URLhaus Database

You are currently viewing the URLhaus database entry for http://swiss-cleaning.com/wp-content/6513368411/kFdy-bN_QziKZb-JV/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:164361
URL: http://swiss-cleaning.com/wp-content/6513368411/kFdy-bN_QziKZb-JV/
URL Status:Offline
Host: swiss-cleaning.com
Date added:2019-03-22 22:28:12 UTC
Last online:2019-12-05 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-03-22 22:30:08 UTC to abuse{at}hostinger[dot]com)
Takedown time:8 months, 17 days, 14 hours, 2 minutes Bad (down since 2019-12-05 12:33:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-30n/ahtml 8dfbf98adfb38f0b612d15b4baccb23de19cf12dee36c9897708d62aaab6d308Virustotal results 0.00% 
2019-03-23ACC56478238985799962.docdoc 70db645e055cbd0805cc42c1f237eb716e3119f9992ad7f66d8ebb27a121757cVirustotal results 38.60% Heodo
2019-03-23DQQ4016101623447.docdoc f40006f93f77d43826014d51126b5e92d5eebcc98c1e908caa909aad9836fe78Virustotal results 35.59% Heodo
2019-03-23JLC12563446109798696464.docdoc 5b8546968f17de6acfc42c520d303b8f27b5ad4b407ad5549855126cf195c4fcVirustotal results 33.33% Heodo
2019-03-23PAY34781737656771994368.docdoc 3a47c3eff4efb56b40a20c4d46660d1b145521ef74ee73fba66f879c8dbd0053Virustotal results 31.58% Heodo
2019-03-23ACC12329428905267.docdoc 2bc9f0d1cc70797eafbf6a0ed042a87eae4fd3834b6e16edc0bac2d3ec1c414cVirustotal results 29.82% Heodo
2019-03-23ACC12921753872571.docdoc 5cdfeb44bb777e446bfbc704700841e5716b33b198abc139b244289b4a001b42Virustotal results 28.57% Heodo
2019-03-22ACC05790367803.docdoc ad9e75077d3219eb3b339842546adcc35319a6fe3c8012b50a1b081f740d1670Virustotal results 28.07% Heodo
2019-03-22ACC95986172946.docdoc 4e786307e2871b649ce7359512c9e1985a85edace0a0ef1f303483972b3ca7ebVirustotal results 28.07% Heodo
2019-03-22INSTR4038693434115950.docdoc 34c0719de0c2a33e3a6f8bc3c2c401ac3238334b4b22a2789e6c1841b41f3d22Virustotal results 26.32% Heodo
2019-03-22US630284817767173.docdoc a1107c0f17eb8a82444ba32268681e659a977e74a5e37e0d53d707a0462c25aan/a Heodo