URLhaus Database

You are currently viewing the URLhaus database entry for http://fixen.mx/audio/FILE/0074779585999460/lcPZc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:720918
URL: http://fixen.mx/audio/FILE/0074779585999460/lcPZc/
URL Status:Offline
Host: fixen.mx
Date added:2020-10-20 01:23:06 UTC
Last online:2020-10-23 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 01:24:16 UTC to abuse{at}liquidweb[dot]com)
Takedown time:3 days, 14 hours, 51 minutes Bad (down since 2020-10-23 16:15:57 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-2104142011.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21PO# 10212020.docdoc aa495e335a49559d4b42647432fdcd5ddc8aaca92a15370c5bcf89663157b004Virustotal results 30.65% Heodo
2020-10-21Electronic form.docdoc 7cb289ec6528b0539486ce3cfba77de2603160bea10cc4ffa3343920de3a2963Virustotal results 33.96% Heodo
2020-10-21Invoice 049672.docdoc 7a71bbbd54d2b129ef434d1379aeaf528d643d1cabbbac8bde1666c9e5069994Virustotal results 33.96% Heodo
2020-10-21INV_08014.docdoc 3c54fe2565b2e6ff66e9b1eb34fc93333f99d82c4c76d757292dd4e8c6af406aVirustotal results 32.08% Heodo
2020-10-21005634003.docdoc 793296b35ebc61fce4acf584fba910b876bafb60877bdd657f2bf7839bc5d84dVirustotal results 32.69% Heodo
2020-10-21October invoice.docdoc 3066b546570363fffc99b9c8264f2ec405df38fc02ee37fa0a3e7a69e3c24244Virustotal results 28.81%Heodo
2020-10-210854893.docdoc f492868f49d7ac388ea92c1bf5895ce59c3b1de49e2d3b397a6987eb4c32abacVirustotal results 25.42% Heodo
2020-10-21invoice #247220.docdoc 335231c83fd73bed46bea76a81706d2348880433f130fd464e81381a81e8f301Virustotal results 29.09% Heodo
2020-10-21033570.docdoc fe07d08c1aba72440960ac2c0ff5f92e2184de5622e6c5cc2ad858727aae5024Virustotal results 30.19%Heodo
2020-10-21G5522724649UV.docdoc b60221fbb29e77ac3d7f84dbdeaeb51c021b9072f430873d8b52f30eafcaf81cn/a Heodo
2020-10-21PO# 10212020.docdoc c197a6840f019226e39e14128490f861eb67b738ccfee85a256e97847047b769Virustotal results 25.81%Heodo
2020-10-21invoice.docdoc 51ab187886aefdddbe682cc0044049fd5c06bac5f1cda813a77165f3ad31548aVirustotal results 30.19% Heodo
2020-10-21964062.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21Inv. 0070772.docdoc 7301eb52916c5b004b3f81ebf360c397e25aba900652108420b868313afce2aen/aHeodo
2020-10-21Form - Oct 21, 2020.docdoc a190cc4bd4d39b253f7e560cdf793dd829f74b0f816bbddc666525007a02412fVirustotal results 47.54%Heodo
2020-10-2188928117.docdoc a9b5951976e5aebe82b1a18ef33e379ec5f3a36a04b89103649e54d7dc746aecVirustotal results 49.06%Heodo
2020-10-21Payment status.docdoc cbc98038cc0dab8d10dbfa4950f8228777c05eee346ce80ab1f2002c51939ac1Virustotal results 46.15%Heodo
2020-10-21Inv_941671.docdoc 58a681865ea454572eb661486c8e06854e90cc7cd2d5ab95ae331a724f5ce97dVirustotal results 45.90%Heodo
