URLhaus Database

You are currently viewing the URLhaus database entry for https://cleancutmeat.pk/gravely-promotions/z10B2MYj4pzLu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:769259
URL: https://cleancutmeat.pk/gravely-promotions/z10B2MYj4pzLu/
URL Status:Offline
Host: cleancutmeat.pk
Date added:2020-10-30 12:08:05 UTC
Last online:2020-10-31 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 12:10:04 UTC to abuse{at}alchemy[dot]net,dnsadmin{at}alchemy[dot]net,support{at}vitalix[dot]net)
Takedown time:1 day, 0 hours, 14 minutes Poor (down since 2020-10-31 12:24:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31Dat_STA_100120_YLC_103120.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31Dat_68984397362528.docdoc 7b23df6f1bd4b2e428624bcf7423651fad4742e21e6992d0df41d6d94c199169n/aHeodo
2020-10-31Dat_XCI_100120_QYQ_103120.docdoc 396b664fbdde301d1ebedd54f4beacf4726ef9fe1d0807a86fe0b00e0a71772dn/aHeodo
2020-10-31Arc_JUR_100120_FRQ_103120.docdoc c0e896c6e7521d6431ca692ef69c30c605ab7e599336d9c027721e573d1b2161Virustotal results 58.73%Heodo
2020-10-31UNTITLED_ODX_100120_YNR_103120.docdoc 780ffddf2dd1fac9d6fc091c707c84751ea2180a253431c3b4700989bd3fc21cVirustotal results 54.84%Heodo
2020-10-31inf_BQ9793906563CT.docdoc ad6530753d959ec1d3305730db8985d3f0fdf9e9ce893c2f8bd8873ab51f8fdcVirustotal results 52.46%Heodo
2020-10-31Doc_619226534669379833962372.docdoc 289f8b4babc8f697bcbc3125ded9cfddefa96b986243538034beda8361d69a26Virustotal results 26.23%Heodo
2020-10-31file_XE4967219811NE.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-31MP3969566396SU.docdoc b104e5360f8f17268449e97ba36749b921cf7cdd797fdb8a28ffe20d8d9c59e4Virustotal results 54.69%Heodo
2020-10-31File_PO_10312020EX.docdoc b6fe7dca5aa33eedca9590aacbb7a67d89dc6c1a98cee170aca2c47518e01ea1Virustotal results 54.69%Heodo
2020-10-3177622982.docdoc 0406910d3c48dbd18d57086dcab9b4f73a8081dae9fac3010f0ae90b73c7c34fVirustotal results 54.69%Heodo
2020-10-31Attachments_66712691.docdoc d0173484a8073ed5336acc965770f3875b704785bf08f59a929f20c65512e1fbVirustotal results 54.69%Heodo
2020-10-31MES_ABS_100120_EBB_103120.docdoc e054d39b0aac7c2b6c6b76bc40435c1d0ffca154764349deefbc46f9d6ba453bVirustotal results 50.00%Heodo
2020-10-31Rep_PO_10312020EX.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 53.97%Heodo
2020-10-31DOC_UBJGIT12S75JRU.docdoc 4eabd4dcb81c28e86bbfd9ac62090d51aea5a733c96a8f3a7ad130a9841bce71Virustotal results 54.69%Heodo
2020-10-31rep_RLZ_100120_BYX_103120.docdoc 26b30e58ed2342d042367ba0487873439d5c9c28920ddd000bb94b3eac79d94dVirustotal results 54.69%Heodo
2020-10-30doc_JZK_100120_EBS_103120.docdoc 84f8bd87a1f8207da3a4722b9eee322be498919fed6323fe33c0ce60ef7aadcfVirustotal results 53.97%Heodo
2020-10-30DOC_RN4851830607HO.docdoc 6a8e52f8792ecae215c55e1f73b2895cc0b304ee39db3908356b71ac38722b0cVirustotal results 55.56%Heodo
2020-10-30MES_PO_10312020EX.docdoc 22a4eae8735782a3f12e3f7ee5b6d0839cd7c4a8b91dce6ce27e2414b2e5f817Virustotal results 51.56%Heodo
