URLhaus Database

You are currently viewing the URLhaus database entry for http://bergdale.co.za/wp-includes/tc9c4-d1wzjl-dtycg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:162724
URL: http://bergdale.co.za/wp-includes/tc9c4-d1wzjl-dtycg/
URL Status:Offline
Host: bergdale.co.za
Date added:2019-03-20 09:02:08 UTC
Last online:2019-05-01 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-20 09:04:05 UTC to abuse{at}optinet[dot]net)
Takedown time:1 month, 12 days, 6 hours, 37 minutes Bad (down since 2019-05-01 15:41:07 UTC)
Tags:emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-22CXXE66102910391711.docdoc 2ceff8b964e28e3e3e22cb5402388d1579d1775d69e1566aa3651304db09d291Virustotal results 26.32% Heodo
2019-03-21PAY54567519016222552071.docdoc f84cf4b2f74d46c278336998cbdafc4c504d4f7d92159f3f544a56fd6efb034aVirustotal results 27.59% Heodo
2019-03-21INSTR02099192082.docdoc eb1da76dea426a3883d544944e7f61a101b38d8d631376f80e7348da0b4a0d77Virustotal results 27.12% Heodo
2019-03-21916076067209.docdoc 938bec3c96ece76474ce55f056c692090556a42474dcefca9fe324ae55b7422eVirustotal results 25.00% Heodo
2019-03-21ACC3607934855.docdoc f350204912353f05749e5650f5af6d2d6997412e66f6d7613ab455da07fc5167Virustotal results 26.67% Heodo
2019-03-2142127182285476459010.docdoc 6b11d4062b01fdc2c31388bd5cfde91daad119bedd2821df9ecb15e61aaf4e39n/a Heodo
2019-03-21HYN13600190957463.docdoc 6bb9d7441344516184ec128484ac936c598bd6e97a3d0cafb2ce9ca0646b648eVirustotal results 23.33% Heodo
2019-03-21US91660487429356096.docdoc 1927493309e8283ca5acc7611fb06ed3ba0614a9b9ee58e42f0d05a39e7e9330Virustotal results 23.73% Heodo
2019-03-21A113196496586452396.docdoc c5fad6bef7050c279684827049a54939186a086fce741302eefd9fb437482ca7n/a Heodo
2019-03-212033873736563778898.docdoc 969c79c5d5346f38f74342951b0bba068af173e699eff0a3533fb9846e4dc5e7n/a Heodo
2019-03-21VRQR182094304194743593.docdoc 38a1e31b2486dd7b380d0ae2a2be548de061c180006b542ee32c1aede08b26f2Virustotal results 21.67% Heodo
2019-03-21238045615.docdoc 6ddd5a92f5bc648a1d993499ef5619ede9b68ece256ffdbbfdb4ea77e7bf837bVirustotal results 22.03% Heodo
2019-03-21US744946602106359270.docdoc 1b700680908ff3592b0fa5400c81b73e54767f7df6c355a7e3c87a828fdda377n/a Heodo
2019-03-21ACC300077801.docdoc a3d5a4e7e08c0ac7f90688022cca87fa108a83c454c2a83bb8f481533016761bVirustotal results 21.43% Heodo
2019-03-21INSTR413202316838613956.docdoc d3d4e794b15a2758f70a49f8ac1e8041a321aad86b7f158288dbed2f48ece7e4n/a Heodo
2019-03-21722025711625474037.docdoc cf27d0eacd5aac3c82c80e60d73e185ec871b5350c8118f2d5931c02e4db1b86n/a 
2019-03-21ACC58620267607560.docdoc 44d855d2d229adeebdb8ee1aa67cf53254ea12f5f0f0b1ccda9eb4f459c91c0bVirustotal results 20.00% Heodo
2019-03-21INSTR84773014925508.docdoc 3b5e01ebf7933b62e9d5c9a898c02d24c4334bdf2a75fb7910994ac98d5cc638Virustotal results 19.30% 
2019-03-210916758188293654802.docdoc e9151e567dd246150f218979f3ed597cd32348c1ab4676a188e4d1bd2ef64fe3Virustotal results 20.00% Heodo
2019-03-2115422445115.docdoc 3f7a01742d16606a6cf5fb5cc47c3f3cdc31190ba32f1984975667cb6778207dVirustotal results 17.86% Heodo