2020-10-21form.docdoc 8d8971cd4eb8a2c26f5263e44299f9f468d43614dcccdcfae564420d264e0d29Virustotal results 43.55%Heodo
2020-10-21Invoice 74270.docdoc a4b9c8bd73e09cac4fa51d9601686766c566cc1afcba7986eb46da97f56449d5Virustotal results 40.00%Heodo
2020-10-21Payment status.docdoc 20c81e0a8e1547a4fe23a6d435e61f31253f5036e68c7564ad0c5d1fbb79120aVirustotal results 41.51%Heodo
2020-10-21Payment status.docdoc f75dfd9100b7fb7c93a95812e11a04f911e4ed1f61fafa8b73c747df9898a212Virustotal results 40.98%Heodo
2020-10-20Inv. 005268198.docdoc 79083e8a8ffe07dce171b5e20d5665e9317f618845036d5d3be76d6c8149a0e7Virustotal results 40.98%Heodo
2020-10-20October invoice.docdoc b07a48ca7d09a730829f65f399a5f0496e4c14989705d83a73630dc2a67f80f0Virustotal results 40.98%Heodo
2020-10-20Invoice #1863.docdoc cf4ee7df0ffd61e8ffcd0559aad63ff1c60cfbe2b0f7bf5e3cb4d771218f8657Virustotal results 39.62%Heodo
2020-10-20098217.docdoc 9be377b592614918b5f4aa295f73afeb586e3e386f7bec12cf04637f31433d7bVirustotal results 40.38%Heodo
2020-10-20XZ4685231495LP.docdoc 4b4c3539bff4d5461f5c5a5ceae568c2e301a62f273ac881508f6deaaea89835Virustotal results 40.32%Heodo
2020-10-20Payment status.docdoc a8e92bb15ad9bcd8e93e71644a570c2aeb6d030e2b496412500deb4ee2a23889Virustotal results 37.10%Heodo
2020-10-20Invoice.docdoc c1a2f053ac0b9cafe6d08072e6971d0dfad8f938cc167753df413b1a5ee4065bVirustotal results 32.79%Heodo
2020-10-20T-100120 ZOGC-102020.docdoc 2da7885a305894fb4a3cb76ff2aeafc9899cb7c590bf1179feea80f8795f9c30Virustotal results 32.79%Heodo
2020-10-20invoice.docdoc f8918c22b7bf74403126907c7e3fd18cdba5c16dc3bef59652e99d67d57d8d62Virustotal results 33.96%Heodo
2020-10-20Inv. 07751981540.docdoc 1949d127f8cad19649adb5f4534e1b6eff752a31d5ea73e427d0ef8c90511ceeVirustotal results 32.26%Heodo
2020-10-20October invoice.docdoc 36a9973c36b4c8891b4ff704670f49374aab0db27ba22546659b76a7f9c942d7Virustotal results 33.96% Heodo
2020-10-20INV #637952 FOR PO #26418257.docdoc 3bc3a1ea24bd194a23d6c8493b9754de9a41127025a14052754eba04dd1dda70Virustotal results 33.96% Heodo
2020-10-20INV #07654058 FOR PO #238403442.docdoc d71d5d04020304ab739545240d25684b106882802e265a64cba2af565ca6c8efVirustotal results 32.26% Heodo
2020-10-20YVF-100120 BQNO-102020.docdoc 306d01912045e266a9fe2015a5ef474be9768263f196550ab49052a0c676cef5Virustotal results 33.96% Heodo
2020-10-20October invoice.docdoc 61835e08172767d73a9e6c5dfb1fcc8b904d60c3b9cd7b382bcfe43aeab5c2c0Virustotal results 30.00% Heodo
2020-10-20Form - Oct 20, 2020.docdoc 4217ed123cc2bd063b8cc599340aec39fda437a4e62df3118a01251a915c226bVirustotal results 34.62% Heodo
2020-10-20Inv_09409.docdoc e59ffb1d8684c5f593de0d953edca68b56546935b4c9eb2bfc7b55958865826fVirustotal results 31.03% Heodo
2020-10-200053012.docdoc c7bae32f76eebe4cb2fdbd687d6d09d30ea38d1c6751a1ae5cbee6c9bfb5b96dVirustotal results 30.00% Heodo
