URLhaus Database

You are currently viewing the URLhaus database entry for http://eplnewsbd.com/cgi-bin/balance/EgbbSb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:725310
URL: http://eplnewsbd.com/cgi-bin/balance/EgbbSb/
URL Status:Offline
Host: eplnewsbd.com
Date added:2020-10-20 20:01:05 UTC
Last online:2020-10-23 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 20:02:04 UTC to abuse{at}corespace[dot]com)
Takedown time:2 days, 16 hours, 59 minutes Poor (down since 2020-10-23 13:01:18 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22form.docdoc 590f3326107d8c55dee6b4ab08d4a73d007cf21ed92119b2dd72a17a1054564aVirustotal results 39.62% Heodo
2020-10-22invoice #0162.docdoc 6d023a0790cfa813258bb0b0457a718d4d55c93a65b0988444b19c6279f5c42eVirustotal results 37.70% Heodo
2020-10-22invoice.docdoc b26afd4f57733b395060db7410557428c784d504c43a18c1a150ead1f77b3ba1Virustotal results 37.10% Heodo
2020-10-22Inv_49906.docdoc cd20ae1b00fceba422cc5bd5b2c7e42686f65e5ea4ef237340ffc7dd3e1a28f1Virustotal results 38.46% Heodo
2020-10-2200334535951.docdoc 2459b9b17512384884b1ce25972cc817c8e218cb87265480ce229d0470ade006Virustotal results 33.87% Heodo
2020-10-22R8156863576BW.docdoc 7ca299ab33e852a2cee3c4afa00aadea67b1d21240fa68de497fed12c1a0d31fVirustotal results 36.54% Heodo
2020-10-22Form.docdoc 9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8Virustotal results 50.00% Heodo
2020-10-221086199241WC.docdoc e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26aVirustotal results 48.08% Heodo
2020-10-22CW-100120 PQMY-102220.docdoc bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8eVirustotal results 49.09% Heodo
2020-10-22INV #048 FOR PO #81077705309.docdoc 3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9Virustotal results 48.33% Heodo
2020-10-22form.docdoc fe69570cfe43c056f36d0a40929d53d4532cd181924613bda7436913979c33cbVirustotal results 49.06% Heodo
2020-10-22Inv_3458.docdoc 64ee7027b8c1fc6f5a53589c1b063a42cf59f5a99924588ae219a9950fbe7130Virustotal results 46.67% Heodo
2020-10-22FX7982858188OH.docdoc 48c4356a3629c972a22b83fe612ed12ed47467fd7085e18ac16786cbd9c2bc4aVirustotal results 53.70% Heodo
2020-10-22October invoice.docdoc 73dbec89c21200a9e7dd1ec67b06b9efad9718584b71af252f4926418abf32f6Virustotal results 48.15% Heodo
2020-10-22INV #4786 FOR PO #00019843578.docdoc 973f68fa660b0ff4da0047bc9d942a6f2faf63713e745fe19eaf4cf5d29828beVirustotal results 44.44% Heodo
2020-10-22invoice #46365.docdoc e5ed1f6d9906107a56334a0f4903201eeeda7aa77f349ac217c53c9540b03c17Virustotal results 43.55% Heodo
2020-10-22invoices 8776 & 7374.docdoc 47024e56dc7cb9b1cb36ff764702c5105a0af0873104fd86e72d9f206c38ebacVirustotal results 42.62% Heodo
2020-10-22007954449.docdoc 410f511f7ba84ffbd69fbabc0226828f52eec22c5b5db6759f60fb65ea20270aVirustotal results 42.62% Heodo
2020-10-22Inv_672901.docdoc 948302725f3208d721629436cfe1abbf592c813da68627c3c158cc6547e1cadbVirustotal results 43.33% Heodo
2020-10-21PO# 10212020.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21Form - Oct 21, 2020.docdoc edceeb0a4307b08df79e506dd7c07185337cd4a6b3f7a979d55b168f768d94eaVirustotal results 32.26%Heodo
2020-10-21Y-100120 CGJC-102120.docdoc aa495e335a49559d4b42647432fdcd5ddc8aaca92a15370c5bcf89663157b004Virustotal results 30.65% Heodo
2020-10-21INV #0634309 FOR PO #002617173.docdoc 958a56b45155799f98c055be1da4870f014dfc78b57a8c92a1c62c8b9a947248Virustotal results 34.62% Heodo
