URLhaus Database

You are currently viewing the URLhaus database entry for http://www.germistonmiraclecentre.co.za/admin/balance/cyucfv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:295133
URL: http://www.germistonmiraclecentre.co.za/admin/balance/cyucfv/
URL Status:Offline
Host: www.germistonmiraclecentre.co.za
Date added:2020-01-22 19:44:16 UTC
Last online:2020-05-30 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-22 19:46:05 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:4 months, 8 days, 8 hours, 39 minutes Bad (down since 2020-05-30 04:25:21 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24ST_7604161985.docdoc 06010fd052467ad46d40188e354ca2bf9d0b569722fa9f4b57904297e41b6920Virustotal results 32.26%Heodo
2020-01-24C_22328575.docdoc c854be4327a261b1ad92b0ec41c4d62534b453b7b9b55ebe874b392b3aff9f98Virustotal results 30.65% Heodo
2020-01-24PAY_IPZ_010120_WYI_012420.docdoc cc3da0f3ce9444f6e851d232963f4895cc2a6f8b5d055c55b2d28b1212db4d10Virustotal results 27.42% Heodo
2020-01-24ST_PO_01242020EX.docdoc d1ce33fa24c35c0d836fed807b804f901f3a90d80da0bb29588eaa9945795324Virustotal results 26.56% Heodo
2020-01-24INV_25853574426201724652365.docdoc cba73ededc4676a3fd5ea386a62854670752212eedaeea52fb505d3fb96068faVirustotal results 26.98% Heodo
2020-01-24PAY_3146201520373515762244.docdoc b49c454243db3c873a4b5137c4370a6f8fc036d1b179c5d9a79fa813ce3fd163Virustotal results 26.56% Heodo
2020-01-24KG7408096819VK.docdoc 0db2510f63eafea13e497de0b9042c342967921c0cc7a791843eeb11aed712b2Virustotal results 29.03% Heodo
2020-01-24ST_VAIP1LI6E3P9XTMT.docdoc 789f39cce8f34ef92a1114d703e66a8894c7d3025572c148161fa467d1b6fe81Virustotal results 26.98% Heodo
2020-01-24RP_28743200.docdoc 69f0004d1e725cb9e4324e2fa5f7cd7a2f63aac01f1a564592a5fd8ad21c4d32Virustotal results 30.16% Heodo
2020-01-24FILE_TI1147392032OL.docdoc a73762a4fcac6839eb5266cc79c7363b551e6bd22d63e2ca84f916607b32f0f9Virustotal results 25.81% Heodo
2020-01-24BAL_PO_01242020EX.docdoc 1d68cbe62d70c5b7fbe6734d44843756b6bd6b439dbcceb32ec02b1c31a9e0d6Virustotal results 25.40% Heodo
2020-01-24ST_K191QL07Z.docdoc 907a6b87768814cbf5b5e0f3f1309013bc451d847c150fe7cd2cc6e99ef0c662n/aHeodo
2020-01-24KAT_010120_FBT_012420.docdoc bedffe567bdec300da442d0c24e30f94beca6e30401410ac906a60946b63fe9bVirustotal results 46.03% Heodo
2020-01-24DOC_ZCS_010120_USY_012420.docdoc 2c4b0f8d4c1eaa6adbac77b21a05ff32242cab116fc252c21c67fc0ab51ba110Virustotal results 46.77% Heodo
2020-01-24PO_01242020EX.docdoc 73da5cdf0f98ea4dbedb8219ddd051b4d7a04c9750fc4b1d6f9c8e4f9e218c53n/a Heodo
2020-01-24FQY_PO_01242020EX.docdoc 2caa93025cda12c41ce7d3ac89a2e81c7db0a40a6571fb3cb406c98e2ec71097Virustotal results 44.44% 
