URLhaus Database

You are currently viewing the URLhaus database entry for http://collecttoys.club/Documentation/5h8gjjn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:729970
URL: http://collecttoys.club/Documentation/5h8gjjn/
URL Status:Offline
Host: collecttoys.club
Date added:2020-10-21 15:50:08 UTC
Last online:2020-10-30 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 15:50:26 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:8 days, 14 hours, 30 minutes Bad (down since 2020-10-30 06:20:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22INV_KWQHO1E0KTW5HV.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdVirustotal results 42.00%Heodo
2020-10-22BAL_PO_10222020EX.docdoc bde2a7fb6b915b22b12d563e8616ce20baec5c78c2c52a1dfba099a76f627bd5n/aHeodo
2020-10-22PO_10222020EX.docdoc 143a635255333363ae3017af09505f23784d4fe518164c2c25d97f8b8ec77e4an/aHeodo
2020-10-22INV_PO_10222020EX.docdoc d856d9672b0763c2939f8c0c9ddc6b7899e3945619e73fe01c74eeef6c739eeen/a Heodo
2020-10-22FILE_92625644.docdoc 5b1476af36a03368d1a094862cb442fa84293835a1e05b590a4cef50001d402aVirustotal results 41.18%Heodo
2020-10-22REP_GLL_100120_XGF_102220.docdoc c9eac6b72f9a7b1750b750639e977312f982799bf1e82ba3c19a8f3c1be46f7bVirustotal results 39.62%Heodo
2020-10-22QU0641503684BA.docdoc 925ed11830fec50e20b4c723d541a1fdb62509d4bae13118c400ed2bc76fca4fVirustotal results 41.94%Heodo
2020-10-22BAL_129772791415796.docdoc 9c025489858b7549f67ca1cfe82ab121254e8ab5c19ac7ee160108297862e9bdn/aHeodo
2020-10-22DOC_GXV_100120_KYN_102220.docdoc 9dfb5e6e2134b14b82e9f8ec6fa56919f65c57d95c28d9c2bba1fece5a4e0082Virustotal results 40.74%Heodo
2020-10-2224847775229107607671.docdoc 6e73ed5041166e3aa6f7ce070efab391259a868771d35fa7f6b8aa64d8a3065fVirustotal results 37.04%Heodo
2020-10-22P_PO_10222020EX.docdoc 4840c4bc9a8675fc94f8331c5d47bb83bb56e35696dc11b7cf7be8147c0f0829Virustotal results 38.33%Heodo
2020-10-22DOC_15786836.docdoc b7fca993ba0280a6ae9d376c6e08462489275971b8d09a4faa7194332be65937Virustotal results 40.00%Heodo
2020-10-22KR8649061634VD.docdoc fe5ff5b44dde8df916f46992574027192d8a8bf4ab36091fcb25905c0afa6afbn/aHeodo
2020-10-22FILE_CSF_100120_ZHM_102220.docdoc 98d0f2c55494aaf59e1235a59b639621f2ffc6764bca6a15450ff0374e3fae62Virustotal results 39.62%Heodo
2020-10-22XW_XM911L1RGTF.docdoc 6f64e8f7b58ef57d185a9150be2954a871855e0c33586a9309652e7b16a333b5Virustotal results 56.60%Heodo
2020-10-22BAL_0928502002009978700.docdoc 7c71fafca986099769e2024c6dee88d63a8153f7f0b7504bab1b8bf8d9d01724n/aHeodo
2020-10-22KB_0LWOQK7IQIQ1B.docdoc 1a6ddadc772f06b99c0286b4d3d96639582499d811601fa4b402619a7ffa4c80Virustotal results 50.00%Heodo
2020-10-221636549660.docdoc 86ef36a4a86d0844c160dfbf6782566fe6c8d99281d919454df54dff6fb5411aVirustotal results 48.39%Heodo
2020-10-22BAL_EXIORR0CLR36Y.docdoc 84571ac969ddfed387fb68ef51f1c23448f401e13f42b3cb3c54e42963682d9dVirustotal results 49.06%Heodo
2020-10-22Q_BF3753967937AQ.docdoc d8f854b186c7ceece725840d2aa715337be8e6e2dc14f9e0c29705e805b2b273n/aHeodo
2020-10-22DOC_OBW_100120_GSX_102220.docdoc e093c016746d804ab3f83b9ae5da804217da67e5038a0b3b77230d830623b560Virustotal results 43.33%Heodo
2020-10-22V_22774140.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 45.00%Heodo
2020-10-22INV_QR7920623027LD.docdoc e2d2ebafc33d7c7819f414031215c3669bccdfb255af3cbe0177b2c601b0e0cdVirustotal results 46.77%Heodo
2020-10-22VL_36268372127442063.docdoc 0f43e36af3a584e03529dc3f2c9c6b9e26edee46742cb8db7112fbe7be0d2c8aVirustotal results 45.90%Heodo
2020-10-22E_UCTM3QBGYU9.docdoc 5547e0e56d071bec65265c21ea88ed4a9d8103d45eadcf69ca86c09f445bdd32n/aHeodo
2020-10-22DOC_65246255.docdoc 5e6f9a748268113d3da7867313c0be3f5891553c5690a01354fbbee0d530a136n/aHeodo
