URLhaus Database

You are currently viewing the URLhaus database entry for https://lacigognedelily.com/cdle-unemployment-qsnl5/XiSfW6I/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:937875
URL: https://lacigognedelily.com/cdle-unemployment-qsnl5/XiSfW6I/
URL Status:Offline
Host: lacigognedelily.com
Date added:2020-12-22 10:31:04 UTC
Last online:2020-12-22 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 10:32:03 UTC to abuse{at}ovh[dot]net)
Takedown time:6 hours, 43 minutes Good (down since 2020-12-22 17:15:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-229CJ003679JF5.docdoc a8c1f150daab98147a293aac050fee6728d4f7a1a2e2756967902641234b4ec0Virustotal results 40.32%Heodo
2020-12-22EVELGE.docdoc de156d934984014292776d34ab173ee1fa9352b96ff42780479fc6eae2b114d0n/aHeodo
2020-12-22QOLLJA21I26USMTF.docdoc 6f31c56a8ea0949ade1a3cabc55e00d367bb073cfaf7f1b447258c79483910f4n/aHeodo
2020-12-22VXHFH3UUYKVQW3.docdoc c8ac23a5b83b2d66b18d0eb20ab24fda394d9f565db0aa64893890eea9461b0an/aHeodo
2020-12-227T0M5PO5HX8.docdoc be0dbaaec3415c76acd2fa6e9c3969d8bf86f058be7e69e357518e173ba4d246Virustotal results 33.87%Heodo
2020-12-22WBHL4OD24N4XD.docdoc d119b2da995343a322c42995a220a5d61f07c6fd252ce79a3ece58d89bb66690n/aHeodo
2020-12-22BQ99N8ESC.docdoc d314d90e4d1d49a5c8c82aa438c7c5c4be663a4f68879244a87adfffe358f8b0Virustotal results 35.48%Heodo
2020-12-22TYG2XNZEU5T08.docdoc 6b865ef4ff2653d141429f88dc0b8e77f14d9315c583a24169804ef1a619dbd4Virustotal results 35.48%Heodo
2020-12-22YQMMPZB4QPF5P.docdoc 6058ef6e0e5b82a128a30c33b6c685e0a574af7622f39cf0cb68326e76c0f391n/aHeodo
2020-12-22T832W4Z2M7BTTTW.docdoc 7ec200a834392208ae8521c4804d11ff669137b4265b732a17660527ccf3cf36Virustotal results 36.51%Heodo
2020-12-224BQOFLRVD197.docdoc f5d52678316f377c59a3f063b29a06a415106d5833d1786533d7abb7e27008ceVirustotal results 35.48%Heodo
2020-12-22V1W5LM.docdoc 2eb890f47074a802abff73fabb722541ca607ff36a0139e4d236e875191e0078Virustotal results 36.51%Heodo
2020-12-22RVWHQBO.docdoc 5d45aae2fb42f515daf99e0df859fe8fb728ded811e109bb5221a8b34bcaaed4Virustotal results 36.51%Heodo
2020-12-22LVHUKXXCD12BES.docdoc 7be2388880d2ad20b0cfa616a726d7c91d2904da8f3f8ad4d2236d3c79e935fcn/aHeodo
2020-12-22M46BX0NKFK.docdoc 44567a5fc7455899c29966d8b05b823a60aa48487ed47b4ee9262fbd73bb6a1dVirustotal results 34.92%Heodo
2020-12-22A476KGCHLSZJ2D.docdoc 1ebb0eb36a2dba1d5dd9648b8e96e8e7c03fb0cddae7d0060ad0aa7990f5dcefn/aHeodo