URLhaus Database

You are currently viewing the URLhaus database entry for http://salmanintl.com/old/x7wV5Rldydo6KYGy0jwYYZMCSi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:753469
URL: http://salmanintl.com/old/x7wV5Rldydo6KYGy0jwYYZMCSi/
URL Status:Offline
Host: salmanintl.com
Date added:2020-10-26 21:48:04 UTC
Last online:2020-10-27 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-26 21:48:09 UTC to abuse{at}contabo[dot]de)
Takedown time:11 hours, 54 minutes Good (down since 2020-10-27 09:42:21 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27Attachment_0625994785992015541.docdoc 0ad17907e06b3e6fd92af79f0b1cb88960c66405714b664011a716d318f6f3afVirustotal results 35.85%Heodo
2020-10-27arc_7WT0HYEFG7JN.docdoc 5d94aca8f05d80a4609eb7e74da9d74ad368236647ef082d1c0d4a6b8e9534e0n/aHeodo
2020-10-27inf_OGI_100120_LCF_102720.docdoc 3d3018783ee56f8fe4b38d613ee7b96aa6424bdf12d3bd7c3dc618c6bb38dcdan/aHeodo
2020-10-27List_QW5222830590FO.docdoc 115c98911b958fcf8e3c9300eca7763548205c8fade900f66be4d241ed54c99fVirustotal results 31.75%Heodo
2020-10-27FILE_PO_10272020EX.docdoc 99963b0cf4f0151b67a5c757087ce3893cc46b3878d1f16991e38fcc63a3fd56n/aHeodo
2020-10-276987264731622112289.docdoc cd0b23d03029fe913a9d2f52d14b0703f4a6f6a4cbda6744a455fca3373d3ca2Virustotal results 35.19%Heodo
2020-10-27REP_27817573.docdoc a98778c044d5a8ea62b40e8a5146d8e49dad781ad7c87d3c4d8a0931a1232ee7Virustotal results 42.00%Heodo
2020-10-27EVI_100120_WWB_102720.docdoc 58dd20d9c3e38a8115434572a1975f207290cb2340b203ffaa6d3b08fa95da9fVirustotal results 38.71%Heodo
2020-10-27J_AO4912734147WJ.docdoc cc341e2451041bcd6d9dedc66abe480900021abc803788e2d56b701edee7e044n/aHeodo
2020-10-2738359228.docdoc 402bcaa8f052d8cf5d7ebef47283ea79c68151fa78bfad0611e97530423d3b73Virustotal results 41.27%Heodo
2020-10-27PO_10272020EX.docdoc dcac3f433bca625d1c831d29f00d254dcc6740ca1779ebf9f6483ab6fe431c21Virustotal results 40.98%Heodo
2020-10-27PO_10272020EX.docdoc 6f039a653dd4edef8c16347acc26f36a9b283bdeb9c8fb6ce48faabd9f67f5e2Virustotal results 43.14%Heodo
2020-10-27OW4759850290ZY.docdoc 59b0501c2684432b625387c70e6ba5db3ebd84b77d24b11c744db3b3c48d3561Virustotal results 38.89%Heodo
2020-10-27FILE_B7U9RXWRRA.docdoc 4fb9d273bb087c7c0ff482f77af8b41047e57e10e452d9d4b873e89afcfb9624Virustotal results 38.89%Heodo
2020-10-27DOC_63903964.docdoc 0f42df210cf372d884bd0cb9074d9760880bc0aa34168f889b8e28dc016b006cn/aHeodo
2020-10-27FILE_VEQ_100120_FLY_102720.docdoc f83783eda067f6e1b71d589e230f6aa844b2410c42ce2f20a60f9b32960852a6Virustotal results 38.10%Heodo
2020-10-2728431317.docdoc fef9e77f6d9e84345a020f567b892fb4718af268465b5a6d505a6f2bbfa19e92Virustotal results 39.34%Heodo
2020-10-2744070010.docdoc 26086ff8825a2c550cc802f2574dd9a8730c972ed3d1c704d863fc74e8dc082cVirustotal results 38.89%Heodo
2020-10-27BAL_32395457380760452.docdoc 5015b3d571a67fc015e9ae62b064f6a8357b86db998aa2fc1eafe6bfd053ee44Virustotal results 39.66%Heodo
2020-10-27FILE_PO_10272020EX.docdoc bef2cf86acbba45a17385614351f915491d344ba1d20e5936379853d0eb2b0a7n/aHeodo
2020-10-27K_OBK_100120_FDH_102720.docdoc 98bdd88b97a27caa11e39dd7dee4d2e510ba8b38e1e7e13e5efb7ca2fd538679Virustotal results 39.62%Heodo
2020-10-27QUZX04YTDIGCS.docdoc 284ca49487afcbd5dc06144fd8a4b4ebaf8abc174a9c0c609a5073f4925ec19eVirustotal results 39.62%Heodo
2020-10-27N_1NVN6QAZ8KF.docdoc f5831fd5a2bd8c3eaf0bbd799764d684f1c3a2528d5583013b438e6f2b4f4843Virustotal results 39.62%Heodo
2020-10-27FILE_1851650407288438483379925.docdoc 0779c9b1561c39e278910257e807a233b3545da40dd442a26906c0ffa6e199fbVirustotal results 36.07%Heodo
2020-10-27QY3002539118LX.docdoc ada5eecfbbe470ecc1b1c434323530f141ac930ee6febd5c6e578dda073ccbecVirustotal results 38.89%Heodo
2020-10-26373186376109275.docdoc fad47e8ab42aab56d8198f885e7943c5b9f9c86bd8983e3ddd4dcaaae8c36f2cVirustotal results 42.86%Heodo
2020-10-26REP_PO_10272020EX.docdoc e00856eefd86441efa639a6675303e9ae04abe216e730a24429423b46f48426fVirustotal results 37.50% Heodo
2020-10-2653811221.docdoc 9ba569c1504543ac41bb2308f0ed322542bdec567e0588185603e500cd37f68bVirustotal results 38.89%Heodo
2020-10-26BAL_QZLO16L9.docdoc c8ec858c06478f6261eadea96e71a453f5176eb9b07c801ad5d84bde75ccda10Virustotal results 37.04% Heodo
2020-10-26S_547297036085403201.docdoc 1876ecab19ee6802dac2e8774dfd625dcb2d4e00fb61f446caeabd26db1405a4Virustotal results 37.04%Heodo
2020-10-26FILE_PO_10262020EX.docdoc 44193d99f4f6240603cde0c68693a415a4ada0d769001572a4b84f503df3569eVirustotal results 38.89%Heodo