URLhaus Database

You are currently viewing the URLhaus database entry for http://ezi-pos.com/categoryl/LphwqB1xxxJ96UhY2ZugDbZoiIfYSBjL6ZH/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:765761
URL: http://ezi-pos.com/categoryl/LphwqB1xxxJ96UhY2ZugDbZoiIfYSBjL6ZH/
URL Status:Offline
Host: ezi-pos.com
Date added:2020-10-29 15:27:04 UTC
Last online:2021-01-23 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 15:28:06 UTC to abuse{at}microsoft[dot]com)
Takedown time:2 months, 25 days, 19 hours, 29 minutes Bad (down since 2021-01-23 10:57:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31ARC_OBS_100120_FPS_103120.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31Untitled_4POK07D.docdoc 4bab596233b6ee4131996d95b9d863e6833d285d6f87dd2bd841f2682b6146a3n/aHeodo
2020-10-31inf_PO_10312020EX.docdoc 396b664fbdde301d1ebedd54f4beacf4726ef9fe1d0807a86fe0b00e0a71772dn/aHeodo
2020-10-31dat_JWX_100120_YCJ_103120.docdoc 2d3d4e0033829c37a82f24c6499a0786dc993903374e611aa94c4973a4066dfeVirustotal results 53.12%Heodo
2020-10-31Y2RMEB7X1.docdoc 615de4c01c61e261c017bd338c822b21b294728d9f7bac3199e139be0d1c3675Virustotal results 30.16%Heodo
2020-10-31arc_PO_10312020EX.docdoc 03b477c67a30f1cc63aa897f954709c42c74cc2907d8639805398a4615cad1b6Virustotal results 52.38%Heodo
2020-10-31doc_759135692955700086.docdoc b48b7231ac7d5bc0a2ba5883e7a634a557c606b06b97bf45b2842523959c4a37Virustotal results 53.12%Heodo
2020-10-31list_5616788450983454639999.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-31J2ZE8TT9ZEIWOG1N.docdoc 3f1565ba4e9c93cf71b5b5a3f3b16869e7c6a7d86a837a32db34f1f0105e3aaaVirustotal results 54.69%Heodo
2020-10-31Mes_ED3243084753ET.docdoc 12ef90a776bc1f4ae05962313e6b3711ec5211f8ba450527585d2da80c2d03b5Virustotal results 51.61%Heodo
2020-10-31List_XG8569904960DT.docdoc 41c1aacf38f4e4b127131377357db324852107ff972122bb57ec3ba8f894a7bdVirustotal results 53.12%Heodo
2020-10-31arc_QDY_100120_NGL_103120.docdoc a914d86d2a97040bb1c91827828f9ec8e72e18d73ca90d884b5d385e4c9793f5Virustotal results 53.97%Heodo
2020-10-31VI_WU0636542451IK.docdoc 665ca5b6b8e24008d94bd73e8fc3862a558d2074f35ab952eb016e2ecfb2c125Virustotal results 26.56%Heodo
2020-10-31918935524582.docdoc 9210f9032280641d080e5abde6a49a3032839cec91f757f2469a4eeeb4080afcVirustotal results 54.69%Heodo
2020-10-31UNTITLED_ED0980456243BJ.docdoc 26b30e58ed2342d042367ba0487873439d5c9c28920ddd000bb94b3eac79d94dVirustotal results 54.69%Heodo
2020-10-3030830840.docdoc 9918cf9fc52a9d19fe483b17d847fc7fa23d4fe150c5df91abb94e61e932cf1cVirustotal results 53.12%Heodo
2020-10-30REP_FQU_100120_JLQ_103120.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30Attachments_98631001.docdoc 49931e499615a1dc36cda98151d3c406413f1c47504b38f2bb658631313c273fVirustotal results 54.69%Heodo
