URLhaus Database

You are currently viewing the URLhaus database entry for http://mizoramstateslottery.com/multiadd/LgC6GVJwSw2QNZMiqS164oxnDw0mEaVfp1BztNnPpPXhALk11WFssh14A5PkKKjoa2j/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:764536
URL: http://mizoramstateslottery.com/multiadd/LgC6GVJwSw2QNZMiqS164oxnDw0mEaVfp1BztNnPpPXhALk11WFssh14A5PkKKjoa2j/
URL Status:Offline
Host: mizoramstateslottery.com
Date added:2020-10-29 09:35:10 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 09:36:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:4 hours, 10 minutes Good (down since 2020-10-29 13:46:15 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29REP_95515744.docdoc 02ded378bb9171cb19579495299062441281f67002a8f88beaee43c2dbdd94b4n/aHeodo
2020-10-29MES_SOK_100120_UVD_102920.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 20.97%Heodo
2020-10-29DB1064555717UH.docdoc 78234ae12ae1b1b5068a17fe32b5a2656a7f999789fa9df9eddb8445e6fd41d6Virustotal results 22.58%Heodo
2020-10-29Dat_97905053.docdoc c56962ccf0f482b04c168639afb894430e7cb71c873faac02d8f3a34107f33a8Virustotal results 20.31%Heodo
2020-10-29FILE_ZC6692507654UU.docdoc ae454b06f63308de7e1a613281feea2eef089041c67af45e72ceec804482b526Virustotal results 20.31%Heodo
2020-10-2955939682.docdoc 3a1dd7ec119b96ea68facb223082a398ff4c038e58e7d166c80d7a7d4a3758abVirustotal results 20.97%Heodo
2020-10-29mes_60619516.docdoc 2427ee3cc0798fcee02c718a1fb58d735d9cf3b0ebd9bb10c14cb9326bb5e489n/aHeodo
2020-10-29Inf_DY0632470091LA.docdoc 0eabb37538a78fb8b43917d7263b14ceeb7cd09922f2d1c397b8db18cab99e2bn/aHeodo
2020-10-29UNTITLED_9341803242.docdoc 1e63648100763f7fe5822fa5fedd5b5b9c87d1bca425b6745c236e3bff92bd0cVirustotal results 20.63%Heodo
2020-10-29rep_32754916.docdoc 27c39c3bb564120164445cc73f862a716d7abb6ce47d44f5722cf11bb0dd2c79n/aHeodo
2020-10-29GW5ECOPXC5.docdoc b9e189f0cb3064ede89dc2167eca309a64edc4ae42aeda9b8fab875c4906b5dbn/aHeodo