URLhaus Database

You are currently viewing the URLhaus database entry for https://help.hizuko.com/groovy-count/FILE/pkiadn813d-00034986/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:754584
URL: https://help.hizuko.com/groovy-count/FILE/pkiadn813d-00034986/
URL Status:Offline
Host: help.hizuko.com
Date added:2020-10-27 04:47:06 UTC
Last online:2021-09-19 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 04:48:03 UTC to abuse{at}microsoft[dot]com)
Takedown time:10 months, 27 days, 2 hours, 29 minutes Bad (down since 2021-09-19 07:17:08 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28Payment.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo
2020-10-28Inv. 8572863580.docdoc 262b9ae34d1556927301b3a7e49f106e8a49724b527eaa327938fd5af61ec2ebVirustotal results 25.81% Heodo
2020-10-28Form - Oct 29, 2020.docdoc 6398e25e380cf00aa433acf528e8f0245fd02007338aa75df4deb5bd9eeefbbbVirustotal results 26.98% Heodo
2020-10-28Form.docdoc 92ae5315a4de0857a9f23fa0d4ef298bf2e87573ec75de5c05c6b82c0ca67155Virustotal results 25.40% Heodo
2020-10-28Electronic form.docdoc 651bf3fad674c19a145b70179dc88dcc06a5afee9923b348c400155e1f6b14a5Virustotal results 24.19% Heodo
2020-10-28Payment status.docdoc 5177894154a2ad0d67c6ea62534a27cdc18b7cfe9c73c8ec6071d72fb8c198a2Virustotal results 22.58% Heodo
2020-10-28Invoice #77838.docdoc 1ffb519f7ee20c735692e941193543d406a780fa0756200654c9d442c5166fd4Virustotal results 22.95% Heodo
2020-10-28004550188368.docdoc a9ae4ffeff58b0aff2408b43bf5572e071f6d1d77ea83e1331981c2154e105c1Virustotal results 20.63% Heodo
2020-10-28Form - Oct 28, 2020.docdoc 0402eac76e97d2bc47ed688412a18594674b7e981d4307bbe0b8491d8ba0268cn/a Heodo
2020-10-28Invoice #72881180.docdoc 661694d6fc62c1af16ddbe2db10c54b471f5acb387cde760666a6a672635f16dVirustotal results 17.46% Heodo
2020-10-28Form.docdoc 22ccc563e61d8e3c9936d06fb1d86632f7544d213ae91216e74ad8bef00b45c3Virustotal results 17.46% Heodo
2020-10-28INV_84864.docdoc d1f0145ea0d4e036edd208387b5c7c012b0eec91562b6f210853152462b2ff63Virustotal results 18.03% Heodo
2020-10-28October Invoice.docdoc 3e784298291a432cc1c053b0a50d2245977718a7f16e344559d0952260c96049Virustotal results 17.46% Heodo
2020-10-28Form.docdoc 0eb494d2627d56169bb2fa72f2ddae839751254dcb82ab597a9df1a75dba97ecVirustotal results 17.74% Heodo
2020-10-28invoice #96443.docdoc 448eabf56cc654711f7a3a6005be397a5aeda5ba6f329742da01cf7d31712931Virustotal results 17.46% Heodo
2020-10-28Payment status.docdoc 0c858a0a134a998400efac616b99178e0b542e1229d9260362b329d56ab10b58Virustotal results 17.46% Heodo