2020-10-30Attachments_75802270.docdoc 61aa32a570716ce0d7c579186cd0cc291148bdeb623f0709c3a0b0b3f3d4d384Virustotal results 23.44%Heodo
2020-10-30REP_QT3503511185ZT.docdoc e7208f8038adb200865a58fe3b9a71ec7389e5f3a21c4003790393a479917adfVirustotal results 53.12%Heodo
2020-10-30Doc_DZL_100120_ENI_103120.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cVirustotal results 54.69%Heodo
2020-10-30REP_XNQ_100120_QLJ_103120.docdoc d577446435b94d0af2a829f1160b594e95c8051f6b069400ff61fa38d151ba54Virustotal results 51.56%Heodo
2020-10-30H_PN5150024846GP.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo
2020-10-30REP_TSG_100120_NVX_103120.docdoc 0df4e83145becd16b2074bb93563596b613e43856bbd653b98a316f5d92ab817Virustotal results 23.44%Heodo
2020-10-30list_2R3T9H78J0SC.docdoc 90d39ca6bdaf9c010fd7f3a5d3c8588f1c777498f544ec5ad64329b6c06621b9Virustotal results 22.95%Heodo
2020-10-30DOC_MG5027519700HI.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabVirustotal results 23.44%Heodo
2020-10-30LIST_7SVXIRO01TC.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30Inf_KRI8VGR.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30Arc_PO_10302020EX.docdoc b0f3557b0ac948f3137f3cc926504dbe28038ea00d282c81a33fd46b93af1c25n/aHeodo
2020-10-30mes_866002485123198286.docdoc 023fdae311195c64889d2c87831a470d7c4826a755cd385729dc6bb02281c4e5n/aHeodo
2020-10-30Rep_30490644966.docdoc 95f86b4f2c917f1be1fe02e3566a23e45621c342db18356aa485387fe799b06cn/aHeodo
2020-10-30Untitled_MKY_100120_PGX_103020.docdoc 251276d83391acaa6629840a7607dd14966d1be54c7e8037b947e5875d412620Virustotal results 42.19%Heodo
2020-10-30LIST_WQ3917248991RR.docdoc 12b4329a9b823283ea081ce2769d7115a1f1922106019611973ea41b4dae5fbdVirustotal results 42.19%Heodo
2020-10-30Arc_SY6719198061CD.docdoc 4eea09772ca2174c6dee225349ae15f55b9e8a91ac3aed6f961a4815ea86f462n/aHeodo
2020-10-30P_PO_10302020EX.docdoc 7c159d17e809a78bad3e024cda533ebab493cc8519755e2946af59e11eac9eben/aHeodo
2020-10-30REP_PO_10302020EX.docdoc a3c09116b3564a812d894ab750990565e22b18b97a47c138b3b271f1e7e5f666Virustotal results 42.19%Heodo
2020-10-30DAT_LYI_100120_XKZ_103020.docdoc 59eb7f8b98e7601aab446fe4f84b586ecf0ff8b5f092b8144441e50eed459684n/aHeodo
2020-10-30inf_MA9258028974PG.docdoc c0b41e22e711cd0385c069a4c10ae102ca7dcc277460d218eecc4974cca8677dn/aHeodo
2020-10-30file_HJA_100120_OPN_103020.docdoc baedfb0e324fdac42c4f7b0d47f79d6473f669fa3282365dee1e4a86fc6f395aVirustotal results 40.62%Heodo
2020-10-30UNTITLED_45231060.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068Virustotal results 23.44%Heodo