2019-03-21ACC0290131813630824326.docdoc dc0d89d87561824973f29e1d1869a57cf30754e7bf6767b4ae9c54f4414125d6Virustotal results 16.67% Heodo
2019-03-21PAY752624511572453.docdoc c78390d0606baa4570ae0ea9fab2e9c03a9188736a3dd09e83cd3cc644747da9Virustotal results 17.24% Heodo
2019-03-21INSTR864930588759.docdoc 466ab59b4162af31780ee8aa988abed58a799277ab9a15d9efa4736fb5cab30cVirustotal results 17.24% Heodo
2019-03-21PAY766478843347.docdoc 0252197d001ea7737ece0c7c4026745687485d8fe490de998e91df00cfa12effVirustotal results 17.54% Heodo
2019-03-212255468324128.docdoc d224874cf46c4526997f1ca3f502f651961830f4a949cb98059255da33175543Virustotal results 18.33% Heodo
2019-03-21INSTR235788846.docdoc 867d083f5e218d71a2ae027b6241c4d70d2eddb9fcaa092b851ee65d2f953ea9Virustotal results 17.54% Heodo
2019-03-21US6045635698660.docdoc 69cf87c9857c832821d4ebe8088e24ab8b8d68f441f3aed1745f50755449d5d2Virustotal results 18.64% Heodo
2019-03-2159420231555791.docdoc a55451987863af11c80fcda0477d6ca926f4e6a88f4e3ab13186071068c7f5fbVirustotal results 18.97% Heodo
2019-03-21INSTR3818115096486.docdoc c7f371abf9736dab50dc24649076f12ba3896957d058317b935852edacd5b181n/a Heodo
2019-03-21US97474565478238.docdoc 58662da58705895138890f92b581d39ab265a825e23915b7418c6dd169909b3aVirustotal results 15.52% Heodo
2019-03-21INSTR6849515770294575.docdoc 109d595f355f3fc989820d24d4b6ec8b9f99e27596ca0c0cc450c82ac96e0400n/a Heodo
2019-03-21US0960255017757.docdoc a2cf00da75e73c8d41d03a98592e4403e087bd6c9bd787f0f2981997ae651b75n/a Heodo
2019-03-21ACC01932710084.docdoc fdd3412cd195791b90d7b97af69ce00efc97361f85c49d8be1ba6701caed4dc3n/a Heodo
2019-03-21INSTR2171742751401475.docdoc 97cd696a458055d16f6ab9355e4231eb20e0928035aec1c3d066a848f47a5423n/a Heodo
2019-03-21US4550896944390979111.docdoc 3bf0376e98b421c0a1c8a32b20314c01082615db3ac238d3c254765bc722d464n/a Heodo
2019-03-21I46252887617.docdoc 6351391df902146d5b24dc85b79c1bf284bcc58029ea6d0507cd185469db5b17n/a Heodo
2019-03-21INSTR76645060165183538.docdoc fcedd5e2b48efb98526cd9b7462e8d771023f5257d6b52e170643c92bd3eae4an/a Heodo
2019-03-21INSTR27093244456.docdoc b936e27e3fb79efb1680941b7f4cb519f46a3722715facc2d27407a659a83a0aVirustotal results 37.29% Heodo
2019-03-2160800828059032.docdoc 58ebec99bc0f80218f9e36e121e22d569ce5b28b8b843990294c29f5ec7b82a6Virustotal results 33.93% Heodo
2019-03-21E0771080121.docdoc 6fca7aed972894debec3c11f25cca7ca9efe384eff513651d7a5d680f4c08b80Virustotal results 33.90% Heodo
2019-03-21US8659666632954580.docdoc 84811d076fae0f573eb91d0c8aa792dae2aeb6a5e6f0f989296e7bc97da67ab0Virustotal results 37.29% Heodo
2019-03-21ACC888840088.docdoc 706351643c333f88061c12b433e84ff56ce5b3fc89edb46423b7ca5fb1aa2981Virustotal results 37.29% Heodo
2019-03-21US452338378014416579.docdoc 6a78108ab0b40c65f501481fd0ea94c1541dcc419d93f12fb6a7a06d699eaaf2Virustotal results 32.20% Heodo
2019-03-218449876570359169.docdoc 329b1ffed8f5fafc30fdbe2df189842a247a69bd37cf158b90e50bb086c4c394Virustotal results 32.20% Heodo
2019-03-21ACC09651266335855833.docdoc 27c96680382ea3cd21b2e384525174c9e5f6761e7ab15e6232c11d22cfc6df8fVirustotal results 33.90% Heodo