2020-10-28October Invoice.docdoc abc441e8e79d4bbbc2cad82c9c8640e5556dfa439a39b965716dd1cbef7e2ac6Virustotal results 16.39% Heodo
2020-10-28PO# 10282020.docdoc 6b8a13edbe6d2e19282d97fae23cb4eed96c854672c61fc5724b9fdda058760eVirustotal results 17.74% Heodo
2020-10-28Invoice.docdoc 569a317cc807f72c221acf953d5db5dfba9b51ca788884f24da3dce85e93459bVirustotal results 17.74% Heodo
2020-10-28Form.docdoc 9819d665344dae10323a62049a4b5193c88afbdd1792f6d8ad80b7df403b6c73Virustotal results 17.46% Heodo
2020-10-28Electronic form.docdoc 00be80b011b00e2de85e342852402bd4fb7b9bd28a03d3631202c6ab79baf9cfVirustotal results 17.46% Heodo
2020-10-28invoices 58802 & 1421.docdoc 8d628c60fb8a3dcaf40f3ad332715bef982f7bb08b77223501bd663299bb719dVirustotal results 23.81% Heodo
2020-10-28016898200.docdoc eb7342e956ea7f0a234e89063bf36cbdb9e2bf4d6478141379a0eaf2efaf711fVirustotal results 19.05% Heodo
2020-10-28INV #779 FOR PO #89520830.docdoc 7b55e5dcf03999a440acbe690dddf943d03bd37fbfc7892d196708992044efdfVirustotal results 18.03% Heodo
2020-10-28PO# 10282020.docdoc f973018352488fe6ba623919161c5b4387f67d9aca131af19480684ae2740544Virustotal results 17.46% Heodo
2020-10-28Inv. 0002140239.docdoc e1a1c8b02de20858f2703c835ecd985f2b744816cd4f8757ca7e12af15d3af11Virustotal results 16.13% Heodo
2020-10-28Invoice #556441.docdoc 4767c00104e07fe96284c22372e9e2c60acfa45386e8921b0c6a0ab3d8fd090eVirustotal results 17.74% Heodo
2020-10-28PO# 10282020.docdoc 2f827948f5ca8bb73886ee64091abcc41a19ae9887d08514dcfb87935c4300c5Virustotal results 17.46% Heodo
2020-10-28Inv_8355.docdoc 0139fb5de658c6d87c219098461614781b790461bb4d2f6fda39ecb9f80855b5n/a Heodo
2020-10-28PO# 10282020.docdoc 6b60fb2479d5d8fa86715aee8abfcd4dc6a10217af2faa45b64b90f05f616ab1Virustotal results 17.19% Heodo
2020-10-280085053.docdoc 82cfe085365c8087b1f710c983c18cef34c5f2f81bb43171cd34050cc0984a54Virustotal results 17.46% Heodo
2020-10-28XV8437852676HL.docdoc 753c4521e07dab9a1de57a156021942b8e1019f48da5659b28dedbc848c3d013Virustotal results 17.74% Heodo
2020-10-28181431.docdoc 0b9d0864e1af339c8924de338519f8773111be2d5d0aa9956e910d2bc1b4e1bcVirustotal results 16.13% Heodo
2020-10-28PO# 10282020.docdoc c156c19120c201216fa1ed0db10ae8afd1c2d5b162e885dc69af1f7024a53cb8Virustotal results 14.75% Heodo
2020-10-28Invoice.docdoc d23212065500f67a2aa4bbd042ad99075d511959fa1be07d964146fc5cfd618eVirustotal results 15.87% Heodo
2020-10-28Payment.docdoc db1575e9ed5edb424eb7142501e0e6e35fce135e7730d60e63ba53c2d3d2489cVirustotal results 16.13% Heodo
2020-10-28Form.docdoc 1ffa0f653207549990a81373d3a44a8be126ef0a7ad5bc5fb2e2dcee681c32a7n/a Heodo