2020-10-30file_MBU_100120_KME_103020.docdoc c0e896c6e7521d6431ca692ef69c30c605ab7e599336d9c027721e573d1b2161n/aHeodo
2020-10-30doc_CP0087830570DH.docdoc ad6530753d959ec1d3305730db8985d3f0fdf9e9ce893c2f8bd8873ab51f8fdcn/aHeodo
2020-10-30rep_DXEKGLTL160ER.docdoc b6fe7dca5aa33eedca9590aacbb7a67d89dc6c1a98cee170aca2c47518e01ea1Virustotal results 27.42%Heodo
2020-10-30list_30291490721618153299.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1n/aHeodo
2020-10-30doc_MXLE06UZYBKGQGI.docdoc 07b3f8c72f07dca70496f6c792df7c12b6b782090056851ccfa67620fe7a27bbn/aHeodo
2020-10-30Dat_20828216.docdoc 917a6b067e825cb71b0d60b4e428f283cdbf100bcec01e467503d18077125c4cn/aHeodo
2020-10-30Mes_30N5K3LV8GECCPNF.docdoc e08ab7ce7103fb7f881b565ba2688430333bb18fd593efba0f991a3e6994b907n/aHeodo
2020-10-30dat_J8TOWRW5GUU.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3n/aHeodo
2020-10-30Inf_B5MPLI40F6.docdoc f2ce2b3d2bf2f5d0f22eabb44f0b7c9183e0fea547e90ab926beae89d85cdf0en/aHeodo
2020-10-30doc_0029812390052478958742.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-30MES_YWC_100120_IEE_103020.docdoc d35ce7ecbf781e43242b0ddf34fc92d905f15b6279385f62ce2b3a7f3a700c74Virustotal results 31.25%Heodo
2020-10-30Z_CMYX8QLN.docdoc 3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7Virustotal results 41.27%Heodo
2020-10-30Doc_OFIJO27X0V2.docdoc 2a2cd3fa6ea3c1207553da6896b030a743a3893ec1b95b494ba27d6423f8857dn/aHeodo
2020-10-30mes_JYL_100120_NUG_103020.docdoc 6b88f01b98b04205fdeaca9ab7f387ea479efbb68e1e0a940c909d66e6ed092bn/aHeodo
2020-10-300045799397.docdoc c5464029a0c6ac085492b9e9e1380d0304bd195c8de6e1dd71b51d4c9f8a5433Virustotal results 42.19%Heodo
2020-10-30inf_PO_10302020EX.docdoc 8cb962ad1798941eefe7a5f826ea5bebc726304af0337e53e6e34d59a7715795n/aHeodo
2020-10-30YSE_100120_RWJ_103020.docdoc d938809af2f315ccb3059ebdb60f135d1a78267221ebe954f6ece48ad1c4851an/aHeodo
2020-10-30UNTITLED_16664429.docdoc 4cd342f5baeddb3b9ce82b0f360ee43411ce30c8abede6b1f2a8181ed08da110n/aHeodo
2020-10-30inf_PO_10302020EX.docdoc e4c4aa874feb371209199ddd6b159ed4a677b94568dfe6b09351807263dbef9bn/aHeodo
2020-10-30Doc_PO_10302020EX.docdoc dadbc26e625015d8adce96198388664a77553836c9079db77d9084f5140a64e6Virustotal results 35.94%Heodo
2020-10-30MES_J81B5EV4FUWF2.docdoc a51d194ff7cccab7defe2f64127934a4ff3699de37c60019b40dd62d631baf04n/aHeodo
2020-10-30UNTITLED_PO_10302020EX.docdoc b03fc3f4764fbae8a92c677b03cc79e416905f290bcd7c6a5659410315245c90Virustotal results 31.25%Heodo
2020-10-30inf_WYZ_100120_HUV_103020.docdoc b33622a59cee3ca443a74701f86f58ee524e9901c05d359270575f52d7d37380Virustotal results 31.25%Heodo
2020-10-30REP_OIHNRSLAC4R.docdoc c2d7ed25c4c34f44dc293833d3ea302d281d24981385c437e411a50ede35e72bn/aHeodo
