URLhaus Database

You are currently viewing the URLhaus database entry for https://mallowsvirtualcreatives.com/llfdsofdsfss/docs/MuvXT/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:732897
URL: https://mallowsvirtualcreatives.com/llfdsofdsfss/docs/MuvXT/
URL Status:Offline
Host: mallowsvirtualcreatives.com
Date added:2020-10-22 05:22:03 UTC
Last online:2020-11-16 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 05:24:07 UTC to abuse{at}microsoft[dot]com)
Takedown time:25 days, 11 hours, 37 minutes Bad (down since 2020-11-16 17:01:50 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22INV #402931 FOR PO #0209263970525.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22Payment status.docdoc 7e0233149682bb9be3e19f93517b3bbe9f5db41ce48dfa6ee88253a0a98bd678Virustotal results 38.18% Heodo
2020-10-22October invoice.docdoc 2c885eaf8f3f063c45b6c80ee4829a79f96b7d07ab1194822b522df14ecd8a73n/a Heodo
2020-10-22Form.docdoc 8f46672fc4bd13f926555000c39b3ff624d7b96f41429e568aa2bad30431bbe8Virustotal results 39.34% Heodo
2020-10-22Form - Oct 22, 2020.docdoc 188d183f83a1b99f55ae2810384c67e6f7be09014e6004bb5ddbf245abda02b3Virustotal results 36.54% Heodo
2020-10-22Invoice #0010.docdoc 67901eebf58c9cbbed2c00e87cb702c2e69cf959926247f3f99e59ba445a73f7Virustotal results 37.70% Heodo
2020-10-22G-100120 GJNH-102220.docdoc 621c80400686860afb16c417aa76f5068c7bcd642104a225644b805539b9e5c6Virustotal results 37.10% Heodo
2020-10-22Invoice.docdoc 2a3debc28e12818dd54c53582337c7024a1cfb99138ea2baf06c6b45a36efc2bVirustotal results 38.71% Heodo
2020-10-22invoice #53900.docdoc 05c27cabbde0441208b26f77df5a0f5346f2c057b25ab1515c61805324c18ae9Virustotal results 37.93% Heodo
2020-10-22Payment status.docdoc 0dd7566d93fe470be42c3b43f89d10022539dd21c040c3af9f234f5cdf3f580eVirustotal results 36.07% Heodo
2020-10-22invoice.docdoc 5825492e4acb3a6e36349f5fafef4745159e86616e9d38b4db2e2b4c212e3119n/a Heodo
2020-10-22PO# 10222020.docdoc 9b918b3a0a118f50d3c8d4be4526b1fd8ec10563810c7dbb5088495e471f6b26Virustotal results 32.26% Heodo
2020-10-22invoices 72442 & 4403.docdoc 14a549a41295bc3e3af038d8f83d8a36aea9e70fc7daeb206d189d3bfff44dbcVirustotal results 35.85% Heodo
2020-10-22Invoice.docdoc 9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8Virustotal results 50.00% Heodo
2020-10-22invoice.docdoc d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4Virustotal results 51.61% Heodo
2020-10-22Inv. 073354297.docdoc 3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4Virustotal results 46.30% Heodo
2020-10-22INV_0257.docdoc 711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550n/a Heodo
2020-10-22Inv_655664.docdoc b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154n/a Heodo
2020-10-22Electronic form.docdoc 20cb9774c3025651dcd7afb95472891f1b6bdab40da18e17775e4ec56084d0a0Virustotal results 49.18% Heodo
2020-10-22form.docdoc df51e418e047ba848de075954ab841887fafe6e47c6b7b6d529222e3795ecb23Virustotal results 47.54% Heodo
2020-10-22Electronic form.docdoc a89a346ba95533594891a15e53625209199e68bad7519485b3bfaf1954b2a8b8Virustotal results 45.16% Heodo
2020-10-22Electronic form.docdoc 05902a6c459b5ee113e0160231e64f0c1e0a6023654d545ea93abeaf435b71ben/a Heodo
2020-10-22invoice.docdoc 2bc5c1591569f6e8a480a530bf343df21867da564b7503824cb0e5193d3f8937Virustotal results 41.38% Heodo
2020-10-22October Invoice.docdoc 889113bf50a9e3543f97ca07e4e572f2328587944be4de82f441ba1b23e6ece1Virustotal results 38.89% Heodo
2020-10-22invoices 059 & 9319.docdoc 077db39d1c6f7785aa6191761f4033eeaf24c81e2c0ed0f104e798e63a6a1c4aVirustotal results 44.64% Heodo
2020-10-22Invoice #90958.docdoc 4d7e619f0381816bed7d0ffb6ea0a43ebd6050cbfb10f691c1bf8d8466c11345Virustotal results 45.16% Heodo
2020-10-22Inv_92263.docdoc 49e99a2c9064c24011dc0c71ff29d661e2b447f8213bc858b7feaa28d5d22576Virustotal results 44.26%Heodo
2020-10-22form.docdoc 055119f6a2254b8e3290900b29c2b27583428faa9f051bcf3b7c9a31f309f052Virustotal results 45.90% Heodo
2020-10-22PL005 invoicing.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 60.78%Heodo