URLhaus Database

You are currently viewing the URLhaus database entry for https://ook7.com/content/8bN55sDa2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949545
URL: https://ook7.com/content/8bN55sDa2/
URL Status:Offline
Host: ook7.com
Date added:2021-01-05 16:56:07 UTC
Last online:2021-01-05 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-05 16:58:12 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 25 minutes Good (down since 2021-01-05 19:24:01 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-05TV2ZKNQFC3NSXJ.docdoc e2acd6ae6ed366ae3de33aa5f1cbb3f959f57a24ce0678372e404747fbc3b671Virustotal results 41.27%Heodo
2021-01-05OTYYRI.docdoc 8244590faad750ada6f77a0967d82df9343e6e5df6882ec4926f1024d041c2d9Virustotal results 41.27%Heodo
2021-01-059RX44R5H1N.docdoc 1773a8c5d6382649ab2e7e2112e57bdda624b24119e1ada51954b38032a25554Virustotal results 41.27%Heodo
2021-01-050X233R3FA9N07F.docdoc a37779b6f1f49e151fd55eba01eb3ecc3227cdc246bcc7b08e55397fa81ed172Virustotal results 41.27%Heodo
2021-01-05DROIEN7J.docdoc 3139013c53da9f4c7c2fed417c91a6c3575034b75234dba4d13e5a9c0a5cead8n/aHeodo
2021-01-05R6BU4TG2ENJ7D.docdoc c8716d77cc9731a9bd2f9e62118940e19ef0e5f78720b842f7fd47d53300282aVirustotal results 41.27%Heodo
2021-01-058OI6ZMQ2YGR5L.docdoc 4e3a0ad4ce849705cfb0b25ceb1b9447b104129bf30552f0fe1591fac04a39a5Virustotal results 40.32%Heodo
2021-01-05XKH6U5TQ.docdoc a8713fbee086f687f8bd38ea51497a24ef912675ebdd1738a8d2190f980d6b57n/aHeodo
2021-01-05POQGCL.docdoc e988587a9306a7454ba6dd4d9d1797f145d62cec0d590d00cc35e756a99e48f8n/aHeodo
2021-01-050QICP3.docdoc fa90e0414292c307ae04890084372a4b38edd0edaf017d4482f5b621c2ce8952n/aHeodo
2021-01-05A3KXJ2C44PEUK.docdoc d46ba86119e2dd83214de690677f6a6804a514580f74a8b698bd9feba2c914a1Virustotal results 40.98%Heodo
2021-01-05S9Q14W.docdoc e12c4473716e02a44b64ae27b0840e9790584a1388ae4c8b86ead6585ff1fc42Virustotal results 41.27%Heodo
2021-01-05TO29WH.docdoc 50427b012e3fc35f90d9473514320fce89169d4734d1d7fe25f968f76f3190c7Virustotal results 41.27%Heodo