2020-10-28invoice #4519.docdoc b1bdd6e1e3abe17d23d0470a135cdf17a4c0753e5829b7abc7bf792d3cca7715Virustotal results 15.87% Heodo
2020-10-288188172051SG.docdoc 80c6de9caa8fb29457e799ff74947cf9a28aa5bae84ca015cfbe75b1edb3c93dVirustotal results 15.87% Heodo
2020-10-28Invoice.docdoc a0ba0f418d9c289fe33adfb5c1d8abb4e2dc9a820509ee82f94df38387801d17Virustotal results 18.52% Heodo
2020-10-28invoices 788 & 75201.docdoc be2f218335879495011c67e3ff23f97a055e103643b539b3c63255308e1d4ceaVirustotal results 18.87% Heodo
2020-10-28Copy invoice #644442.docdoc c462280cd587897e33d985491193ae9ca4485f62477802b51d41ffe660bf4f44n/a Heodo
2020-10-28invoice #4183.docdoc 2e2ed994b82e41fc67e954b4eb1f6ab9247d14e5b90fdff95a5a7931c926b2cdVirustotal results 42.59% Heodo
2020-10-28invoice.docdoc 9af5d411dea2c5f756cabec60ce3460da8710920df0a5148a0ec67e68330e456Virustotal results 43.10% Heodo
2020-10-28invoice #31380.docdoc 138f68878f0c09a4d5a982087da5f57943a8f84e87f9ff80bf9b66949d9bcb02Virustotal results 42.62% Heodo
2020-10-28form.docdoc ccfb92a335944590af2f1b2c9a759e4c3e6c5d9842878821a451e78183e0c51bVirustotal results 27.78% Heodo
2020-10-28Form - Oct 28, 2020.docdoc 639f3d1d1a494dcf20b64daa8f46a98affe8b7e708fac26f08a732bf4a03c06aVirustotal results 26.98% Heodo
2020-10-28Invoice.docdoc 6695d93e57264079a79dd7fc5155df3df40f82d2a6a78063c99d8617362850c2Virustotal results 27.78% Heodo
2020-10-28275083.docdoc ab8a246400a024e5490c031fe13b4c892da8e1db9687fd937766669b28467255Virustotal results 26.23% Heodo
2020-10-28065521521.docdoc 99c91035c6a269a23e022673bb84e4cb8e8b40909281707212bd9dc4a074c3cfVirustotal results 28.30% Heodo
2020-10-28Copy invoice #51194.docdoc 0010447fe3ce9d98c5dc301726aa2d717767c7abd1d78c14b39e3055602f7205Virustotal results 27.27% Heodo
2020-10-28October invoice.docdoc 7178e85af3d05ab325a721c502191735ab4bf50b6df622a6a8395d43c887e073Virustotal results 25.00% Heodo
2020-10-28PO# 10282020.docdoc afea9c0746825b9e47d2063ac184a7dbf66fb0fe1c2fc093a52e0d4cb6b231cbVirustotal results 22.95% Heodo
2020-10-28Copy invoice #02672.docdoc 616c983618814da5ddf6ba8fe6b8f930ec8fc9f10e21762a65ac35532f508fcbVirustotal results 24.19% Heodo
2020-10-28form.docdoc e33c5a896f20bee29de9a591962c4bd9643be1ca87866cf8b574822decfa2c6eVirustotal results 27.78% Heodo
2020-10-28Inv_725709.docdoc cefdece809bb4ea44a6ed18923e403e409190c61aebfadc97e7eddc70da59285Virustotal results 28.85% Heodo
2020-10-28Payment status.docdoc 68847f9ed5d1abac2503ab07830a3cad791693b793112d82f0a825f8ebaf9dfeVirustotal results 24.19% Heodo
2020-10-28Invoice #346.docdoc 26b6c08bbd6f91a2bed79c26264bdeecd3f1c92733a9870924e53eda84d5ccdfVirustotal results 23.81% Heodo
