URLhaus Database

You are currently viewing the URLhaus database entry for http://nomadadesign.com.mx/F0xAutoConfig/attachments/hc2a03pzv9x3rn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:717933
URL: http://nomadadesign.com.mx/F0xAutoConfig/attachments/hc2a03pzv9x3rn/
URL Status:Offline
Host: nomadadesign.com.mx
Date added:2020-10-19 13:28:10 UTC
Last online:2020-10-19 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 13:30:34 UTC to abuse{at}digitalocean[dot]com)
Takedown time:7 hours, 24 minutes Good (down since 2020-10-19 20:55:04 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-19INV_7954253625423.docdoc 455f0d38ef7a2fa26af12a20467fff0fd2c26e1b0b0269c1824a263fb6f1b6dan/a Heodo
2020-10-19INV_KMI_100120_KEI_101920.docdoc 9363f5e5b8327d3d48fc6ec86fbe5628463d725ee19b8155cbd6ee410dc11cf8n/a Heodo
2020-10-19DOC_5546308951052.docdoc 41ac7d493b1557148e1fe3b89240f7e6819cd8bf0a4ed8bfbc789daa23a8359eVirustotal results 37.10%Heodo
2020-10-19DOC_PO_10192020EX.docdoc 314260b047fafb8a9e73e12c2d63b8fe7aca80e25fa1511e2c96a2bb40e26df4Virustotal results 37.10%Heodo
2020-10-19PO_10192020EX.docdoc afacbe2b36a27b864ffaf4cc60eae312d6a7080c4a0822e29f8fb23b5019636en/a Heodo
2020-10-19YGLH_PO_10192020EX.docdoc 01fef30b1519a4eaa558839ae9d4905b10f002571d44f140afb7fe2850c6fc20Virustotal results 33.87%Heodo
2020-10-19BAL_PO_10192020EX.docdoc 5d349dc97b131734a22ef88c9825497239e6211786be5b294d6e7f9b7a41bc9dn/aHeodo
2020-10-19BAL_3IV3KYR7.docdoc 3837c3b95db5756f21d9920809ccbad0909eac42344076a4c12582f61acfcd6dn/aHeodo
2020-10-19PO_10192020EX.docdoc 34ee8ba7a8157031f68b98e8ac7ad44be2eed233ac106ae095ea47884b6f8cf2Virustotal results 34.43%Heodo
2020-10-19INV_7FFKXN2Y.docdoc a05e5c6098ba14cba82976f163c619e06db72ff518169f6f799e8c89f1fd0c7dn/aHeodo
2020-10-19FILE_ZTTWVKCZGBONH.docdoc 6308486de691c912fecd3c2d8189b88f281ee4cea8a1fb122909541cc6b217cbVirustotal results 31.15%Heodo
2020-10-19BAL_379219071264905446500.docdoc 5ecc6d05457c8d3f382c04c9186f74ec16a9d9da9c1d7c3dd0c392afae7cf852n/aHeodo
2020-10-19PO_10192020EX.docdoc 36ed59c1ee6e3358a027009660417aa0eab4de1d24ee4e17c0a0ae8b375aa325Virustotal results 31.15%Heodo
2020-10-19HI2166772604ZI.docdoc 1e8b04f61e8d6fc7b1bd0498cb69d0063ddb35817228b35297ec0e4174b144e6n/aHeodo
2020-10-1974I5JI0N7BE19E6R.docdoc 26c2e61794f91c5303493c18f5d4f311b5f1356a2ab1973f003333f53c52376an/aHeodo
2020-10-19REP_76514679.docdoc 257a1d4cce20eec8aa07482d315d73b6569a490bd24b90a71021e7f4f4b940dbn/aHeodo
2020-10-19G_PO_10192020EX.docdoc 946d379003a8578e7f97313a542c8bdaaabb216968b6cd6db6336ddcf7324d15n/aHeodo