URLhaus Database

You are currently viewing the URLhaus database entry for https://testsite.muchscu.org/cgi-bin/parts_service/40677/f6pkh-0676427/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:721398
URL: https://testsite.muchscu.org/cgi-bin/parts_service/40677/f6pkh-0676427/
URL Status:Offline
Host: testsite.muchscu.org
Date added:2020-10-20 03:35:05 UTC
Last online:2020-10-20 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 03:36:30 UTC to abuse{at}reliablesite[dot]net)
Takedown time:15 hours, 27 minutes Good (down since 2020-10-20 19:03:32 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-20HYX-100120 RSGJ-102020.docdoc 125f1d5c057389effdcea5d909bfffd9749d79c9a1370a3e057d777bae4bc1f8Virustotal results 31.03% Heodo
2020-10-20Inv. 613965.docdoc f58cbfc9a8abe26d8ee344b97d04bac6ed709bdc6e3920b6b4cc4f6fe22bdabfVirustotal results 30.51% Heodo
2020-10-20Payment status.docdoc 7e136d3bc68a6578cdb157624c2783f78b48a13944133de3d0f5b0d34ce6ffa2Virustotal results 30.00% Heodo
2020-10-20G6456830445MH.docdoc 18286f51c980997e07241a170822a950f101cfa264c232edbfcb4d67694d5b45Virustotal results 31.15% Heodo
2020-10-20invoice.docdoc c7bae32f76eebe4cb2fdbd687d6d09d30ea38d1c6751a1ae5cbee6c9bfb5b96dVirustotal results 30.00% Heodo
2020-10-2000674585.docdoc 781cd226d6af840c9c4fa2b90e0db5c547da1bd80ee74329a3fc82b164e69c38Virustotal results 28.33% Heodo
2020-10-20NO-100120 EVIG-102020.docdoc 0c826456d4bf7da7aaf36377a19de56cb2712b94c047a86518ff7745d252479cVirustotal results 32.26% Heodo
2020-10-20INV_966897.docdoc 81ef3fb86b53a37bed0c35567bd32d1ff7479b6edcdff6ee06a03990b1a009f2Virustotal results 51.72% Heodo
2020-10-20invoice.docdoc fcf66fd33f42c75abf852452c661e3ccc4f85c48a721dbc4471bd28332760145Virustotal results 51.61% Heodo
2020-10-20VV-100120 ZWPR-102020.docdoc 302086907da36d9af34abfae68ae96815cfd530e20bf3e4d40d520fd6816fe5aVirustotal results 51.85% Heodo
2020-10-20INV #001710385 FOR PO #0797453253.docdoc 00fddc023c2f5c9f500b8592592b4399de427ab2e657776af747214d6e85f282Virustotal results 50.94% Heodo
2020-10-20PO# 10202020.docdoc 5cfa1457e7ddb2e7c49419cabef1c969debc4d677e7ca6f72d6edd8e2ac88a32Virustotal results 49.09% Heodo
2020-10-20Form - Oct 20, 2020.docdoc 9fdb062ded6d82fd2d2d452643f3eccce639b07b20b205b0ce7cb8ceb31ac487Virustotal results 50.00% Heodo
2020-10-2004951040.docdoc 31c9941b5e674b482e7b5020bce1c27dd86c8529fe254326dcd4a86d137492e1Virustotal results 48.39% Heodo
2020-10-20Invoice 004356238.docdoc aea562896196459f11e274751fcc92aad6234db3e78088c86bda7f2b31be9b4aVirustotal results 53.33% Heodo
2020-10-20Invoice 0036279.docdoc 2e7f73ead896b7eef85db343d77418c1307c087dccf1c575b506835d23cdcf99Virustotal results 50.82% Heodo
2020-10-20Copy invoice #86361.docdoc a67d3d825a05eae828eb68703949b29ce211f2873a8c91c7875b89ea9577a817Virustotal results 49.06% Heodo
2020-10-20Payment.docdoc f75ad4f83ba06b713679c42a55a1b4def77266dc5574330e418d629288877848Virustotal results 46.67% Heodo
2020-10-205367546.docdoc 9dead7615c9982a5935592ea257a1c754b61ee79c39b61345ce30c18e1756cb2Virustotal results 50.94% Heodo
2020-10-20BM7672056301SV.docdoc 73f22ba33ef477380a8177c19532c0e6a7c993ac47333c22b3ad4b53544bade1Virustotal results 49.06% Heodo
2020-10-20B-100120 OFHH-102020.docdoc 544ff4b94e4f7afb43e2c47a07cffc8162ca9d60b804e0d7203ec85fc2ef81c5Virustotal results 53.33% Heodo
2020-10-20Inv. 0763954555.docdoc 5b70674be06add6dbce3e61896d53254f692348fb3428bacab4464aa5fe9f058Virustotal results 49.06% Heodo
2020-10-20S76 invoicing.docdoc a7a71a8db9345289a21c62edb7085cbff3e0dfcbaf3b66e6e17506a60af10fd2Virustotal results 51.61% Heodo
2020-10-20Payment status.docdoc a6ce54965c51dcd7657b5f704c2564e330d3172da005cc06b8fec033582bc50aVirustotal results 48.98% Heodo
2020-10-20Inv. 08451.docdoc 351fcc4213634fcc050b1b9fa1b83edb1aa5b64736aaf801c2928e5deb5c35b4Virustotal results 50.00% Heodo
2020-10-20Payment.docdoc 477afd6f4a7fed4b0886e1d509e130c736c6f2203be85ed8c18d40bc6db385f0Virustotal results 51.61% Heodo
2020-10-20Payment status.docdoc b5312cf7ec26b2e672e0e4278237dce985ba2317f88a387866f37ef8f820cbd2Virustotal results 47.27% Heodo
2020-10-20October invoice.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 45.16%Heodo