URLhaus Database

You are currently viewing the URLhaus database entry for http://school118.uz/wp-admin/qfp7-4hkrzh-wsiuk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:187247
URL: http://school118.uz/wp-admin/qfp7-4hkrzh-wsiuk/
URL Status:Offline
Host: school118.uz
Date added:2019-04-29 15:40:08 UTC
Last online:2019-05-12 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-04-29 15:42:11 UTC to greg{at}uzsci[dot]net)
Takedown time:12 days, 17 hours, 4 minutes Bad (down since 2019-05-12 08:46:28 UTC)
Tags:emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-01Dokument_3572657706DE_Mai_01_2019.docdoc ed12cccf232d6e24b35f114e6c8c3e2fa856a5bcc7ea2c64cd17774aedb83f7bVirustotal results 26.67% Heodo
2019-05-01Rechnungs_Details_1816020122DE_Mai_01_2019.docdoc 61e933a06b4a2af4239c378c84211b2ff1baab4effe6b5bf044ac4f2d3371c32Virustotal results 27.12% Heodo
2019-05-01Rech_698773546758DE_Mai_01_2019.docdoc 42981d37b50801d5cdc23d5d9f0a1e0e20f3787e24c4d20f606d2250ce5bf804Virustotal results 26.67% Heodo
2019-05-01Rechnung_307219540603DE_Mai_01_2019.docdoc 6f926261cf70832a6f3332c727eb674da29212109a968a25cab4cb92fced7694Virustotal results 25.86% Heodo
2019-05-01079707838032DE_Mai_01_2019.docdoc 4b37aca0d46401d67a57677fc4189ef354ec63afa9c3312cd076fbe0391b9c6dn/a 
2019-05-01Scan_085487902884DE_Mai_01_2019.docdoc 9c8a8c93bd7627958c439fcb2f59df0236b1103da10b38c95498eafabd99887bn/a Heodo
2019-04-30Dokument_93801006804DE_Mai_01_2019.docdoc 435f4d9ce59d7d9024dff0776db11e23abf9661df9ce07e7f2c0bd8f44c71b34Virustotal results 51.67% Heodo
2019-04-30Rechnungs_Details_40621266027DE_Mai_01_2019.docdoc 52448cd37a4b02eb30174ada8146ed194b6cc52c9d340816a615f368476d9a3bn/a Heodo
2019-04-30Dokument_47211338544DE_Mai_01_2019.docdoc de78f4dc145a2403817e0b72432b009a47cded50743f58368c8c973da06e49d2Virustotal results 50.85% Heodo
2019-04-30Rechnungs_Details_356162618898DE_Mai_01_2019.docdoc 2b1810f68974145fa51514b11e17499ff46e0d2eee96976a51ffa446424d1da3n/a Heodo
2019-04-30320966189553DE_Mai_01_2019.docdoc f58dfc5366b000bff10921c9f8f102d341a9a5bd399e280f50e517530908b6c6n/a Heodo
2019-04-30Scan_20740453430DE_April_30_2019.docdoc 118942917ae2acf9a6c6ba8bae443bfa7d060b530958196b654729715276a4f9Virustotal results 50.00% Heodo
2019-04-30Rechnung_7664406246DE_April_30_2019.docdoc ae9aff9f74e7ad8ed8d61afd4f3796861ed3f08eb4ac310f3acfe9228d637b4an/a Heodo
2019-04-306078130020DE_April_30_2019.docdoc e502442641596f41ad17623187f493e5848abddc38f07ef4795e935e936650a6Virustotal results 48.33% Heodo
2019-04-30Rechnung_032662670386DE_April_30_2019.docdoc 034d793e2d7928a31f3a2d405552c9288aa51d9fb212759573cb300f5538e92eVirustotal results 48.33% 
