URLhaus Database

You are currently viewing the URLhaus database entry for https://salmanintl.com/old/x7wV5Rldydo6KYGy0jwYYZMCSi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:753477
URL: https://salmanintl.com/old/x7wV5Rldydo6KYGy0jwYYZMCSi/
URL Status:Offline
Host: salmanintl.com
Date added:2020-10-26 21:48:07 UTC
Last online:2020-10-27 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-26 21:48:09 UTC to abuse{at}contabo[dot]de)
Takedown time:11 hours, 52 minutes Good (down since 2020-10-27 09:41:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27Attachment_0625994785992015541.docdoc 0ad17907e06b3e6fd92af79f0b1cb88960c66405714b664011a716d318f6f3afVirustotal results 35.85%Heodo
2020-10-27list_DX9622665046MM.docdoc d7c6815a6c9839cb6e4c7b87dd865a478181918dea81112af9afd68e330837fan/aHeodo
2020-10-27arc_7WT0HYEFG7JN.docdoc 5d94aca8f05d80a4609eb7e74da9d74ad368236647ef082d1c0d4a6b8e9534e0n/aHeodo
2020-10-27doc_OFE_100120_SZM_102720.docdoc 7d11af1aae7cabceb368ff05164c5e961cb3e703b1f85dc26c42f36a048cd862n/aHeodo
2020-10-27arc_026802032989993405283031.docdoc 5889f2efa891b1dfc951d5b4883183e501034af1eeddcd0fd2ec9508ec72a146n/aHeodo
2020-10-27DOC_MDPA7ASCM.docdoc e70092c224aca77fa290ebc4b46f7d3c49f3cb38294f8707b75bcffd1601fce4n/aHeodo
2020-10-27FILE_PO_10272020EX.docdoc 3f9ed25b695393eb6f08aca2c6a220c3fca5604996b53b81fdd23aed8b7e7a77n/aHeodo
2020-10-27BAL_YY3808257759LF.docdoc 395aa1cb5a6a567708e1a0d53eb1c21eeaf8973a53bf52baa2bbfb968525c351Virustotal results 42.86%Heodo
2020-10-27EVI_100120_WWB_102720.docdoc 58dd20d9c3e38a8115434572a1975f207290cb2340b203ffaa6d3b08fa95da9fVirustotal results 38.71%Heodo
2020-10-27U_L4B3SIXBWTHNTQF8.docdoc b54246f7e156e673583d27bac3eedf9c6e97db4635d316ac47c599ba5baa1266Virustotal results 39.34%Heodo
2020-10-27FILE_GO1124719353XA.docdoc ea813f06f8ed168474ed17e131ffb614688217d51ca3449cea680500fb3cef23Virustotal results 41.51%Heodo
2020-10-27REP_MLV_100120_GEQ_102720.docdoc cca9d247d6b6a9a8ddf13e33a1bb5b362ec0a59dc1ce159ef274af49a40d5b9fVirustotal results 41.27%Heodo
2020-10-27PO_10272020EX.docdoc 6f039a653dd4edef8c16347acc26f36a9b283bdeb9c8fb6ce48faabd9f67f5e2Virustotal results 43.14%Heodo
2020-10-27OW4759850290ZY.docdoc 59b0501c2684432b625387c70e6ba5db3ebd84b77d24b11c744db3b3c48d3561Virustotal results 38.89%Heodo
2020-10-27MVJ_100120_KSE_102720.docdoc bf04be287615bd3af69a5f056b49c8022660833f42e354c39c808061f1b2b7fcVirustotal results 38.89%Heodo
2020-10-27FILE_PO_10272020EX.docdoc 2960dd68c371680d27dc0f404b13568b2274901eb683c0a4cfa8b74510d5a74eVirustotal results 50.94%Heodo
2020-10-27FILE_VEQ_100120_FLY_102720.docdoc f83783eda067f6e1b71d589e230f6aa844b2410c42ce2f20a60f9b32960852a6Virustotal results 38.10%Heodo
2020-10-2728431317.docdoc fef9e77f6d9e84345a020f567b892fb4718af268465b5a6d505a6f2bbfa19e92Virustotal results 39.34%Heodo
2020-10-2744070010.docdoc 26086ff8825a2c550cc802f2574dd9a8730c972ed3d1c704d863fc74e8dc082cVirustotal results 38.89%Heodo
2020-10-27BAL_TJ3486395861RR.docdoc b9efcf9bbdfee20efe56047ca5810ea88974d9e7b9ec968a57f814842c7946ecVirustotal results 39.62%Heodo
2020-10-27FILE_PO_10272020EX.docdoc bef2cf86acbba45a17385614351f915491d344ba1d20e5936379853d0eb2b0a7n/aHeodo
2020-10-27C_40857421.docdoc 946439b363272872ced4c20d04dac453397ef429b301ef0a947f9d4ca1f95d48Virustotal results 38.46%Heodo
2020-10-27REP_W8XFY6G.docdoc 98bdd88b97a27caa11e39dd7dee4d2e510ba8b38e1e7e13e5efb7ca2fd538679Virustotal results 39.62%Heodo
2020-10-27REP_7536009743693089747151371.docdoc 9a5ff2d10eb6a49a82083f2f52e3daba519399794197d526ab76a68dd6849e69Virustotal results 50.79%Heodo
2020-10-27H_PO_10272020EX.docdoc fc96bc46b69a1ec2ac6829d22a21628bae8d3b2f8b64e2d97ee087ccdce4de14Virustotal results 51.72%Heodo
2020-10-27QY3002539118LX.docdoc ada5eecfbbe470ecc1b1c434323530f141ac930ee6febd5c6e578dda073ccbecVirustotal results 38.89%Heodo
2020-10-27INV_NGJ_100120_BYO_102720.docdoc fad47e8ab42aab56d8198f885e7943c5b9f9c86bd8983e3ddd4dcaaae8c36f2cVirustotal results 42.86%Heodo
2020-10-26LXU_100120_XGC_102720.docdoc ac739c4d98aa46329d4ebe114bad66247375ddaf8d148446712f2a2b8006f300Virustotal results 38.46%Heodo
2020-10-2653811221.docdoc 9ba569c1504543ac41bb2308f0ed322542bdec567e0588185603e500cd37f68bVirustotal results 38.89%Heodo
2020-10-26REP_WW4153846112PY.docdoc 476aeecbc49130c33765b15353b77ed60faab69d40df31df979f2b5f86a63509Virustotal results 37.04% Heodo
2020-10-26S_547297036085403201.docdoc 1876ecab19ee6802dac2e8774dfd625dcb2d4e00fb61f446caeabd26db1405a4Virustotal results 37.04%Heodo
2020-10-26FILE_PO_10262020EX.docdoc 44193d99f4f6240603cde0c68693a415a4ada0d769001572a4b84f503df3569eVirustotal results 38.89%Heodo