URLhaus Database

You are currently viewing the URLhaus database entry for https://cruxlytics.com/wp-content/5n9za1NFbOVbZsn6ES8TuZ3SpifTeysWXMPXN0ObY1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:763960
URL: https://cruxlytics.com/wp-content/5n9za1NFbOVbZsn6ES8TuZ3SpifTeysWXMPXN0ObY1/
URL Status:Offline
Host: cruxlytics.com
Date added:2020-10-29 06:41:05 UTC
Last online:2020-11-02 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 06:42:02 UTC to abuse{at}amazonaws[dot]com)
Takedown time:4 days, 2 hours, 23 minutes Bad (down since 2020-11-02 09:05:34 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30REP_17142252.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7n/aHeodo
2020-10-30mes_PO_10302020EX.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-30VIFNG52.docdoc 9ae7942321b9360d2c19a2199e6f2e21a3436b97787133280c3d267a00bd6b6fn/aHeodo
2020-10-30dat_4MNPK5HJL1XI.docdoc a120ab7f12256c4b260034ecf26910f2eb405bb2c41ea9d1d78fcd2f529d2debn/aHeodo
2020-10-30Doc_YIJ8U0V2MB31.docdoc 3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7Virustotal results 41.27%Heodo
2020-10-30MES_FBB3UZ7ZFHXSN.docdoc f16118ebe3dbd05212ed3e350e3d509e02c403cacf34497532c50e1be09b7e16n/aHeodo
2020-10-30dat_MK2247020690PC.docdoc 6b88f01b98b04205fdeaca9ab7f387ea479efbb68e1e0a940c909d66e6ed092bn/aHeodo
2020-10-30FILE_NEA_100120_BWL_103020.docdoc c5464029a0c6ac085492b9e9e1380d0304bd195c8de6e1dd71b51d4c9f8a5433Virustotal results 42.19%Heodo
2020-10-30inf_06650661599405703800.docdoc 8cb962ad1798941eefe7a5f826ea5bebc726304af0337e53e6e34d59a7715795n/aHeodo
2020-10-30DAT_PO_10302020EX.docdoc 9e9808cc54536ce74b6ed5c426e0e175fac5915b344a9b0c802688fef6dfb918Virustotal results 32.81%Heodo
2020-10-30035202007596.docdoc 0b7f26dc76b83127cdf687f818e652f050a9b3726aa76bc30947f94e4e25ffd4Virustotal results 39.34%Heodo
2020-10-30DOC_227879240546286391871189.docdoc e4c4aa874feb371209199ddd6b159ed4a677b94568dfe6b09351807263dbef9bn/aHeodo
2020-10-30Mes_70827383.docdoc 635a74416fba185c2d901ad6c437ddc2258d061fb43e420653cb07f071e62075Virustotal results 35.94%Heodo
2020-10-30Doc_WX6906015034QC.docdoc fc80fc159e39cdd815b9470202534387227e2a22a7ecb333efc5628c4a0f76f2Virustotal results 34.38%Heodo
2020-10-30list_IZQ_100120_MPS_103020.docdoc 3d43dc0ac879aea91410f4bd0218c5990f32b7d729897664df7e58a78ac5836bn/aHeodo
2020-10-30Attachment_PO_10302020EX.docdoc c0f5989eb238c0d187f0a5341698ac293ee524d1132278aaff5ab4144a4b91a2n/aHeodo
2020-10-30OZI_100120_DBP_103020.docdoc c2d7ed25c4c34f44dc293833d3ea302d281d24981385c437e411a50ede35e72bVirustotal results 30.16%Heodo