2020-10-28PO# 10282020.docdoc ae7d3ba8461109f291913ce09ca8033736c9fd52d9a2d7b2eab34d844f7dcde2Virustotal results 25.86% Heodo
2020-10-28invoice #6837.docdoc e39757188d82ee09fcb868b4d5ce2f37b8904f29335dfe60501e67a14fa09f51Virustotal results 25.00% Heodo
2020-10-28INV_29596.docdoc 22ff098ed7106067b60086383ec7d4ac8211fec5b7298cb2c7d22bdc05e75b8eVirustotal results 24.19% Heodo
2020-10-28Payment.docdoc c08f488ccd844154239cbddae4e7581df811648b6fa2ac1dc70194f194138742Virustotal results 23.73% Heodo
2020-10-27Electronic form.docdoc eacdc62e23f4dd1edc262c2db5e0139bfe032e0a243db9378d568e0f9e32041fVirustotal results 25.81% Heodo
2020-10-27Payment status.docdoc 25a38466146889f4833a21d4be2e6863c6f4617e632f0bc33436d7023cbaf734n/a Heodo
2020-10-27Invoice 004787413.docdoc 12b93b5419fe7c119e08d8e62084083301272322f956ac529e34ad86dbf72a5fVirustotal results 22.95% Heodo
2020-10-2709972317.docdoc aaf05aa6da7de09b0f276cb3b3116e61aa22d72769e52a1c85f492d3a1a9e002Virustotal results 30.19% Heodo
2020-10-27Inv. 0084455835.docdoc 4955a66e9711e8207f53c9204d68f89903e7aec37f30cbd298ff102bf68f937bVirustotal results 28.85% Heodo
2020-10-27Invoice 00387554.docdoc 269ebb02c0552abc38ea7b9e4e0a464ebabbc80035e259af2fa94f1544a3b351Virustotal results 24.59% Heodo
2020-10-27Form - Oct 28, 2020.docdoc 3c0b0961efde86a2b9c1a239fbefeaa8c6cf896bfd8e930f972af471efc540c3Virustotal results 23.81% Heodo
2020-10-27invoice #230941.docdoc de7ac02b57b8e3be3015b212a8d8e70075278aabed73a8789cce3aa21f26e513Virustotal results 22.58% Heodo
2020-10-27Invoice.docdoc 3f5f89c1ba2c99ea85266e572e4d7fcc689b614028747d726b0496698b6a93e5Virustotal results 23.81% Heodo
2020-10-27Invoice 043995.docdoc a6d4e2b08b8440d239b850df7a27ee5b2269f64f6c898b0b4d04ad6d596d432bn/a Heodo
2020-10-27Payment status.docdoc ca9b4a21c4b284d48ac4b2fb4e838c186778f7d36a0b7c262cee27085bd500f9Virustotal results 27.78% Heodo
2020-10-27invoice.docdoc bb035dfa04791584d81e71d154e443811c21deb1ae691425a9bfe05696187c9eVirustotal results 25.00% Heodo
2020-10-27invoice #07029.docdoc 4a10c49813723560898495290eedafdf0dd7dc2ca1e0df6a54cae088c48b9b3fn/a Heodo
2020-10-27Electronic form.docdoc 259791d906d7b260d302a7bdc647160ead5a7cb8c56f04e9888888bea7b5be71n/a Heodo
2020-10-27PO# 10272020.docdoc b2c300696fc8ad9ff5f0aa4ae76a7ae337d9cf8427bef59aa3baba261b9b048dn/a Heodo
2020-10-2774253.docdoc 5a07cc5df83be11d085d9a031f8c188b40fc8133ffa322777aed9a7c9a239c5cn/a Heodo
2020-10-27INV_32768.docdoc 799de3c0b3c57093a424c4e80e471b26b7f7d121e6e4b75a250304ed59ab9d6fVirustotal results 34.92%Heodo
2020-10-27invoice.docdoc 509de817ca426db6b61aed12a1a401fe05b91bd2a01c6203277c80e0b14f03caVirustotal results 35.19% Heodo
