URLhaus Database

You are currently viewing the URLhaus database entry for http://hkq.cfc.myftpupload.com/macos-catalina/YdZZOLzbAuB5lYEyqnDcbxgUqAI/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:766475
URL: http://hkq.cfc.myftpupload.com/macos-catalina/YdZZOLzbAuB5lYEyqnDcbxgUqAI/
URL Status:Offline
Host: hkq.cfc.myftpupload.com
Date added:2020-10-29 19:00:13 UTC
Last online:2021-04-20 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003042680 created on 2020-10-29 19:02:05 UTC)
Takedown time:5 months, 23 days, 0 hours, 40 minutes Bad (down since 2021-04-20 19:42:10 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-3071133011.docdoc 894961b5cd902ae1bd280ad4d906f510e47f2d02fba5fc278823a37eabedcc7fVirustotal results 33.33%Heodo
2020-10-30doc_PO_10302020EX.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30inf_77746559.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30H_SAPVHNT1WT.docdoc b0f3557b0ac948f3137f3cc926504dbe28038ea00d282c81a33fd46b93af1c25n/aHeodo
2020-10-30rep_KCI_100120_WZL_103020.docdoc 877bcaa3bd3bcb6081fbcc746a0bc8b28f01961c1061adaacae5ae875457fb70n/aHeodo
2020-10-30BIC_CB0910752188CI.docdoc 374433b4b7b6197f4f9f41115f09cafa5907b8b1b2076963bc6c09e4227fd47bVirustotal results 42.86%Heodo
2020-10-30list_00903049.docdoc 5aeb983f62e296373a25bdde163ab799f0bd688f40567310960f16b815921687n/aHeodo
2020-10-30list_717J6SCQ.docdoc 6e473a77d345ee6f0f3c0371d26f9b187bf9e59a7d4dc18956b24db4f264fe49n/aHeodo
2020-10-30File_QCX_100120_ZME_103020.docdoc f5d5f669e4157eb56a2bb064add77b64fbb96cb6ac4671c66e0be5b704030e0fVirustotal results 41.94%Heodo
2020-10-30Attachments_WNH_100120_BGZ_103020.docdoc 005b9b3299e128a79fe21a998375eccf999a16aeee899a934ee2cdf578137d13n/aHeodo
2020-10-30list_VZIZ2UJ3AZH.docdoc a2570aa79603bbd35dfcd783d2d6da489b713a3a5ddcabd93e0fed2713aef983Virustotal results 42.86%Heodo
2020-10-30Doc_AN9692035486IE.docdoc 4d83643d4185e914cd18600bc21014c76abe93f9cdc0373b88e65461ee279b80Virustotal results 43.55%Heodo
2020-10-30file_NC7663933733CQ.docdoc c0b41e22e711cd0385c069a4c10ae102ca7dcc277460d218eecc4974cca8677dn/aHeodo
2020-10-30doc_YQL_100120_RNE_103020.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638Virustotal results 43.33%Heodo
2020-10-30Dat_XNMTNTWMJX.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30inf_XA7142749015NT.docdoc c21fd3f4bfb11db1fc709bca4079eb7f97b6001e5695a430566b61e5e630053dVirustotal results 29.69%Heodo
2020-10-30Arc_98483279.docdoc 72cbfce2d1bb68f6583a651975d64056490779254d19bbf18636a754d88688c3Virustotal results 25.81%Heodo
2020-10-30OP1979415227RO.docdoc 39991605b314bb39a573ea29a1b1cd2904615afe76292c0f3b6afac181a0d6d0n/aHeodo
2020-10-30mes_EKPYFCVM86KXWJ2.docdoc 9210f9032280641d080e5abde6a49a3032839cec91f757f2469a4eeeb4080afcVirustotal results 26.56%Heodo
2020-10-30rep_77018851.docdoc 4946591b7b99f626dafd98d333aa5c669ce9d3772e5ff1dc85e5d1cec281db99n/aHeodo
2020-10-30REP_724300531270.docdoc 6a56325cee2a2a8f5e25ea794eac07e6822aafb9390f367bcc90bccc80090aa6n/aHeodo
2020-10-30Y_RW0887336277SB.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dn/aHeodo
2020-10-30REP_123086098966.docdoc d577446435b94d0af2a829f1160b594e95c8051f6b069400ff61fa38d151ba54n/aHeodo
2020-10-30ARC_SR8961204745UL.docdoc 0df4e83145becd16b2074bb93563596b613e43856bbd653b98a316f5d92ab817n/aHeodo
2020-10-30rep_236571597413468553203.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabn/aHeodo