2019-04-30Scan_6310613711DE_April_30_2019.docdoc d6b27400c5f0886cc2c21da11cacf302aa85e1b457a6f49ed8119b573fcb5558Virustotal results 47.54% Heodo
2019-04-3072953171883DE_April_30_2019.docdoc 576a1334ad99cf1d8913475a31a5cfd88e9234f041422c2f78f9f9ea3589ad80Virustotal results 47.54% 
2019-04-30Dokument_2018006566DE_April_30_2019.docdoc a68abf4c2b97d243d84969b61f10219e0eb42263822a18fd10a9575dc3371c02Virustotal results 49.15% Heodo
2019-04-30Scan_183044555662DE_April_30_2019.docdoc f5e1fe9adece633f63a665f277cd8bf19bde62423b747cdcc4cb0c291ac2d7d8Virustotal results 46.55% Heodo
2019-04-30Rechnungs_Details_60356031096DE_April_30_2019.docdoc 5aaefe478c76ef3f4e1178e8bf071f5647c4e8a97a8be3b655cf43f468b984b2n/a Heodo
2019-04-30Rech_9813669077DE_April_30_2019.docdoc 6c255bfc7f4c811a4af497a8be4943590bb05eec6c5be64e158ed22c1837d908Virustotal results 36.67% Heodo
2019-04-3058354711785DE_April_30_2019.docdoc da796c5520890b04964c30a0b56730e0069dd1682b69a3fc52a4cf0b8ee40412Virustotal results 38.98% Heodo
2019-04-30Rechnungs_Details_61859027059DE_April_30_2019.docdoc f399fb7c51afe772dfeaeb3bcd6e3d314556b9823612e79fabc1526b9c388efdVirustotal results 38.60% Heodo
2019-04-3001323334676DE_April_30_2019.docdoc 7428a72a1ea5094d15204e0137e42bc86333490aa07ff18637f9b6a8e3ca17e9Virustotal results 36.67% 
2019-04-30Dokument_264689101185DE_April_30_2019.docdoc 17b7ee868deb1727ad76e550adc36d7961fc7680118038ab2911427184306a48Virustotal results 37.10% Heodo
2019-04-30Scan_39102888276DE_April_30_2019.docdoc 9e910794abbe1c197fda10c892da9d8912a81d887bf8092e68571dc863ac89a7Virustotal results 31.67% Heodo
2019-04-30Rechnung_1129703051DE_April_30_2019.docdoc 76a48e5e3287a65d34eb3bfe7ea2564644136e567a65f25b9cae2a9a2569cdaeVirustotal results 32.79% Heodo
2019-04-305406034432DE_April_30_2019.zipzip ffbec8633a8fa1dc8bea802a9c25f6c1d3a63e2d21111fe8387a621e1cb0a943n/a 
2019-04-309197297809DE_April_30_2019.zipzip ef88bded9fd1e2a43090377089b37e1d1ec0cebd6250fe1807aad588989fb3f6n/a 
2019-04-30Dokument_6065008226DE_April_30_2019.zipzip b4d5b28ea33b106cde2deca3d93c5f1daed94fb82259ba8b4c1168828b78ed14n/a 
2019-04-30Scan_81528074911DE_April_30_2019.zipzip 6a074684e0715e64ec34a2b7b0883beb32a140fcfaf34afe152efd20d7b4f952n/a 
2019-04-30Scan_68567398420DE_April_30_2019.zipzip 0c0873bee351f16c32c67b9d45028cf5dbf876c1403ed42fb14ef8c0423a2562n/a 
2019-04-309234444400DE_April_30_2019.zipzip fe8447bfde563188609c53cc1559efc1f5803ecea9d7ceea7868f43b314303b5n/a 
2019-04-30Scan_222142706465DE_April_30_2019.zipzip 750ee7fdf1552bd92ed9929f3faeebb9d2313ca7861716b409281bc3aadb3490n/a 
