URLhaus Database

You are currently viewing the URLhaus database entry for http://dukecityprocess.com/hunjH-xLRYqNMSoZcFdT4_tXvaBJVtZ-eN/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:97555
URL:http://dukecityprocess.com/hunjH-xLRYqNMSoZcFdT4_tXvaBJVtZ-eN/
URL Status:Offline
Host:dukecityprocess.com
Date added:2018-12-19 02:22:32 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-19 05:46:05 UTC to abuse{at}inmotionhosting[dot]com)
Takedown time:1 day, 7 hours, 6 minutes Poor
Tags:doc emotet epoch2 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-19PAYMENT_42HRVHYTR.docdoc3c30d85ddeb3b7789813bf0cb26694c8a3ca67510dde9006c6156d746ae3038dVirustotal results 15 / 59 (25.42)Heodo
2018-12-19PAY_953174FFCYTJ.docdoc248ca0fedf868de5e654e46ac320c53d4e1a993cf5eee9555487f9b090826eb5n/aHeodo
2018-12-19BIZ_8012768HPQJWS_12_19_18.docdoc7d6a8299b739b0adab7f7a7de68546f85d342c8d74bf600cdc5ba74cb23c6c78n/a
2018-12-19PAY_89KHDVCRZ_12_19_18.docdoc146a9c6bd988da0c52af9e1713460d8cdb4d6d8381436dc07a40cc575d35f901Virustotal results 14 / 57 (24.56)Heodo
2018-12-19PAY_1969894KPHQDYQG.docdocd7dad079c927b2a813afb05a8ed63c96bd1fc51493211a333353190bd17364e3n/a
2018-12-19PAY_117ZNKNAKVR_12_19_18.docdoc28e57977dce308dbc4cd0ad1798a0e474fa6799ffaeb08552c0007f11db2a076Virustotal results 12 / 58 (20.69)Heodo
2018-12-19SWIFT_57PQNSVTD.docdocb83c0865858bccbce5c01b0742388e42a0488eb30fcee7721976c5cdfed00d7bVirustotal results 13 / 57 (22.81)Heodo
2018-12-19BIZ_974OSAFFFSJ_12_19_18.docdoc9efdbd1634ef495f3ab7c4ec375a63561229cd525fad6c77de215151073b9d33Virustotal results 13 / 60 (21.67)Heodo
2018-12-19PAYROLL_8TQONDXJL_12_19_18.docdoce7aab61d0b14783852d75ba3ca2c2ec3e492b9ea6d7690a4790a973c4cb605cdn/aHeodo
2018-12-19ACH_6119XOURGN_12_19_18.docdoc1b340a9aa9c8790300ed47b2276889e940e455a0fb137c96d9eead64ff2485c1n/a
2018-12-19BIZ_7ZCTHEM.docdoc04d007044c60d5b7844a703192b99f300be05bb33f3990fe9c24e0f362f3e153n/aHeodo
2018-12-19SWIFT_885GSMGEQZV.docdoc067ecee2043f00f9fb808345b1011e2ae27bc93819eec5a6b3cfc62ff7e22cf4Virustotal results 12 / 59 (20.34)
2018-12-19SWIFT_218BOCJEBT_12_19_18.docdocfebf7acef2c382493b17876c764161df9c9607b3cd4ae1ffd78b975d6f6432a3Virustotal results 13 / 59 (22.03)
2018-12-19PAYROLL_9408201DPWGYVT_12_19_18.docdoc45aba1f73b444db6f902da25e15f1242e9709c6fed8c62dca8b3df9ccc1d0026Virustotal results 13 / 60 (21.67)Heodo
2018-12-19PAYMENT_06103KQUWEA.docdocaf08045d36e35240a30df61ef15d005fa89d9913dc13dc107522da4a388190a1Virustotal results 12 / 60 (20.00)Heodo
2018-12-19PAYROLL_543JBOOPKCZ_12_19_18.docdoc9f2d35cf3f882eac45b6859bd076e25e9a7f0ac202d32c0818c485caf48bb431n/aHeodo
2018-12-19ACH_3VDXOVI_12_19_18.docdoc0aaf85dc89203908fe46acb4c437cc40a27042707eb5b126bc74f65a14503091Virustotal results 15 / 61 (24.59)Heodo
2018-12-19BIZ_101FBXUNU.docdoc39f98e51bcd3696766ee8f0e7c7f7b5d87d75ed730a19ef63cbf88b74cf8f0cdVirustotal results 19 / 59 (32.20)Heodo
