URLhaus Database

You are currently viewing the URLhaus database entry for http://antislash.fr/blog.bak/wp-includes/js/codemirror/opax-utpao-sbbz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:162496
URL:http://antislash.fr/blog.bak/wp-includes/js/codemirror/opax-utpao-sbbz/
URL Status:Offline
Host:antislash.fr
Date added:2019-03-19 22:39:06 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-03-19 22:40:03 UTC to abuse{at}ovh[dot]net)
Takedown time:9 hours, 41 minutes Good
Tags:doc emotet epoch2 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-03-20722466358.docdoc365e98c9680bb5642b6861c90c5a265eb65d5272e38a767c1559acb82d3c3c92Virustotal results 23 / 58 (39.66)Heodo
2019-03-20US1506270960.docdoce0dd530812d079c2c5b907ca2161c78d6ba99e33168716aaacd09775fc0ce059Virustotal results 22 / 57 (38.60)Heodo
2019-03-20US513817991485.docdocc026fa10b57b6ea2ebd6d6efc4a04df4b1edf8b13ce1c660b615ad0a70a8a714Virustotal results 24 / 57 (42.11)Heodo
2019-03-20INSTR755712110076966.docdoc98e02877c3a5a85005f4dcec2877221186532fcc2e64e6f2f5ce42a114fd2f19Virustotal results 25 / 57 (43.86)Heodo
2019-03-1929986596575591638.docdoccc3271ca03f5d8f33444da17467e0c5416241643267bdb6bffa34a38ceefee00Virustotal results 22 / 58 (37.93)Heodo
2019-03-194175618199892559.docdoce545364bfe8e1e072499b805fdba2566887c176ac004783879bb66b22983c671Virustotal results 18 / 58 (31.03)Heodo
2019-03-1911215050968817275.docdocf7821a0e84fb83151caf26a8ac681206999bcca59c085c6c8b74acae73485707Virustotal results 21 / 57 (36.84)Heodo
2019-03-19INSTR9560647608860.docdocd57ef7145fdb0b552de07acffec8e01bd1eed943a6a3fa34f3bf32615631998cVirustotal results 24 / 56 (42.86)Heodo