URLhaus Database

You are currently viewing the URLhaus database entry for https://confinementxxx.com:443/have-a-ogtn/BbU1zz40LtzharekOxNx2C1J6Hdj7ZHwc7zTvk4tH/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:956117
URL: https://confinementxxx.com:443/have-a-ogtn/BbU1zz40LtzharekOxNx2C1J6Hdj7ZHwc7zTvk4tH/
URL Status:Offline
Host: confinementxxx.com
Date added:2021-01-12 19:50:06 UTC
Last online:2021-01-13 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-12 19:52:11 UTC to abuse{at}online[dot]net)
Takedown time:22 hours, 44 minutes Good (down since 2021-01-13 18:36:32 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-13NH45VHY.docdoc 841f665e7fa0dafb08a148c375fc49b0594eecdf01d44cc9b7ea8e6c6b5fe024Virustotal results 41.94%Heodo
2021-01-131Y6LWN1ILL.docdoc 8ddff83c83492a8bc6a52b0a004b38fdcfed910dc5f7a8a979bc873e4cdec8bdn/aHeodo
2021-01-13LTK7SY22YNTAHQ.docdoc 5dc4c3f58fab032df0417e80aff4b59576063bf6de4933fb9c726823e26bfd0an/aHeodo
2021-01-13H5QO70572YN521OT.docdoc e15c02bbd3d290f0492a1d6b55ef31424f833b24c9466e30744fdbed4665363en/aHeodo
2021-01-13LCCI6S.docdoc 312b117cbf5978bd3892498f1a639053b43bcf66ae14b5d0eb891706fb266dc1Virustotal results 40.98%Heodo
2021-01-1355HLNKO2.docdoc 17ae598e992451fcbd61f1dfe70a4added1091173dadd5cb163aea9902eaf79aVirustotal results 38.10%Heodo
2021-01-13G4B1XPUBBNI.docdoc 4ac3c771a4cf5e381984161bbef7c1df3a4c5b75d22d5c6dfd6b494d0cdfc073n/aHeodo
2021-01-13MH6Y1MRN9.docdoc e7fa2a17209d359c64add22c0de40f7f9189e8bd88e22d26aa7a441e2df65826Virustotal results 37.29%Heodo
2021-01-134WP5L8I.docdoc 23c41682a5b7d44bbfc6414dced3e22fca261b1a79453adb5a295f5b546bb2c3Virustotal results 39.68%Heodo
2021-01-136WADHLSVQ.docdoc 46d4a0c1be9a8747f58729ed8c21080f7edfdd441d6f69190ee458588bd3f739n/aHeodo
2021-01-13NAC784ARVDXJFP.docdoc 097b546148ccae5d28356e609d5d5e40e78842cc86fbd8f95294c716cf972a15Virustotal results 39.34%Heodo
2021-01-13ERLDTIP5J.docdoc 69d9dc566e89715d0579eaf0478cc5266a91f3535c5dc33db6c532c500a2737cn/aHeodo
2021-01-13423WAGHHIS8U0B.docdoc 69213fe20f37b11ee793f1a08646e8743dd43057e3590d982c1dcbe9c59e9cd9n/aHeodo
2021-01-132LUJJ5F1.docdoc 1d60cf7a5a88c9b4a1b2c9ea649413891cd78db09b85027981ec9491cb954e1bVirustotal results 39.68%Heodo
2021-01-13OSZCXJ.docdoc 35345cd48a8916d674171ea9a1db6b43cbf826e9cc2113010029abd5df2b4568Virustotal results 38.10%Heodo
2021-01-13KSZQMT8K8WD.docdoc 3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfcn/aHeodo
2021-01-13OXLINTXMIU469.docdoc 3b34e75cce4b617fd876f0145c30b4ea5af865c2edb3b8cc89fdc268bb347b1aVirustotal results 38.33%Heodo
