URLhaus Database

You are currently viewing the URLhaus database entry for http://jbmshows.com/wp-includes/HiGnw-MvrFN1wKvkPrZWv_wqPLQoTtd-sp/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:181952
URL: http://jbmshows.com/wp-includes/HiGnw-MvrFN1wKvkPrZWv_wqPLQoTtd-sp/
URL Status:Offline
Host: jbmshows.com
Date added:2019-04-22 11:23:06 UTC
Last online:2019-06-10 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU001291753 created on 2019-04-22 11:24:04 UTC)
Takedown time:1 month, 19 days, 8 hours, 26 minutes Bad (down since 2019-06-10 19:50:14 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-22CH_666100_04222019.jsjs 79270d1e30b8e29e99db95c42e8d33801b27624fe09b05d51f4dd5c0a945d987Virustotal results 12.07% 
2019-04-22E_266386_04222019.docdoc fbbd8ed9227f00b9d1c149b61d42896a97be4175d61ac6a1cdfedb4777e14bfcVirustotal results 35.09% Heodo
2019-04-22JE_34662685_04222019.docdoc f66c9c29d6d40fe28578cd2046a54b261897c42b513388f77510b52226394d8aVirustotal results 33.90% Heodo
2019-04-22QW_7910854_04222019.docdoc a819d54be584b20d238cbfbe15ae9bcf752f1d28dd3a01e3f8b5ebee7b65124aVirustotal results 32.76% Heodo
2019-04-22Y_179287_04222019.docdoc 1ecfe0e89a380160df4b62d4b56321bfad3624ea07334f4271b9b3a0de323fdfVirustotal results 30.51% Heodo
2019-04-22GG-7690569-04222019.docdoc d2aeb122db568427ae7ed2aaa160b8f4008bce0a10a0524e2d7a2e69c9232454Virustotal results 30.00% Heodo
2019-04-22WN-546343626-04222019.docdoc 2cdc8b8fa281a4b2ab63a8f8098a71dc05d50dc06858cb0ae701487608bda79fVirustotal results 31.15% Heodo
2019-04-22M_39937624_04222019.docdoc 1f2acd076d0c1aaf5832d9c30ca76cd469562fd79625b308714e87e029379052Virustotal results 28.81% Heodo
2019-04-22CR_159584453_04222019.docdoc fbdb3849d492018ba7d16c5c6a8ea20a567acdd8344dbd1073fa3d87431ade03Virustotal results 30.51% Heodo
2019-04-22KD_643030048_04222019.docdoc fa1fcaa9e848f0fe7302707f9ce791aea55dc3c279f396d7458806f3a7c5c5c1Virustotal results 28.81% Heodo
2019-04-22AH-832834-04222019.docdoc da3430d7a2cfe3f17252e158c5c276324377461c60102e37046c9778d98210fan/a 
2019-04-22XZ_033859_04222019.docdoc edab5a50bd73cec5717549abc5549b1f1aa1fe7a86766ed5b295d1404d2ebf70Virustotal results 27.12% Heodo
2019-04-22F-513773359-04222019.docdoc 8284710f69f25d748299231f7764e53fc963049bd46fd0aed36146868d8e3df3Virustotal results 26.67% Heodo
2019-04-22O_48035421_04222019.docdoc e612189b3cb2e404edcbda550faf2a17f3e3e516fdbda870cf58f2a6526b5ae0Virustotal results 25.00% Heodo