URLhaus Database

You are currently viewing the URLhaus database entry for http://alphauniverse-mea2.com/wp-includes/lm/rq0rfefv_ifzyb0-4133554223659/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:242073
URL: http://alphauniverse-mea2.com/wp-includes/lm/rq0rfefv_ifzyb0-4133554223659/
URL Status:Offline
Host: alphauniverse-mea2.com
Date added:2019-10-09 16:48:03 UTC
Last online:2019-10-18 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?):mail Yes (Ticket DCU001997497 created on 2019-10-09 16:50:04 UTC)
Takedown time:8 days, 12 hours, 42 minutes Bad (down since 2019-10-18 05:33:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-11763K3727VN31_10112019.docdoc bc9a221072a7b0e6b7228bd0235bf19350dcfd626360d4c1edeebfa895bc69e1Virustotal results 27.12% Heodo
2019-10-11588103681327.docdoc c92ed8fad0f453c7460aadfd8bf687d5cf99560115dddacaad75833aa40e0b6eVirustotal results 17.50% Heodo
2019-10-11OJEPD33967PBLK.docdoc 2aa3bc1c73221e8cb02ba6793487e0b7e88caf38dd40da5d1a42d3f36147b5f3n/a Heodo
2019-10-11BL_51377235786619_KOI.docdoc 7bb9b68f8f2c198f14e3d91780d43c593393fe8034f433553c9f06af24c015c7Virustotal results 34.62% 
2019-10-11857936776473277.docdoc 4a913d6da563604d246a53c01a1652da032d6c6baf9fa1bfccf650635555f97fVirustotal results 33.90% Heodo
2019-10-11RE_F9QWI2TASJ_W.docdoc bc6d39faad64e70a270ea4eb06fbcf05c459349b21ea6420f3a04ca23e3cfa3fVirustotal results 32.20% Heodo
2019-10-11FT_Z5GHG2LKQTFB_F.docdoc 7a8a800c29c6e9dbf732d98fd5eccb9e78078101fee30d287dc534e83e58a22dVirustotal results 31.67% Heodo
2019-10-11FA_8HTOH2NTXUK5ZFX.docdoc edd0ab17a61f95c20b02d9c7b58ef29911fc287846fdd80d6804d7e325e6b4e5Virustotal results 32.20% Heodo
2019-10-11INC_219629383869451.docdoc f6611b46795d1ef7c3a0cd4b8825f83d53208e149717b71f974ac677ca60b15dVirustotal results 32.20% Heodo
2019-10-119871646578_10112019.docdoc 803eb60e4df6ced789199f41674ab0e5521dbb469d32ad3a2adfff2a7a2da2d7Virustotal results 30.61% 
2019-10-10BL_HLHPEKCU4P53FG.docdoc 51de13d18a23740342f1c681de4cb6c2baf116f2a4df4730c5338439d05823e4Virustotal results 35.59% Heodo
2019-10-109TYH24PREB4.docdoc 47cad341e26f67d00adaf1c4e3d0adf77eafd64d24999e35500e364f046361ddn/a Heodo
2019-10-10DOC_5630425773343869_GX.docdoc c8fc8eedc4b906accb507c39a0908bcf54bf11faadbbfe538d843f3638ef893dVirustotal results 33.90% Heodo
2019-10-10FA_OWHI2ULBQOEQX4.docdoc cc88b6c2e36692379df13967b38df23ea41e6e39403ea6da5bd20097c74d4142Virustotal results 31.58% Heodo
2019-10-10BL_169604635136415.docdoc 2edaea083ea39aab08670d19867627d5516f1f78efff05973e3524c3f897a4c9Virustotal results 27.78%Heodo
2019-10-10DNP_51634698647575510_10102019.docdoc cc4e1646b1d94db4dae3f14ca2a85a2c46fc3ed193833e0913959b4a07904e64Virustotal results 30.51% Heodo
2019-10-10DOC_W45I5H7M9U1J_10102019.docdoc b42bef60b590a42952b0473bedcadbf27b0aa9cb2c6206d08aa1271579133dd4n/a Heodo
2019-10-10BL_M0WD7XQYF25.docdoc 9b3076d6ab321a0bfc1762f3f24fa1896f3bcdfdc9fe22081a37a11a92b4ff74Virustotal results 32.69% Heodo
