URLhaus Database

You are currently viewing the URLhaus database entry for https://hkq.cfc.myftpupload.com/macos-catalina/YdZZOLzbAuB5lYEyqnDcbxgUqAI/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:765346
URL: https://hkq.cfc.myftpupload.com/macos-catalina/YdZZOLzbAuB5lYEyqnDcbxgUqAI/
URL Status:Offline
Host: hkq.cfc.myftpupload.com
Date added:2020-10-29 13:34:05 UTC
Last online:2021-04-20 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 13:36:55 UTC to abuse{at}godaddy[dot]com)
Takedown time:5 months, 23 days, 6 hours, 13 minutes Bad (down since 2021-04-20 19:50:43 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-3071133011.docdoc 894961b5cd902ae1bd280ad4d906f510e47f2d02fba5fc278823a37eabedcc7fVirustotal results 33.33%Heodo
2020-10-30file_CDT_100120_VRN_103020.docdoc f2ce2b3d2bf2f5d0f22eabb44f0b7c9183e0fea547e90ab926beae89d85cdf0eVirustotal results 34.92%Heodo
2020-10-30Doc_MMB_100120_UXJ_103020.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068Virustotal results 23.44%Heodo
2020-10-30inf_77746559.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30H_SAPVHNT1WT.docdoc b0f3557b0ac948f3137f3cc926504dbe28038ea00d282c81a33fd46b93af1c25n/aHeodo
2020-10-30FILE_QRA_100120_FKH_103020.docdoc 877bcaa3bd3bcb6081fbcc746a0bc8b28f01961c1061adaacae5ae875457fb70n/aHeodo
2020-10-30Dat_UD6523499196MR.docdoc 95f86b4f2c917f1be1fe02e3566a23e45621c342db18356aa485387fe799b06cn/aHeodo
2020-10-3096886547244198813049505.docdoc 5aeb983f62e296373a25bdde163ab799f0bd688f40567310960f16b815921687n/aHeodo
2020-10-30list_717J6SCQ.docdoc 6e473a77d345ee6f0f3c0371d26f9b187bf9e59a7d4dc18956b24db4f264fe49Virustotal results 42.19%Heodo
2020-10-30REP_873155807.docdoc de0a1c44011e636f13b7db8734adcc239d484bae417f118f5d1173ff7d708481Virustotal results 42.62%Heodo
2020-10-30Attachments_WNH_100120_BGZ_103020.docdoc 005b9b3299e128a79fe21a998375eccf999a16aeee899a934ee2cdf578137d13n/aHeodo
2020-10-30arc_33113171.docdoc 2a25d8a1cbc4a93a1a7f07a290d36e24c0e2750b65badf5e91709eb644fad12fVirustotal results 43.55%Heodo
2020-10-30Doc_AN9692035486IE.docdoc 4d83643d4185e914cd18600bc21014c76abe93f9cdc0373b88e65461ee279b80Virustotal results 42.19%Heodo
2020-10-30REP_32704244.docdoc efecc77229f059187f228b3a93fc9ab4be5df0e2d5886b96ae44e10b00c6648aVirustotal results 42.19%Heodo
2020-10-30doc_YQL_100120_RNE_103020.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638Virustotal results 43.33%Heodo
2020-10-30LIST_PO_10302020EX.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30670427459.docdoc 615de4c01c61e261c017bd338c822b21b294728d9f7bac3199e139be0d1c3675Virustotal results 30.16%Heodo
2020-10-30inf_PO_10302020EX.docdoc b48b7231ac7d5bc0a2ba5883e7a634a557c606b06b97bf45b2842523959c4a37Virustotal results 27.42%Heodo
2020-10-30Doc_LDCT1EPK.docdoc 0406910d3c48dbd18d57086dcab9b4f73a8081dae9fac3010f0ae90b73c7c34fn/aHeodo
