URLhaus Database

You are currently viewing the URLhaus database entry for http://guanacographics.com/derefer/Y2je1NBZr6f3vv8ukiZjeWjAHrrK8zyn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:762557
URL: http://guanacographics.com/derefer/Y2je1NBZr6f3vv8ukiZjeWjAHrrK8zyn/
URL Status:Offline
Host: guanacographics.com
Date added:2020-10-28 21:35:19 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 21:36:13 UTC to CloudFlare Anti-Abuse API)
Takedown time:16 hours, 11 minutes Good (down since 2020-10-29 13:47:25 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29arc_SC7583980736XA.docdoc 02ded378bb9171cb19579495299062441281f67002a8f88beaee43c2dbdd94b4Virustotal results 24.19%Heodo
2020-10-29FILE_WT6477271603VV.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 20.97%Heodo
2020-10-29Attachments_96257518.docdoc 9dc022a6d94a428fb2f095b0ecb4572e6b60e7b59a3ba584a8c4a04cddbf3251n/aHeodo
2020-10-29Dat_80454193.docdoc 8e33cf2204f19a828e1018b6ab9c762d52deb1ecd43a920491561fefd654086fVirustotal results 20.31%Heodo
2020-10-29dat_5786008849973513359594.docdoc df879036bfd4136c1f14cabcb7bc54e077f8b9e09a67404bc366777cf3d38d43Virustotal results 20.31%Heodo
2020-10-29REP_90562145.docdoc 3a1dd7ec119b96ea68facb223082a398ff4c038e58e7d166c80d7a7d4a3758abn/aHeodo
2020-10-29Inf_RM8DJ43V6ULG.docdoc 6b696b987488f5f9abee78f4d38565535d928adb645de9f48e95a99914bc5dc8n/aHeodo
2020-10-29Rep_29203034.docdoc 371a442d56b47bd24ec601a710beb116a75f09be269d0a2e18b29d6fe0927bc1n/aHeodo
2020-10-29List_74772011273.docdoc 5a00d4a9d8e50c06f30007460af1dc4f73950dff8ef4d1966ec4098c16712bf0Virustotal results 42.86%Heodo
2020-10-29MES_PO_10292020EX.docdoc ffa31d45d93161ab298442d4f9d83cf8b0bcead9e50e92a048b6b0900415b59cVirustotal results 41.27%Heodo
2020-10-29FILE_PO_10292020EX.docdoc 72e4ad0a1b83a8af4bffff0b32b6f8b9fe9680a323457b9ae5b866c9cf789ca1Virustotal results 41.27%Heodo
2020-10-29dat_TL2820917082KD.docdoc 4d660fe18f8a7a46884d491d3bc3632eb0d0de321fe085339324e55175c33ff9Virustotal results 41.94%Heodo
2020-10-2949409712.docdoc 6e9c088cbe83fb2b0f6c959df9f72eb6faa3316c7eaf8e1690f590a91e56974fVirustotal results 40.68%Heodo
2020-10-29UNTITLED_KFDUWA2.docdoc 6da55a5f2284d9e01f507160640b2505607f31d11754ba830811661016ff1e20Virustotal results 39.68%Heodo
2020-10-29arc_LY9900269359UG.docdoc 7161db36ab8dfa34e4ae1aefa3d4fd7923a2a89118835e1e8bc905216bbf70e8n/aHeodo
2020-10-29INF_96145824.docdoc e3a96d2e3adca1fc3dfea0ac14af9b1d4cec3a20d9d7c6874edf1c6fec60d90bVirustotal results 38.10%Heodo
2020-10-29Attachment_JGV_100120_ZND_102920.docdoc d82100bdd4168d98cf565f1b0d002d3c2c480cc6e350b09dd8484507384aef75Virustotal results 38.10%Heodo
2020-10-29Mes_873862672606127189258.docdoc f56bab5a99b915963661761022f775f386c9f7cf84d990938a9040e88ff490a1Virustotal results 39.34%Heodo
2020-10-29inf_XU4HECUKOBF.docdoc c848e58e6eda265a519b7b901623769948e5bba84d9d240638af3bb235587028n/aHeodo
2020-10-29file_GKI_100120_ULE_102920.docdoc d41fde459d5a6605355b1daac05e7fe5ed46f2f70d564951027067566a049475n/aHeodo
2020-10-29Doc_NS4790453394UA.docdoc f54166916a8e40e0d024df928029c9f35e013fb4b7a39eeb0554e8dc2820dc9cn/aHeodo
2020-10-29Rep_26311757.docdoc 9f2ed62dea3b679b6dfecbb79905a34ef056e81af2e92c4249fe4521711b047fn/aHeodo
2020-10-29Doc_IR8WK0H038LPR49.docdoc 17d6d17702d158eda616b2096600e47fe0808914ae353ec5009763a5de5fffe7Virustotal results 35.48%Heodo
2020-10-28inf_RW8097600778GG.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7n/aHeodo