URLhaus Database

You are currently viewing the URLhaus database entry for https://jsd618.com/wp-content/statement/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:288133
URL: https://jsd618.com/wp-content/statement/
URL Status:Offline
Host: jsd618.com
Date added:2020-01-14 15:55:12 UTC
Last online:2020-05-22 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-14 15:56:03 UTC to ipas{at}cnnic[dot]cn)
Takedown time:4 months, 8 days, 16 hours, 37 minutes Bad (down since 2020-05-22 08:33:51 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-16RP_58790021.docdoc 197816a9e68e03158bf632170ced910411b22478535810022ec413afaa23be3fVirustotal results 28.33% Heodo
2020-01-16PAY_ARN_010120_JJW_011620.docdoc dc84907bac7d3d44f584659178821e29b5e8af4436b4b1c74792d338a761437dVirustotal results 26.23% 
2020-01-16SW_TW5908312068NY.docdoc 9f4da832f24c0e39b95877f4c80c90136213e57097a2c563c359c51721c4af35Virustotal results 26.67% Heodo
2020-01-16PAY_242231526.docdoc d8e78e236ed8030ea028ee13a3b779ce7f998a8c15e25e6e441b01544dec5666Virustotal results 25.81% 
2020-01-16M_979707099721365.docdoc df95f59c26d46850931c538f3a2d7818da5d1274676146d44038ee23eca255b6Virustotal results 27.87% Heodo
2020-01-16FILE_PO_01162020EX.docdoc 21222de7dc129cc2ceb960d884aab5660f053b0186d85f48f302257ae6075bd5Virustotal results 25.00% Heodo
2020-01-16SW_CZPD14N.docdoc a7d3f5474bdca4af088225b9280da969e8678960b6768ab6944a72866252c9dcVirustotal results 25.42% Heodo
2020-01-16R_UGE_010120_RSM_011620.docdoc 8cf507a5d6fd40526c9419ace90c17b9d91a6949229cd0f5c8afa750836dcf62Virustotal results 24.14% Heodo
2020-01-16RP_2721572730738386104167307.docdoc 771ad3b2889d51eae42be0c3c53f7ab24667105d94fcd6e6dc93bca8ebbfcd85Virustotal results 44.26% Heodo
2020-01-16FILE_HSDDX47ZNO.docdoc bc1ee7ea69d36c03a940c29cfce159c7e7225fbe58610eb697e091e0b242c08cVirustotal results 41.94% Heodo
2020-01-16FILE_HXI_010120_ZNF_011620.docdoc 95b02c0e112270751b5fe7a49866ed9d31594f0b8d26e823e2242bcc3b902b26Virustotal results 42.86% Heodo
2020-01-16INV_75824111.docdoc 13aa89755abbea10d5958e7b1d6d8440f1b6cb0d866e6ae70de9a7513e80e409Virustotal results 40.98% Heodo
2020-01-16INV_MFR_010120_ZNB_011620.docdoc 66125c09e3acc0746045c7810c06d335037120b024e5ad802742f533fad7a008Virustotal results 40.74% Heodo
2020-01-15RP_VXV_010120_HTG_011620.docdoc 8a8e9cf03bf716afc717c9f37e86050a9d95c576836b48423d8c1b495831a54aVirustotal results 40.00% 
2020-01-15EH_92228137.docdoc c1c7fc8ee76da4f1696fa2d918472cacd777e5fe281acbaec5d12a85d98fcab5Virustotal results 33.87% Heodo
2020-01-15PAY_80945320.docdoc 5cef7f012587358911420986b0a10b3afc376e71cbcb62ae2369409a2949e714Virustotal results 34.43% Heodo
2020-01-15INV_PO_01152020EX.docdoc 746e56dfeb31eb76ca54c4260082c53e799a6cb532561b12c98ee1496f3055f4Virustotal results 32.79% Heodo
