URLhaus Database

You are currently viewing the URLhaus database entry for https://nice.icu/wp-content/Overview/GwQlmgeu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:724456
URL: https://nice.icu/wp-content/Overview/GwQlmgeu/
URL Status:Offline
Host: nice.icu
Date added:2020-10-20 16:34:05 UTC
Last online:2020-10-24 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 16:36:14 UTC to u-ipnic{at}ucloud[dot]cn)
Takedown time:3 days, 15 hours, 14 minutes Bad (down since 2020-10-24 07:50:28 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22I-100120 NCHO-102220.docdoc 7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51Virustotal results 48.00% Heodo
2020-10-22form.docdoc 711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550Virustotal results 49.09% Heodo
2020-10-22Copy invoice #531534.docdoc b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154Virustotal results 52.63% Heodo
2020-10-22October invoice.docdoc 495313b4809b48cfad065e665cb9bc04759262897b08b142734ff1f15316f5d9Virustotal results 44.07% Heodo
2020-10-22075705.docdoc 7a7a2516e4e6b2d50bbb5b8074b5fe49a5d700ab685fa768406ce1a8fcaa8646Virustotal results 45.16% Heodo
2020-10-22N0047 invoicing.docdoc 7132fddab8ccd72577838968f3e91a36c9ce64950fde88e34635e5e008be8a13Virustotal results 43.33% Heodo
2020-10-22Invoice 00951037.docdoc cfca456cd0b2f420fe799623f9e2bbf831e6463a73b754f9efd9f2eac8f9714cVirustotal results 44.44% Heodo
2020-10-22OZD-100120 VUSK-102220.docdoc ab4a558e5f07f221ed6052698d5a9d1b3654ab56380486df8f091e1176d3af1eVirustotal results 42.37% Heodo
2020-10-22024212.docdoc 410f511f7ba84ffbd69fbabc0226828f52eec22c5b5db6759f60fb65ea20270aVirustotal results 42.62% Heodo
2020-10-22Invoice #798.docdoc 948302725f3208d721629436cfe1abbf592c813da68627c3c158cc6547e1cadbVirustotal results 43.33% Heodo
2020-10-21invoice #5457.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21Copy invoice #096080.docdoc aa495e335a49559d4b42647432fdcd5ddc8aaca92a15370c5bcf89663157b004Virustotal results 30.65% Heodo
2020-10-21October invoice.docdoc 846e5913124d7032c01dffc200b7250ef349a517df8653d0e92ba024b61de295n/aHeodo
2020-10-21DT6192365892AO.docdoc 9cdd0e1ab1bd327fbf175b974de32d3f5c7591a31c72a34a842e2d03d8706ad8Virustotal results 30.36% Heodo
2020-10-21Payment status.docdoc e45c71c909dafaee0830088e9068e0cb0f2f99e5ab1ff7da592240e46ba6fa58Virustotal results 29.03% Heodo
2020-10-21Z1492185716AL.docdoc d6722700e4deec26acf704986fa3460027afa685e40acd627dd4d9b85c0f199bVirustotal results 31.48% Heodo
2020-10-21Form.docdoc cf82d0365de8c8bb9a11fe55d1c592563309c38f81dd2489d64320006b738393Virustotal results 28.07% Heodo
2020-10-21Inv. 005378368252.docdoc 8cd445b93100d4a1d8b8d09b1829c4460f50271afb165768a5b263664916c0cfVirustotal results 30.77%Heodo
2020-10-21Payment status.docdoc 1905e599d724631809846d68e01d2fcfc9b1a4cb613d6899aa36dc519947e282Virustotal results 25.81%Heodo
2020-10-21October invoice.docdoc e8da9916a2da1f9ce4081c005b241bb16bae33ac6774e8fdcfe0da0d155eddben/aHeodo
2020-10-21Payment.docdoc a5c730efa90e29c1794f91ceb2bb26d784adfc5cb4390d2421a94306174cf8d2Virustotal results 30.77%Heodo
2020-10-21Invoice 009372519.docdoc a3b6842573584f704d6a8e14964f20811e162c91bcc4e3aa8b0eb7c7948db506Virustotal results 29.09%Heodo
2020-10-21KA1841469738GU.docdoc cda828dede96620b0eed85c89ba9eebb9aae7aa5f6b54141207e8f0f9e44e0ebVirustotal results 28.57% Heodo
2020-10-21October invoice.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21Inv. 92007521.docdoc 7301eb52916c5b004b3f81ebf360c397e25aba900652108420b868313afce2aeVirustotal results 48.33%Heodo
