URLhaus Database

You are currently viewing the URLhaus database entry for https://galaxytraderstarlai.000webhostapp.com/wp-admin/UFOgsN/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:293811
URL: https://galaxytraderstarlai.000webhostapp.com/wp-admin/UFOgsN/
URL Status:Offline
Host: galaxytraderstarlai.000webhostapp.com
Date added:2020-01-21 17:08:06 UTC
Last online:2020-01-25 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-21 17:10:03 UTC to abuse{at}hostinger[dot]com)
Takedown time:3 days, 14 hours, 43 minutes Bad (down since 2020-01-25 07:53:35 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24Invoice_BZAH7_958720986.docdoc df476578ee7f5bcc90c4578a7737fffabc637ca583c3ff9d4b79822e68148179Virustotal results 25.00%Heodo
2020-01-24INVOICE-28_476572.docdoc 8b2e4b7244319f99c6c6813e954f42c6f9580320d266b016e4752e25c56f812fVirustotal results 27.42% Heodo
2020-01-24Inv-YB508_469577.docdoc 21ed646e9c73d65b5355a50adb7b3a7b2f6d76b45d4248e2ad2480fd784ee8b5Virustotal results 25.40% Heodo
2020-01-24Inv_LYB3111_9895114.docdoc 7b4b6ac3d2e40c5b06c25952410b3768cba4bcb9400e50fca921115eaa1ab311Virustotal results 25.81% Heodo
2020-01-24Inv-I02_258698.docdoc 5592927603fbd6cec249d5122af058b4c7b1fec2d5a59d0a6ed016a81c43fc97Virustotal results 27.42% Heodo
2020-01-24Invoice-46_04390136.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24INVOICE B8_114054.docdoc 3019c5713b1eae96e9080ac03f4c948abb9012ec8937fd082bf6f26c9aabbd98Virustotal results 46.77% Heodo
2020-01-24Inv A7151_4698326.docdoc 0ca26646d4e6d640b628e402fcbf0dc050634baaf8b6468051b29dd30a1cc140Virustotal results 46.77% Heodo
2020-01-24Inv-VC631_85297359.docdoc 5c566546a1462e17becc0023ddfae0f8e4d8b495e4feda5bcc5f7fa52e0ddd0aVirustotal results 45.00% Heodo
2020-01-23Inv-N5063_387294397.docdoc 4d65aa1d4d4356e59a68839a7e437a4e3d207e6bf481c90baf4ba6de5b9d0ed4Virustotal results 34.92% Heodo
2020-01-23INVOICE KZ54_07553565.docdoc 4cb4d8d3fe9f861f5ab75bb11d23fedf98a1561b3aac9173f5dc211b8bb8bd5cVirustotal results 40.62% Heodo
2020-01-23invoice-VB7_35897785.docdoc 69896fb1907aeb3711bc79924a6aa0f9d636605647439f36e14ad1e7c1afa917Virustotal results 31.75% Heodo
2020-01-23Invoice-CDR0_059180.docdoc af8976ac691aa40327d9844ef283ec4de84fd38c56d57218befd747516e4e92eVirustotal results 32.79% 
2020-01-23Invoice-XWRJ501_04257381.docdoc a822d46ff789d95a0a7433319bc99c759a917cbcc998042645f54bd8bed3eb40Virustotal results 31.75% Heodo
2020-01-23Invoice-4_005916.docdoc 3475216fd7f40791c7a6f620a37544ce6ff9866f4ade999ad3e4eab76ccb91a7Virustotal results 31.75% Heodo
2020-01-23Invoice VUWW078_229202.docdoc f5809fa786d473f788c4252040f5ae73923dd6bf37af5c9b91282e44bc1905cdVirustotal results 31.75% Heodo
2020-01-23invoice-RL456_4863111.docdoc 9a2c55b454275e9bc8438979a830af3f17f4fbf87c418b5e4405d154686e2beeVirustotal results 30.16% Heodo
2020-01-23INVOICE-046_091433745.docdoc 343354c5822df99e96d6b88dc7da718785a030ba68942f8cb71584e3ddeb78e5Virustotal results 26.98% Heodo
2020-01-23Invoice-GLU9_675805.docdoc 72740660ce310e6a3473852c7f6cccd0580c45847c8faaceb2745591c5a9fd77Virustotal results 27.42% Heodo
2020-01-23INVOICE OYZ70_84698473.docdoc 4efe99e760c862d17d3128bc8c9bfe85a4512b981ac9944bd6f3c38d0d02651bVirustotal results 28.57% Heodo
2020-01-23INVOICE-OMN20_92813429.docdoc c72dd27b499d4dea90b30a82818446418aa2fe8c1cfade8a1912d1e757a4204aVirustotal results 33.87% Heodo