2020-10-21Inv_55993.docdoc 12abe2772542ac1ffc94f0b0e88db86ca97976a83a371d0ce054b72a8ed1053fn/a Heodo
2020-10-21PO# 10212020.docdoc 03e8290f5d44a7d129aa0e9614604b34b4b745f41c4dc8ca80db878cc82c26cdVirustotal results 33.96% Heodo
2020-10-210073700044.docdoc cf82d0365de8c8bb9a11fe55d1c592563309c38f81dd2489d64320006b738393Virustotal results 28.07% Heodo
2020-10-21Invoice 02608939.docdoc 8cd445b93100d4a1d8b8d09b1829c4460f50271afb165768a5b263664916c0cfVirustotal results 30.77%Heodo
2020-10-21Form.docdoc cf275b27c9d9ff1afbbf89c46cd4546584c4a173ddc75405c48b7ead240f7b0bVirustotal results 30.43% Heodo
2020-10-21Inv_286969.docdoc 5ddd4814fd7f6793c23ae5d9593056b6b59b94a595441340a86375dfdb384b57Virustotal results 28.85% Heodo
2020-10-21invoice.docdoc fe07d08c1aba72440960ac2c0ff5f92e2184de5622e6c5cc2ad858727aae5024n/aHeodo
2020-10-21Invoice 0029395.docdoc d00125dd0f069c23c0ae5f95db081c57dfd23bc67fd5308053a4204ace382b4cVirustotal results 24.59%Heodo
2020-10-21Payment.docdoc 2dccaaa7764ebb4f4e309902834f8ebfe5049decf0cc573e4e68befa3f84e69fVirustotal results 30.19%Heodo
2020-10-21CV-100120 IIGE-102120.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21583212.docdoc 7301eb52916c5b004b3f81ebf360c397e25aba900652108420b868313afce2aeVirustotal results 48.33%Heodo
2020-10-21Form - Oct 21, 2020.docdoc 31658c6055bda692c4a944b0dd23ef5f0ef7d312df172a1eafb6317a110f286bVirustotal results 48.39%Heodo
2020-10-21invoice #90897.docdoc 10a79d7cf0b1366e69b0473e9164dcdf109149a6551b18a6c277a242261f5dd3n/aHeodo
2020-10-21October Invoice.docdoc 33931df25bbfed2013a987a32738c165a5799d274381e76cbf534ba189be293eVirustotal results 46.15%Heodo
2020-10-21INV #576776 FOR PO #295690943005.docdoc e3812e0aa164c68399e61ce76904450c3e6bc028111a3c4df2155e37ad5d01b1n/aHeodo
2020-10-21October invoice.docdoc 8d8971cd4eb8a2c26f5263e44299f9f468d43614dcccdcfae564420d264e0d29Virustotal results 43.55%Heodo
2020-10-2100939147.docdoc 15680f3d4397a2ea2191e960421dd8650642415c14be15b1495f859bc6b9d7cfVirustotal results 40.98%Heodo
2020-10-21Inv. 085226109.docdoc a4b9c8bd73e09cac4fa51d9601686766c566cc1afcba7986eb46da97f56449d5Virustotal results 40.00%Heodo
2020-10-21Invoice #7280474.docdoc 663930eb12ff6afb8cd3d0410fcef8fa32edf4964504e10f0cd56af546b0ecb2Virustotal results 41.51%Heodo
2020-10-21INV_55023.docdoc f75dfd9100b7fb7c93a95812e11a04f911e4ed1f61fafa8b73c747df9898a212Virustotal results 40.98%Heodo
2020-10-20October invoice.docdoc d590ed65aef80ecdc7f0a44755ee436937f30c0b05287ce6d177b654512940e8Virustotal results 40.98%Heodo
2020-10-2000797171382.docdoc d2b7e7d77c65f006e6878f64efc31bcc0fdcacf7293e2e19c30e3bf4e40b09fcVirustotal results 39.62%Heodo
2020-10-20Copy invoice #538977.docdoc bc671ede4242e59e050fff534673dd447ebcdb084f7e7504d004ca446707d409Virustotal results 38.98%Heodo
2020-10-20Inv_2105.docdoc a85c57fa12d0087eb6da3bbeff4a027b351978d8b8073086c43d522366e5fe9eVirustotal results 39.34%Heodo
2020-10-20invoice #884352.docdoc d6755b63b325a0da010a33d5a3e1698866b58b7628b6c3b47a5beb12663604e2Virustotal results 37.70%Heodo
2020-10-20Electronic form.docdoc c1a2f053ac0b9cafe6d08072e6971d0dfad8f938cc167753df413b1a5ee4065bn/aHeodo
2020-10-20Invoice.docdoc 2da7885a305894fb4a3cb76ff2aeafc9899cb7c590bf1179feea80f8795f9c30Virustotal results 32.26%Heodo
2020-10-20invoice.docdoc 36bf9ecc1a8a1ba3e8b3adf9e916e0f5d5e7f0247f6c4efc53dcdc496443de74Virustotal results 33.33%Heodo
2020-10-20PO# 10202020.docdoc 9de27d2156aa1a500c8317a999704637a436bc162590ccb63344d7930b438826Virustotal results 33.33%Heodo