URLhaus Database

You are currently viewing the URLhaus database entry for http://bobvr.com/EN/CyberMonday which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:87427
URL: http://bobvr.com/EN/CyberMonday
URL Status:Offline
Host: bobvr.com
Date added:2018-11-30 11:40:22 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-11-30 11:42:16 UTC to sales{at}dfw-datacenter[dot]com)
Takedown time:7 days, 5 hours, 4 minutes Bad
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-01CM_COUPON_FILE_79648.docdoc cd4ce1fa9dadd9e3bcd5a2be80b5592f06323da1ede95dc6cf867aa43e6c8201Virustotal results 42.37%Heodo
2018-11-30cm_coupon.docdoc 9f4c05053abf1817e311fc4698fb506570beb4b3de4c4618fd7a299723913253Virustotal results 33.33%Heodo
2018-11-30cyber_monday_coupon.docdoc 5dc6792a5bfd5fde89c06e866cfb7c951d0c7b1e7109153476ef2e592e94e5c3Virustotal results 20.34%Heodo
2018-11-30cyber_monday_coupon.docdoc 7d2cd8f856ca03cb884259fd8d4bb650421fb3480d77b6906dd9cf5fce3069f3Virustotal results 20.34%Heodo
2018-11-30cm_coupon_file.docdoc decff07689de0b6b0ee806a13209fa0731dfdc2d824f2d638928de6a5a55b191Virustotal results 20.00%
2018-11-30cm_coupon_9064.docdoc 1284092607a87238a9634841d978a24db0d59407e1d63e41d74079671503e487Virustotal results 18.97%Heodo
2018-11-30CM_COUPON_0884.docdoc 2d5e703cc9ac91416819ad9b2cbd1efd5845ffeeeec34cc1a0cb9c1155415c26Virustotal results 16.95%Heodo
2018-11-30cm_coupon.docdoc c6c8ea00a4a2eab743427ac1b019afacb7e9dbfbcb55f0dcc2a27baa4f68367en/aHeodo
2018-11-30cm_coupon_file_2545.docdoc f93be6df6b1fe5ba139ebf1e6e0404392015c19480e72648528fae1eee86e168Virustotal results 18.97%Heodo
2018-11-30CM_COUPON.docdoc 6c6910c2dd36f372874bb4554cac7aac725fb72ba2e07cb1550219c54f147f08n/aHeodo
2018-11-30cm_coupon_6351.docdoc 85375e2f9b235906c7a4c3d27c42373db8bb7cabcec62561d39d6c9a1726d3fcn/aHeodo
2018-11-30CM_COUPON_FILE_5242.docdoc 75957d8be31d9a03caefd7905f96c38bbdb434c9887a6eec627de9a548720f49Virustotal results 18.64%Heodo
2018-11-30cyber_monday_coupon_file.docdoc ca53803da83b5c6716c71ee692905ae11f798b13c42bd2ed8963e5003b51407dVirustotal results 18.64%Heodo
2018-11-30CM_COUPON.docdoc 84a8b82276393a5afffd2bfd144aac06882f6c45ac8fdc9a45c0f85d2a1a6e1cVirustotal results 18.64%Heodo
2018-11-30CM_COUPON_4982.docdoc 963915efdbd548ca299e3c37baafc873803a0d91b7e45a2ee30b440d2fdebf08Virustotal results 18.97%Heodo
2018-11-30cm_coupon.docdoc 2f7bfe5c74b9e4cc45d7b1414986b3f8349aec0264c131a8d9c28a1bd84faceaVirustotal results 18.97%Heodo
2018-11-30CM_COUPON_FILE_5182.docdoc 7eda1cf9d07dce159143140aa305db8bf2253e885f2d1955947620d79daf2be8n/aHeodo