URLhaus Database

You are currently viewing the URLhaus database entry for https://www.redlotusevents.com/cgi-bin/Document/mnp79ly/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:735429
URL: https://www.redlotusevents.com/cgi-bin/Document/mnp79ly/
URL Status:Offline
Host: www.redlotusevents.com
Date added:2020-10-22 16:07:08 UTC
Last online:2020-10-25 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 16:08:30 UTC to abuse{at}privatesystems[dot]net)
Takedown time:2 days, 11 hours, 29 minutes Poor (down since 2020-10-25 03:38:29 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22FILE_KS5249538012SD.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdn/aHeodo
2020-10-22BAL_33Q29KXOM3N.docdoc 9443cb776131c4a7c29a470055c06ca72da83e3a367a94381bfa7e1091e46099n/aHeodo
2020-10-22BAL_LJ2296825424MO.docdoc a479d5df4923cf3d9c170aa218de43da798baeda6247d5f044fe539826c58cden/aHeodo
2020-10-22CE1873567045TA.docdoc 892a53376594e2bdf65731771d6e7faa4d36e2d3b95340ac4984ec74536d3604Virustotal results 41.94%Heodo
2020-10-22BAL_NY3767561699KQ.docdoc 5b1476af36a03368d1a094862cb442fa84293835a1e05b590a4cef50001d402aVirustotal results 41.18%Heodo
2020-10-22FILE_NJ1I5ZQ.docdoc e3cd7451ef720df2cbc18258725e7d4e5b881f0ab970b5d1f9343c1d9754d2acn/aHeodo
2020-10-22BAL_27097457.docdoc 1e2ce6f7d21745dfd29a2251a7cfc9aa29962b2aa4283e160c20ca2166e2f973Virustotal results 39.22%Heodo
2020-10-224232911610054.docdoc ac0f321bf0c06b4983efc4726ccb54b8e31995d53ffef62f095057770c240829n/aHeodo
2020-10-22MY6087464708AH.docdoc 9dfb5e6e2134b14b82e9f8ec6fa56919f65c57d95c28d9c2bba1fece5a4e0082Virustotal results 38.46%Heodo
2020-10-2255368832.docdoc 016ee663cf0779e773c6fb5644bf4f69f509afe3733132a014cc9fb1c777dcdfVirustotal results 40.32%Heodo
2020-10-22S_BU9315062306UW.docdoc eb5559bf1fedae620572950c55a896bf8fcd9a7e7eecf48dae9b468c9f79043fVirustotal results 40.98%Heodo
2020-10-22BAL_DEW1UKL9WQ.docdoc 5071f2da34845b41b8e65266293f6756c12aef537eaa3777eeb4f6333f6191d5Virustotal results 40.00%Heodo