URLhaus Database

You are currently viewing the URLhaus database entry for http://www.youthplant.org/wp-admin/browse/0evx0e/tx-4688403522-534602120-hkykt0-teufilz4lf6g/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:289099
URL: http://www.youthplant.org/wp-admin/browse/0evx0e/tx-4688403522-534602120-hkykt0-teufilz4lf6g/
URL Status:Offline
Host: www.youthplant.org
Date added:2020-01-15 14:30:04 UTC
Last online:2020-01-24 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002247440 created on 2020-01-15 14:32:06 UTC)
Takedown time:9 days, 6 hours, 21 minutes Bad (down since 2020-01-24 20:53:27 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-17FILE_IG1734622820SE.docdoc 398c180bca3820858404f155f0050ec466519c6ad151414f5489e1e9f8395abbVirustotal results 22.95% Heodo
2020-01-176LDAA9DJXJF.docdoc f1569c025b21d44c68867d142ebb944c3550240673430dceaed626e80acf386dVirustotal results 22.58% Heodo
2020-01-17DOC_38197590.docdoc a38a56b908445cb030e706cc159cedb50ba50c85a9cc0987d49ce8e3c23342cbVirustotal results 21.31% Heodo
2020-01-17BAL_MN5487117433YF.docdoc 712635153fded897351d8f4bb96b5d4ecbf8f03e2fe48077a259c61e318a78a3Virustotal results 20.00% Heodo
2020-01-17H_PCR_010120_NFO_011720.docdoc 4c599d62c5811475285b14bbfa88fdec394d420b82d93c20e51a4630adac0828Virustotal results 19.35% Heodo
2020-01-17Q_2679124408.docdoc fe932814b9fb95baf473284ceff4af5ea1100e4893f5a8edfa54b607ab6cd996Virustotal results 18.33% Heodo
2020-01-17INV_630340691855790.docdoc 37278a792abb805166b18e71b5ff929822059156a73f739e9633dc16984d28ceVirustotal results 19.30% Heodo
2020-01-17INV_LFL_010120_BIP_011720.docdoc c5257e4ced95ba3e81b9722046ae4f76b803ecd53a8b616dca01e8818b5a9ea4Virustotal results 44.26% Heodo
2020-01-17DOC_XH3IW2ZC3B8WOT.docdoc b5b1a9c9342c9be2197fc3f9fc5c0a9138b052bfc06583f9719773397f567e34Virustotal results 43.55% Heodo
2020-01-17RP_BR2512074676AI.docdoc 9db035bd19c8d9db27e5c352d8e713cfdd13b9a155772e9266b18ec30d67fba7Virustotal results 41.67% Heodo
2020-01-17PAY_O8DWUVIG.docdoc f3f139df5bc086f20c3615226f506ba9b565e31921ad9184f0f9df71be52f78dVirustotal results 40.32% Heodo
2020-01-17VMK_010120_LEE_011720.docdoc 202cc9a7826013e97f28dc78ad0d4f5d17628d5b6d543993593ea04fd7a4c2f3Virustotal results 40.68% 
2020-01-17INV_672050855245970867997493.docdoc c984833db58812ed08f1b0560576ec19bfec60b0a8103292c206042ef12007fcVirustotal results 36.07% Heodo
2020-01-165394962465129306109152789.docdoc 37b0389ffe84107582dcc9d62fc7091cc3a71915977dc69f605fb398902b3ce4Virustotal results 36.07% Heodo
2020-01-1608382560412.docdoc 58284dd1bedbf2c82204eb15cdad07525a70b52ff1729e051ac101c066531ce3Virustotal results 37.70% 
2020-01-16ST_NZ1516565792MN.docdoc 862b4995090776854a12fbf924213919016691e4c85ccfa384c7fa92e02e8591Virustotal results 36.07% Heodo
2020-01-16438096293259.docdoc a9c48a4f2a96384b1fe947448cb44eaadeb7c0a7754cd17a6899c7f6ae31f2e7Virustotal results 32.79% Heodo