2020-10-3072391694570997366.docdoc 61aa32a570716ce0d7c579186cd0cc291148bdeb623f0709c3a0b0b3f3d4d384Virustotal results 23.44%Heodo
2020-10-30Mes_PZIDEENHJ.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30HK_XC3673806736UR.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cVirustotal results 54.69%Heodo
2020-10-30file_HEXYFMXUWYFU.docdoc 78bd1c6e03aab90ba0350183bb9aba52148938c5c4384fb2695473c6540e139aVirustotal results 23.44%Heodo
2020-10-30Dat_BL6484617969RY.docdoc e37545649e9e7c9250af64a93a2fa3e37fd90ab7f9c16e96b4469290f309b52bVirustotal results 23.81%Heodo
2020-10-30mes_PO_10312020EX.docdoc f7cd964fb73ef51565181df0b0bdc561fe166542fc297684546797abcbc24000Virustotal results 23.44%Heodo
2020-10-30Inf_68751393.docdoc 90d39ca6bdaf9c010fd7f3a5d3c8588f1c777498f544ec5ad64329b6c06621b9Virustotal results 22.95%Heodo
2020-10-30rep_PO_10302020EX.docdoc 894961b5cd902ae1bd280ad4d906f510e47f2d02fba5fc278823a37eabedcc7fVirustotal results 33.33%Heodo
2020-10-30DAT_461693114741.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30FILE_00B3L1EVI55.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068Virustotal results 23.44%Heodo
2020-10-30DAT_JMU_100120_VRX_103020.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30Mes_QWG_100120_QTC_103020.docdoc 8cc9b34e2f5d86937d174dd238bb8b4e27adb981bb7b44078e619ad9a438d218n/aHeodo
2020-10-3024973438.docdoc eb5d0c08628c3ec2c081dc472157b78cff5ee705d96de5cd061c582c575bb7e9n/aHeodo
2020-10-30DAT_0215616277093561294.docdoc 95f86b4f2c917f1be1fe02e3566a23e45621c342db18356aa485387fe799b06cn/aHeodo
2020-10-30Inf_365764566119199085.docdoc 5aeb983f62e296373a25bdde163ab799f0bd688f40567310960f16b815921687n/aHeodo
2020-10-30DAT_29123614.docdoc 6e473a77d345ee6f0f3c0371d26f9b187bf9e59a7d4dc18956b24db4f264fe49n/aHeodo
2020-10-30rep_693957163647922257.docdoc 2c5097835d871b8b00cd48eaaff51f4bd712a2eb97badc72cb7ae1f1db3a15fdn/aHeodo
2020-10-30mes_88481913.docdoc 0b8a8e7a53d7fe5cfe16dbec4b9d21361ce7f6eb2f21c9ece0c5fdea89d09b74n/aHeodo
2020-10-30Rep_30062207.docdoc 5c54212bcdb348c40a0ff7915e46c4299f70cf7e42bf5f9c4fb3172bafafe66en/aHeodo
2020-10-30PO_10302020EX.docdoc d36fc443a8a4b5f37847f531ac138bfde6a960224bd3c0878d16ca60c2c02094n/aHeodo
2020-10-30FILE_XPYA5JE14BFKU9B9.docdoc 390be22b6546961bdf840560ab4b25598b3b46211ef3c9e4caffbcbce597fa4en/aHeodo
2020-10-30WQQ_100120_XLT_103020.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638n/aHeodo
2020-10-30inf_UV00I8G7.docdoc 1e363452c2a67d40f01390488a99f68ce6fab805b45eab93ee2db2469bf1b05fVirustotal results 22.22%Heodo
2020-10-30DOC_JI1920310006AU.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 31.03%Heodo
2020-10-30ZC1952053897FW.docdoc 72cbfce2d1bb68f6583a651975d64056490779254d19bbf18636a754d88688c3n/aHeodo
2020-10-30arc_1H3OKHP.docdoc a77843eba99adffde7cc22482865a6e64cd0217a4779ec035d11d060982996e7Virustotal results 26.56%Heodo