URLhaus Database

You are currently viewing the URLhaus database entry for http://bergdale.co.za/wp-admin/jejxy-dzb24-ljqqgzz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:157944
URL: http://bergdale.co.za/wp-admin/jejxy-dzb24-ljqqgzz/
URL Status:Offline
Host: bergdale.co.za
Date added:2019-03-13 07:00:42 UTC
Last online:2019-05-01 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-13 07:02:17 UTC to abuse{at}optinet[dot]net)
Takedown time:1 month, 19 days, 8 hours, 39 minutes Bad (down since 2019-05-01 15:41:31 UTC)
Tags:emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-14US08790963480977.docdoc b386e29b91a22090f09e821c0aeb8b171d2b693116d8d95f4a4596788bb59f45Virustotal results 30.51% Heodo
2019-03-14XNRPN62713666276679626.docdoc 3c3b87897819b700ec830e317fdb2d79448f4d7af9c7b7f831aa554a1989caben/a 
2019-03-14KQFTJ51032324253060297.docdoc bda6b548338581f754a4243b16097b266b88a85800a1cefd5935f25bfaff1e4cVirustotal results 27.12% Heodo
2019-03-14INSTR96477145414.docdoc efb91ffac8f4f2dfae8c44f7563896c5162cbbb4d7420262e758792b547a5335Virustotal results 29.41% Heodo
2019-03-14INSTR073981572859.docdoc c682ff24eb382238b5001dbe9d62b86c3b4e04e46617e05c50939a8940858ff7Virustotal results 23.21% Heodo
2019-03-14ACC7866151134.docdoc afb618b3e57391c0a07ca2a2e8c9080fcdcf2331f4790cb47c3352abab9e8025Virustotal results 22.81% Heodo
2019-03-144279164196617654.docdoc b82fc3b172816f41a665579eca3642ae67afe8bd74810828e19cd82f731ffbb0Virustotal results 29.31% Heodo
2019-03-14INSTR4168107052895320.docdoc f9380a52275a0b8661bfbdb17992ae6e15d8053f3ee937f2bdaccaa9aa0987e8Virustotal results 26.79% Heodo
2019-03-14IHMS737743432.docdoc dca4d945c877cb761af0260da5444b51786fdfdb0eb4f3fb749ece6ba86bcd80Virustotal results 27.27% Heodo
2019-03-141968224576278843.docdoc 6463b40e63fdb8fe75bed1c9c568c990dd6c52c1a772b81a02c9f4c827bf3b2aVirustotal results 22.03% Heodo
2019-03-14971655286958799221.docdoc 168399973502212b1938656d770f7c8197c3cc6cd45ec9198495a1ccca08c90cVirustotal results 23.21% Heodo
2019-03-14ERTMY2534844405.docdoc 90b389ea0ad281d78c57b8002497b12c3665f4ecf533785b679a75583bb729can/a Heodo
2019-03-14ACC952305110731.docdoc 5f5a00ed2f6f8e405a0800e7d34ac7fec27a2019e2385ae4dc25d9e59f36840dVirustotal results 21.43% Heodo
2019-03-14HPS595891496861077093.docdoc e2db4bb6197ceb3f7f526b90f798ab50ae9da76d3bb73613d099762a4d9114fdVirustotal results 22.81% Heodo
2019-03-14INSTR5308778124.docdoc 456159e926a54ef47b04b71e38c1ce18f61497e88eb7d9543b7274cda809018cn/a Heodo
2019-03-149236223496381.docdoc 7f601495b0e3cbca55b2019a759af31ae1628ef4cb9706b73322e6640c861e0aVirustotal results 20.00% Heodo
2019-03-14ACC441153669555895.docdoc 04ca9621f75adf50a9f0bce9ae46d4bc7d800c7cc92b823f73cbb43855ad2da1Virustotal results 21.43% Heodo
2019-03-14INSTR521710610203750.docdoc b8daa50621bbf387c2cab8d2788eea874f3e178d75bc3978b3bb817aedb6ecb3Virustotal results 21.05% Heodo
2019-03-14US1160399323980.docdoc e34c2e3d493cf67c31fd7adfff5041b773f3a45b959245e62d922e93c1750573Virustotal results 21.43% Heodo
2019-03-14ACC2625523786.docdoc b0a1885a6c9c9acdcedb5a167dd6ea48a160e9b0a61a49a8d71070f76a5dcad3Virustotal results 21.05% Heodo
2019-03-14INSTR425185190022358.docdoc 7cf568a80f9e6e47a18e36d724ef05e22799ff9458d5b6660b428b2d49553e53Virustotal results 18.97% Heodo
2019-03-14INSTR828816299.docdoc 36eb851688c4d08e8e913010a08ae48647d9f414f66e52227dbb1aeedf5420edVirustotal results 18.97% 