2021-01-131Z8LLDBMC.docdoc 8119507768cd4e6016c010e4c444ef4675e3e44509c9935d10dd5347aa9e5619n/aHeodo
2021-01-138H7KGG9L6T.docdoc 21fbf4fad1a3c433a33e1e70f775b52d7f6243128a4b3864e4ccc686bdd8948dVirustotal results 34.92%Heodo
2021-01-13MQWTKXMOLQVZ2L6.docdoc a6be34fa6cf893e275df8c7de812ab38668c6b552a5ed46b7c168ccdb9e0535bVirustotal results 32.26%Heodo
2021-01-1386LKZOABY6AW.docdoc 2ca474c61c439d6ec322184ebdd33ccc28bcf529017a60caf587861aed611734Virustotal results 30.65%Heodo
2021-01-13HQ89J76.docdoc 91a4617e7fd2b891c584ea3f54b6a9864aca1ba6ac8c5a0a4e450bd374b60f6fn/aHeodo
2021-01-13PUIHLNA.docdoc 516934f4b1dddd1c001c82e6f19d90214c1e05c076dfc0eda2f3e75f86027019Virustotal results 33.33%Heodo
2021-01-13RYR13S.docdoc 2d2fa64b93abf2055071f77d797832e29b37dcf63c6991b6dbfd0e779af8c115n/aHeodo
2021-01-13JJZ4PUU8H.docdoc 9617152d4977e3655150c324649d7b7a49dd0924d8da12bd8c7385f4288fec9dVirustotal results 30.16%Heodo
2021-01-138BWORFTFXMTMEW.docdoc 2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90Virustotal results 31.75%Heodo
2021-01-134OEK2X5OJG1JXD8L.docdoc 866744b3695d0b0c7d2e887aa1d3b2be95583ae6a88f31fbc0f4f6c150477804Virustotal results 29.03%Heodo
2021-01-13W819OV.docdoc a4b2c79223d87bc6523817efc6ae96ddb3a517b509a0907f5aa47ed93cf1bd78n/aHeodo
2021-01-13LPLAX8QJ5MVZ8C.docdoc c3b7ff21320580568f7e1b978e5374ccb1a15fe34c35f94eb2463c1570faf385Virustotal results 26.98%Heodo
2021-01-1357E93YAFDNK18.docdoc 274ec03dc6e83bf12177697052207e2413c15948b42bb11df4a4ee110eb84803Virustotal results 26.98%Heodo
2021-01-13Y262UP2I9.docdoc 3d0f797849969d919b2a23e7c8b525550fb34076e60df60ab4e380fff6c8f9f4n/aHeodo
2021-01-13OUC6DRRTQE6.docdoc 6519108ab0d32b865e06f74784831341df7a5c7a0f02221511a5a13b8762e375Virustotal results 25.45%Heodo
2021-01-134X9YX7LYFC.docdoc 02a4f728e72a9b3f8acbdfdce4bb3390cdbd32fd2a8ff9d4294afbfeb8ef65e6Virustotal results 24.19%Heodo
2021-01-13S9K5B7PTT1KO.docdoc d28bde1ee5fdd7503e931d3388cc0fdfd2cd36fbd85ed35235e2b828bcc99b90Virustotal results 23.81%Heodo
2021-01-132NL9QGV.docdoc 6dd61c1c1722407d98c22ce2bcbf6c2b85714a23daff8c45d5ea2f52cac15e7bVirustotal results 20.63%Heodo
2021-01-13RZLJ0AI66X1OE1.docdoc 5cc80cc17bbb89808db987af2bbfbe02975c1d67cfb77ac0a9a5af0468a36210Virustotal results 22.95%Heodo
2021-01-135PV7A9XG2X7.docdoc d93333dbffefb763131024dffc1c0723d897a65c7b8d2701f5fa5bc9498ae89fVirustotal results 23.81%Heodo
2021-01-13FWGSRVIG.docdoc b80739d7b435e5a620e5c121269e1f8a2050a87d1a4d6b934107346c62d09ddcn/aHeodo
2021-01-138HWCSRSR6A9.docdoc 5e1578d0acac3625f838389363b6e3d5ee3b946ce7ecc681ba00d134eb4ff07cVirustotal results 19.67%Heodo