2020-10-27S8494806370JN.docdoc 4dee867bbb0a188951ce67bac529c1d7aefcd46c4964b24f6603829639aafb08Virustotal results 35.19% Heodo
2020-10-27Invoice #8966837.docdoc e4db9002ca55bbfd2e44eb64d348fc63fbd8e647a3f406b20603a92783b32777n/a Heodo
2020-10-27Invoice.docdoc 618b42ed1f918805007ba2386a3456d92250a54d5091f096234f293b695a5715n/a Heodo
2020-10-27October Invoice.docdoc 0021bbe25ff5b692875ec9b22ecc7f278d7859484560e1b975c37770a227a1cbVirustotal results 34.92% Heodo
2020-10-27Copy invoice #1084.docdoc 993dde892377b2ef5b81f4e13c54293aad56861d29f37b3cf253ff19bce2429eVirustotal results 35.19% Heodo
2020-10-27invoice #253104.docdoc 08c57b13f16ca4bda6ae1ccec28d62aac7f7857703319815a6bc56debebb211eVirustotal results 33.96% Heodo
2020-10-27V633 invoicing.docdoc fffd8f91ba3992b4e4ab37f5c691bda01848627747b4483dd6f6cca97716c2a2Virustotal results 33.96% Heodo
2020-10-27Electronic form.docdoc a9541a1e16a89043ba48d84ea1c035a61e6427eb283fd0a446fffea1a81143d0Virustotal results 30.65% Heodo
2020-10-27Form.docdoc b13615da4589264edbdd5023f57272d71d208d5d305a7342ef4f8a7c137c4ef7Virustotal results 33.33% Heodo
2020-10-27INV_4716.docdoc 75e9bbd2466e53cb3d43940128a3518f795ede2cc682a3f1e132adb98ca4ab68n/a Heodo
2020-10-27INV #03723178 FOR PO #09684742.docdoc 5269f875383e242d0eea016dade5ce94bea9bca171526c9fdc6a25178898e5den/a Heodo
2020-10-27Form.docdoc 24cac0a9f39e692ecdf331a3237853807fcc3d54b82bc735ce8062ee50bde63dn/a Heodo
2020-10-27Payment.docdoc 0eafb018a8ad85807a4f1b3a7e74ef7bdbb43da6fb3d5b2da4f30769f73852ffn/a Heodo
2020-10-27Payment status.docdoc 1abc9cb4b42aa993827e65cc07634e361063327ecfff66f291760b54d91dcd80n/a Heodo
2020-10-27K-100120 FFLL-102720.docdoc 28b8cc8a466d51d35baf39d43b1b8ee07cc39c6311c3160b416b9cd0db7ead64n/a Heodo
2020-10-27October Invoice.docdoc bf919cafed94b4925e4ffac8782e0f11c045d10d802a806e21dc77e6ba92322dn/a Heodo
2020-10-27Payment.docdoc 87dcc5ef09130f0ae04bc84dbb07e2242c15a4a11e30128c4f6022ab2b63fbd2n/a Heodo
2020-10-27PO# 10272020.docdoc 36aa90ba50e9d59e473d917452254acb4a796c643840995d73b6ceb32bc596f2n/a Heodo
2020-10-27000267521.docdoc 09698f8941fab0d6f62dce908249dd566ea7d661cfb8307d4fac50c9dd4b36abn/a Heodo
2020-10-27Invoice.docdoc c5ccc5296ba9cc6466a1280364fa69c9cca3ea9e68ba9e2f2e369f0caca531b7n/a Heodo
2020-10-27INV #1463 FOR PO #02616620.docdoc 08a81f468de57ca996fab6bee82c920fd2b24445688964c679371f611ea8a24fVirustotal results 50.00% Heodo
2020-10-27Electronic form.docdoc ca286e09b37ac73d3f0f4c732859bfb635073af2e14c81db7268955f8f2b796cn/a Heodo
2020-10-27Form.docdoc 59f1f85903e59998aae6c86cde8b52c1b5a19db0e56af9a75eaec553c7c25823n/a Heodo