URLhaus Database

You are currently viewing the URLhaus database entry for http://ondasurena.com/facebook/jwzH-eeLNk6CIlor4bT_uSKsUHwWZ-SSu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:182262
URL: http://ondasurena.com/facebook/jwzH-eeLNk6CIlor4bT_uSKsUHwWZ-SSu/
URL Status:Offline
Host: ondasurena.com
Date added:2019-04-22 18:24:03 UTC
Last online:2019-06-10 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-22 18:26:04 UTC to abusencc{at}interserver[dot]net)
Takedown time:1 month, 19 days, 2 hours, 46 minutes Bad (down since 2019-06-10 21:12:35 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-24UB-521044696-04242019.zipzip 266f5f901957f44c646bc010c8c0783f935605ed1a8093575d161daa1e30623fn/a 
2019-04-24I_174090_04242019.zipzip 57fe0afd397e8a4fc7427a911d9efa31b736e164685f1e71c369feb82ea5e067n/a 
2019-04-24SL_647922_04242019.zipzip 0c12a3858e077ce98895d9a30d46ec0b5bd75f752952daeac47dc400725e9bc4n/a 
2019-04-24PC_87754776_04242019.zipzip 719a910f793ecfe895e88a5be7f382487dd02e79f2e186877a34bbea306d9121n/a 
2019-04-24Y_75357982_04242019.zipzip 61d533336260ae314b192469a54875d675a421328a4e23f5101619487233d8d2n/a 
2019-04-24N-321195276-04242019.zipzip f4f536a10899a15c43048bf3f6b785ddf910e47b55d066b2c62daea3ccd5cb26n/a 
2019-04-24N-67285365-04242019.zipzip 3296eef41d61796c27f5082d762956a35813b877eb5dfc5ad137e33b6c1da8ecn/a 
2019-04-24NV-9615414-04242019.jsjs f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0fVirustotal results 10.71% Heodo
2019-04-24ZH-567492-04242019.jsjs da2d68c98cb3e9214a1e0bb58fc5fcd77c1435e63282c0602f085f56f6aa3e29Virustotal results 10.71% Heodo
2019-04-24AN_85633804_04242019.docdoc 15b76f000b9a6bdc9237b8b67e2c3e63b5bf72a09b746bdc531de99c14362fd1Virustotal results 24.14% Heodo
2019-04-24J_10795385_04242019.docdoc c89c4a93830f003dfc0192b8b45c334872b98ec57f081fcfed7976ca4fb344c1Virustotal results 24.56% Heodo
2019-04-24O_05313258_04242019.docdoc bfc6f5780109d9395f042d83bf54f5bd0b45a0f4a511181e0f0b7f65e6768442Virustotal results 24.56% 
2019-04-24A_230448_04242019.docdoc 5d7e5147091fb427b5b8859e9ce0a6ed4c30f753dae6ee3ccbf102e8fa1a4160Virustotal results 24.56% Heodo
2019-04-23ZA-71428403-04232019.jsjs 8870927b7fcb804322779608fabf59e1c019245df08aaaf5f9202d131e92efdaVirustotal results 10.91% Heodo
2019-04-23NL-75222256-04232019.docdoc abbd0218bb6170f2a29651775f304ce7242b5e4960549949bb45e2e31087eecaVirustotal results 30.00% Heodo
2019-04-23A_91782592_04232019.docdoc b66dc10da4466199693f91df5ea7dd2ed60a9cb1a78bc4f0f8fdfce491b2d9faVirustotal results 27.12% Heodo
2019-04-23CR-18731559-04232019.docdoc 9cf3e252ff58bda643296cd07649a27244e6ae4335e3f5d876d8ea92c5b90d6fVirustotal results 25.42% Heodo
2019-04-23SA_26057346_04232019.docdoc ba1027d8e0eb986ca3400cd96f18e9af558c75dbec99ea06f18c89df8ce5a5c7n/a Heodo
2019-04-23S_79282841_04232019.docdoc 3ccc08551639ea7da8a092efdb09741ee02811fd2a184d1251912d1fbac80cb9Virustotal results 26.67% Heodo
2019-04-22ON_773790_04222019.jsjs 79270d1e30b8e29e99db95c42e8d33801b27624fe09b05d51f4dd5c0a945d987Virustotal results 12.07% 
2019-04-22U_114163_04222019.docdoc fbbd8ed9227f00b9d1c149b61d42896a97be4175d61ac6a1cdfedb4777e14bfcVirustotal results 35.09% Heodo
2019-04-22LZ_815286675_04222019.docdoc 9b4857d525a4a4684abc18441f138fc6f0a0fc29420de07e5a0b8da94117c494Virustotal results 35.09% Heodo