2020-01-16BAL_Y4PQUMXOLY0OGCS.docdoc d2ce1838da599f490397183272a746696999155f408cdd5da5d82c3ae1df24faVirustotal results 29.51% Heodo
2020-01-16REP_PO_01162020EX.docdoc 3c99ebde95d760948c4ff5db925c0272ec89b8409d698aab26e5785a42c88243Virustotal results 26.83% 
2020-01-16K76BXQ1TCDRS.docdoc 0e0dcd97d94a05bf1cf56067a564fe6ba5666bc00fbb808c44bb4c17a5bd81a8Virustotal results 26.67% Heodo
2020-01-16C_EBG_010120_RUD_011620.docdoc 95c0c04d9077e6700cdae6bd1f365a488cacb9ad029a7db67bcc29e9992331e7Virustotal results 26.23% Heodo
2020-01-16PO_01162020EX.docdoc 743632f16eaf4dffd8109a5ea7c14e341db9af20a96f44838a046b9c6b183fdcn/a Heodo
2020-01-16XGCO_PO_01162020EX.docdoc fe6f474786ca7ae00ef0969337551f4f2b639e640014ba936d413e532bd994cbVirustotal results 24.19% Heodo
2020-01-16PO_01162020EX.docdoc 149889ce5c8bb26fa5e97f596ef4a8b87614e01998f4bb57fb25c82ddd84453aVirustotal results 24.19% 
2020-01-16REP_YX4922027928OZ.docdoc cb14f2d0b46d275f3d060cb7b30c4818b33aa25ce6fef05b7aab90043c79039dVirustotal results 24.59% Heodo
2020-01-16QGX_136630180067756111202.docdoc 8cf507a5d6fd40526c9419ace90c17b9d91a6949229cd0f5c8afa750836dcf62Virustotal results 24.14% Heodo
2020-01-16ST_13100720.docdoc b56a6e25f16b75f974d90ac920bb38757ba86412909d0844c3195a7b0a04c757Virustotal results 43.55% 
2020-01-16LQD_010120_TXC_011620.docdoc fc68dd9971f85e873151fa2dae765c3406a74e35a608879a7b46cc250986b63dVirustotal results 43.33% 
2020-01-16PAY_AJY_010120_JDS_011620.docdoc d63dd2aa974914b2a2c9895c6f3a6948ed6c3e76dafa94b680adfc8582e5178eVirustotal results 41.94% Heodo
2020-01-165997003634070.docdoc 6755b22aabcd9dae95e3e99cacfe217231c85f91ed30953a1afbeab582aba025Virustotal results 40.98% Heodo
2020-01-16B_2JFCYB3XZN.docdoc 01d706d0a5e27c62abe9a72200925c5e23ed3c309ea88354dfcb55b36437c3eaVirustotal results 40.98% Heodo
2020-01-15PO_01162020EX.docdoc e763d67d538e1928f4e54ed83171e2b9495156d4c51598d1ef77162faecac2d8Virustotal results 40.98% Heodo
2020-01-15SW_2YY1LYJEV.docdoc 2c40438076c3f7beb36d70f56c99baf764aa9c3936060204d6fdba9f27e6c847Virustotal results 34.43% Heodo
2020-01-15FILE_42120362.docdoc 785feba560f2467465e64cec8a888b0ed5d477f94ce139eae8f6448508942595Virustotal results 33.87% Heodo
2020-01-15PAY_XP2083785019KR.docdoc d791ee2aac6bb4ca4437d45678f50c6ff87d5e6c41ec9a707a183a50be2c7f52Virustotal results 32.79% Heodo
2020-01-15FX0580080207LV.docdoc 93ab67a92f697263656aeaeb5f01d856f25f562772e46a1a486dfcc777667020Virustotal results 33.33% Heodo
2020-01-15KLX_010120_NIH_011520.docdoc a083e27319fc4272f5dfc596e80b48cc91875ba5a2c29787c159929292ebe02bn/a Heodo
2020-01-15T_PO_01152020EX.docdoc 1ed83f7ed0265fbb7fa1006f405773d31c4b7069ebfbbb6086f0196160f3d143Virustotal results 27.87% Heodo
2020-01-15FILE_PO_01152020EX.docdoc 04f04f3107a199ae3c5a4ffb960173fc3be31f5c86183d0cb27a23c927d6af45Virustotal results 22.03% Heodo