2020-10-22474701593545758203.docdoc d520cf4d437930ce53b2d068fd3f26ca35aba0d23eed99366a2d5d8d59a4e868n/aHeodo
2020-10-22REP_4OABULYR.docdoc b6055d889e7ac86545888a5da746c4c231ead0afc40a036c3927188e99d7ae9aVirustotal results 43.33%Heodo
2020-10-22T_SPN_100120_HKU_102220.docdoc c6aecc75fd2bfbcebf928e7f5f5ca0b04ec74d92bf6744f6c23ff7f2795eb263Virustotal results 45.16%Heodo
2020-10-22DOC_39793603.docdoc cde7e6bf17321c078405537ce1fd9b5eafae22b397b12642e853cb12b3ad0f69Virustotal results 45.16%Heodo
2020-10-22BAL_ZA6897812939NY.docdoc f198753506a418351356905f69f2a5115696b8d66c2478e521fcb948c7f84d67n/aHeodo
2020-10-2217876907482.docdoc 0da81935024d0599fd8d9347b3b1cd7d1c3224a851735ee92224a3f2cfe007ddVirustotal results 43.55%Heodo
2020-10-2238777669604126.docdoc f62d13aea4567bd1e91c07f80dcf79d672bc4e446045a810f58c9c9cde7cceben/aHeodo
2020-10-22DOC_PO_10222020EX.docdoc a78a2682db9e96335294df8912a7cd0a843bc011ae898a7fc211f79aea919fa2Virustotal results 53.23%Heodo
2020-10-2269399726132485.docdoc f00791295a21f7fea2b5a3fc6f14be08b6182388080f8e0666bc87ef8201a362Virustotal results 50.00%Heodo
2020-10-22INV_TP5768812974VE.docdoc fe8d90884de697451ea446a5dfd254041d252229a8a17175f11f77486dcdc4d4n/aHeodo
2020-10-22Q_CFE_100120_HPZ_102220.docdoc f4485fe8056305da48ac8453716ea0fa9c6633da1a1f87e01dae3908da1bbbe6n/aHeodo
2020-10-22INV_PO_10222020EX.docdoc 74fdfd61d063ce1229044436c55ac1dba3e3c765e8b26674587cbde6704601a1Virustotal results 49.06%Heodo
2020-10-22FILE_SMA_100120_ZIT_102220.docdoc 24ca326ece108e2ec02346c32536bd5cd2a990364f8d8c9fa35b082ba4a68f2fVirustotal results 45.76%Heodo
2020-10-22K_461596229027.docdoc 884d55db64ae38575a793fcfaf4f07a6b4f67a7ee84374571189cc4bdb485608Virustotal results 47.17%Heodo
2020-10-2284189379748.docdoc 2622c411514e2ebeb404ff72a11abb8b36da194d0f09dcc95869802a01cf4a20Virustotal results 46.67%Heodo
2020-10-22PO_10222020EX.docdoc 29747a11e9ffbd0668f9b880137f1051a27677c4f3bf0a17ead5299fb5857946n/aHeodo
2020-10-22INV_52147755.docdoc fe681aba1adcf7e82fd0daedeb3af000c89d34693b1dd0022c273e936ed660cdVirustotal results 48.15%Heodo
2020-10-22INV_IXO_100120_YSV_102220.docdoc 8cf9bf37fe3de456cee48cd50ac6487278290ce4038eee214389512625297016Virustotal results 45.16%Heodo
2020-10-22Z_PO_10222020EX.docdoc 2ea760060d8e71ffce91d15fe31085ec999ed299d9d13e35dcd0544f8d361b59Virustotal results 45.28%Heodo
2020-10-22566759200735681396.docdoc 95c62759d32e2a426433130be7fc1c17a3d3787359258f3af33f61760463eeeeVirustotal results 43.40%Heodo
2020-10-22SPH_100120_KNK_102220.docdoc c4453119ba010924fa6571eee7895d995ccd52dcc8380f3b65aaa2bb6508290dn/aHeodo
2020-10-21REP_R0M25EP4WH141KV7.docdoc c772e92b4aa5c7e34108bb1b418cc47bf1561c6ea5944d194eff1af7cefbe4e2Virustotal results 41.94%Heodo
2020-10-2109271881.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 39.34%Heodo
2020-10-21MWU004LJ3WFJG75.docdoc b96b5470dc7d8ed5cab5f58b9064e6c57382d8dbe135093a8ce692e5b4171266Virustotal results 41.07%Heodo
2020-10-21REP_60399222.docdoc 9ccbbb119271b882bcd53559aa7e60487f0a7ce757b9b4fb1b51b691142dd35eVirustotal results 39.62%Heodo
2020-10-21GNQNU3YWOZKB9O.docdoc 8e3cc05fdd4cd3001e044f7a7bedd7908cffdeb65bc906bd214a483ac4dff96cn/aHeodo
2020-10-21G_PO_10212020EX.docdoc 1cb0001d422c0b16aa106ca96ff8aa0db8fec461c49b8f80ac75b5ab4001803cn/aHeodo
2020-10-21B59TTCD19UW.docdoc c92778df4ae556cc2ad66979e6fafa9256ce4c9c7d0457c6525711429def55feVirustotal results 26.67%Heodo
2020-10-21Y_23836841.docdoc 02a8230dfddee28c717cc288e1573b5a44194cebefd65b8a20d0e37e2e086a1an/aHeodo
2020-10-21KWE_100120_HHX_102120.docdoc f63607511cb25a712c35a3841650f25d68980730edc650fd4bb1d1e9df48d05eVirustotal results 21.31%Heodo