URLhaus Database

You are currently viewing the URLhaus database entry for http://creauture.com/Update/UWsIqaqeD4edlqt1k9lVyP3ND/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:765376
URL: http://creauture.com/Update/UWsIqaqeD4edlqt1k9lVyP3ND/
URL Status:Offline
Host: creauture.com
Date added:2020-10-29 13:34:25 UTC
Last online:2020-10-30 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 13:36:14 UTC to abuse{at}mschosting[dot]com)
Takedown time:14 hours, 5 minutes Good (down since 2020-10-30 03:41:49 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29Doc_PO_10302020EX.docdoc 1fa65cbd054792ed8ce72d5729cb95a5810f1371e5b096b2f1a099416c193420Virustotal results 26.56%Heodo
2020-10-29doc_84324645.docdoc 32eb83b21811e1d39d4c68e15a5ff6a2b640161c0960cdfd4dea92a72f368a2eVirustotal results 31.25%Heodo
2020-10-29Untitled_QZT9Z6J.docdoc af09d9b10580277dc290b458dfb6b85501ce39d6e430f87ee3fd349c3f672860Virustotal results 31.25%Heodo
2020-10-29GU1150719132YB.docdoc 7a764435560ee65bb945e950ff5aaed0c4a6f15e01b91a4f8dc40746ca9b5c4en/aHeodo
2020-10-29Inf_AQ0734168349VN.docdoc 26116918df27572814521839a1d3ffdb544bc825e81c871aa514890cc6411d44Virustotal results 29.69%Heodo
2020-10-29list_64681286209856491.docdoc de9ebc94403f8ac175dbfb0a01cfd6e37753309402f94fbe7cd71755ab5d8051n/aHeodo
2020-10-29doc_DRV_100120_YUI_102920.docdoc 98de74a1b000e840bd188d7a4e35eb9150102a43f8c4fe5357bebae3ad586955Virustotal results 26.56%Heodo
2020-10-29rep_32254776.docdoc 318b758c5ef22b3666ff9ea38111751a4ccc591294bf85680f723e02f95def57n/aHeodo
2020-10-29rep_YY1226840304ZI.docdoc b97ef63f4cdcb7c82862e52763408c1c6e70b9e4282e940d30c71dee4630e8d3n/aHeodo
2020-10-29Attachments_PO_10292020EX.docdoc 6b1f7e5a0f6190b5197e49dc08a98a69963e68443f96780368895b0bffb30cb0Virustotal results 26.98%Heodo