URLhaus Database

You are currently viewing the URLhaus database entry for http://fisiocenter.al/wp-includes/LoZFk-9OeJHiR3y5mzo9_dVAOQrKN-lL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:178019
URL: http://fisiocenter.al/wp-includes/LoZFk-9OeJHiR3y5mzo9_dVAOQrKN-lL/
URL Status:Offline
Host: fisiocenter.al
Date added:2019-04-15 18:39:03 UTC
Last online:2019-04-19 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU001240354 created on 2019-04-15 18:40:06 UTC)
Takedown time:3 days, 14 hours, 49 minutes Bad (down since 2019-04-19 09:30:05 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-178408016-3-20190417.jsjs 7460accf81db3640d5f7e1e7b430431adfd687918983e78ecc12a0308f95ec47Virustotal results 7.02%
2019-04-1748265303078_R_20190417.docdoc b081e958a7690febb59f54e1a3d4536d7e2044e296e1f9a7e26b50e46a60c7bcVirustotal results 19.30% 
2019-04-17368990603-J-20190417.docdoc 3b0dfca7ea59595a6d9f8fc164f4a9bd607e328c9dc98325095c192cc7918704Virustotal results 18.64% Heodo
2019-04-1789500310-W-20190417.docdoc 2c3d98d9cf62717a08786330e03a60adc1a2ce47c12851e8888f49a3848226d2Virustotal results 19.35% Heodo
2019-04-1718006145_B_20190417.docdoc 117c73553fa0070aab697f65bba5b77da6045b6ca7ec15fb413dc4cdfac3abb1Virustotal results 18.33% Heodo
2019-04-173317058166-4X-20190417.docdoc dc4692de020475c0ad045174e165c0da23181a448f19c94bd018eb0a36ccdd49Virustotal results 20.00% 
2019-04-177240166_EH_20190417.docdoc 6bdd6d13b63f789ed0c37bca07e57e603c35169c1bf325860b85f4f1ec192d52Virustotal results 23.33% 
2019-04-1768147129140_8_20190417.docdoc 013b5f5c344a9e983d5292298090c33863774f984e6eceac326438a35654da2eVirustotal results 22.41% Heodo
2019-04-171029052415_PZ_20190417.docdoc 19d0d1e90c44dcc4378723b28ab150034bffb15c5740d1d9741ee618e669d91eVirustotal results 22.41% Heodo
2019-04-1761615009885-10-20190417.docdoc aa504f2ecda07c8fd9cf8099798205914f7254d860bdb3d3ad59dbbe42e284a9Virustotal results 21.67% Heodo
2019-04-17855216365_C_20190417.docdoc f6339ecff9972ad336d7f8205dca001b36969fa1fe9a0096ee6e4e0adc896b61Virustotal results 22.41% Heodo
2019-04-16098331747-0-20190416.docdoc 13a3fe544041e29e4c2a91b6dc1c29bc6e04dc47c83cfda4af3cbdb48b4c1530Virustotal results 31.67% Heodo
2019-04-160216577706-XJ-20190416.docdoc 56459d52dd7a5f3045b96edabc33e19ce54b76ecb8c499d406acc77a1823cd91Virustotal results 32.20% Heodo
2019-04-1611590095_8_20190416.docdoc 2d4c184275e72715123f48151daaf96797095b62be433ff2b2942136b8cd0d6cVirustotal results 33.90% Heodo
2019-04-1655360458_Z_20190416.docdoc af06427e75ba3f81013ca4d2303e110dd6780e8f7f9bfac3336a02d39b79c8cbVirustotal results 28.81% Heodo
2019-04-1672693754084-A2-20190416.docdoc eccff22e3acccf381d541fd2ed585e77556c5e873a655be4a4959b2a92ccef25Virustotal results 25.86% Heodo
2019-04-167254950_YP_20190416.docdoc 1cb40c0d41a17288cf5645720efe0dcba20ee2dfa9497ff5a076e2f625c06c93Virustotal results 26.67% Heodo
2019-04-161193907328-YL-20190416.docdoc 930075eed943e0734fb332d29c0c8ef19197161c7544416d5b7f281b77c2165aVirustotal results 29.31% Heodo
2019-04-161891135993-LM-20190416.docdoc 3f04ef1dd9df1059e69a4884fc4d4298a7371c229b8fd96f2584b12d3763e17aVirustotal results 27.27% Heodo
2019-04-161903904135_3U_20190416.docdoc 9ef4ecc0391bd3459d75e213df36c52756f430d458958bacb2bbdfed177adab3Virustotal results 27.59% Heodo
2019-04-168838531626-C6-20190416.docdoc 94c595759b6415cf2b425f32194236b8d02e5d1f4a2399870b63f016480df6e7Virustotal results 28.81% Heodo
2019-04-157641524-40-20190416.jsjs 7ea187cf42e39c534ce6babd79e121c1a6d78d6277c8894d3952e8e3a7beb6a5Virustotal results 5.56% 
2019-04-155576583783_6V_20190415.docdoc 9dc484ee309be349fce6e277491a9c2f00010eebd76736de8fa0e6bb1ecf1443Virustotal results 36.21% Heodo
2019-04-1555758699881-M-20190415.docdoc 53b88fe8f153adcb1ec8c8c9531acc197b78974747d18489501c345d4630dfe8Virustotal results 33.87% Heodo
2019-04-158605389_BO_20190415.docdoc 680255ed0b774e2a6fe53742da4c8ba7b86229cf14447ccc0a5fd6eb4abd02b6Virustotal results 35.00% Heodo
2019-04-1584108608-AQ-20190415.docdoc 8e59ea782bd44430d17e2df377240b3d2a4a798c5cbaf431edb01cca0601b654Virustotal results 31.58% Heodo
2019-04-15015815595-VH-20190415.docdoc 6e9788423b1329b0f233772ca5f7ebb35ee6423063e64f1f83557e51d175abb9Virustotal results 31.58% Heodo