2019-04-30Rechnung_58189199826DE_April_30_2019.zipzip 92fd2c17db257fff8b1d24a8586cb147de80d523d41b23fc1c081f3430e69147n/a 
2019-04-30Rech_195692658218DE_April_30_2019.zipzip 352a050c617d158d9832c16e82a3458ce14b8ca35a51f4e501d66f876379790fn/a 
2019-04-30Rechnung_252066727608DE_April_30_2019.zipzip a14d43fffcea305013e55297bc3ea8b588ec7f65794efc07c61ea04b079cd73cn/a 
2019-04-3036219393102DE_April_30_2019.zipzip 5e33f82a226714ce6bd92191cd1960a2f69ea09c269bc9543ecd00bce24ddf76n/a 
2019-04-30Rech_866166713459DE_April_30_2019.zipzip dafe0eaeae702eff9c9a8a7719b178492b6aff7aa27d408e54504689bc7a646fn/a 
2019-04-303396670854DE_April_30_2019.zipzip 6e9a0991340acefb60fcefa2a4edeac549bdc8c63d3ed6ce5f9e5e4e9c54ae22n/a 
2019-04-30Dokument_437514420931DE_April_30_2019.zipzip 10081e7382825967d6634e9f0ec0452e96f7b6a3064f887f225b0421079ec57fVirustotal results 21.67% 
2019-04-30Dokument_599946487037DE_April_30_2019.zipzip 5e4aafbb33f24a67e49a13c3ff0678e63887773e1073bd48916ad2baae7c1079n/a 
2019-04-29Rechnung_5127154350DE_April_30_2019.zipzip 35b77812f32adbc61b15b4565481cb7050f9f00e3c8a85222c21c55c679c93c9n/a 
2019-04-2938876929150DE_April_30_2019.zipzip cd9b771bb47834fdea6f82c30e6e4518676f115575b0eee817b1c71d1575e18en/a 
2019-04-290518123572DE_April_30_2019.zipzip 478fa7ffd4f83fcf5c1c358e39680c7f6132c3e29f87db0c5923e5eced07a98bVirustotal results 19.67% 
2019-04-2959787596427DE_April_30_2019.zipzip 36b8f792cf9b6c63bdff30cc6aaf3ec2f4c8e10089cb54f4f03b0cd4c95faabfn/a 
2019-04-29Rech_8636114726DE_April_29_2019.zipzip 246b709874f9c7fa8178d6d59e919254b8b9231bcec5448f85d29a9d5209333cn/a 
2019-04-2970606890304DE_April_29_2019.zipzip 4bea97781ab5121d78f8f4dc5fd9ab78eb9fab9907d06925319f2d68d9cbe140n/a 
2019-04-29Dokument_4623500797DE_April_29_2019.zipzip 13ef7719af1e093413f6b4d6598ed8ad011927efdc9f2bcce6a9cfb5105f1158n/a 
2019-04-29Dokument_46886849073DE_April_29_2019.zipzip 4ec54ddc90d9b9aca441d5ca2428f2c165827f1bd1c73f63cfd0ae34648d5c67n/a 
2019-04-29Rechnung_218721952338DE_April_29_2019.zipzip c131901f07ac0d3435a8af683792abf051643e3655bfb654a794ef6071865062n/a 
2019-04-29Dokument_77248340400DE_April_29_2019.zipzip 1ef96f5ca73ec3b8385ec81fe512b9af6074944c7b2960d828b72d2335d6db57n/a 
2019-04-29Rech_362457554809DE_April_29_2019.zipzip 446da711bf5ab4857e843b7f666de6e71c6da9e45b564eca715afc6246f4bf5fn/a 
2019-04-29Rechnung_71755835394DE_April_29_2019.zipzip 6486a4a140a1e6f12b9252b7f8ad5cd21ef66fd16da7306a43672bcf4c6adb98n/a 
2019-04-29Rech_7533105140DE_April_29_2019.zipzip 43a9c6b5d18703be9276cb007354f8420e643989f62a91b072e5524f51e05ca8n/a