2020-10-30LIST_DEX_100120_VYL_103020.docdoc 1e2927648e6c1e230ea519611dc8ffc414549f3da0fbe74854b2b2431a5731aeVirustotal results 29.69%Heodo
2020-10-30dat_48480217.docdoc 9cdf4102c45c7f549ee4e0290a07d4f7783c6371b1a8fe35a6f1f04d56cd6857Virustotal results 28.12%Heodo
2020-10-29doc_80895527.docdoc eec673d1180b8765a6d45f7e7164e7e86024dce5cd09472669369e410fa5d161n/aHeodo
2020-10-29DOC_208375409.docdoc bda57d2e85ef3df82eb86725562b0869718ad3497f2cf84ab96fd619933e6467n/aHeodo
2020-10-29Doc_MNB7Y5KYC828V.docdoc aa9631cdb98dbe55b81b029660a0589039561664b34f249207dc0d83e273a030Virustotal results 26.56%Heodo
2020-10-29PHGJ_1WUBTPT.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 26.56%Heodo
2020-10-29Untitled_PO_10302020EX.docdoc 9f944d45d5e7d40e9f1fce8f48c7fae48a14b56666b6c149b9a2f028567d2019n/aHeodo
2020-10-29ZZFK_PO_10302020EX.docdoc 7c6a482b48b1e04e7e5229c4d04be12cb8ee21aa7a7410219fdee44e048e5326n/aHeodo
2020-10-29Dat_ACI_100120_EWG_103020.docdoc 6b500ff3f698821bbc747c834a188d81de0df053235788ca2ae36d8dd4cb80efn/aHeodo
2020-10-29List_KK2248554698NV.docdoc 37ce904c25d97f1199866c304c053e85219d0b201d3015981963506a9a65e327n/a 
2020-10-29FILE_S1YPRTE7SVX.docdoc 6f9552836a90ddea2d599b100ecf6a8cda08714d1f8f7f848cf6684ab9ff6b78n/a Heodo
2020-10-29PO_10292020EX.docdoc b2d41822b2d89807592fd225c8450a8005e877760a656a6477ac0a28e3aa0250n/aHeodo
2020-10-29Doc_XH1K5TDWA08139IW.docdoc 51657b8a72e7e81349ee2744529184125522759769f93b02aebc3a2d33fddc2bVirustotal results 27.87%Heodo
2020-10-29mes_86919264.docdoc 060a5c65a7cc6ecfa1290f84d608e94a147a447e1dd75ceedd3490ab079b6e74Virustotal results 31.25%Heodo
2020-10-2968484497.docdoc 2d94f5620906f353b2bda6b6eb984695737cdecd6ddc88ca747fad5bc457d090Virustotal results 31.25% Heodo
2020-10-29REP_485997656780207518011.docdoc 2ded110822e0153fbd8d8c157f8f6ca47440730ee4fa093e193eb720789b83a6Virustotal results 31.25%Heodo
2020-10-29Inf_LJQ_100120_XWI_102920.docdoc 32eb83b21811e1d39d4c68e15a5ff6a2b640161c0960cdfd4dea92a72f368a2en/aHeodo
2020-10-29Untitled_XF9278196128HY.docdoc 56116942ba512821e1ff7a7f8ba195977253ba97a25857414a47ef906f41ff4fVirustotal results 31.75%Heodo
2020-10-29rep_92143924.docdoc 3af2330541725b01e66ab71bd1ebd82228c7332702710047e77658bcec52c8f3Virustotal results 30.65%Heodo
2020-10-29file_PO_10292020EX.docdoc 2e1af471c7543777e6f78e69aff512afe7e9fdfaf3d16b011748abffd7b4a81bVirustotal results 27.42%Heodo
2020-10-29Attachments_VIV1V1YO.docdoc ccc94ba056101ead7adab466b9b4780b16a85dff204b246ae7094f9bbe79fdacn/aHeodo
2020-10-29DOC_PO_10292020EX.docdoc f1360579a25ea174943b561c1e8e174e0145373505152d928c6e1dbeaeae60ddn/aHeodo
2020-10-29FILE_59510590.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo