100120_BJL_102020.docdoc 84859856982d458b9e52bb7a34605e77f0445b30c1a8ac04191514aebf325393Virustotal results 49.06%Heodo
2020-10-20BAL_93537787805619518776294.docdoc 895834171ee2ca52d01ac4ce70de6378fe1cb526d31669551408c38dbc8e6d61Virustotal results 50.82%Heodo
2020-10-20XM9738973423CT.docdoc 5cb6d2ac7c0048a18397fbd75effd392d58835e1f50e4f17400ae73dbd25f3f5Virustotal results 50.00%Heodo
2020-10-20OW1807463204AT.docdoc 5c2800e73f66d8ffd5060d01074dd76a5f63dfd7ef6bd2c73b63bccb6fddf9bfVirustotal results 50.91%Heodo
2020-10-20BAL_76443014463962222959.docdoc f8408f6bb05acc27657e4105c43525259e4fd4b0a01b0312392fc6b6332594c3Virustotal results 47.37%Heodo
2020-10-20FILE_PO_10202020EX.docdoc 59b186ec1a7a44f2392d9a8b893b49e651376de7a32901836a7833d10ec53035Virustotal results 48.39%Heodo
2020-10-20PO_10202020EX.docdoc 25fbd5d4abfc8825056faeb812b39029cb907bf117d1bccb5935d2c8f091dc24Virustotal results 45.00%Heodo
2020-10-20VY7130097209ID.docdoc 891db149e70aebaf792f646fa2474cb330a992ba1bf5b6c8720f2170336a745en/aHeodo
2020-10-20KMG_100120_BVV_102020.docdoc 83c06efc736a9bcb18d36092a16ef484ea9b44a9f759ce63f5f1e5edf09330c3n/aHeodo
2020-10-208695208631719655255688.docdoc 2a990db8252967a804aee88ff79d1b79b83bbd2ae730096cd6a5e04a6405d2f9Virustotal results 47.46%Heodo
2020-10-20UMR_100120_OEO_102020.docdoc b115c55302deeae4e7e088c8dd801349c25089e867dc300251bb75936f96260fVirustotal results 43.33%Heodo
2020-10-20FILE_PO_10202020EX.docdoc 3ce9206628c9536ff8af6e519c73237d093633351aae17b02b111fcbee0a1a47Virustotal results 46.81%Heodo
2020-10-20INV_W2WCW4UARMV2109Z.docdoc f92168c204577e0afaf33dedd1c85aa3ec11b2cef3bf494a422741147d8ae88bVirustotal results 45.16%Heodo
2020-10-20TDT_LI2F85H.docdoc bcfc76295fd5ab5b017402035d604facabb641cb2db84dbabc36923bc8b576f8Virustotal results 45.16%Heodo
2020-10-20INV_300466899597877378355948.docdoc 8ac1680c0c5e8a7d29a679853b8f4bccac80d061e41b1fd2b5840998aba9911cVirustotal results 43.33%Heodo
2020-10-20DOC_HT7560741558CX.docdoc 44323308399663fcb908e6e32d51a26fda5bea8ff52732f3987b07c6d941fa96n/a Heodo
2020-10-20CQ2H3GHJMFA5432K.docdoc 1bba132909206fdf4ee6aa8983cb2fe4b5d39cf69869e0945c87dfe853df59b9Virustotal results 41.94%Heodo
2020-10-19REP_48749392333470401.docdoc 30152a6c0f59f8968dcc935f1384a25fcb1e25cd3467f63e7ce6412931166d02n/a Heodo
2020-10-19M_BXR_100120_CGY_102020.docdoc 3ff8617732a305df8388b310d1848742bffcf5481aa9dc832a5c6b2e30cdeb1aVirustotal results 37.10% Heodo
2020-10-19Q_PO_10202020EX.docdoc 7f0612913efc6d90be3e1567000dab8fa81239eece583f92356cd973ae25bd30Virustotal results 35.85% Heodo