2020-10-21Form.docdoc a32b8fc89045749411368894b5eb70012518a8d9d1703b940bcbc966c0e40bdfVirustotal results 50.94%Heodo
2020-10-21invoice.docdoc a190cc4bd4d39b253f7e560cdf793dd829f74b0f816bbddc666525007a02412fVirustotal results 47.54%Heodo
2020-10-21Payment.docdoc 33931df25bbfed2013a987a32738c165a5799d274381e76cbf534ba189be293eVirustotal results 46.15%Heodo
2020-10-21Copy invoice #4688.docdoc 5ab195348086d508a9be2e1c480fa60e9de009a7f057dbaf696f8468ec4fe0f5Virustotal results 45.28%Heodo
2020-10-21Payment status.docdoc a83dce48be132b625d87853a68a56238720b2fad3e3bfb67c50bdf1d677a98ddVirustotal results 43.33%Heodo
2020-10-21Inv. 0008348.docdoc f230273ae9e5eb57e36f98c374578e1a9856504dfbfbdcc7f815d20ba5974f2dVirustotal results 41.94%Heodo
2020-10-21Payment.docdoc 15680f3d4397a2ea2191e960421dd8650642415c14be15b1495f859bc6b9d7cfVirustotal results 41.94%Heodo
2020-10-21Payment.docdoc 106359e17594a3265349fbfc1a2fd1e2f19940ca5c4b2262c1d021bb8d74fe11Virustotal results 42.62%Heodo
2020-10-210041068393.docdoc f75dfd9100b7fb7c93a95812e11a04f911e4ed1f61fafa8b73c747df9898a212n/aHeodo
2020-10-200023667.docdoc 46771e0edd6c8d5e7018f34426fd4813d4b5293bc1b20def01e9c6e5e2cd632aVirustotal results 42.62%Heodo
2020-10-20October Invoice.docdoc d2b7e7d77c65f006e6878f64efc31bcc0fdcacf7293e2e19c30e3bf4e40b09fcVirustotal results 38.60%Heodo
2020-10-20INV #04381 FOR PO #1674630773.docdoc 9be377b592614918b5f4aa295f73afeb586e3e386f7bec12cf04637f31433d7bVirustotal results 40.38%Heodo
2020-10-20Invoice #693471.docdoc a85c57fa12d0087eb6da3bbeff4a027b351978d8b8073086c43d522366e5fe9eVirustotal results 39.34%Heodo
2020-10-20Electronic form.docdoc d6755b63b325a0da010a33d5a3e1698866b58b7628b6c3b47a5beb12663604e2Virustotal results 37.70%Heodo
2020-10-20Copy invoice #4088.docdoc 864eeb47c83f4648f5c3a22de6c34559c24f871adfe7490af5c932ee7fbd52f4Virustotal results 32.26%Heodo
2020-10-20invoice #7492.docdoc f8db56a0bd8479c7f48207014ff6a71d6abc79d020020f4cee5a4161a4497ecdVirustotal results 32.79%Heodo
2020-10-20Electronic form.docdoc 9c7f9441f61d7c2798707bc28069012911e4547e38374095bb23506fb1bbee2eVirustotal results 31.58%Heodo
2020-10-20Invoice 284842.docdoc 15e191fa2be80a5d0b1b3af67b1ed360c006e3634442bb6255e4cc0f901abcd3Virustotal results 32.26%Heodo
2020-10-20Invoice.docdoc c9804b898a9d2326b05f4037b2eace298777d1a387273033692c9f6deede6cabVirustotal results 32.73%Heodo
2020-10-20Payment status.docdoc 1fad7db33eae6c2158f57709f82ff40f10276a88a34414418c06ad738eb22299Virustotal results 32.26% Heodo
2020-10-208304124200HH.docdoc d71d5d04020304ab739545240d25684b106882802e265a64cba2af565ca6c8efVirustotal results 32.26% Heodo
2020-10-20Payment status.docdoc 125f1d5c057389effdcea5d909bfffd9749d79c9a1370a3e057d777bae4bc1f8Virustotal results 31.03% Heodo
2020-10-20Form - Oct 20, 2020.docdoc f58cbfc9a8abe26d8ee344b97d04bac6ed709bdc6e3920b6b4cc4f6fe22bdabfn/a Heodo
2020-10-20Copy invoice #888865.docdoc 5048d7b27c53cf32d071bbfbe3a208164d350d1d9ef8d2bcd423631b5d1b21dcVirustotal results 32.69% Heodo
2020-10-20Invoice.docdoc f64d1d64e95cb52e8ac1e43c619b165f65e0a882fb8d0e8314f2e82271425089Virustotal results 32.79% Heodo
2020-10-20October invoice.docdoc c7bae32f76eebe4cb2fdbd687d6d09d30ea38d1c6751a1ae5cbee6c9bfb5b96dVirustotal results 30.00% Heodo
2020-10-20Electronic form.docdoc 2578a0f788096c10b3bcb14ac8c024f44b035e361ca8e1af809c81fb4cdc6ad6Virustotal results 32.79% Heodo