2019-10-10RE_593485591396336_VVM_10102019.docdoc cc82bc7177f26107263871628ac0c38e385d8f26010182f0f7fd6352221fca33Virustotal results 26.32% 
2019-10-10LLC_2323494051.docdoc 3942b4de811dca7c8051b90a697b2ab6b02c5343a8371d624e18f7a52d139ebfn/a Heodo
2019-10-10FILE_92959380806.docdoc 7e5c45cc547d770601dd7dcc29186fcc8ad1e00dd7d36ac9d58b9dd279998dedVirustotal results 26.42% 
2019-10-104963735035114640_10102019.docdoc 6fdaa046ff8def5c39cb32e45cb3755f9997d46fe8db480f1659f6b48f9f9bacVirustotal results 25.00% 
2019-10-1092185507497682.docdoc 86b8b4f6962aeb0aa7ec20cb11c345340fcbfa394b651a238e989de896065584n/a Heodo
2019-10-1059185X6VF8HFM.docdoc 5111aee3697b7e6d97f54f97bb11bcbaedda8eb0a8f759e5fb491853b4352c82Virustotal results 26.32% Heodo
2019-10-10RE_DPSZX2XO9I4HTK_PM.docdoc 4a1f8d0d29be162a66f63cb5e2cb82ecf4311882dfd59986455d77698a5df9c4Virustotal results 25.42% 
2019-10-10RE_7660043473.docdoc d6ba47dba7a4b5d3edbc954990704573281e71239ffd59490f13290d2f19694bVirustotal results 25.42% Heodo
2019-10-10RE_I96FNLI1KMP_BYC.docdoc 5124cd27665210e6f3f8609cd77cc4f7dd875bda403f9bf76d09abd83691d4adn/a Heodo
2019-10-10310351521451832_10102019.docdoc 559caa2233ddc0f6cddc50ba23ed9556cda00af17c9154d7222f839f04022bf3Virustotal results 25.42% Heodo
2019-10-10DOC_R3RY0NVNWDT_MF.docdoc 6d12ec981fc193f0f70e1396c9b5d1c687a0f922e8d3abef29aea87a92c97603Virustotal results 40.68% 
2019-10-10INC_40OA33JDVJA9D_RB_10102019.docdoc a62b9fe2845005b9d6c3a84b44e7553f810b5ec1080b4598789ce4cfdc314e3cn/a Heodo
2019-10-10EBS_EB8NAKY3274SBX.docdoc 4ce3cd5384e274663b11c2b145e0ae0eced9b2061864841ac0adb8f30977ea37Virustotal results 38.98% Heodo
2019-10-10INC_QYDD8DTD6P.docdoc 7344c6d38f46a38419082b72d7ee3d622be05dc86c93e87f55600942b8da470en/a Heodo
2019-10-10LLC_20057963331935812.docdoc a0995eec6d5e5af14ed30cfcb7d07f4a6aa370d021665b261baab371eb37af13Virustotal results 38.98% Heodo
2019-10-10FT_44207448189831922_FO_10102019.docdoc f9cdaed775eb3635df2b10e792da181de1c0fd3e9a5f01f5b7ead25ebfc9bb9eVirustotal results 36.21% Heodo
2019-10-10RE_99151626769035829_W.docdoc 13deb16765cfd9f4316397848bb834def766955e5c37a1056732e6df278ee646Virustotal results 30.51% 
2019-10-10HY_8185399566371_10102019.docdoc f0229f9d03be90dd3424637d9832125d43a75e6f65a4aa5ce92fcc192b303111n/a Heodo
2019-10-1083272550178_10102019.docdoc 6da107e20a4bde15076e46114cd08f53e2a082c6afd30a36b05de9b97fa66474Virustotal results 34.48% Heodo
2019-10-10SCAN_8053815918368.docdoc b4dd04c27697f3b87422d720c09d3a81af3823ba993e20e05de8a285932f047cVirustotal results 30.00% Heodo
2019-10-10INC_PODS3I4W3_10102019.docdoc 144d03ea075288b15252acf044fc37f946c00e044fe29ede864507d477c3129dVirustotal results 30.00% Heodo
2019-10-10C3B2ZUVUD.docdoc 16aa536e17f9eae3fabff4fc9a99ee6112aa82c6bdc58dea62d7c0a44f9899faVirustotal results 30.51% Heodo
2019-10-10INC_07JIM3DLOQAN_VY.docdoc fc13915dcf6948edbe4bb35e72d68abc124fd2703b6d7cb8e54901b490010a75Virustotal results 30.51% Heodo
2019-10-10FT_296812400923214.docdoc 88177b5b39ed84cb0d01934549e1af17f39273dc50302d920fee4bb06932ec5aVirustotal results 30.51% Heodo