2018-12-19ACH_287904GRJJZZ_12_19_18.docdocb5f541fbb40c0d640d12be78d3216ee304eeef771284634835a1274ae0c01f89Virustotal results 21 / 58 (36.21)Heodo
2018-12-19PAY_63CBHZUSTP_12_19_18.docdoc496ce2697cd55557a8aff83e217e25b29c8ee4fdf0244840b8bd47e966338417Virustotal results 16 / 61 (26.23)Heodo
2018-12-19SWIFT_135FVHINWF.docdocb1860aea8f9db8d2b56563cc583ff86d1614e9f0833630a6f66f71b01b4e99dbVirustotal results 15 / 61 (24.59)Heodo
2018-12-19PAY_3649JCEZPEMS.docdocac17f5bd46ca6bfa6459703b1cb3a425fffb75f70ad5ca614271e1324660a6ceVirustotal results 17 / 60 (28.33)Heodo
2018-12-19ACH_9764HHCVYZBI.docdoc84aafbf9d47a7a0ae083e19095bd77adbe89cbac7654a1b2e06287149630017cn/aHeodo
2018-12-19ACH_403QVRQUKST_12_19_18.docdoc50632d251a7b1de4f23848e4d4acb8eb7c486bf1836f1b28bad17c39f5d00e61Virustotal results 16 / 60 (26.67)Heodo
2018-12-19SWIFT_972654BDIOFZDF.docdoc7f46994c46c6bb7e3fc1db32374ece7c4b995e862dc0c77519bb60f39892f71bn/aHeodo
2018-12-19ACH_591BZGHWD.docdocb28e8f562bda44771dea997e5faac39f0dc9a0130297ac78f0da2d7186e7cb7aVirustotal results 16 / 60 (26.67)Heodo
2018-12-19PAY_680225XHXUQO_12_19_18.docdoca49659834b434c6d7c056a9b23b1ae424f6057c9c558f575c44e2c77f03c0be2Virustotal results 17 / 58 (29.31)Heodo
2018-12-19PAYROLL_11733WORNIQZ_12_19_18.docdocc5dc38fa3afdd42c38e195f36a1e854a9a7b6349a9c6886bca1c648b197ad494Virustotal results 16 / 59 (27.12)Heodo
2018-12-19PAY_30802USCUXJK.docdoc7f6e6b81e6ef353cdb4fa2fdb301217967423523198023d84f02e1065f926547Virustotal results 16 / 59 (27.12)Heodo
2018-12-19SWIFT_74JAKUMKP.docdocc2245d89df0a0f4fdd164a942fcc25c93de8b71e0bedbe3ad75d80fa43b85c69Virustotal results 17 / 60 (28.33)Heodo
2018-12-19SWIFT_22VOLCMEY.docdoc55dc3904dd389970bb84c2a83ca781b036a170319a111c010ef22d8322323f39n/aHeodo
2018-12-19PAY_8732CGZBUX.docdoc8e0237b45c3642ba9e5a6ebd6ec3e98d28bf2e247b652289e617c0eeac1c70b7Virustotal results 15 / 59 (25.42)Heodo
2018-12-19BIZ_368460LCKOBW_12_19_18.docdoc7b2fc161d785a30c22f537fc9f08a7cd3af7b852e8e67864252122631be2522cVirustotal results 15 / 60 (25.00)Heodo
2018-12-19PAY_7HYUOVASF_12_19_18.docdoc5b8246000d7f87b4e1623ca23cc9825755873bb3b04737bc3c3fe70bdab597aaVirustotal results 15 / 59 (25.42)Heodo
2018-12-19ACH_8417WKEBYJ.docdocd7757f8fdc6f0bf688b94389053d1cb5bf04eb0f29216b7a92f7365e35545616Virustotal results 14 / 59 (23.73)Heodo
2018-12-19PAYROLL_011382GREJZN.docdocfffa3c5424648aae383e3b6b6824c99a4229a821f9b84bd223a01c4a2d402da6Virustotal results 13 / 59 (22.03)Heodo
2018-12-19SWIFT_2112783GHLVDF_12_19_18.docdocaceaca2a5b483f991c93162935025122fc98d3063e213cf95d8d218f4d8c273eVirustotal results 14 / 58 (24.14)Heodo
2018-12-19PAYMENT_7461BWVXRLBN_12_19_18.docdoc7157db494c843e62935afdde0486c81d0b55f828f512a4d805e9bc4172d46e65Virustotal results 14 / 60 (23.33)Heodo
2018-12-19SWIFT_784LGOSRL.docdoc6eeebfd2c3e7cebfb0ef3cd6c9bd6515e945949d60834ce9db5359d1b2cbd154Virustotal results 19 / 59 (32.20)Heodo