2021-01-132IE7VQ8.docdoc e09bae676d8815d4702fabeb1ef597939a2bb90033048d1b25e1788fcb13fbcdVirustotal results 19.67%Heodo
2021-01-13J46R0NNMO606.docdoc fa94db36e6f47c1aaf4d141055594716287ceb31cfd4b5ce0ab5c350cffc7969Virustotal results 20.63%Heodo
2021-01-12SBNNHUP0O8.docdoc 82cbebfcfcfbdd97e4f714428e572c4f2320187eac194b733816109c957e9505Virustotal results 20.63%Heodo
2021-01-12FG1HHATERJ0OSN.docdoc 64eb7d3d61983ec4c3f76417ab3adae35e948beedfb837b63af638d04a455825Virustotal results 20.63%Heodo
2021-01-12M539YZEXVBPY.docdoc 301d903a09e27602747f3a822625776a38c01ffd4fac6e3dcedafdf6f49369eaVirustotal results 20.63%Heodo
2021-01-12F8YUK1.docdoc b75406d6fe0aa668a576c191ab39489f0384ceeed853597d9f951bbf8b11326fVirustotal results 19.35%Heodo
2021-01-12OJGDQF.docdoc 7fddbf064d9c7c99d9949a3af2f5f9fcbce61a69b80cd3c81bbe12f58cc68484Virustotal results 20.63%Heodo
2021-01-12X7PWMP9PS6.docdoc 0f2701f8a2887d860bdb0dfe233f7e25ee8852103dc87658ff1b67b34a1c30b7Virustotal results 20.63%Heodo
2021-01-12OMK4IUKMSZDU.docdoc 988a420c56f820f5165a56b7d242998ef580c2191ef089928aec599f8732533dVirustotal results 20.63%Heodo
2021-01-12UFVJ5B72SA1TLJ.docdoc 20a4ce10015e7f7a188f078f556014c53e2c1c3e00f1b335c8ebbd4395a13ff6Virustotal results 22.22%Heodo
2021-01-124TY6H1PJT0.docdoc f600525e9280548fe835cab0f2e9787ece76beb23c5406eb2da734d00a17b0d7Virustotal results 22.22%Heodo
2021-01-12PW0I14LXHYL9AEOK.docdoc 57b7b51bda5f296173d4b0d759d9eedfe6eefe1b4eb2b4b1f5f614a603e6a520n/aHeodo
2021-01-12PXGLJ1JAIE.docdoc d0e3b3e28fb9cf4cb84c946ba315eee5cf8235a2bdadcadb3d1208efc7b65799n/aHeodo
2021-01-12SYMGOE.docdoc f5df15a2bad05924e80f9b8b4a7ab5cff4eaf93d14b38e831a83811df2a49efeVirustotal results 24.19%Heodo
2021-01-12TYNC450IMJL.docdoc 3c88f3cdee299ae2064992462b5614af071d49d53b467005204d98748a55b8cdVirustotal results 20.97%Heodo
2021-01-12QCNWS9SXOZ8.docdoc 81d39810e27aaae72ecf4954290cc9133abe3fd0968a9f787c224017b5ade239Virustotal results 22.81%Heodo
2021-01-12MSEKJ3.docdoc 7fed81b2005afe17f17e6ac15591680f799252529e47781730bd5925974cfb42Virustotal results 22.22%Heodo
2021-01-12DD79T70HZEAN.docdoc 1c5577ae92907b0a10a1bef6a52aad25cc73e79b523c737d07e2f012009d7eb7Virustotal results 26.98%Heodo
2021-01-12NF8T1IY7Z8.docdoc 2439ee9fc3c9ff3abb5350b061df8a74a208cd42d2d808372179bee8e8b84e39n/aHeodo
2021-01-12QIORGG28HVAOD.docdoc 5dc8879e45c66e6828353ae4f543d11ff810806cf4609fd4cd3f8d5e768a722dVirustotal results 26.98%Heodo
2021-01-12UVR9ODG.docdoc d467f9a02f79716aa2be169215870e4e98ca00cbf2b8b27bf37840376355df4cn/aHeodo