URLhaus Database

You are currently viewing the URLhaus database entry for http://brandsofzambia.com/wp-includes/0qssg3841/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:244527
URL: http://brandsofzambia.com/wp-includes/0qssg3841/
URL Status:Offline
Host: brandsofzambia.com
Date added:2019-10-14 07:30:35 UTC
Last online:2019-10-22 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?):mail Yes (Ticket DCU002010030 created on 2019-10-14 07:32:04 UTC)
Takedown time:7 days, 21 hours, 45 minutes Bad (down since 2019-10-22 05:17:48 UTC)
Tags:emotet link epoch1 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-16y13fiomc5cf5iax.exeexe 3b84df99ab9980cfb87380d48f8819bd217eea2553e3e3d2a2942ab35a1688e0Virustotal results 7.35% Heodo
2019-10-159nv73voghwd2r.exeexe 908619a387352495ff2ea2d8e46c70aa1e390dd5f6a87e5898d5eb146e30cf85Virustotal results 5.97% Heodo
2019-10-155042obp5xlkx.exeexe 4ccb4e885119ed8356f145caa1856f0b617701c6fe85e2523a499ca4e2959da2Virustotal results 7.14% Heodo
2019-10-15qr8oj5qq0l1g0v.exeexe 5a51b5ef825d24b6c6e80a155a2a58d9f5a80f6d34b3f45059a38c6073116c09Virustotal results 9.86% Heodo
2019-10-15zi51iudttba.exeexe 0bc19c1c25a5884dd846841150c9de183a78a509e6480536e5ff723eef4e188aVirustotal results 10.45% Heodo
2019-10-15gjp1cvp.exeexe 447a57b8ca984ee2d39cfe7e879a2a79bd6382d025f733a7553da87a4b1761c7Virustotal results 7.14% Heodo
2019-10-15mioh2s931d15e0.exeexe 83b59305347b3939113353adcfd1f8cefa64f97a7ef58dde3d579471b4f0b935Virustotal results 7.14% Heodo
2019-10-140cm4gum9.exeexe 03150e8e65c02b6b7d8475ebf3c8f4bb79290fa56422a87614d236033ee2b48bVirustotal results 10.29% Heodo
2019-10-142atf227fdlkw.exeexe bf1b7b86355d25582395bfcf29fbeee255735f1414295f2e762622a77992cfceVirustotal results 8.45% Heodo
2019-10-14zzha5.exeexe 90a311f70635ee979eb4d453d7433c25b00631e88e678fc0b25511531452423aVirustotal results 4.29% Heodo
2019-10-14fx0gl827.exeexe 4b28154f980d8fec3b4a0367c107f3966f9358bd27ca20385d3e1422a61bcf67n/a Heodo
2019-10-149iag1u53jlhl3xc.exeexe 7241c208a1068273eca2d48b01329dd24c028069ee6ba9a0682f340502fdac1bVirustotal results 10.34% Heodo