URLhaus Database

You are currently viewing the URLhaus database entry for https://microstock.xyz/hrinternationalbd.com/lXbdpBAO0TuOKVGpSP38/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:761095
URL: https://microstock.xyz/hrinternationalbd.com/lXbdpBAO0TuOKVGpSP38/
URL Status:Offline
Host: microstock.xyz
Date added:2020-10-28 13:38:05 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 13:40:05 UTC to abuse{at}ovh[dot]net)
Takedown time:23 hours, 34 minutes Good (down since 2020-10-29 13:15:00 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29arc_LS1259165458BS.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 20.97%Heodo
2020-10-29inf_MKWMFZUI8ZVWV7.docdoc b4385458d18c38d7a4c53acd5475696ce3d61e0f6a991ed35824173ed85842ceVirustotal results 20.63%Heodo
2020-10-29file_11551824.docdoc 8e33cf2204f19a828e1018b6ab9c762d52deb1ecd43a920491561fefd654086fVirustotal results 20.31%Heodo
2020-10-29DOC_85741122995654454683484.docdoc cd49f6f6b2b1cbf28331a1eff67e7179731f34a790a1bb69c89b65ffcfc38e01Virustotal results 20.31%Heodo
2020-10-29arc_3706503028419.docdoc 7594edb81255b3186eea44b52fde39af35051202306e20868b278acd10f8a61dn/aHeodo
2020-10-29arc_QE2DZ57X.docdoc 8e812f35e13e8d4d2d376ab456fb4335c9468ba58bb5a4bc7fdf14c959388f6dn/aHeodo
2020-10-29doc_PO7568915780PL.docdoc 5caf4fac63b4007116c090e6db0db81ad250d822e1fc251885c10d80d24b861eVirustotal results 21.31%Heodo
2020-10-29Rep_OQD8O8MIAPD.docdoc 38df7a8d7d8ddeec4905b01777148222f208d5030b7a44665b5fdafb5bd9ff19Virustotal results 40.32%Heodo
2020-10-29Doc_PO_10292020EX.docdoc 8f3afa2da7f2e5cf945c59daa84574119b092d7926eea15fb3f21367f6433c77Virustotal results 41.27%Heodo
2020-10-29INF_LBA_100120_CCP_102920.docdoc 203c3fd643e932d50df0ccb5aa112bf49bbf44dd16e722b4bdc67551bf3fb133Virustotal results 41.27%Heodo
2020-10-29List_SS7832019979ZQ.docdoc 63df7914667bd2adc0b6e4b2db5b67f07a6154956568765321641b6dc1469cf5n/aHeodo
2020-10-29Mes_PO_10292020EX.docdoc 6da55a5f2284d9e01f507160640b2505607f31d11754ba830811661016ff1e20Virustotal results 39.68%Heodo
2020-10-29Attachments_1RRM3ZR95N.docdoc 6df480c2f89e67bd88a1ef3142106f925a45830756da26077582ef439dd4c5b8n/aHeodo
2020-10-29Attachment_PO_10292020EX.docdoc bb6a910117fc42075d0f29a1d7f63f94814e7f787223e3af617ca5018180a77eVirustotal results 38.10%Heodo
2020-10-29A_JBQ_100120_LJQ_102920.docdoc e3a96d2e3adca1fc3dfea0ac14af9b1d4cec3a20d9d7c6874edf1c6fec60d90bVirustotal results 38.10%Heodo
2020-10-29Rep_PO_10292020EX.docdoc 4c8eeccd2a16f80874acd0057d5ec622d3701e32a3198bdb763f39e39ea28982Virustotal results 38.10%Heodo
2020-10-29FILE_PO_10292020EX.docdoc f56bab5a99b915963661761022f775f386c9f7cf84d990938a9040e88ff490a1Virustotal results 39.34%Heodo
2020-10-29file_VZ1262218123PY.docdoc ed5a9cf9f1dc54e472bd41658cb3f19ec7eafcb34da7257c6407697b879a0535n/aHeodo
2020-10-29Arc_697155044125.docdoc b97d2b5410d55c774746d336facb4fac9b81552a5f84073496d20901af3c5f71n/aHeodo
2020-10-29P_68930551.docdoc 648262e8476fb8b619abd0b6929748ed5354de0997068e2d2c349a3c15d8f1d6Virustotal results 37.10%Heodo
