URLhaus Database

You are currently viewing the URLhaus database entry for http://bergdale.co.za/wp-includes/yu7s-8vo13-fcbmqq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:159948
URL: http://bergdale.co.za/wp-includes/yu7s-8vo13-fcbmqq/
URL Status:Offline
Host: bergdale.co.za
Date added:2019-03-15 09:38:24 UTC
Last online:2019-05-01 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-15 09:40:08 UTC to abuse{at}optinet[dot]net)
Takedown time:1 month, 17 days, 6 hours, 1 minutes Bad (down since 2019-05-01 15:41:16 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-15INSTR279336327119371.docdoc f350612cd869a24a2eda1831234957a0d039007e64060b0532960a9daaf76d03Virustotal results 41.07% Heodo
2019-03-15ACC68021387805200.docdoc 37d1202eb265a09f8a50520c4d3709d0db0020c1f6700ab5fba2acd5bf8612daVirustotal results 40.35% Heodo
2019-03-15ACC4373222855286707.docdoc c523c1feaf944ceda2f7cd3f7153826adde1c17bc1cfd23315e1b1d853adf4ceVirustotal results 39.66% Heodo
2019-03-15ACC32309792929256363.docdoc cac22557ceaec572f0783ebe2e01fbfa9356d447a8efd457a46a8c3c0284a9c7Virustotal results 35.71% Heodo
2019-03-15643628294.docdoc ddf8088e8d20e6320e6b8381ffc11303bae71c0ced56739ccc4a00cdd5ebd249Virustotal results 25.42% Heodo
2019-03-15ACC415223464608.docdoc 43addf8c1d6a54c0d082c7bbaace5789c44f5d94a5b18b65c621dd55cb9d68e6Virustotal results 25.00% Heodo
2019-03-1593015690538076.docdoc 7d9e94517584a288d05bc6da8a38a2e55aec5f05481e752eb56343857f02ba4eVirustotal results 24.14% Heodo
2019-03-15US141639626544766.docdoc 39752866b4e0aab0bccc1d8a153619ab2e6b01d18802d2e0db2590576e85d263Virustotal results 25.00% Heodo
2019-03-15US04243373166121.docdoc 2fbd64621b79df5e283e3a678f8e19f5d6915606c3c3b76aa51b8ec43be5115fVirustotal results 24.14% Heodo
2019-03-159495758170460.docdoc ede18ac09dd9ab563bc95d5a3a3d91e0319bfc5b0bbae509fb03ba8c11228e22n/a Heodo
2019-03-15PAY88603771579838156.docdoc 509067b017fc594b417b93d6fb8b122ac7fd467fc384ed3e06b34d4fea8e36cfVirustotal results 25.00% 
2019-03-15INSTR343537361505068662.docdoc f236525e9c45c8f47c90b25f282b107183b7d0926d4e9f821bf2c50a8b6e959dVirustotal results 24.14% Heodo
2019-03-15US8824914374934.docdoc 2c26a0a8a62cccc87a258f73ac8d0a3ed16b75ae85923251140d14b174fa200cVirustotal results 23.21% Heodo
2019-03-15US38301747601951047.docdoc e54ce33083b377ac80463785d9300214958673ff30797750da30d0661f82f35fVirustotal results 22.03% Heodo
2019-03-15355646026826.docdoc db407e674507467231a1a24ebd21199212ab21a70a35bf4e735419d22f32c89aVirustotal results 21.43% Heodo
2019-03-15PAY747356542672730.docdoc 56443b5dcae8501d615a7b2982bdb51c47bb7fe239224ea898da35bcad6511aaVirustotal results 21.82% Heodo
2019-03-15ACC264893480743285969.docdoc ba95bec390cf5b946e1fcd0021d188c4a7cf3198cd2aeb9d48cbbdf173de7660Virustotal results 23.73% Heodo
2019-03-15INSTR9700016409046.docdoc 58a852c0f098dda910e51699d10c457e0e5f329bbf36074eaa42b189a0670afaVirustotal results 24.14% Heodo
2019-03-15INSTR77872902462201207297.docdoc 2d90727ed2fe84052ac39eab12e5a2b5423b7433702f143813c31b74df3d03f9Virustotal results 21.43% Heodo
2019-03-15826282567436.docdoc c2aa60c14d857f98e372b34e710a13341c110c0b57baa52f5feb30e461bfe122Virustotal results 22.03% Heodo
2019-03-15978433237646.docdoc 1846e510c68959be3da55f9c9779b33c86b056aa0027add02dc1bc37d6917ca3Virustotal results 21.05% Heodo
2019-03-15PAY9366027991500.docdoc bf1a1ef70a4d2f45740c873eb408f2c8d8a4a90da6479afcb93a6fcd75b1ef11Virustotal results 21.05% Heodo
2019-03-15ACC5308759755.docdoc 6687c785ca45539ea76158d1af08f3e58031d01130cb76d510863f786aebf4fbVirustotal results 22.03% Heodo
2019-03-15TMSVH9556653499313138.docdoc 956ebdd66cd219be94e56d98379369c32d6251ebcbd7948d0f465050efae55ffVirustotal results 22.03% Heodo
2019-03-15US14569894404650.docdoc 89115bb2c800e35a3db323f329857f37cc82ef33376ab911fb5f246d8385aff2Virustotal results 21.43% Heodo
2019-03-15JKNNM07141204111130737.docdoc 07e992db0d01560e68faf557acb2b60b9978577c27522d70a4f2fa2f347bb430Virustotal results 21.43% Heodo