2019-03-20RQR9560755259589050336.jsjs 869f09c1b430433a385b4ec13a90eef4cfe0cba092a46fe71107de2f865bdf0en/a Heodo
2019-03-20PAY9817133586.docdoc 0d0e0dcb30161c1caebd0228add4efca3881aa1fbde72e77c2a4eb8b3e9bc99cVirustotal results 21.43% Heodo
2019-03-2043129908252820670078.docdoc 2d6f6c5fe5c4af44e8076f053d423de86f1d1cd62c78f8a2bd7bfed05841e03an/a Heodo
2019-03-201793045165512420.docdoc 6cbaef4ff2e8d29a62665fdd26f6a1042e70e900b1ed66a066af60dd4fa979dcn/a Heodo
2019-03-2034414560114826994.docdoc d58ca69e03c4f1e840867f1f6c5a2a927164393698bfde6fbb4f1112e7dfd1d9Virustotal results 19.30% Heodo
2019-03-20INSTR1035282276920.docdoc 11316a1c4c089e8503fdb6d897e1a3cb446a782d3400831b8864a3d26bac67aen/a Heodo
2019-03-20US5452473694108.docdoc 211be866b21316604e53bd3f50bc502280c7b1603ab7ef7ef96c22b369402030n/a Heodo
2019-03-20US92258190607772.docdoc 2f07a4c89370248b99160b0c4001f1945d14fba6c9ffa5523e7f117422f8498dVirustotal results 18.64% Heodo
2019-03-2076542708512437039.docdoc 784ef6e2d484f191705d49dc3f1b7ce8b442dd3a5916c33136e61e903a76d818Virustotal results 16.67% Heodo
2019-03-2056244257526.docdoc 291df82b52799bd469a851e0b9d83a415c5d29b5b4c6aa22602b8d03559f79e9Virustotal results 17.54% Heodo
2019-03-20L661157616702041.docdoc 5b42db8d80442f5c13e700ebccef1f0ea8cb2f929a9be800543d7ad4c88c48e7Virustotal results 17.54% Heodo
2019-03-20PAY79743027562841.docdoc 3cec3e84c24ba8c5bf86107f7ccf4a344268662b2ce9d919bb75bed08ac43bf8Virustotal results 20.69% Heodo
2019-03-20GTQIT7183283694.docdoc cc34a532e806f7d32ec7d22923e16c584d8d3435cbc9ec3f56c258cefb039875Virustotal results 18.64% Heodo
2019-03-20ACC771299389010.docdoc dcc316942b32efdac4d8a87fec151d0a727562ad0ec8cd086de8f32ca24d2974Virustotal results 20.69% Heodo
2019-03-209475604081.docdoc 51772b8e5de9739b44c5cdcf28ff18fc1241a3f077d3565079446a3a81d42ef9Virustotal results 17.86% Heodo
2019-03-20INSTR34154623156.docdoc 4230607779d62bb99027fcef81dc5d92454f4e38f08ab27b8620ba03f715ea89n/a Heodo
2019-03-20NCJ39554850617230313343.docdoc fa9f68eeb3e65b760aa781b207c75df1b73c9dead610b34221dfb08a6a45fe83n/a Heodo
2019-03-20INSTR101836922.docdoc 65e4b399804f938a56db8a31edc7c83b4d843004e963ecdc23bac696a3491055Virustotal results 19.30% Heodo
2019-03-20734318776322969490.docdoc a9eca651c74880a4879ef98dabf00f9d29cecb7de47e107ffbfb082252db7cf9Virustotal results 18.33% Heodo
2019-03-20ACC1149373360004232319.docdoc b50537b0892f6efafb0bd1c814bd014246ac93ecd33ee7be0839a0483a0bc27bVirustotal results 19.30% Heodo
2019-03-20PAY51936906281976168.docdoc 30db246c83a0a3b6af0e65e21af39be03e0d917d35a009855174f5d696180534n/a Heodo
2019-03-20ACC46858415293905716.docdoc 13b5d65b58920696584037f8236c0d1b28b04e85ef1c7a8e57e2fbd51f643572n/a Heodo
2019-03-20PAY0093929976.docdoc 4771951b18a708931be4c0e5624e0d0e60f87d393ac8c8bbcee4340b1e2b69e9Virustotal results 18.33% Heodo
2019-03-20PAY000580084149360113.docdoc b6cdaaca89cd1d627d2f5c9ee93d8d5ac2166e64e968f7bcd33d074ccb352fc9Virustotal results 17.86% Heodo
2019-03-20US64060426848562707823.docdoc 442f78d75ed0fb3388d37b1cfec5bc70781cd7283f7308e90f1dc4f22fd07c90n/a