URLhaus Database

You are currently viewing the URLhaus database entry for https://help.hizuko.com/groovy-count/47HLm/INC/238785/9ymyqfn7z0y-165424/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:754616
URL: https://help.hizuko.com/groovy-count/47HLm/INC/238785/9ymyqfn7z0y-165424/
URL Status:Offline
Host: help.hizuko.com
Date added:2020-10-27 04:56:06 UTC
Last online:2021-09-19 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 04:58:04 UTC to abuse{at}microsoft[dot]com)
Takedown time:10 months, 27 days, 6 hours, 38 minutes Bad (down since 2021-09-19 11:36:25 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28310434.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo
2020-10-28invoices 0186 & 4872.docdoc f839b00e54aa7b0d68e3f3d7e7c12965d9d64153cd37d0600c4297542385eec4Virustotal results 26.98% Heodo
2020-10-28Invoice 00629444.docdoc 6398e25e380cf00aa433acf528e8f0245fd02007338aa75df4deb5bd9eeefbbbVirustotal results 26.98% Heodo
2020-10-28Form.docdoc 0c5643d4a7b85e177802b1eae495641a49631f1e3016455f0c7ba45709d27026Virustotal results 25.40% Heodo
2020-10-28Inv. 00979115.docdoc ec428d84e9c1aebaf97ee36639823702c4cc91734d326acc91799ba2b3b40495Virustotal results 23.81% Heodo
2020-10-28Inv_01968.docdoc 19f5c63fa8696a0eaab016bdd4d8d1bcfb5dd7f07d1da25caabaaedf0088dc23Virustotal results 23.81% Heodo
2020-10-28Payment.docdoc fccf7156f22fc7676f860e9ac3dfe8f573c89f58106e5946da37e36fcef2a205Virustotal results 22.22% Heodo
2020-10-28invoice.docdoc a9ae4ffeff58b0aff2408b43bf5572e071f6d1d77ea83e1331981c2154e105c1Virustotal results 20.63% Heodo
2020-10-28Form.docdoc 550bb4afeb580c5ca1bef73de9f4548610129a2f407d1375aa69b29c109ee9bbVirustotal results 19.35% Heodo
2020-10-28invoice #5563.docdoc 661694d6fc62c1af16ddbe2db10c54b471f5acb387cde760666a6a672635f16dVirustotal results 17.46% Heodo
2020-10-28Invoice #266042896.docdoc d1f0145ea0d4e036edd208387b5c7c012b0eec91562b6f210853152462b2ff63Virustotal results 17.74% Heodo
2020-10-28PO# 10282020.docdoc c6d94cabee4abe9dc14f1ccdfcec3f631453b9e19046806554808e77ddda2cf1Virustotal results 17.46%Heodo
2020-10-28UF-100120 UHJK-102820.docdoc 7e7bd61af07906f31a4efa5442f7cfda98c0047ef70e15f64e37c5d4882917b2Virustotal results 17.46%Heodo
2020-10-28Payment.docdoc f29906f9be58bbaac385fc9925f35f8b4b79ff4bf5e4ce7f3d89d90435a784a2Virustotal results 17.74% Heodo
2020-10-28Copy invoice #768301.docdoc 0c858a0a134a998400efac616b99178e0b542e1229d9260362b329d56ab10b58Virustotal results 17.46% Heodo
2020-10-28form.docdoc 7cd5248f6eed960168d2898ffde985d947702c9dc04b50d021161ffbed128e95Virustotal results 17.46% Heodo
2020-10-28Payment.docdoc b251dae8df2d623a2a0e9d710e34ed18d85891d8120725c2c7cd794c094950ccVirustotal results 16.13% Heodo
2020-10-28Invoice.docdoc 569a317cc807f72c221acf953d5db5dfba9b51ca788884f24da3dce85e93459bVirustotal results 17.74% Heodo
2020-10-28October invoice.docdoc 182920d9a5f644d48dfaf4ff4b3b45ba19446012b6d7a2150f6d53b5c8e773ban/a Heodo
2020-10-28WXQ-100120 HVQQ-102820.docdoc 81a28a01618707472c50609e10b45b9e7900ae5e34a761d053954fb7581c4677Virustotal results 18.03% Heodo
2020-10-28Payment status.docdoc d3b789ffe8bc12eedec50bd95af1d0e1c37ecdbb8e15d61723a63a569c32602eVirustotal results 17.46% Heodo
