URLhaus Database

You are currently viewing the URLhaus database entry for https://financelibre.fr/citrix-adc/1Uye/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:769150
URL: https://financelibre.fr/citrix-adc/1Uye/
URL Status:Offline
Host: financelibre.fr
Date added:2020-10-30 11:34:07 UTC
Last online:2020-10-31 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 11:36:23 UTC to abuse{at}ovh[dot]net)
Takedown time:15 hours, 39 minutes Good (down since 2020-10-31 03:15:35 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30Attachment_GT9974216519WB.docdoc 11b78b0507ac7cd6f99f0774c2838059fae12fa3f9b8878e6d5e3075496c37cbVirustotal results 43.75%Heodo
2020-10-30File_AURNVHMKX.docdoc 95f86b4f2c917f1be1fe02e3566a23e45621c342db18356aa485387fe799b06cVirustotal results 41.27%Heodo
2020-10-30Attachments_7CY5P7R.docdoc 374433b4b7b6197f4f9f41115f09cafa5907b8b1b2076963bc6c09e4227fd47bVirustotal results 42.86%Heodo
2020-10-30Attachments_06115545.docdoc b75935a097651bf38a480763eb4c9973e89974666e00bb021c25e21b7932c0eeVirustotal results 42.19%Heodo
2020-10-30FILE_SERE99YQI.docdoc 001aae9a58f6352962e2e1635ef52e5cdc08a8db7e51aacd096f41f9de8db0ecVirustotal results 40.62%Heodo
2020-10-30File_ACB_100120_SOC_103020.docdoc 33478c951541dfc62cd1b974afa9e6be46b51b140a5228aa4f34f417a17b8a64Virustotal results 42.86%Heodo
2020-10-30Mes_CMIZ9S6X1BRF.docdoc 7c159d17e809a78bad3e024cda533ebab493cc8519755e2946af59e11eac9eben/aHeodo
2020-10-30doc_68873156.docdoc 2a25d8a1cbc4a93a1a7f07a290d36e24c0e2750b65badf5e91709eb644fad12fn/aHeodo
2020-10-30K_XX6502746570PZ.docdoc 59eb7f8b98e7601aab446fe4f84b586ecf0ff8b5f092b8144441e50eed459684Virustotal results 43.55%Heodo
2020-10-30rep_PO_10302020EX.docdoc 390be22b6546961bdf840560ab4b25598b3b46211ef3c9e4caffbcbce597fa4en/aHeodo
2020-10-30Attachments_724117310131416060244.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638Virustotal results 43.33%Heodo
2020-10-30inf_PO_10302020EX.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30inf_PO_10302020EX.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09n/aHeodo
2020-10-30Inf_S1ZL87LK.docdoc 96636e8803958a85be6974b0fc6c91e24526ae529a00c31dcfdbf3ed761c5304n/aHeodo
2020-10-30Attachments_4702588024901027.docdoc b6fe7dca5aa33eedca9590aacbb7a67d89dc6c1a98cee170aca2c47518e01ea1n/aHeodo
2020-10-30PO_10302020EX.docdoc 9210f9032280641d080e5abde6a49a3032839cec91f757f2469a4eeeb4080afcVirustotal results 26.56%Heodo