URLhaus Database

You are currently viewing the URLhaus database entry for http://bobvr.com/EN/CyberMonday which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:87427
URL:http://bobvr.com/EN/CyberMonday
URL Status:Offline
Host:bobvr.com
Date added:2018-11-30 11:40:22 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-11-30 11:42:16 UTC to sales{at}dfw-datacenter[dot]com)
Takedown time:7 days, 5 hours, 4 minutes Bad
Tags:doc emotet heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-01CM_COUPON_FILE_79648.docdoccd4ce1fa9dadd9e3bcd5a2be80b5592f06323da1ede95dc6cf867aa43e6c8201Virustotal results 25 / 59 (42.37)Heodo
2018-11-30cm_coupon.docdoc9f4c05053abf1817e311fc4698fb506570beb4b3de4c4618fd7a299723913253Virustotal results 20 / 60 (33.33)Heodo
2018-11-30cyber_monday_coupon.docdoc5dc6792a5bfd5fde89c06e866cfb7c951d0c7b1e7109153476ef2e592e94e5c3Virustotal results 12 / 59 (20.34)Heodo
2018-11-30cyber_monday_coupon.docdoc7d2cd8f856ca03cb884259fd8d4bb650421fb3480d77b6906dd9cf5fce3069f3Virustotal results 12 / 59 (20.34)Heodo
2018-11-30cm_coupon_file.docdocdecff07689de0b6b0ee806a13209fa0731dfdc2d824f2d638928de6a5a55b191Virustotal results 12 / 60 (20.00)
2018-11-30cm_coupon_9064.docdoc1284092607a87238a9634841d978a24db0d59407e1d63e41d74079671503e487Virustotal results 11 / 58 (18.97)Heodo
2018-11-30CM_COUPON_0884.docdoc2d5e703cc9ac91416819ad9b2cbd1efd5845ffeeeec34cc1a0cb9c1155415c26Virustotal results 10 / 59 (16.95)Heodo
2018-11-30cm_coupon.docdocc6c8ea00a4a2eab743427ac1b019afacb7e9dbfbcb55f0dcc2a27baa4f68367en/aHeodo
2018-11-30cm_coupon_file_2545.docdocf93be6df6b1fe5ba139ebf1e6e0404392015c19480e72648528fae1eee86e168Virustotal results 11 / 58 (18.97)Heodo
2018-11-30CM_COUPON.docdoc6c6910c2dd36f372874bb4554cac7aac725fb72ba2e07cb1550219c54f147f08n/aHeodo
2018-11-30cm_coupon_6351.docdoc85375e2f9b235906c7a4c3d27c42373db8bb7cabcec62561d39d6c9a1726d3fcn/aHeodo
2018-11-30CM_COUPON_FILE_5242.docdoc75957d8be31d9a03caefd7905f96c38bbdb434c9887a6eec627de9a548720f49Virustotal results 11 / 59 (18.64)Heodo
2018-11-30cyber_monday_coupon_file.docdocca53803da83b5c6716c71ee692905ae11f798b13c42bd2ed8963e5003b51407dVirustotal results 11 / 59 (18.64)Heodo
2018-11-30CM_COUPON.docdoc84a8b82276393a5afffd2bfd144aac06882f6c45ac8fdc9a45c0f85d2a1a6e1cVirustotal results 11 / 59 (18.64)Heodo
2018-11-30CM_COUPON_4982.docdoc963915efdbd548ca299e3c37baafc873803a0d91b7e45a2ee30b440d2fdebf08Virustotal results 11 / 58 (18.97)Heodo
2018-11-30cm_coupon.docdoc2f7bfe5c74b9e4cc45d7b1414986b3f8349aec0264c131a8d9c28a1bd84faceaVirustotal results 11 / 58 (18.97)Heodo
2018-11-30CM_COUPON_FILE_5182.docdoc7eda1cf9d07dce159143140aa305db8bf2253e885f2d1955947620d79daf2be8n/aHeodo