2020-10-28invoice.docdoc 08f27090512f9c3956ec27eea1e9a86ef36d6319b40bfe0b6f1e0c33621a709cVirustotal results 20.97% Heodo
2020-10-28October Invoice.docdoc 56e06f27b7f8905f084ac7ddc933236bdf650363aee629d7dd7e1c831aa9ca7eVirustotal results 17.74% Heodo
2020-10-28invoice #96399.docdoc c7d4275410e7efdba04766cbdd009010df1740cb85b2247faf12478c61a8f93dVirustotal results 15.87% Heodo
2020-10-28Inv_07392.docdoc f973018352488fe6ba623919161c5b4387f67d9aca131af19480684ae2740544Virustotal results 17.46% Heodo
2020-10-28form.docdoc 1f78558f3017d180e7ec6d453d46b87192b207476536447d4502b9f6ebb0a173Virustotal results 17.74% Heodo
2020-10-28invoice #7244.docdoc ffc6e2d43f0cf1523d9c89157520513c0715dc35bc8dafae62bf984587dbaf90Virustotal results 17.74% Heodo
2020-10-28INV_92640.docdoc 2f827948f5ca8bb73886ee64091abcc41a19ae9887d08514dcfb87935c4300c5Virustotal results 17.46% Heodo
2020-10-28DX-100120 WCNH-102820.docdoc 52cffa7b6a722c32c17560a5d71ac09a91bdcd9cd36ab8b9913c92063aa109c5Virustotal results 17.74% Heodo
2020-10-28invoice.docdoc 6b60fb2479d5d8fa86715aee8abfcd4dc6a10217af2faa45b64b90f05f616ab1Virustotal results 17.19% Heodo
2020-10-28Inv_16198.docdoc a77088a16b23e969ba4331abca1b875bdbec7815fe8cd3ca42438e6bfd862de4n/a Heodo
2020-10-28Invoice.docdoc 753c4521e07dab9a1de57a156021942b8e1019f48da5659b28dedbc848c3d013Virustotal results 17.74% Heodo
2020-10-28invoices 7216 & 10140.docdoc fe3c5a60f73b2274c9d19816c7263b1a5094858ccce9268c748e738528e39fdbVirustotal results 18.33% Heodo
2020-10-283204059626MA.docdoc c156c19120c201216fa1ed0db10ae8afd1c2d5b162e885dc69af1f7024a53cb8Virustotal results 14.75% Heodo
2020-10-28Inv_02638.docdoc d23212065500f67a2aa4bbd042ad99075d511959fa1be07d964146fc5cfd618eVirustotal results 15.87% Heodo
2020-10-28039124.docdoc db1575e9ed5edb424eb7142501e0e6e35fce135e7730d60e63ba53c2d3d2489cVirustotal results 16.13% Heodo
2020-10-28007136364980.docdoc bdea608e1aa35b49e93b20c9ba2c13258aaf81ab30da9f5d6d81c20dc3f14bd5n/a Heodo
2020-10-28Payment.docdoc b32c2fec5281836178821881b4d53133bfdf5f7745bc4f8a2aa8f4ade55e5d7bVirustotal results 15.87% Heodo
2020-10-28October Invoice.docdoc 843f2dd0be21e47c3bc634ddf03195711e2442d7b783e9ccdbebb594545be792Virustotal results 15.87% Heodo
2020-10-28O00762 invoicing.docdoc fdf1b5a6b9317e5f404c7a5441fbff20d73fe80a0c213441f2c21e02ff717a6bVirustotal results 14.52% Heodo
2020-10-28PO# 10282020.docdoc f2fd2a7b312555a475a14cbc6a5300a2d7d16bbcb3f8f5409e6d4d9dd4cd0aecVirustotal results 18.87% Heodo
2020-10-28Payment status.docdoc 9efe62711778d762d08370193467de5fd1c62cccaf5759890df537fb153a079fVirustotal results 15.87% Heodo
2020-10-28Electronic form.docdoc be2f218335879495011c67e3ff23f97a055e103643b539b3c63255308e1d4ceaVirustotal results 18.87% Heodo
2020-10-28October invoice.docdoc c462280cd587897e33d985491193ae9ca4485f62477802b51d41ffe660bf4f44Virustotal results 42.86% Heodo
2020-10-28Invoice #4151408.docdoc 0776b7426fd21e998800134e1fa13900bd855b2d3b452d01153b22e10d24da0fVirustotal results 42.59% Heodo
2020-10-28Invoice 1388437.docdoc 734df9186877b3d2ed74c1bb7cf211c1787bc3c94c4761b01c32fff69d89d77bVirustotal results 42.59% Heodo
2020-10-28Payment.docdoc 59bc37fdfd7ca80bfaa9586846db4d3d14026324219c35cc909e7eed62533e28Virustotal results 43.33% Heodo
2020-10-28INV #366 FOR PO #08552145292.docdoc b35d615da70e3502114b5ba61a1979d6f463f7eb8b0fd6bb17d4da8bd1561646Virustotal results 23.33% Heodo
2020-10-28form.docdoc 639f3d1d1a494dcf20b64daa8f46a98affe8b7e708fac26f08a732bf4a03c06aVirustotal results 26.98% Heodo
2020-10-28PO# 10282020.docdoc e2bbf218b2f6bfdef878d35313c3ecc99c6608aa8c7c8f261b59be4a20673f22Virustotal results 26.98% Heodo
2020-10-28PO# 10282020.docdoc 99c91035c6a269a23e022673bb84e4cb8e8b40909281707212bd9dc4a074c3cfVirustotal results 28.30% Heodo
2020-10-28INV #00880606 FOR PO #554009331984.docdoc 4955a66e9711e8207f53c9204d68f89903e7aec37f30cbd298ff102bf68f937bVirustotal results 28.30% Heodo
2020-10-28PO# 10282020.docdoc 7178e85af3d05ab325a721c502191735ab4bf50b6df622a6a8395d43c887e073Virustotal results 25.00% Heodo
2020-10-28Form - Oct 28, 2020.docdoc ccd9a6efeec7e3257f7e01534eae6701580d56c7792ee2a8661a1ad396a6320bVirustotal results 27.78% Heodo
2020-10-28form.docdoc e33c5a896f20bee29de9a591962c4bd9643be1ca87866cf8b574822decfa2c6eVirustotal results 27.78% Heodo
2020-10-28Inv_072241.docdoc b40fcb14395a48bf6fedcb13821e8f9a9a9907661e866fa1d643c146b2278301Virustotal results 23.73% Heodo
2020-10-28Electronic form.docdoc 129235f3355a262045edfd381d264ee669cd0eee9eaca1601a8509dad50ac10aVirustotal results 24.19% Heodo
2020-10-2803455504321.docdoc 26b6c08bbd6f91a2bed79c26264bdeecd3f1c92733a9870924e53eda84d5ccdfVirustotal results 23.81% Heodo
2020-10-28U6527847618UJ.docdoc bb035dfa04791584d81e71d154e443811c21deb1ae691425a9bfe05696187c9eVirustotal results 25.00% Heodo
2020-10-28October invoice.docdoc 22ff098ed7106067b60086383ec7d4ac8211fec5b7298cb2c7d22bdc05e75b8eVirustotal results 24.19% Heodo
2020-10-28invoice #51524.docdoc f7c62df3d72569e02a22d018a54631d3041f23b308ed9da7af261561ac318a74Virustotal results 27.45% Heodo
2020-10-27Inv. 00799256.docdoc 5a07cc5df83be11d085d9a031f8c188b40fc8133ffa322777aed9a7c9a239c5cVirustotal results 31.48% Heodo
2020-10-27NR9872693995CQ.docdoc eacdc62e23f4dd1edc262c2db5e0139bfe032e0a243db9378d568e0f9e32041fVirustotal results 25.81% Heodo
2020-10-27Invoice #24576461.docdoc 7cdf46cacb08878324d471fc7cec17b333e38c7d76479a164d1115811dccceb8Virustotal results 28.30% Heodo
2020-10-27Form.docdoc ab8a246400a024e5490c031fe13b4c892da8e1db9687fd937766669b28467255n/a Heodo
2020-10-27Invoice.docdoc aaf05aa6da7de09b0f276cb3b3116e61aa22d72769e52a1c85f492d3a1a9e002Virustotal results 25.00% Heodo
2020-10-27form.docdoc 1106469c950b1b99153c9c2a2be93e20fe8e4d91f453f68ef02115ff8d1a8f7dn/a Heodo
2020-10-27689961.docdoc afea9c0746825b9e47d2063ac184a7dbf66fb0fe1c2fc093a52e0d4cb6b231cbn/a Heodo
2020-10-27invoice.docdoc 3c0b0961efde86a2b9c1a239fbefeaa8c6cf896bfd8e930f972af471efc540c3n/a Heodo
2020-10-27invoice.docdoc 14b520153f0acabf64bae7a76718a836373bc0c782a69f1f1a48cdb0ebf62989Virustotal results 23.33% Heodo
2020-10-27PO# 10282020.docdoc 8572cb899b936699bc1d20c1b922b10340cab95df6e94f179476da4dd2286996n/a Heodo
2020-10-27PO# 10272020.docdoc 68847f9ed5d1abac2503ab07830a3cad791693b793112d82f0a825f8ebaf9dfeVirustotal results 24.19% Heodo
2020-10-2700824707.docdoc ba2379322eed64807461af395f65542d31cf23458649857cadeb07a12cdb1c1eVirustotal results 24.19% Heodo
2020-10-27form.docdoc 56c589704a314635a792d946d2799f4a25f47d62724ffcc0cfb751b27d822ed2Virustotal results 25.00% Heodo