2020-10-30FILE_VQ5407325225FZ.docdoc 1e2927648e6c1e230ea519611dc8ffc414549f3da0fbe74854b2b2431a5731aeVirustotal results 29.69%Heodo
2020-10-30file_IJ1H22TK.docdoc 9cdf4102c45c7f549ee4e0290a07d4f7783c6371b1a8fe35a6f1f04d56cd6857Virustotal results 28.12%Heodo
2020-10-29FILE_Q0UFXA5RL8INZV2.docdoc 5eb2cd7fd89bc000cab80454ba0da8cb954a960d3b415bc26039832a7f6f7544n/aHeodo
2020-10-29Inf_15601492.docdoc b716fa67c934451161c1be78e1587b3c68a53b5e219dc5452e9ea883d32a274cVirustotal results 27.42%Heodo
2020-10-29Mes_37707225.docdoc aa9631cdb98dbe55b81b029660a0589039561664b34f249207dc0d83e273a030Virustotal results 26.56%Heodo
2020-10-29file_XE1418297899PF.docdoc 4fdf2563b45602028009105b6b5f30ab0dbd3ceb11857e9861b91afff59f247bn/aHeodo
2020-10-29File_Z176XL6.docdoc 54f04e269a7b08a1ec3d9a71e00dfa86b9d8050533ef0d550298ea51f28775ffn/aHeodo
2020-10-29Mes_65231825.docdoc 93ef9ecf091dd0a2f463f8b10a73d301ad965547315b43fcd5c1a4995c513525Virustotal results 20.31%Heodo
2020-10-29UNTITLED_HV2701520510YE.docdoc 3c06e83a34a8da9715ec0fb21f45160520d6058d9624263c4c2a585b04c7adb8n/aHeodo
2020-10-29Doc_25564257.docdoc df879036bfd4136c1f14cabcb7bc54e077f8b9e09a67404bc366777cf3d38d43Virustotal results 20.31%Heodo
2020-10-29K_NR7804279474OP.docdoc 1ea025a1cd83c476f9edbb66bc98ca4af04a27f5b5d3d9eebcceb71386f0a2c9Virustotal results 20.31%Heodo
2020-10-29DAT_PO_10292020EX.docdoc a372ab149bf1539aadb69ea0484133adaea91b0c000a9bfdafa445dc23230d3dVirustotal results 20.31%Heodo
2020-10-29PO_10292020EX.docdoc 8e812f35e13e8d4d2d376ab456fb4335c9468ba58bb5a4bc7fdf14c959388f6dn/aHeodo
2020-10-29Mes_QSS_100120_CQF_102920.docdoc 27c39c3bb564120164445cc73f862a716d7abb6ce47d44f5722cf11bb0dd2c79n/aHeodo
2020-10-29Dat_INJ_100120_BQT_102920.docdoc 3c82747f9b2229d7edabf0907aaaf771f5e6c007ce5c3f507b56ca8c10a20d38n/aHeodo
2020-10-29Q_SO2892869881MO.docdoc 6cff316da0b26621e5b1fc3d5a85c6931a68a90fde20acf702195a175fb4ce44n/aHeodo
2020-10-29PO_10292020EX.docdoc 203c3fd643e932d50df0ccb5aa112bf49bbf44dd16e722b4bdc67551bf3fb133n/aHeodo
2020-10-29LIST_25762882.docdoc 63df7914667bd2adc0b6e4b2db5b67f07a6154956568765321641b6dc1469cf5n/aHeodo
2020-10-29MES_124592174.docdoc 6df480c2f89e67bd88a1ef3142106f925a45830756da26077582ef439dd4c5b8n/aHeodo
2020-10-29PO1860843828YR.docdoc 915d8c2a128f74e323ef7a2045f9ab90f17d3747f3ed2c090fd247f7f9f88fcaVirustotal results 38.10%Heodo
2020-10-29Rep_86196761719651128.docdoc 05c77a4eb82d6567c45d34fca723d6397d2bf9eeaabcadc58a402e340657fb15Virustotal results 38.71%Heodo
2020-10-29Rep_PO_10292020EX.docdoc 6d8ce1a7fac9fd46d61f2fe0e3dff607971c0a6e830f3eac90a4b3145f06280aVirustotal results 38.10%Heodo