URLhaus Database

You are currently viewing the URLhaus database entry for https://trendplusbookkeeping.com/wordpress/attachments/ojr5cbw5reswka13nnxu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:766229
URL: https://trendplusbookkeeping.com/wordpress/attachments/ojr5cbw5reswka13nnxu/
URL Status:Offline
Host: trendplusbookkeeping.com
Date added:2020-10-29 17:36:06 UTC
Last online:2020-11-13 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 17:36:53 UTC to abuse{at}hosting[dot]com[dot]tr)
Takedown time:15 days, 2 hours, 39 minutes Bad (down since 2020-11-13 20:16:23 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31Attachment 2020_10_31 93815.docdoc c2239c86191e6dbe4cb7a13e085fd47f5e4f9212cdeea61bfa295a9399bc4686Virustotal results 54.10%Heodo
2020-10-31mes-20201031-0161751.docdoc b64f9d2cdc0c2e84301c1fc9dce4dab16a0a8013f6c7961ab0fc423d2b842a8fn/aHeodo
2020-10-31ST852-20201031-F60157.docdoc f02302761b9bea32d6ef774d20d52687208198e16db81a56741e7ae0feeaa5f6n/aHeodo
2020-10-31LIST-20201031-CK9243.docdoc d7eb20ea72492f475f45395692ea43bcb8549b46e739ef37613d4ceee88fbf5dn/aHeodo
2020-10-31ARC.docdoc 0bea7d4e5d34cd10ee4e8eb527d2609687031a9b8ddcaf59b8612440373e70b5n/aHeodo
2020-10-31INF-20201031-S981426.docdoc 11938da3e639a51c381760b52ff130c7739cc55ce44513cb71a1695bff359e7fVirustotal results 50.00%Heodo
2020-10-31arc 20201031.docdoc cfbf0977de1d103ac358f868b8fee2a7c6efc69be1ed0da77498a8f13f2d9bd1n/aHeodo
2020-10-31list YY4273.docdoc 22610e4ec1dadecea8cf8bed9e0cc318877401a02d6f680dc520821c3fb8d716n/aHeodo
2020-10-31doc 2020_10_31 HN8207.docdoc 197c062cd2657c3aa60ebbf86fabc2ae097ea0381ec3e843b3f66b4bbda66606n/aHeodo
2020-10-31176IQ-XRR4179.docdoc 027653988b10a54eac9c807da7365912e03681639f67ed4fb4a9a75459bc6a53Virustotal results 50.00%Heodo
2020-10-31LIST_20201031_3915393.docdoc 39a8523047364efaa57177a3fb57eae18cc830a82f091853a178bc5fe4eaa602n/aHeodo
2020-10-31Inf_20201031_640.docdoc 58b4b01b27226f4c2fcf20dd17aac4604e04c0e736be3d8d1a8291dd0542f1dbn/aHeodo
2020-10-31Dat-20201031.docdoc 9c1628f90e168138edacb46c62b230681055de7f838a0feec034b18045a82cedn/aHeodo
2020-10-31Attachments-20201031-OO167.docdoc 5a3ce1a1aab5e580c55fea54efb1fce732a8ccd784b002f039e87d081ccc8caan/aHeodo
2020-10-31Untitled_Z312507.docdoc b821bfe3ada6cec575abd9091da99c2776856d5749f230e90dd3598344d359ecn/aHeodo
2020-10-31dat-2020_10_31-VT864663.docdoc c0094a2537141700d89182a20e365fce3cd4f7a7c9a3924d0a5ef894c7a6aaafn/aHeodo
2020-10-31mes 2020_10_31 SI1299.docdoc aa0b4a67c3cb5337ff899285d2c7ed8aeb576eae5a0f428b38d1d70b0d54954fn/aHeodo
2020-10-30arc 2020_10_31 GD82548.docdoc 22aa99e5913ca582916ab712beb6f732cf922237b0dc80ff7085a2f601036533n/aHeodo
2020-10-30inf-20201031-8756122.docdoc d4bcb7f39013c15789d4355421a62c3fa9a2731065d35adc89bd345e332fefaan/aHeodo
2020-10-30mes-20201031-A91373.docdoc b595051d0d700b8f5c63feb13f5dab1a00915465c1043b5ad6f9d8d2ab1646dcVirustotal results 50.00%Heodo
2020-10-30UNTITLED_20201031_0368.docdoc cb2780013dda54f11418c5f152e6e7c85f0120cd7faa1ef58c55564dac2280b4n/aHeodo
2020-10-30Attachment_2020_10_31_006.docdoc 6af7c087d281ec6713e1b1488d66ab4376fd8575b0eb76dcacd6c35f96b28cacn/aHeodo
2020-10-30Dat-2020_10_31-D9873.docdoc 4d3647601b3522b69469db6fbe0101bd755f6f18b5becffccc20f506e21ac63cn/aHeodo
2020-10-30Dat-109.docdoc f4d908f87501ee3540464451580093a65d843cf69d49c8fc0ee667ebfe48cb4fn/aHeodo