2020-10-27October invoice.docdoc e39757188d82ee09fcb868b4d5ce2f37b8904f29335dfe60501e67a14fa09f51n/a Heodo
2020-10-27form.docdoc c08f488ccd844154239cbddae4e7581df811648b6fa2ac1dc70194f194138742n/a Heodo
2020-10-27invoice.docdoc b2c300696fc8ad9ff5f0aa4ae76a7ae337d9cf8427bef59aa3baba261b9b048dVirustotal results 30.00% Heodo
2020-10-27Inv_354907.docdoc 799de3c0b3c57093a424c4e80e471b26b7f7d121e6e4b75a250304ed59ab9d6fn/aHeodo
2020-10-27Electronic form.docdoc 509de817ca426db6b61aed12a1a401fe05b91bd2a01c6203277c80e0b14f03caVirustotal results 35.19% Heodo
2020-10-27Electronic form.docdoc 903a6909dfcc87b4a4cd0fd5e7d1918ce95410b089df4f8f4e8bd3801a24e50bn/a Heodo
2020-10-27invoice #677877.docdoc f15aa92472c84aa86cb1d1b5a7498713f4709fb544eecccec5d228f4e754561eVirustotal results 33.33% Heodo
2020-10-27INV_739795.docdoc b091c3c8832dc74ed8bc3e5df7c6de76a3f30691d753b5da49e68f31c2ed9d44Virustotal results 35.48% Heodo
2020-10-27INV #03690 FOR PO #7637518.docdoc 1d244f2a7c9030ea564fbb27d23393b3bd5d90f41e2d9d0d92ad31097ca84f67n/a Heodo
2020-10-27Inv. 049372873808.docdoc 4fd0f1dcffc6115e013d498b8148ff626dd3c8a68ca6c4397781d190e4ea34c1Virustotal results 35.19% Heodo
2020-10-27Invoice #31864371.docdoc 993dde892377b2ef5b81f4e13c54293aad56861d29f37b3cf253ff19bce2429en/a Heodo
2020-10-27invoice.docdoc 3ccc71d30c68fbaf611852bd6cc175f41db1a5aaab1a99c0fc31798ee784299cn/a Heodo
2020-10-27Invoice.docdoc 717f4b06420051146ffe4b2fd870189bb3af7459d57b33e1013dfbbdd47543c8Virustotal results 33.33% Heodo
2020-10-27Invoice.docdoc 2c1d441bc9fbb860924d2d11f2063f6273799543293e2979dfce5f0036b0dd61Virustotal results 33.96% Heodo
2020-10-27Copy invoice #43140.docdoc a9541a1e16a89043ba48d84ea1c035a61e6427eb283fd0a446fffea1a81143d0n/a Heodo
2020-10-27PO# 10272020.docdoc 828a0a418d5b60af4adae55859160a2f505592c7f21d9d0c9a7e6735288a7383n/a Heodo
2020-10-27invoice.docdoc b13615da4589264edbdd5023f57272d71d208d5d305a7342ef4f8a7c137c4ef7n/a Heodo
2020-10-27Payment.docdoc 2cf2dfa19f757a60bd861a5e683e9c01ef431ba0036084514114b246ee96e440n/a Heodo
2020-10-27Invoice 00035448.docdoc c6c21ed1555b95796afee0c5cef9fcebf4e501655edae5f847782bb727cabcfan/a Heodo
2020-10-27Electronic form.docdoc ce3db60db8082987dee9dad11780a71f83f6e2de05dd62b1d20ae33371120c50Virustotal results 33.33% Heodo
2020-10-27M531 invoicing.docdoc 1b2042d1d563f44a3907c5adf968483d89094e0db451f9eb410af36521812966Virustotal results 33.96% Heodo
2020-10-27Invoice.docdoc c84a48640f526e96f5eb4967469b06129ec91766396ca32ca6d455cfd533a3c4Virustotal results 33.33% Heodo
2020-10-27Payment.docdoc a1aea6e72d2cc9a2455978bc908ef6b25cde57d5add02b2d4a707fe66e65e9b7Virustotal results 31.48% Heodo
2020-10-27invoices 537 & 2989.docdoc 6bec2d25f21cfd8e028b9be4f3b7dbddd62daa9d0d583a281dce8228e66a5216n/a Heodo
2020-10-27invoice.docdoc deaf1a51b84f94cd34b14a03432b09db22785f341ccb8aa29d4b458f73156722n/a Heodo
2020-10-27INV #0703 FOR PO #8685642943.docdoc c5ccc5296ba9cc6466a1280364fa69c9cca3ea9e68ba9e2f2e369f0caca531b7n/a Heodo
2020-10-27Electronic form.docdoc 08a81f468de57ca996fab6bee82c920fd2b24445688964c679371f611ea8a24fVirustotal results 50.00% Heodo
2020-10-27ACT-100120 MIQL-102720.docdoc ca286e09b37ac73d3f0f4c732859bfb635073af2e14c81db7268955f8f2b796cn/a Heodo