2020-10-30rep_77018851.docdoc 4946591b7b99f626dafd98d333aa5c669ce9d3772e5ff1dc85e5d1cec281db99Virustotal results 26.98%Heodo
2020-10-30REP_724300531270.docdoc 6a56325cee2a2a8f5e25ea794eac07e6822aafb9390f367bcc90bccc80090aa6n/aHeodo
2020-10-30Y_RW0887336277SB.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dn/aHeodo
2020-10-30FILE_AWW_100120_SSK_103020.docdoc e08ab7ce7103fb7f881b565ba2688430333bb18fd593efba0f991a3e6994b907n/aHeodo
2020-10-30inf_78619323.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30L_HFKT9DDUTM2.docdoc 5e23c65a02e9c39918c300cb0da11f39930067a62c86e780cf303e4ba995eb8dVirustotal results 23.81%Heodo
2020-10-30rep_236571597413468553203.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabn/aHeodo
2020-10-30O_SIR326EI77FI.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-30doc_KFD_100120_LPQ_103020.docdoc 9ae7942321b9360d2c19a2199e6f2e21a3436b97787133280c3d267a00bd6b6fn/aHeodo
2020-10-30List_TP7962345890HX.docdoc a120ab7f12256c4b260034ecf26910f2eb405bb2c41ea9d1d78fcd2f529d2debn/aHeodo
2020-10-30Mes_896039824780857369217.docdoc 3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7n/aHeodo
2020-10-30PO_10302020EX.docdoc 8c5ec7de8acd87d586e9bf7a74458c2a96f88ddbeacbde0ae3791d84594cc983n/aHeodo
2020-10-30File_KK9401084097CH.docdoc 2a2cd3fa6ea3c1207553da6896b030a743a3893ec1b95b494ba27d6423f8857dn/aHeodo
2020-10-30Attachment_LNU_100120_HXF_103020.docdoc f39a18ddfada38fd5b1f2c0c242c50c50fc842b96af2c528b843c6e8a155379aVirustotal results 37.50%Heodo
2020-10-30Dat_0966606845853.docdoc aa221230a7342817478b117f2ed838ceb8290bb367bea08770c362b14c2fdcbbVirustotal results 39.68%Heodo
2020-10-30mes_EEJ_100120_WVI_103020.docdoc d77f9d8ce192df999a4c7c9564c086962623dc1a6e020f14bf19f264f59d316fVirustotal results 38.71%Heodo
2020-10-30rep_PO_10302020EX.docdoc b2312b8854268bd1ca23427d7f7aaf8b3013aa1c4ef1d7676e73a5667418b9e3n/aHeodo
2020-10-30dat_VWB_100120_GUB_103020.docdoc e4c4aa874feb371209199ddd6b159ed4a677b94568dfe6b09351807263dbef9bVirustotal results 29.69%Heodo
2020-10-30ARC_JMK_100120_SMP_103020.docdoc 77e8364509474d6b0177b5d4bc19e1354fba5edc2344eda8997ae9ed2d278927n/aHeodo
2020-10-30REP_50488706.docdoc 08ccf72998255b13e254a272fd34c02fa515b00674da72aa51f9409c529bd80cVirustotal results 29.69%Heodo
2020-10-30list_OUV_100120_WIB_103020.docdoc 3faba02f0eb970ef25a2a874736e4f758dd3424cdba2637795ada41385024679Virustotal results 29.69%Heodo
2020-10-30Rep_PIS_100120_XVJ_103020.docdoc c0f5989eb238c0d187f0a5341698ac293ee524d1132278aaff5ab4144a4b91a2n/aHeodo
2020-10-30V_VAK_100120_KKC_103020.docdoc b33622a59cee3ca443a74701f86f58ee524e9901c05d359270575f52d7d37380n/aHeodo
2020-10-3049969619573966642229.docdoc b3f4e1b87633e71363d9e97c4f845e09d36e833b8d170f184946c8764cfc8f12n/aHeodo
2020-10-30T_98997935.docdoc 8f0e22d23596c232df3d527d5fb36ca404eb518bbe7c375b7a7cd037354b02d5Virustotal results 28.12%Heodo
2020-10-29OHO_100120_XRS_103020.docdoc eec673d1180b8765a6d45f7e7164e7e86024dce5cd09472669369e410fa5d161n/aHeodo
