URLhaus Database

You are currently viewing the URLhaus database entry for http://virtualsalud.com/ice-table-ui4is/cywVx6te2xNOMeKQOzqpqZug8gl9wDWgfhS1mEc2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949869
URL: http://virtualsalud.com/ice-table-ui4is/cywVx6te2xNOMeKQOzqpqZug8gl9wDWgfhS1mEc2/
URL Status:Offline
Host: virtualsalud.com
Date added:2021-01-06 03:53:04 UTC
Last online:2021-01-06 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-06 03:54:03 UTC to abuse{at}godaddy[dot]com)
Takedown time:15 hours, 4 minutes Good (down since 2021-01-06 18:58:37 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-06ENL25GTEZQK29.docdoc 5cdeb766f37fabf36c2ba04b505360b64db16bba5291a143a43a631460461122Virustotal results 55.56%Heodo
2021-01-069SQDXWEIRQMS.docdoc 20e14707efc648839a55cd8297a14ede4490c68b493b193b7009dfc1546d3883Virustotal results 55.56%Heodo
2021-01-06GFD4K0R8.docdoc a7a00bc14284e050390346c6107435073d7a5c9437774e1e1347537266e9a6c9n/aHeodo
2021-01-06HFPOHUWRCY.docdoc 1a2240a1b93c241221a8801762613ffcdbe8840b783abbbbf0de723ca86d4f95Virustotal results 55.56%Heodo
2021-01-06VWPZ9PAQCJ.docdoc cf6b517dc42a9f9a8ea4a15a44a95fd6994ebc5ccb0f547be2ad41cf79fb9501Virustotal results 55.56%Heodo
2021-01-06PZ9T4PW2SW0U.docdoc 33106382c9cbe16b085ab858eb94c47939f8245ccad5701acb365a431743d249Virustotal results 55.56%Heodo
2021-01-0626BLU8IX.docdoc 6357ca03d61fbda5c6bb4c9d077bfc05fde8629d6e1a780c1c450d30837a660dVirustotal results 55.56%Heodo
2021-01-0616AD5XYHCAREQ.docdoc 0de801b837a312d3b8f2261ee67cc0aed27efeaf1bdb8caa282dd4efaa314b96Virustotal results 55.56%Heodo
2021-01-068BXA71GA89IWJG.docdoc ee8bc000ee93b9fe36a73a563427f5e809bfe50e843d0cca24dee394dba1d5c1Virustotal results 56.45%Heodo
2021-01-06S98P3O4XDJII55DW.docdoc dec66fdb96e83d1b75a5087a67d2763670ca3d818999e491bba2e95d60bc5a08Virustotal results 55.56%Heodo
2021-01-06RBH2KGI.docdoc 67cabee2a3dcf8a53b1ea9310c6028996c8811e1e2c7f2411ed79f99e60a1341Virustotal results 55.56%Heodo
2021-01-06IGITZ0HL.docdoc 212f20819f4e55f8230ff785b1831fc23c33751c2e0929626acfc1e3cd03dc99Virustotal results 55.56%Heodo
2021-01-0693OTTRNLW7B.docdoc d922d1004c4d02e73649e740bf4c84475c3b05792cf10ec60dc206e20e77b7fcn/aHeodo
2021-01-06LFO036HRPT54K.docdoc aa1d66929c9077c84bb85e61359693060bd76049ef9f79b7b7938539b9059747n/aHeodo