2020-01-23Inv S776_2483921.docdoc bcd78fb2ae376c31ea21a7d1b7d110e4dd0a49c9a8261bc5f68816e4d1091bbbVirustotal results 22.22% Heodo
2020-01-23INVOICE-GL278_86374458.docdoc 023430cd6c69dc69f461d433915b89ed4b22fab2cbcc9882319f266d3e20f6d4Virustotal results 22.58% Heodo
2020-01-23Invoice_AX0_75441670.docdoc 68ac922c713a804c7deb999f07b98b907019e4c339554a965ee4251d5459b660Virustotal results 22.22% Heodo
2020-01-23Invoice_7989_8810535.docdoc 122db4faf80cb4bdc3aa095fb489172b079832154b7ca87a3d8f00cfd58be47eVirustotal results 22.22% Heodo
2020-01-23invoice_CHN2_24013694.docdoc 8d578bb497d24a668b14672ae884d4efa720d8dc69af8576fd4173d472329a8cVirustotal results 35.00% Heodo
2020-01-23Inv_6120_3514841.docdoc a6caf4ef566d28695b60b4316c66a9354a608127c38c5725d8bcde83f06c1ac3Virustotal results 28.12% Heodo
2020-01-23invoice_YELV0477_178382.docdoc fde16d92d511109ff85a224347f7d64064f5e5a11e1a4deefe96dfd8a04375aaVirustotal results 38.71% Heodo
2020-01-23invoice-MD88_55312887.docdoc d88c083ec9e3bfef57c53f3d9944343406cf2087de89f3f46b0eb20ac35a33c2Virustotal results 33.33% Heodo
2020-01-23Invoice_F090_208893.docdoc 920fbbc436a2e803b1b03a31bc44363cbac1dcfa2dc2729ec0ade9c6178d35b7Virustotal results 33.33% Heodo
2020-01-22INVOICE-VZK27_938863.docdoc 7b025e11d718a77ee86c70bd52c81bba76e0fbb63de82569746d51de30d19971Virustotal results 31.75% Heodo
2020-01-22Invoice_MRB48_394889.docdoc 63dec3ac2713c98191f4725ba9bf18a03709f690f246ce253e16b7342e36ca5fVirustotal results 28.57% 
2020-01-22Invoice T9_943858504.docdoc 3c1cc64c9babf45acdb186c3dc9689517fefa31918bdd47faf8e17878f2e43e4Virustotal results 28.57% Heodo
2020-01-22INVOICE-7_371323.docdoc 58fe40e165c8619daa7dca1d76a7dc59f79bdccbf16ec14d2ea0ccc20d8d55a3Virustotal results 32.31% Heodo
2020-01-22INVOICE-J3_747049.docdoc 3c883920142d8e22088985f3f3594665bd83571bfb755aa1aa5b7354fa7912bfVirustotal results 29.23% Heodo
2020-01-22INVOICE-NV68_5574198.docdoc 65c7a5643d85ceecb76612f8ae912c3bee670e1a62f6c7ec02161277d2e11189Virustotal results 27.42% Heodo
2020-01-22Invoice-BFS172_389568173.docdoc d37bfb401b91e64fbb9c866fce48db34a5fd0232de56169ed8c0158599301449Virustotal results 29.03% Heodo
2020-01-22invoice-J4737_064885.docdoc f9560dc519e813ec3b39ea3d9dd1d863c2187d14f983d291c801452aa7c43db1Virustotal results 30.65% Heodo
2020-01-22Invoice-UHS8_324556888.docdoc 28dd5855d4a2794c748e05180897d51cec6ddce941374738098c85fa53caaf19Virustotal results 29.51% Heodo
2020-01-22INVOICE-T2500_294467.docdoc 88ce28544773169c40c27fca43e493f73d997ad67d58000d9554edd251754738Virustotal results 26.23% 
2020-01-22invoice_OY331_3351705.docdoc e3c19433848a0b0023963e05496e09744003119af344985daad6a614cebfb1b4Virustotal results 21.31% 
2020-01-21Inv_MOSF96_8441445.docdoc 515e0e1a9e7994eab3ad00067f1549639c284e0225db703ce58dae8d605f075cVirustotal results 21.31% 
2020-01-21invoice HJT0744_710048002.docdoc 7501ac37ca9adce1a6c87e4cc6db66d985a25c0a47eab1ebb098d308f8b1a96fVirustotal results 22.95% Heodo
2020-01-21INVOICE-YFI0_5943258.docdoc 618b6426dea6f5651c76ec1f5638ac2a20a6d8ae3b55b8ac20161a3bb349a6a9n/a Heodo
2020-01-21Inv VY50_7233118.docdoc 053b145d8e8c2d5b7c01ee9371de6bc62ca35c11e0e064dcdd0fb71d7d689a3fn/a Heodo
2020-01-21Invoice-HZ06_487892628.docdoc 08a411548d58e3087177a29c74daa8e41a5fba66715c8017c29cadc0edd4bceaVirustotal results 22.58%