2020-10-29Attachments_PDO_100120_QFS_103020.docdoc f69a365c0b551ac35010e98b64364feedecc32dae4284fb4afe62ced4b5d17ebn/aHeodo
2020-10-29PY08N6O56CI4YVM.docdoc b716fa67c934451161c1be78e1587b3c68a53b5e219dc5452e9ea883d32a274cn/aHeodo
2020-10-29INF_40365263.docdoc f4d2f6dbbb53d79cccef95feda58515350e863a1f1522bf60c830c0230754866n/aHeodo
2020-10-29Dat_57135511.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 26.56%Heodo
2020-10-29Mes_PO_10302020EX.docdoc 9f944d45d5e7d40e9f1fce8f48c7fae48a14b56666b6c149b9a2f028567d2019n/aHeodo
2020-10-29list_PO_10302020EX.docdoc 00f960f2c4dc8abaf471b3c55c877aad66b636338bd2d67a565393058b78c125Virustotal results 34.92%Heodo
2020-10-29J_94801857.docdoc 6b500ff3f698821bbc747c834a188d81de0df053235788ca2ae36d8dd4cb80efn/aHeodo
2020-10-29FILE_8ZH7KRXUF9SRM1S.docdoc 970feee22d30c517c525e36b3327903c843552de7138215c5fec184444b56e19n/aHeodo
2020-10-29TQB_PO_10292020EX.docdoc 6f9552836a90ddea2d599b100ecf6a8cda08714d1f8f7f848cf6684ab9ff6b78n/a Heodo
2020-10-29PO_10292020EX.docdoc 5f1e824d934b11f7e7a92d426e5083d30f51fee6471908f3a6c0a065d46d752bVirustotal results 30.16%Heodo
2020-10-29list_1148515456400865980039.docdoc 633a628e9a364cb3bbd93ebdce10e5f23fb15370a584efb4fcecf4549c3b975dVirustotal results 31.25%Heodo
2020-10-29list_M5PYXOTG9.docdoc 2d94f5620906f353b2bda6b6eb984695737cdecd6ddc88ca747fad5bc457d090Virustotal results 31.25% Heodo
2020-10-29REP_03645573.docdoc c864f510cfcaca5ca5acb2a8ef66706e173195d47f0bc0956f1757e9f74325d1Virustotal results 31.25%Heodo
2020-10-29DOC_PB2430238555CP.docdoc fc4b0c2848ce1fe20231a9d9845d36fbe6a7661c8f4a1463ca33be3019d3e0cbVirustotal results 31.75%Heodo
2020-10-29FILE_07107788.docdoc 1cfbaf38e833a8dcab12a6f7a0c42e5b5033bc4f188f022607c0e3853f92a6eeVirustotal results 31.75%Heodo
2020-10-29File_AEW_100120_GRG_102920.docdoc 66f21ad9f94f3926c870736b3a33af58b00eea538ae8da9b7cd71ad1eb5614d6n/aHeodo
2020-10-29rep_88155153.docdoc e6a7e6b13c6bf9156c51ce46213a68a27ed5da4c01903cc86465ac63c073fd7dVirustotal results 26.98%Heodo
2020-10-29Arc_HID_100120_YXG_102920.docdoc bcc7aff4bedea7ed486112d49796a83b2454c034e2aaf534028b904e76c816cfn/aHeodo
2020-10-29doc_47665267.docdoc 98e256fc5cec649496c3aa8134d872579260d8a845b5394bdbe6d34aa3c413d9n/aHeodo
2020-10-29arc_6Q34RM6C6.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29LIST_FXHT47AN4QGJZ3S.docdoc 4d79f7b9c974fdf5e44ca20f71261e3064ea8bae3f64370f06b74c2bce894b67Virustotal results 28.12%Heodo
2020-10-29Attachment_45035468.docdoc 13b5e4daa9de72cca849daddaf829c4a3c019c11cebbc6e0c7fb67481fbc9b97n/aHeodo
2020-10-29FILE_60838054.docdoc 774059c5c371964d14cb4894f7a1699d2bb5b3ce2bcb1544bd9a6ef92e845547n/aHeodo
2020-10-29dat_03744515.docdoc 5db58ed4308eeb76f9c66c885d4f1b53530d6c42eac9d755e67bf41989094087n/a Heodo
2020-10-29BWFO_PO_10292020EX.docdoc 405fadefb4061d6af8c5857c120bb843c94b11edd508facc87ddc8c95c45081an/aHeodo