URLhaus Database

You are currently viewing the URLhaus database entry for https://felixbuy.com/wp-content/i2voYV8WTY45O5rbDHmPaUG32W8gcEErxGpwshbaivAuWoFf1E/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:769433
URL: https://felixbuy.com/wp-content/i2voYV8WTY45O5rbDHmPaUG32W8gcEErxGpwshbaivAuWoFf1E/
URL Status:Offline
Host: felixbuy.com
Date added:2020-10-30 13:08:05 UTC
Last online:2020-11-07 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 13:10:04 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:7 days, 15 hours, 17 minutes Bad (down since 2020-11-07 04:27:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31Inf_84305994.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31file_WJ2964716840FE.docdoc 7b23df6f1bd4b2e428624bcf7423651fad4742e21e6992d0df41d6d94c199169n/aHeodo
2020-10-31Untitled_FT8573721555ED.docdoc 396b664fbdde301d1ebedd54f4beacf4726ef9fe1d0807a86fe0b00e0a71772dn/aHeodo
2020-10-31Mes_9472294359174753402135523.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31Dat_DO2074828668ZF.docdoc 780ffddf2dd1fac9d6fc091c707c84751ea2180a253431c3b4700989bd3fc21cVirustotal results 54.84%Heodo
2020-10-31File_2HFTF14RJ.docdoc 03b477c67a30f1cc63aa897f954709c42c74cc2907d8639805398a4615cad1b6Virustotal results 52.38%Heodo
2020-10-31INF_IFE_100120_NDN_103120.docdoc 96636e8803958a85be6974b0fc6c91e24526ae529a00c31dcfdbf3ed761c5304Virustotal results 53.12%Heodo
2020-10-31FILE_BY1797166634OU.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-31file_81112933.docdoc fd8f13344d26c5d17c5e011b675168036c5f7265b73c84afecc0f34f5adaabeeVirustotal results 53.33%Heodo
2020-10-31Doc_96564825.docdoc a77843eba99adffde7cc22482865a6e64cd0217a4779ec035d11d060982996e7Virustotal results 53.12%Heodo
2020-10-31FILE_QJ7523162578QF.docdoc d0173484a8073ed5336acc965770f3875b704785bf08f59a929f20c65512e1fbVirustotal results 54.69%Heodo
2020-10-31PO_10312020EX.docdoc a914d86d2a97040bb1c91827828f9ec8e72e18d73ca90d884b5d385e4c9793f5Virustotal results 53.97%Heodo
2020-10-31Doc_0852554368699422431065922.docdoc 9c96edb7b23fe316d7ea6705b137c283da2aba4f7dab4537a681e7e5d031b0eeVirustotal results 25.40%Heodo
2020-10-31list_OVW_100120_UKK_103120.docdoc 4946591b7b99f626dafd98d333aa5c669ce9d3772e5ff1dc85e5d1cec281db99Virustotal results 26.98%Heodo
2020-10-31ANG_CWOZXYVWKR2NC.docdoc e5cd96964e28663db382662eddfbd4bcd53693acaa9f14bf3c7382c61a16aff5Virustotal results 26.23%Heodo
2020-10-30DOC_XLK84QIMV1.docdoc 9918cf9fc52a9d19fe483b17d847fc7fa23d4fe150c5df91abb94e61e932cf1cVirustotal results 53.12%Heodo
2020-10-30FILE_666166200070572.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30INF_FV3236497535TW.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30Untitled_PO_10312020EX.docdoc 917a6b067e825cb71b0d60b4e428f283cdbf100bcec01e467503d18077125c4cVirustotal results 51.56%Heodo
2020-10-30FILE_4TY6H1PJT0S4.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30arc_39401743.docdoc e08ab7ce7103fb7f881b565ba2688430333bb18fd593efba0f991a3e6994b907Virustotal results 54.69%Heodo
2020-10-30File_83988076.docdoc d577446435b94d0af2a829f1160b594e95c8051f6b069400ff61fa38d151ba54Virustotal results 51.56%Heodo
2020-10-30Arc_RHN2QE23YDNFTC61.docdoc e37545649e9e7c9250af64a93a2fa3e37fd90ab7f9c16e96b4469290f309b52bVirustotal results 23.81%Heodo
2020-10-30DOC_PLL_100120_QBZ_103120.docdoc 8cfdaf7b364045782c53fe4094501d577114deba01267ff8e074d14d7d27833bVirustotal results 23.44%Heodo
2020-10-30Doc_PY4527279424FR.docdoc 90d39ca6bdaf9c010fd7f3a5d3c8588f1c777498f544ec5ad64329b6c06621b9Virustotal results 22.95%Heodo
2020-10-30doc_QQX_100120_EMM_103020.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30ARC_51248042.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068Virustotal results 23.44%Heodo
2020-10-30FILE_110398543486332.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30file_PO_10302020EX.docdoc a24c2997fb1b27e97d94e67fa2efe79081cb3329192ef55f1765271679241990Virustotal results 46.88%Heodo
2020-10-30Doc_SET_100120_SKD_103020.docdoc eb5d0c08628c3ec2c081dc472157b78cff5ee705d96de5cd061c582c575bb7e9Virustotal results 44.44%Heodo
2020-10-30List_H161PAWRG7XO1734.docdoc 95f86b4f2c917f1be1fe02e3566a23e45621c342db18356aa485387fe799b06cn/aHeodo
2020-10-30dat_5354184756244381794.docdoc 5aeb983f62e296373a25bdde163ab799f0bd688f40567310960f16b815921687n/aHeodo
2020-10-30REP_MES_100120_BDG_103020.docdoc 6e473a77d345ee6f0f3c0371d26f9b187bf9e59a7d4dc18956b24db4f264fe49n/aHeodo
2020-10-30Rep_8S039Z2.docdoc 33478c951541dfc62cd1b974afa9e6be46b51b140a5228aa4f34f417a17b8a64Virustotal results 42.19%Heodo
2020-10-30UNTITLED_PO_10302020EX.docdoc 7c159d17e809a78bad3e024cda533ebab493cc8519755e2946af59e11eac9eben/aHeodo
2020-10-30DAT_6278672292201755318222.docdoc 2a25d8a1cbc4a93a1a7f07a290d36e24c0e2750b65badf5e91709eb644fad12fVirustotal results 43.55%Heodo
2020-10-30inf_TM2570350140RW.docdoc d36fc443a8a4b5f37847f531ac138bfde6a960224bd3c0878d16ca60c2c02094n/aHeodo
2020-10-30mes_TON_100120_LGS_103020.docdoc 390be22b6546961bdf840560ab4b25598b3b46211ef3c9e4caffbcbce597fa4eVirustotal results 42.19%Heodo
2020-10-30Mes_FL0057774981TK.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638Virustotal results 43.33%Heodo
2020-10-30PO_10302020EX.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabVirustotal results 23.44%Heodo
2020-10-30Doc_QRBMBZ0KMTEMA.docdoc 615de4c01c61e261c017bd338c822b21b294728d9f7bac3199e139be0d1c3675Virustotal results 30.16%Heodo
2020-10-30rep_75984664.docdoc 707c72de47acccb16c314dd4caf9d70d1f1db071447b55b1466aa1fee91203c9Virustotal results 27.87%Heodo