2019-03-14INSTR463976440.docdoc 3d6f9d448cf807a6ead21e2ecc9eb419d99222af0fc1c5a4d051857cdf34f189n/a Heodo
2019-03-14PAY64786776881435698529.docdoc 4a8b46e4acf204a5c90e278f8cb6cf7c751c0de754991e64182f7788c081d85en/a Heodo
2019-03-14CEDSF4433294138561.docdoc 8f1931f7bd6758af6a41b0e553ce691acd035b57f59579f5f38ad4ec55b649d6n/a Heodo
2019-03-14INSTR13449270387095.docdoc a84f577a6a828fa6e52967597d0e9c724d84c368a82f0735b327a6299396da54Virustotal results 21.05% Heodo
2019-03-14INSTR233784649008.docdoc f7435edefb20ef0ff2f05f5202b2429bf56a72409b19f316af5dcc844ae5e0b4Virustotal results 20.34% Heodo
2019-03-14ACC00806927427271030.docdoc 2e358c3b5c303b1e4202d84d134698aab2d3d51fe6201b8dc183da58a089819bVirustotal results 21.43% Heodo
2019-03-14US30857572796.docdoc f44eba5083630aaf1b74be5801c80b25617e17b16f91c6d1e0b61918a80cb24eVirustotal results 24.14% Heodo
2019-03-14EONL5739691471648854.docdoc d4289aa9de0d2c6c43c6e6974a683d035a3028d9bc92721523a1812124489640Virustotal results 24.14% Heodo
2019-03-14PAY235423804846.docdoc 8c77b90bcec1ccfdca3f73dcc1835ec0b99a6bc07abdd01a89ad8d8274e92db1Virustotal results 26.79% Heodo
2019-03-1422023934650967561.docdoc debf1ecc7c45e8bac881e02196120c8959248527587a5c3b7b88b3fde7fd1288n/a Heodo
2019-03-14O36080565395460322347.docdoc 2dd867e283fc4339fb8e50e5533a33c54d74a5c7a751f3658d7562776d2d4aban/a Heodo
2019-03-14PAY42668037570584065676.docdoc 7be5fae00a742991167b5c94e8c70fce4386dd1b9edd3809b3b6d6371033ec71n/a Heodo
2019-03-14INSTR9970627337226702024.docdoc 833985e81022a7cc0ea35d711858fe9b13b177447b6af63797582ec791157534n/a Heodo
2019-03-14V9371608052886651543.docdoc 1834e3a7f71294a8d9ed80ecb42f3d267a7e90eda5c3c3ff4114724318dbfe26Virustotal results 22.81% Heodo
2019-03-14R366454411.docdoc 2ee4992b3d273f10d16c3addeff7f5ff6d7f498f542be2522777680d2eeb0e38Virustotal results 24.14% Heodo
2019-03-14J579846448.docdoc daca06f67f177b0e7b659f8c3d954b1ab06f563f2cbda3e1cdababf5e02b796an/a Heodo
2019-03-14PAY7906036176690364.docdoc bb98d6883a5d7169513f3b6016fe927ec6a44d1a5c0b661112175e66e554e719Virustotal results 25.42% Heodo
2019-03-13PAY239828074413.docdoc 0e0f87407e98baf9c5a00a2ef33319ded224cb30c352208cc00972a3931412ecVirustotal results 23.21% Heodo
2019-03-13PAY25145596408922623.docdoc dc724e42ec75a11bb8303c163323cc54689a0d99950b5a912c7586d1255ae591n/a Heodo
2019-03-1339336316213795444.docdoc c8ccd9bccc525a4ee561fcb42daca80c8c4b116579e4bde8197777d416b7e8bbVirustotal results 25.86% Heodo
2019-03-13US012654542.docdoc 08aa80a6582dd6738d7afba27bb39ef88b0168d1a7ce656ec02863ca5f9d3474Virustotal results 23.21% Heodo
2019-03-13ACC6405939995.docdoc 1228b439b723a9009e82cce1f7b50d99fc24e09a271d5afca9a758ac9fa4f7f8Virustotal results 25.00% Heodo
2019-03-136534442694997574.docdoc 07195b1c470d44d02650b4eddca96698fc79cc91a50f5794cba66ebeb72ffaa8Virustotal results 25.00% Heodo
2019-03-13ACC03038294881408315362.docdoc b05b6104f9cf5885cd0e95d71086b75aa958c95ce56d62f49bc4b9820374acaan/a Heodo
2019-03-13PAY762397967806.docdoc ba67ee187edf67affde3b109037e866e3754198de04fee3deec965cbbaa5f8acVirustotal results 25.86% Heodo
2019-03-13YOL2479565260108.docdoc 453ae71569c49be9931836de1975dbe6391f599db93ebf1d25dde287b6a7b4e0Virustotal results 25.45% Heodo
2019-03-13PAY5786129817431.docdoc 035ff77c196a9179e00d6767ac5c3ae754ce4876670144bcfe53fbf62ee11621Virustotal results 25.42% Heodo
2019-03-13INSTR7019099366368.docdoc 2fd6fde0096dc8267c469772b413e930a025c94c92c581b01f82caee15f2c4bdVirustotal results 25.45% Heodo