2020-10-30file_PO_10302020EX.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-30doc_KFD_100120_LPQ_103020.docdoc 9ae7942321b9360d2c19a2199e6f2e21a3436b97787133280c3d267a00bd6b6fn/aHeodo
2020-10-30List_TP7962345890HX.docdoc a120ab7f12256c4b260034ecf26910f2eb405bb2c41ea9d1d78fcd2f529d2debn/aHeodo
2020-10-30Mes_896039824780857369217.docdoc 3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7Virustotal results 41.27%Heodo
2020-10-30Mes_PO_10302020EX.docdoc f16118ebe3dbd05212ed3e350e3d509e02c403cacf34497532c50e1be09b7e16n/aHeodo
2020-10-30OMFR_FC3808929980UM.docdoc 78896f92d061592d98c06fc87245d2cf4074475faf24d2470912e785760c29b3n/aHeodo
2020-10-30O_13988529.docdoc 7bfa1640c072951be3fb17704054b151541525eaa8a22606d94fc2d037a6a663Virustotal results 32.26%Heodo
2020-10-30Dat_0966606845853.docdoc aa221230a7342817478b117f2ed838ceb8290bb367bea08770c362b14c2fdcbbVirustotal results 39.68%Heodo
2020-10-30mes_EEJ_100120_WVI_103020.docdoc d77f9d8ce192df999a4c7c9564c086962623dc1a6e020f14bf19f264f59d316fVirustotal results 37.50%Heodo
2020-10-30FILE_PO_10302020EX.docdoc 0b7f26dc76b83127cdf687f818e652f050a9b3726aa76bc30947f94e4e25ffd4Virustotal results 40.62%Heodo
2020-10-30MES_61AB1B3O6V.docdoc 8f71742d1582c153a4011a49f8bf5ab9fe4129b6937832fba73d68bc0e95a438Virustotal results 35.94%Heodo
2020-10-30Attachment_837575651264.docdoc b2f80aa2efc9abdf137f78f830f2366b29e5bba74409138f8db1ed6163e25819Virustotal results 35.94%Heodo
2020-10-30FILE_542971243.docdoc a51d194ff7cccab7defe2f64127934a4ff3699de37c60019b40dd62d631baf04n/aHeodo
2020-10-30list_OUV_100120_WIB_103020.docdoc 3faba02f0eb970ef25a2a874736e4f758dd3424cdba2637795ada41385024679Virustotal results 31.25%Heodo
2020-10-30Rep_PIS_100120_XVJ_103020.docdoc c0f5989eb238c0d187f0a5341698ac293ee524d1132278aaff5ab4144a4b91a2n/aHeodo
2020-10-30V_VAK_100120_KKC_103020.docdoc b33622a59cee3ca443a74701f86f58ee524e9901c05d359270575f52d7d37380n/aHeodo
2020-10-3049969619573966642229.docdoc b3f4e1b87633e71363d9e97c4f845e09d36e833b8d170f184946c8764cfc8f12Virustotal results 30.16%Heodo
2020-10-30UNTITLED_64980443.docdoc 2bd445000ef12b82a7dbb15a89578a71ad17a82cf8b2f19239fa60afb2ba84f3Virustotal results 26.56%Heodo
2020-10-29O_PO_10302020EX.docdoc 5eb2cd7fd89bc000cab80454ba0da8cb954a960d3b415bc26039832a7f6f7544n/aHeodo
2020-10-29PY08N6O56CI4YVM.docdoc b716fa67c934451161c1be78e1587b3c68a53b5e219dc5452e9ea883d32a274cn/aHeodo
2020-10-29INF_40365263.docdoc f4d2f6dbbb53d79cccef95feda58515350e863a1f1522bf60c830c0230754866n/aHeodo
2020-10-29REP_PO_10302020EX.docdoc 1fa65cbd054792ed8ce72d5729cb95a5810f1371e5b096b2f1a099416c193420Virustotal results 26.56%Heodo
2020-10-29Mes_PO_10302020EX.docdoc 9f944d45d5e7d40e9f1fce8f48c7fae48a14b56666b6c149b9a2f028567d2019n/aHeodo
2020-10-29inf_95622093.docdoc 53af27fd84005d52576f0314e3d69537d573c6b97a0c54d7fdd7f36ddb8ea38cVirustotal results 34.38%Heodo
2020-10-29FILE_NEC_100120_IMQ_103020.docdoc e5ee1bc6b5f6544f1d789848862c6469f2f32c20627bb4e410a1bc21f0005817n/a 
2020-10-29Untitled_GXN_100120_JPV_102920.docdoc 8427c429a000ef90470422cdc8d29bce81566f87f24f9ae2df228dbee3ffe5cen/aHeodo
2020-10-29Mes_XBJ_100120_FMO_102920.docdoc 1aa45bfd6fa4890726daf11261b2aa4a7a23e9506d1845fc62edac1734669c26n/aHeodo
2020-10-29M_HWJALFS47OQ.docdoc 0b5277c050ee4714b138f9c9a8f1b1b0a3193f3cadb6d61a5037172d4bd11c54Virustotal results 31.75% 
2020-10-29mes_28317467.docdoc 2751d59d7f5d6861ffb622c3456b70ccbbf70fada26f49f7f12e4937d90495ebn/a 
2020-10-29list_M5PYXOTG9.docdoc 2d94f5620906f353b2bda6b6eb984695737cdecd6ddc88ca747fad5bc457d090Virustotal results 31.25% Heodo