2020-01-15RP_KPG_010120_LZL_011520.docdoc d497afabc9f95e52de2b44e62a03de53764ad772a44b5435500de43e92434a9fVirustotal results 32.20% Heodo
2020-01-151TQ44JJNJG.docdoc 2004c6f1abd300fa135b56f65c133ebad43e42aafae2b9b9726e3dd274424ea0Virustotal results 32.79% Heodo
2020-01-15SW_L4LN0KAQ40XRENH5.docdoc 23f9f4c3fa726a9b81dc0c06b81c8e3424d251dc412c8ccd81a89c7aa269e4d6Virustotal results 26.23% Heodo
2020-01-15ST_27539160.docdoc 4f0095c259ca3e1e3f0cbbf9295f33bbeefdf8271b1f3d8b97ee9ba5626eb8e6Virustotal results 21.67% 
2020-01-15DOC_PO_01152020EX.docdoc 2d5822aff83315cc778085dcd69fd73f82a4cfe94592529b93dacb256fb97713Virustotal results 21.67% 
2020-01-15PAY_26929091.docdoc c9368e7d1cbbbc90b37dac429596452e1d0e2905219f252d6a91524fc9a35f6aVirustotal results 24.59% Heodo
2020-01-15SW_67120903.docdoc ae23c3284230d31527a8b2f8a4721cfa9d31535c93604fcd9be10894eeffc01bVirustotal results 18.33% Heodo
2020-01-15FILE_PO_01152020EX.docdoc 9982b18660c6aa9b8419bd84843d2d578fd2afb2516782ac69f0e7f8eee4efb9Virustotal results 18.33% 
2020-01-15FILE_9218870419591965.docdoc e4fa19c4736ffb554aacdb6de08c4ad081fd55105dddc85b31eac5c6082e601bVirustotal results 18.33% 
2020-01-15A_7432467290311487009429772.docdoc d3edd09e8e4e9e89dbff176e69131f189175abf1a598c18593a3bb194fc45c2eVirustotal results 37.10% Heodo
2020-01-15INV_PO_01152020EX.docdoc 632e28a523c920e3035782ad086e6d3f0e39445486e86e7ce6a05c0e4f337292Virustotal results 31.03% Heodo
2020-01-15INV_AI5972825819LQ.docdoc 17cbb232fc64e8c775b7ed47a28ec7a2cfaf6cca790994fad3c41fb60a648062Virustotal results 33.90% Heodo
2020-01-15PO_01152020EX.docdoc 958b22bd337775f2226fecdcadf9125b8bbcad2518c23d026fd87b0714af1b63Virustotal results 31.67% 
2020-01-15FILE_PO_01152020EX.docdoc 556f0f62580588094bb0d595bdbb880b58a48148af61569258c9a84653374cbbVirustotal results 30.65% Heodo
2020-01-1443787081.docdoc bbf79cb4aa35f097ee65fbf27c2808626e53c4460eeec58c2a828aa669b50b74Virustotal results 26.23% Heodo
2020-01-14BAL_XL3341477752FF.docdoc 6ea68ce4d24f0f499b02dc10acfa5ba8a428ce1eef46e6423899ce4be5f31b4cVirustotal results 20.34% Heodo
2020-01-14FILE_PO_01142020EX.docdoc 7f831b1e70be159d8194b2022de5a66d9784ac6959ddba38be95dbf6b30ea93fVirustotal results 19.67% Heodo
2020-01-14PAY_PO_01142020EX.docdoc e3cd5ab045097c55bcb00a1cdc84e11c8d7214e15f536baffd899dfb8e0a3149Virustotal results 17.74% Heodo
2020-01-14DOC_XL4708394076EM.docdoc f73efe44e8484ba991700fc3485cb9e497fb8b59f05af254a385348a2cc5b71dVirustotal results 19.30% Heodo
2020-01-14K_PO_01142020EX.docdoc 9ee85b399435a194b9b67f49143134a823ef4dc87f95970c3516773b340fe9afVirustotal results 18.33% Heodo
2020-01-1416017875850696404.docdoc 24890686a317431662f36b1b559b10bb114336436bd20d1e1384809d6a4aeaa5n/a Heodo