2019-03-1376676998755.docdoc a3bda6ae0782fdb40dd26ed33fb1168f05ae1b1e5c5d420a3dde5a1cf747b3f3Virustotal results 25.00% Heodo
2019-03-13003407395942213672.docdoc 0b773b5e59c67e54c5df0c164f3114003029896abb569affe089ddd3635fba02Virustotal results 25.45% Heodo
2019-03-13US57320371610226.docdoc 4e5f528dc971e4d928591fcb12617187c253ec93b5342287c94becd825754f2fn/a Heodo
2019-03-13PAY70961568188438.docdoc 5bdef04d199d548f940201ad17a530ee2ff27a76c95ab4ab321a5b1e8d259fbcVirustotal results 24.56% Heodo
2019-03-13US5544241872020.docdoc 4dd0c2414e57ac8a5dbae791bca1911aa53a404b01c37b9ceba0961a35787991Virustotal results 22.81% Heodo
2019-03-13INSTR941230089752.docdoc cd75eda017abff329abfa5162be02c8042c86730dd948a6b423d3ebce5f5e3b8Virustotal results 23.33% Heodo
2019-03-13INSTR292373826090.docdoc f679763abeea019bdfdc22e23d9be3159ca1f325453f34e94954bee50176664cVirustotal results 22.41% Heodo
2019-03-13ACC06367311293343359.docdoc 1157bbcfa2438b4142bc1dc163952714ef2e084cd27698f5c2f78193367f8033n/a Heodo
2019-03-13ACC3587952000.docdoc e09474de88f323075c3ef4ba54c458e3275ee102b72a2bfc4894e79a9703c542Virustotal results 23.73% Heodo
2019-03-13BIJRM3187583941456354254.docdoc 6295b0ffde635729cc0aef53a06ded688f669bf3f6e613929ee22b5472152df7Virustotal results 27.12% Heodo
2019-03-13PAY751672762467042115.docdoc e22b8402e2deef40b1d2f6e8f57744dba945fa04430c1c44b6e32127c143ff05Virustotal results 24.56% Heodo
2019-03-13US6733859812980.docdoc 38621a8ae5316ff3ea50746e746c16c4df6a4d9df0ccda56332b450019461d75Virustotal results 27.12% Heodo
2019-03-13ACC9607337719622876406.docdoc 3b44f8ac63dff8be2361c9be9767bdcf8e58a35e4d985c5ed9625304e0211b50Virustotal results 25.86% Heodo
2019-03-13INSTR396482199.docdoc b2f349451dd5ac198c12d4fffb265ca99f0d9325939b53570aa52ed6a94f56b4n/a Heodo
2019-03-13SNQ2917235395368410538.docdoc 5ddbf58f792b050f2451b4cc8658747da000c4ffa4cfba9b2b09acd649faab72Virustotal results 23.73% Heodo
2019-03-13PAY61503721600006.docdoc 0ac845a32b3f6d9de16fb02bbbe80b278862610284abd0c5d711cabbd4046162n/a Heodo
2019-03-13ACC0575160187688561359.docdoc 7769b1c45fbc460c5b14a5b623d82dbdd22535b80a99d770933132253cbddc20Virustotal results 19.64% Heodo
2019-03-13US28762520145.docdoc 062080a241916c13988d1be4196e03855c473fcc3cb370bcf988643a84bf36c4Virustotal results 20.37% Heodo
2019-03-1359022554007.docdoc ca1dd75b2b289e24966828108846664b2a0c664ccf1a992f15edcadd73c11c34Virustotal results 24.14% Heodo
2019-03-13INSTR01022694020613476.docdoc 97f1937fdb3e3352a8d543d9fa888f317342469159f447909a32fdcf12ef2375Virustotal results 20.00% Heodo
2019-03-13US103299697.docdoc 97d756aa53ffafd6ee88e1e873d9476014bea132e6e8922e001eaeafde70d1a7Virustotal results 20.69% Heodo
2019-03-1341391774753865.docdoc 54d8c502a0b6326dc098a1ff932662a1f394f28c8392f30143bd08084ae87addVirustotal results 18.18% Heodo
2019-03-13ACC6502764145.docdoc a07fd7d2cdae5fbf0001cae6c854480647bfdd147e82a79de54d0b142fd09a75Virustotal results 17.54% Heodo
2019-03-13ACC678960303555.docdoc 105adeff0a2090e95c400094a1f1ae53e4ff2b57677c771e5e10291e81b5d9bfVirustotal results 18.18% Heodo
2019-03-13INSTR924169944723.docdoc 19bffbd1d63574f440e9ccd70a2a188558010d8a1f34fb175b1cef2f6f13e2a9Virustotal results 18.33% Heodo
2019-03-1387358848778.docdoc 09155122612febf71e09c3e646831af62c6a3c15202b196ff378c363e9f09051n/a Heodo
2019-03-13USQP677110262872241877.docdoc dd8f42677463d31afea67c4849c85d1e6b44c47dbf6e6dd91d51bb5f8506712eVirustotal results 23.64% Heodo