2020-10-20Invoice 0229141.docdoc f86eebc5209b2e92bd174a3c00c80a3b021c7ab0ba5c60b46e91b9d92d8f23d6Virustotal results 30.51% Heodo
2020-10-20Invoice.docdoc 0c826456d4bf7da7aaf36377a19de56cb2712b94c047a86518ff7745d252479cn/a Heodo
2020-10-20UT-100120 UOFT-102020.docdoc bd285e352fbd21f0dc81df11d362338b6d68c0feade3946cfb351cd09759a9a6Virustotal results 51.61% Heodo
2020-10-20Payment status.docdoc 354fea5033e720e774f141b26f7606a4d844f9e990565c0c9ef51558c3581836Virustotal results 51.61% Heodo
2020-10-20Form.docdoc 2f0abbe89ce350352b4029575dffb4895f42d2296aadc1745287763704b7093dVirustotal results 51.67% Heodo
2020-10-20PO# 10202020.docdoc c059700c980038c5bd96da0591c886f34c3e6c0ab17319d89c4aa1e026ca640cVirustotal results 48.39% Heodo
2020-10-20invoices 8911 & 43651.docdoc 79fe11a895e4e6d9945022d70da2ea0c06927b3b91d7947564e610377117ee72Virustotal results 48.33% Heodo
2020-10-20invoice.docdoc 9fdb062ded6d82fd2d2d452643f3eccce639b07b20b205b0ce7cb8ceb31ac487Virustotal results 50.00% Heodo
2020-10-20invoice.docdoc d410b71a4badf540641e5b102f7296d63455fb941f370f9c8248d0fa8176896eVirustotal results 50.00% Heodo
2020-10-20October invoice.docdoc aea562896196459f11e274751fcc92aad6234db3e78088c86bda7f2b31be9b4aVirustotal results 53.33% Heodo
2020-10-20Inv_003797.docdoc a67d3d825a05eae828eb68703949b29ce211f2873a8c91c7875b89ea9577a817Virustotal results 49.06% Heodo
2020-10-20Payment status.docdoc f75ad4f83ba06b713679c42a55a1b4def77266dc5574330e418d629288877848Virustotal results 46.67% Heodo
2020-10-20Invoice.docdoc 9dead7615c9982a5935592ea257a1c754b61ee79c39b61345ce30c18e1756cb2Virustotal results 50.94% Heodo
2020-10-20Form - Oct 20, 2020.docdoc 73f22ba33ef477380a8177c19532c0e6a7c993ac47333c22b3ad4b53544bade1n/a Heodo
2020-10-20Payment.docdoc 45327af6d3d75a274f4c5d122adc41d42ddff44e520c7c02efb3df87adc64be0Virustotal results 50.82% Heodo
2020-10-20INV #071213 FOR PO #09372334952.docdoc 7c78e9a0268425f2bff9e8fdf80e9bef5210401291ab9d1f251a97849f2711c7Virustotal results 49.06% Heodo
2020-10-20Invoice 079448.docdoc 9d08e7c389570de57d78a8cf91e14d9c814ec46202b241acdcea2d9dcf7c427fVirustotal results 50.82%Heodo
2020-10-20form.docdoc 9fe84df0e721c3be3f87b18797064adf7294d5fc84605bdd396e1d7492e85c0aVirustotal results 50.91% Heodo
2020-10-20INV #004329 FOR PO #002876021526.docdoc 351fcc4213634fcc050b1b9fa1b83edb1aa5b64736aaf801c2928e5deb5c35b4Virustotal results 50.00% Heodo
2020-10-20Form - Oct 20, 2020.docdoc 0fc8e8b6e2bd46027ae6472ec944995b2976399582013b8a7ede625f362572f7n/a Heodo
2020-10-20invoice #888565.docdoc b5312cf7ec26b2e672e0e4278237dce985ba2317f88a387866f37ef8f820cbd2Virustotal results 47.27% Heodo
2020-10-20Invoice 613992.docdoc 1dbba69603fe6866b9b3762959b8d745e12bd325c1a203a5160e547f7ac4997en/a Heodo
2020-10-20Invoice 000743.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 45.16%Heodo