2020-10-30doc 40645.docdoc 102949c3283cd419c7fa9d1a87ffad267839a60543d41deaab75ac16f11cdf8cn/aHeodo
2020-10-30N857_RI405.docdoc 8eab9bd29aa048f7972530e609d9a64db5aefe93c8d398edb3b63418443f7effn/aHeodo
2020-10-30rep-2020_10_30-GI11020.docdoc 0e1e46ba3515694253b3f5f7e14717477b8f5a0569237cb4bc87a65b954b8026n/aHeodo
2020-10-30arc 20201030 379321.docdoc b80748e5abff124c2e769811b6d07ee49b612be307a825ec4d6cb37f18ca1c24n/aHeodo
2020-10-30ARC 20201030 QSI474.docdoc 472620db98535db21f2454eeecb38e5f26665bf4c005411a6ab132285bc2e2c2n/aHeodo
2020-10-307534-2020_10_30-854.docdoc e4453e80df68baf994356340dd82940f63286fe1359632b3ac16a4af94939709Virustotal results 43.55%Heodo
2020-10-30list_2020_10_30_654301.docdoc 4c8f58d23046e93a50273c4c0b52ed4889d8c54f818e8cd871920a279812c6e7n/aHeodo
2020-10-30arc-2020_10_30-290408.docdoc c3f938d4cdecd6141a6463ac07615398d82ce521c1e86c0e5ed70d9a26eec354Virustotal results 32.26%Heodo
2020-10-3017252179-093011.docdoc d137612aae06498f2bc6bbec85745d9bd00e258caf1f48016dfd3211f0453bc2n/aHeodo
2020-10-30List_20201030_KTB7715.docdoc 764efa1decf3f9fcc6d949e33850218384b82c15efcd80e3296ad379893d39dbn/aHeodo
2020-10-30Untitled-2020_10_30.docdoc 918652ec4894abeed6fea66bebcab423df702c12611f58c5a67332615c30c9ecVirustotal results 32.81%Heodo
2020-10-30rep 2020_10_30 D741.docdoc 94475692dcd80bc6c6c60a7fa254144bf115bad1ab83db49cb7e31adc04dc445n/aHeodo
2020-10-30List 20201030 WQ83376.docdoc 230b1a207033b364d502d36c3e1b6d377b41ba1d4acc6430760d4adec476f2d7n/aHeodo
2020-10-30Inf_2020_10_30_596.docdoc eec9c8997a14a18f28258778320aa0458fdfe3cd03fba6558b1ae424931ea570n/aHeodo
2020-10-30inf_PF39773.docdoc 7383041b5120be42959229a3057949738b86293d0acaf07e6cb9593d48102ea4n/aHeodo
2020-10-30Rep_7089885.docdoc 5a2e23932bdbdbf97b1abc748d155d9135d032c72cf764296b9552845e5cc850Virustotal results 33.87%Heodo
2020-10-30file.docdoc 7db49abadf58087617386564b07aa4ef0564db91f3efe0a1df5b7f963d98cb61n/aHeodo
2020-10-30list_20201030_560.docdoc a0c6ff5db16ae9e618fd3722b5d13667243ff51aa70ae14d9a68b9848b476756n/aHeodo
2020-10-30Dat-2020_10_30-108211.docdoc d3589ced3c46c385cd771bb537c25db297ff85dc5ebd364f5e3c556f7ea526e3Virustotal results 28.12%Heodo
2020-10-301093766_20201030_JDM52042.docdoc 6f1bfb8263e8b6bacd9bad43339c4f0fc928745d1afebc964912b206651af273Virustotal results 28.12%Heodo
2020-10-3056525T.docdoc 20230cce2431c3441e7fd0bc90c32ac73fb894b43b0ca53910d7888ead1ce196n/aHeodo
2020-10-30EX141 20201030.docdoc 82b84e8b989abdb526facd2f2dda1f7f68c45acdee4c400cd6d7733ebd6a1354n/aHeodo
2020-10-30Inf_815.docdoc 56f61f11f75eabcc97d90aba385131e95efc547284902bf3e092349e7204858fn/aHeodo
2020-10-30doc.docdoc c69f698245bf053d81ad10f95963c8991f117abcce72439600cd42c5619a520cn/aHeodo
2020-10-3061577_GZ62829.docdoc f861bf87ae94a28905aac6e55eb8f701589a30bcb2b6d452b8be5ce93f324bf0Virustotal results 25.40%Heodo
2020-10-30Mes 20201030 ZY245.docdoc e65070fff290832ab66774dc024d67f8f2fd3c87c146ad402449a95981e4957cn/aHeodo
2020-10-30Arc 2020_10_30 KT309430.docdoc e917927e24c2b9cd23b8d500a0b604555fa82e4436515dcee191a3c2f4c69080n/aHeodo
2020-10-30Rep_20201030_852039.docdoc 81d0e99c653997203337d03b71b0908014119dca8e62b0169b4a2df01a59e1e3n/aHeodo
2020-10-30File 2020_10_29 TPP81673.docdoc f72dc65ff43a2bcd71bdb4e6f7241cb06691ed24bf9630379b104f9d414b8793Virustotal results 26.56%Heodo
2020-10-29DAT-WEG99920.docdoc 119d437a11fefb53c66adaf16eb9d4d2e58f036aae30c30bbfafeb9fd0c1f292n/a