URLhaus Database

You are currently viewing the URLhaus database entry for http://healthnwealthbox.com/free-xbox/Scan/tuw97o2ehoo08b6dom1xy/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:729032
URL: http://healthnwealthbox.com/free-xbox/Scan/tuw97o2ehoo08b6dom1xy/
URL Status:Offline
Host: healthnwealthbox.com
Date added:2020-10-21 11:51:09 UTC
Last online:2020-10-22 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003025560 created on 2020-10-21 11:52:15 UTC)
Takedown time:1 day, 3 hours, 5 minutes Poor (down since 2020-10-22 14:58:05 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22WSVX_PO_10222020EX.docdoc 1a6ddadc772f06b99c0286b4d3d96639582499d811601fa4b402619a7ffa4c80Virustotal results 50.00%Heodo
2020-10-22W_6022488811508.docdoc 06dc08ea7da16ee44235f6f6009c538b3db08f6198613fbf8c66be4446da7e6aVirustotal results 51.85%Heodo
2020-10-22OTE_100120_WKY_102220.docdoc 220e3645890122715ff1e995b86a7d014cfce7e53b2576e862d9c686c7fcf553Virustotal results 46.67%Heodo
2020-10-22DOC_PO_10222020EX.docdoc 9bb4de39d9e3b645efd9378896791c1cdee73c0c1501b95fde6b2adb1334c0e6Virustotal results 49.09%Heodo
2020-10-22REP_BGI5SEU.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 45.00%Heodo
2020-10-22F_PO_10222020EX.docdoc 7bfb9f41a2dc364df62a43b35f7df6f6ff2fd74302c713e8fe91e00a83100dbeVirustotal results 41.67%Heodo
2020-10-22DS8311293734JS.docdoc c41bcade49f3e2413b5d95ce09c2ecf30c21b43ab6b306206b9b737f1cd10450Virustotal results 42.62%Heodo
2020-10-22INV_NSK_100120_LJM_102220.docdoc 3c013d9a4c751ab4a02b2bede92bc17a582567371d7a0707aee20c91cce5012dVirustotal results 43.55%Heodo
2020-10-22NMA_100120_DQM_102220.docdoc fbb11ed6ce463e4a5598842961d2199f7264331418e806b4d15fa38b06600e7aVirustotal results 45.16%Heodo
2020-10-22BAL_92062794.docdoc d7d4f0e3118be6b096fce94e099d314a78ff45b33b0c6db9993b71d66b171e6cVirustotal results 43.55%Heodo
2020-10-22INV_PO_10222020EX.docdoc a0ac35ec0ee3a97f79ecb953f29c1dca13fa5661a5df78ba82012b16c5b291d4n/aHeodo
2020-10-224401232621110805142727347.docdoc 6bd0661c70220213e5161537b5d9a940d39a35ce628077f45d1a7423a3fb8bb7n/aHeodo
2020-10-22DOC_17809660.docdoc 969af7921bad722ff0f082e99bcb5d90218a2b64387e795508902aa64f7a351aVirustotal results 47.17%Heodo
2020-10-22INV_QZ4775275354LG.docdoc 6f3d75a10a076e6b9a67b98deaedc8b08868717927822f5beb79aaf7fe7d1d6cVirustotal results 44.26%Heodo
2020-10-22LV_MMT_100120_VIZ_102220.docdoc 39f8421b6ac7a025203dfb27d7b193171c2b08644ff2d4521672875356541571n/aHeodo
2020-10-22KHVT_62626359.docdoc 06b7e31dc559bea806d24d61738a77de70118de926adc81fcbcdac1468c2bc1bVirustotal results 45.16%Heodo
2020-10-22J_PO_10222020EX.docdoc a00cb0c3f08b7d7bf2ab793d189f325c666247d0dad7c7c1de069f69c2745277Virustotal results 43.55%Heodo
2020-10-22BAL_RH4559240784BT.docdoc f62d13aea4567bd1e91c07f80dcf79d672bc4e446045a810f58c9c9cde7ccebeVirustotal results 44.26%Heodo
2020-10-22N_PO_10222020EX.docdoc 53ce991a6af876309c419c3008a3863cbcd68f4b1020a07293d0c17aca9eba23n/aHeodo
2020-10-22TTJD_WN2501797733HW.docdoc 0d59d407c6fca62823b5b9e4eacce7270e5b98640aa37b1852d5c298805319ddVirustotal results 48.33%Heodo
2020-10-22J_SEL_100120_MTV_102220.docdoc 2bfcddec3862fcbe053dd6a0d03d5987ccfa1942950e8c9bea56fa41f6fcaa5cn/aHeodo
2020-10-22G_PO_10222020EX.docdoc f4485fe8056305da48ac8453716ea0fa9c6633da1a1f87e01dae3908da1bbbe6n/aHeodo
2020-10-22INV_PO_10222020EX.docdoc c343246a8b6df26e48dedc87a71762563be3e241ea28994ad1e2d0700b823f8dVirustotal results 51.92%Heodo
2020-10-22U_PO_10222020EX.docdoc 24ca326ece108e2ec02346c32536bd5cd2a990364f8d8c9fa35b082ba4a68f2fn/aHeodo
2020-10-22REP_CMRE6LR.docdoc 6f75f81099546304948463f0c2305a97be38e42d347794714ea76831f8f507f4Virustotal results 48.39%Heodo
2020-10-22LKUF_6YNI635WH.docdoc ff7bc571e097d09b02234d6bef98da4468da5c7dfc197e2cb20f1a00eb85f61eVirustotal results 45.90%Heodo
2020-10-22BAJH_QGH_100120_SMF_102220.docdoc 2622c411514e2ebeb404ff72a11abb8b36da194d0f09dcc95869802a01cf4a20Virustotal results 46.67%Heodo
2020-10-22BAL_PO_10222020EX.docdoc 26675160f52f90a778a8e6489be6b67a6982742a192595c69b9d87e49e11cbf9n/aHeodo
2020-10-2229352292.docdoc a1430eef6f6acc51cfc4215bd06407ebfc4f5ac126d9f05c27b3cf359dbb816en/aHeodo
2020-10-22INV_0VXZ244VPXOBRCUH.docdoc 0b25fca35bd60d2257616a1c1adbf89fefba07969c5a0fc3aa22d3f43ad7c2f4Virustotal results 45.00%Heodo
2020-10-22NK_PO_10222020EX.docdoc a087c45b5ed8a1c9d91f0b920d6f2510bd5d82d3813af9653757607709da9d87Virustotal results 45.00%Heodo
2020-10-22BAL_QM0454700207QT.docdoc ac34efa35d04bc35c3bc9eb52c130c25c9841995ed37b75e3f9e04d7c2599bb4Virustotal results 40.32%Heodo
2020-10-2209911453.docdoc 2da1ed7b630f4a606c6c65a41dc9c852015d64174113023eff5a63c64f5eac0dVirustotal results 41.51%Heodo
2020-10-21REP_96932953.docdoc 3af63f662ad3afb788f4f65538788a97811e2a45d869bf83d5ac6dfa9a2251e7Virustotal results 41.51%Heodo
2020-10-21INV_42229250.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 41.51%Heodo
2020-10-21FILE_BTZ_100120_DVG_102120.docdoc 0d4957ad656edeaef3f49b20de1845bcafd5e78981c607cff352212e84ae913eVirustotal results 41.67%Heodo
2020-10-21C_ACD_100120_HIS_102120.docdoc e5c6d836a7fa994928320dbfced86beeaa1fca7178acfcc05d083304f539cf88n/aHeodo
2020-10-21O_0019537045560643382670.docdoc 633b2b1963bd2dd467845e87a2d06ace1c22e9402d4dd3aee12618af8f0846a8Virustotal results 39.62%Heodo
2020-10-21ICK_100120_PUW_102120.docdoc 8e3cc05fdd4cd3001e044f7a7bedd7908cffdeb65bc906bd214a483ac4dff96cn/aHeodo
2020-10-21BAL_40V1VAV1NT.docdoc 1cb0001d422c0b16aa106ca96ff8aa0db8fec461c49b8f80ac75b5ab4001803cn/aHeodo
2020-10-21R_6LUG5AOMIRL.docdoc 99d7234dc759302b6b38de85547762ca5a46358e93508509b534755c9af8c309Virustotal results 30.19%Heodo
2020-10-21UXG_100120_UUP_102120.docdoc c0308a4a6567ed36df7165b3cffbe26f676322783de09900dd7b7e6b7d642b97Virustotal results 30.19%Heodo
2020-10-2177163339.docdoc f99f175949bd5a0dd1daa81ebbba94b4c80534368ce0192f1886c0babde234d6Virustotal results 22.64%Heodo
2020-10-21DOC_82878315.docdoc 638d2c28c891f1eb997a450dbdc2f6f1a83b000d7b617d3000cf2b937275de99Virustotal results 21.67%Heodo
2020-10-21762836216046286800279.docdoc e02a52462590a3bce3ef61d93a478d7ed9b742585f9c16474b041bb7964c5ecbn/aHeodo
2020-10-21BAL_FBG_100120_XDM_102120.docdoc d5c24aea94acf1b51e67dc57eaeb7009e54b212f508d33e9c08beba932daaafdVirustotal results 31.67%Heodo
2020-10-21VNN_100120_YWD_102120.docdoc 0f254a04303e1e2af66659268b48d1e2617f5df9e21817a71a886128d221738bn/aHeodo
2020-10-21REP_GLJ_100120_KPT_102120.docdoc 52caf1a070aa97f41dee32688e691efd22f50efe87a8f77d4a36a28281c19136n/aHeodo
2020-10-21DOC_PUU_100120_IIS_102120.docdoc cd8851bd896a7e87cc70c70d34d548cf3618138a015fc11eec546d47780a586dn/aHeodo
2020-10-21INV_PO_10212020EX.docdoc ce72abdb386adab53d71d068388c21107144e7d9c1acfa2f898d0ce6d7b2acefn/aHeodo
2020-10-21FILE_42058186.docdoc f93730c27fbb9a6c6cc64e5f4d9127854a0c11d165e699569dd0828ebee3ec4bn/aHeodo