2020-10-29mes_PO_10292020EX.docdoc 17d6d17702d158eda616b2096600e47fe0808914ae353ec5009763a5de5fffe7Virustotal results 35.48%Heodo
2020-10-28list_27682948107244176.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28UNTITLED_5172652748675036994.docdoc b693171616c84c6e6bf6f7a486ac2efef18cab45a608593d95def463549f2f74Virustotal results 25.40%Heodo
2020-10-28DOC_JT9635874047TS.docdoc 6e663577a7ba709bc7fb008addc85b8177361cb8fe92f3c79ab88bcecd10783aVirustotal results 25.81%Heodo
2020-10-28Mes_69659195.docdoc cb2de094d6518308daefaa75867659fdee298e4a0617b473ce48c4dcdea085den/aHeodo
2020-10-28MES_J3JHLKR0D6W1PQXB.docdoc 304314cb220d129f1eb18cc72da395146c2515aacaf0b81353667ddbf78413bcVirustotal results 22.22%Heodo
2020-10-28REP_XOT_100120_GEJ_102820.docdoc 81c78e098a3815757ed038c5f386d54156fe5ea85eeea2bc5baceff398d35a3aVirustotal results 19.05%Heodo
2020-10-28AXDO_PO_10282020EX.docdoc eae43aeb02650178d0fd02ed1c824f36d89c2a2950399621c4a7c29ecb8d7e73n/aHeodo
2020-10-28File_L62PMSSMAIC14DJA.docdoc 688e87c580badf94b1e0ce02b5b6bd709d6e779abdf22e193209fc7f45946e30n/aHeodo
2020-10-28MES_107549553780.docdoc 87591b36ad962f6009043a5af2f6ab3d515e7fd18b199f2da448d2eeabe8e83cVirustotal results 17.46%Heodo
2020-10-28arc_15903461940.docdoc 3bd7bff850a4570a7bb97f9e98579d7a02f229ccbec50ec955257f9963ca0b5cVirustotal results 17.74%Heodo
2020-10-28Attachment_96316595972279126547146.docdoc 78344d3e894155b6b6fa65119c449406b1ad08900e1cb58f68d7efba27947084n/aHeodo
2020-10-28Untitled_43948752.docdoc 7d38c4d98d05cd3a7a0fc6898c9d86ef1c29cd8dcfa3403d0222ff508843a325n/aHeodo
2020-10-28UNTITLED_WA0835728531NW.docdoc 6db32dbb0eafc0f691a50a4632adf82b9e0206663e1b82259542e8eecdfae00aVirustotal results 16.39%Heodo
2020-10-28List_Y8ZPJDSKIZPM.docdoc b2df21abd3019bad332f1f34211b5a7f809af8d92737bb020afff3e6f0147a37n/aHeodo
2020-10-28doc_PO_10282020EX.docdoc aa825d666a2394dad05c014830cd132ecdbabfe1dcfd7e7eba18ed43bda6de33n/aHeodo
2020-10-28dat_PO_10282020EX.docdoc fda83ece49e1914433f256654dde13a87be6f4a6b03bde2e2060c2ee1cdb815dn/aHeodo
2020-10-28Rep_PO_10282020EX.docdoc 1d9d2d513d2906aa7b8400819aece2cd5e80976226792618b60a507a2daa906bn/aHeodo
2020-10-28rep_50386383.docdoc 771ba9743eaa7a81ea01d78249e8ce6036aad863239b14e7398d964e75af7364n/aHeodo
2020-10-28INF_2135169061616475305278166.docdoc dac1189124e8ab688ce2381053958114e981ce05558b088fdb5ee651e107ecf3Virustotal results 22.58%Heodo
2020-10-28mes_TGQSZYSEF.docdoc b7312fdc4c91f8c69fffb94e5fa56602b4e6c79687993797647c26dd9a81e3bbn/aHeodo
2020-10-28LIST_DBZ_100120_XKI_102820.docdoc 5e8a2713a00179ec13f6ff8d8b32c086bd76ab94e23667adc252789b5c1117b2n/aHeodo
2020-10-28DOC_55782753.docdoc acec2b7cea57b2f5faa43b49be25b8f40c05ac23ef99e308463d9c8a13d1221bn/aHeodo
2020-10-28Rep_PO_10282020EX.docdoc 46ba8ff48c427c6ce2eb772af5df99841d854430fdbd10c35906394573d80e34n/aHeodo
2020-10-28Attachment_WHZOI0M4BMI.docdoc 101ebcc462da774f817a7420d2f849189c1e6093c14619e3c4497d748e655110n/aHeodo