2020-10-19GA1620016970WR.docdoc 7af133206232af82a36e45dcbc7e64a3ea9ca17299266f647e0b130f0c100104Virustotal results 37.10%Heodo
2020-10-19REP_QX8054576465DW.docdoc 9a1400c87eb903c4fa8bf92ef429307203a804d6e4a589f6472ea7b00c4b75fdn/a Heodo
2020-10-19T_IFY_100120_PPQ_102020.docdoc 9f5fdb91a1f42a4310ae1270fd63e6cbf01bdfc5e68cf151a33907377c25597fVirustotal results 37.10% Heodo
2020-10-19DOC_PO_10202020EX.docdoc 5e6567555b2e4a67f8f23c33992a9c668b4a43136bf33bd3c0cedebd8d99c290Virustotal results 37.10% Heodo
2020-10-19U_IC2193013388UH.docdoc 2404869da2e4a9b00f87b4252eba9d0444ae189e15a24b263b226e3270b88ecaVirustotal results 37.10%Heodo
2020-10-19JG1003296854BY.docdoc cf359edfef0a7fb78764aafab77ac4ade74de4ed9d3d3a2a8d17baa237d3e5afn/a Heodo
2020-10-19BN_PO_10192020EX.docdoc 844f5a0d32b339d2753996642cac6fa99aea871aadc4438c081469e5f6b42979n/a Heodo
2020-10-19VLALBDG.docdoc 314260b047fafb8a9e73e12c2d63b8fe7aca80e25fa1511e2c96a2bb40e26df4Virustotal results 37.10%Heodo
2020-10-19DOC_9219357011198.docdoc 6b49e4f9fa88dd99e2847840a9468f1686c4e069ea056c486cdd658f6df49125n/aHeodo
2020-10-19FILE_40690319.docdoc c7b747cd1c60fa173fa3466e99337863d3e4552c315e3b2a1f284f6293bc8e46n/aHeodo
2020-10-19INV_RWK_100120_LGZ_101920.docdoc 5d349dc97b131734a22ef88c9825497239e6211786be5b294d6e7f9b7a41bc9dVirustotal results 37.10%Heodo
2020-10-19EHG_100120_FDY_101920.docdoc 3837c3b95db5756f21d9920809ccbad0909eac42344076a4c12582f61acfcd6dn/aHeodo
2020-10-1970789460553517401.docdoc f9bb2c1295e01206b01528ccd2e09f1662a6f12468249ec30238ae7187723fefn/aHeodo
2020-10-19DOC_UPJ_100120_JTE_101920.docdoc 0afed56fa5ceb5e8f543c3b66243c8739bbd04f899aa3a2f9aff10614c28909fVirustotal results 29.03%Heodo
2020-10-19FILE_SN3308937911BR.docdoc d95cf2e0e51389df6e97878b1c041fd79f3e61abafc8ff61bcfb691562625e5bn/aHeodo
2020-10-19INV_C1UZF4KKCHOJ9W8U.docdoc b89f5cc2f7b28b84834d226a52e9146d7ccba3a739a9e509b5cfd566abbb52fan/aHeodo
2020-10-19WKS_GNDKVR3KCG2RSHDZ.docdoc 5c674607e8d61d87eeef970d125a85af6820f2abbdbdb84d9f2e85fd6ad982f1n/aHeodo
2020-10-19YO4838570727EI.docdoc e70629dcf62d93f64e5e57e1e03d2d662822926bd73aed78fea3cceb9a16b4a2Virustotal results 31.15%Heodo
2020-10-19I_093135828506137752290664.docdoc 3cc91108bd9d95f641996cfbde558f3ef6f6e02cd25106217a2d6dfab9da1f30Virustotal results 30.65%Heodo
2020-10-19FILE_CN0960536065KZ.docdoc b00e19e0b56e69a03215209a1f17f5d78266aed24879127ededa6fa200017f0eVirustotal results 31.67%Heodo
2020-10-19DOC_MSM_100120_VRR_101920.docdoc 946d379003a8578e7f97313a542c8bdaaabb216968b6cd6db6336ddcf7324d15n/aHeodo