2019-10-10LLC_7874969930_QS.docdoc d83997e478df2c6fb110487f2456e8174b3ed5de8e3d7d09a91cb50f025c9805Virustotal results 30.51% Heodo
2019-10-10RE_05398394410801179.docdoc e333768e423c4aa3e8d064045ab3245ce04700293b0ea520ebf5e5475ebf8da4Virustotal results 27.12% Heodo
2019-10-10RE_1468277565_JRZ_10102019.docdoc c923b3272f267788fd3b9324de97192cac0839d72c742b492a6a5e8240858548n/a Heodo
2019-10-10LLC_74480941912144.docdoc 795a55ce16a6e032f51bfc5db65f4051a3c0df955a50e17a6bde4cf2c907d9e6n/a Heodo
2019-10-10OPP_LQEGJE68M5D6_OIE_10102019.docdoc 4f25f7d86cf0f77dc97ebd3184a7e03e8da522ad421766bb559b8f928e53cd45Virustotal results 27.12% Heodo
2019-10-09SCAN_41136229957843008.docdoc fb847e82ace6fa7c71a842b528ac6c6854cb62edc6b3e168522900507d261c67Virustotal results 28.33% Heodo
2019-10-09FT_HE1YPMSYHLSYG_ZF.docdoc ab90dea096c0cd0114ae6aaf4fa406b524a5f503d2a5188a7742403c8cf48a33Virustotal results 28.81% Heodo
2019-10-09LLC_812793487260_G_10102019.docdoc 688b36ddccba7411cfdd5b7289f698cc1a0eb9f0f22fe9313ac4a97706067b08Virustotal results 25.42% Heodo
2019-10-09BL_LG1I4UFQBY99TQ.docdoc 00dc9db96ed5db0c3138c1e5f74dedb486be719f01a6fac6f60007ca408b78ddVirustotal results 25.42% Heodo
2019-10-09SCAN_W6R3JC65OHRPK_10102019.docdoc 57f050a32c6ebd5ee2dfc81069588a910df9917b9770db07d84b5242629fa012Virustotal results 27.12% Heodo
2019-10-09DOC_SB9ILS97VRRUF03.docdoc d0ec402c6420a7a773c4a95acccdbde2f4ec2bb5bf3b1b13f86e8e762a37bf7dVirustotal results 27.59% Heodo
2019-10-09YQSUOU1KGS.docdoc f19c01010e1074a20dab25d568e6459c73ad15d1866d8f701960eaf78d945c26Virustotal results 28.07% Heodo
2019-10-09SCAN_VV8NQ6GY0KUO1J.docdoc e1a5c331ed5d89af9ed1bd575692f6f5a7f80775cb43aa338becfd0019eb8442Virustotal results 26.67% Heodo
2019-10-09SCAN_2067515801419925.docdoc c87b8f0e9cb9ed67e5e558fd9da0574ae16b37ec669dd42fbb741915e5e4ba91Virustotal results 27.59% Heodo
2019-10-09FILE_37629735659468404.docdoc 864b8b9d2b33b2902a9795d894be4833fa1e1fb62c79b45dfa292c8d5b2d5fdeVirustotal results 27.12% Heodo
2019-10-09DOC_R5DE4WHHMYE_10092019.docdoc 95dca0e1440d64cd9b0a1f67381772e46ec1828e77e48544239f031300382defVirustotal results 26.67% 
2019-10-09BL_NG798UR4XRB.docdoc 227111ce7f8b8b2fdc4bbd53fab958b27e33feebd790ee17ba8d06da410fac10Virustotal results 27.12% Heodo
2019-10-09RE_8733719275_10092019.docdoc 7197b03dec44235f9e44560e18fa14b02f7021e2f2ffa5ccafb39fcd415e8aacVirustotal results 27.12% Heodo
2019-10-09RE_5416051488.docdoc f57b2904d665951603a281dec44425965ca87c15f90a0f5f8282b609404b3a88n/a Heodo
2019-10-09FT_0297923289727.docdoc 45d8f08d687befefa8950853a1dc483c2b5d2df3012ee15c45e166673330a12bVirustotal results 26.67% Heodo
2019-10-09SCAN_4905222757.docdoc a8be0caac4bdc870e46a5fe401f5b6e86350b0b858517f27d309d2823ee93270Virustotal results 27.12% Heodo
2019-10-09LLC_324193826841507_T.docdoc 717415998233e6c11784a3d7de4c81cbd1cf1631e0c7c37ad2fca26d8c8f4b03Virustotal results 25.00% 
2019-10-09INC_858562128599466.docdoc 60e09344caba483d8ac3cfde08950cbf8e6d84dcf20f859e25a76ff654767a96Virustotal results 25.00% Heodo