URLhaus Database

You are currently viewing the URLhaus database entry for https://blog.ozobot.com/wp-content/Document/wSoN4aeX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:184989
URL: https://blog.ozobot.com/wp-content/Document/wSoN4aeX/
URL Status:Offline
Host: blog.ozobot.com
Date added:2019-04-25 22:21:04 UTC
Last online:2019-04-26 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-04-25 22:22:01 UTC to abuse{at}cloudflare[dot]com)
Takedown time:8 hours, 24 minutes Good (down since 2019-04-26 06:46:18 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-26DOC_09116031520US_Apr_26_2019.docdoc 8065d2137332893c6e189b09a0e6b480e2f2955e827e0b67e4418e6a268da467Virustotal results 32.26% Heodo
2019-04-26Document_601754157342US_Apr_26_2019.docdoc 00a73162489f59b1cc4fc07208676176c19eadbe5c4c0f16b0bd3f7c15a9a03aVirustotal results 31.67% Heodo
2019-04-26LLC_967952941677US_Apr_26_2019.docdoc 79aa4c12cd7acda388199e7e59ac3481b7e738ae2b3a43ac06bf08dd8f6b4419n/a Heodo
2019-04-26SCAN_857932149683US_Apr_26_2019.docdoc 7b793df9dc306e78aec1741d9ef0f38a9e7b5677bac66779c18de85334ad953dn/a 
2019-04-25SCAN_577565263539US_Apr_26_2019.docdoc 023da94a6a1283b26662c3583780102af5205108cb647b2ef546a4a8e5b9aa9fVirustotal results 32.79% Heodo
2019-04-25Document_686016093895US_Apr_26_2019.docdoc 4f4e11330d4a08dc6efb1ea46d5a662e9f538b86664ffe3d721e5294ceb7d430Virustotal results 30.51% Heodo
2019-04-25Document_171033501640US_Apr_26_2019.docdoc 67d05dd367015c892e3f0f50e5737a5138f00f626a134a85f1c2a6496132e691Virustotal results 31.67%