2020-01-24ST_58677863615773.docdoc ec1da54265100311f4df396c8990940f8a6ff623eb2544ebb860e0283a23b36dn/a Heodo
2020-01-24ST_30386353.docdoc b4b863bb79c7f22ebbc9bd5183fd67c6b9e020e15eb75d24fbb6179a57e16125Virustotal results 38.10% Heodo
2020-01-23PO_01242020EX.docdoc 826405ab23ee390f30113412530dd8fa36957b7fd600826efea19868f3f20b3dVirustotal results 38.71% 
2020-01-23ST_RBM_010120_KOL_012320.docdoc 86eec0c136bf128a3ecff3448b635759a3f1a59bd572354ee242b6104910bd10Virustotal results 30.16% Heodo
2020-01-23ST_YG2873034738XG.docdoc fc252e63169ae12bd304670fd8a56a969b89a721a64477c2f5095e9c453dc9f1Virustotal results 32.81% Heodo
2020-01-23INV_PO_01232020EX.docdoc ac9dd4e543ca8121fc28dcb180e615d6e19fa44715e30f4af82315d38a7bb0fdVirustotal results 30.65% Heodo
2020-01-23BAL_PO_01232020EX.docdoc 0854d5a8ba17e65aef32385c9680d29b0bf5f82a486b44ffb80fda5c8fc8fb77n/a Heodo
2020-01-23DY6068176272WQ.docdoc 7ce67c2130cfdb654ce311489c29444f88fe55f5fae3d6f560506a2bc921d163Virustotal results 29.03% Heodo
2020-01-23ST_ZZ8559820883HL.docdoc e1380fa81c9ecf98aea7ac2b25a691e612910e8b07ce4adf982136d30d00907fVirustotal results 29.03% Heodo
2020-01-23X_PO_01232020EX.docdoc 1fd3b81ca3d30c9017a44eef7861ac902255560376ba3a1524e22f8bee5fcaa7n/a Heodo
2020-01-23RP_QU9604405349RA.docdoc e81dc8d25679f4fea9a21338bd9612d079418003d3304029950f146696624ff7Virustotal results 28.33% Heodo
2020-01-23N_QKP_010120_JXC_012320.docdoc bc0bfc0e25d4c2a7b25dc0c01e7c24fd28b76b88ce10ea80f45edc9243652793Virustotal results 22.58% Heodo
2020-01-23REP_PN1017264427IG.docdoc 3dddeb95fb091ba145a2b0705117b8ecefdcf833024674c193dbe2ccbc4c6bd4Virustotal results 20.63% Heodo
2020-01-23BAL_01267166527902915604060.docdoc 79950a40bf62dac08fd1adbb9c8aba2b8db0e05de9829d485ac3a51302d546a8Virustotal results 20.97% Heodo
2020-01-23PO_01232020EX.docdoc 87375ae81a73bb3dc7f704b3e7e62e3e496b286fa24c145831637953f4bcd132Virustotal results 20.97% Heodo
2020-01-23SW_0060433827897187569834.docdoc cccb885bd15c4fc958aacd24b32b0377e771d7d15db2d92e3dbfffc685ac456eVirustotal results 22.22% Heodo
2020-01-23SW_XD9504336493VU.docdoc 9cd39ce28644fb0f4e0e7dad49fed36f777b06e6950bcd98c30eb410e42cfc5bVirustotal results 20.63% Heodo
2020-01-23RP_EJ3045354548CD.docdoc b81a60006f912bcf5104d693656d3f0fbba61317a80e61acfcb081eb86db1fbdVirustotal results 31.75% Heodo
2020-01-23FILE_XY8022569153GZ.docdoc 9af2280771f435166b53ce4682f2cedf9072877a0fd338920e1a7ae4434c47caVirustotal results 30.16% Heodo
2020-01-23BAL_60501488163631.docdoc 5b5c673977368413117352d249d99d185bbc339181ec3953a208adaa6b0214f4n/a Heodo
2020-01-23SW_Q7UXFQIJ01IFN.docdoc c78e3b88c08a9425cc9d6043a9d20e85c160e556a37f57f3f2515cb894c33316n/a Heodo
2020-01-23RP_EZNNK2OSMV.docdoc 066b3bba6e179d954dbe050f3bd5bcdcd20e8d6957876521dab3d7dfd5226e59n/a Heodo
2020-01-22RP_79230012.docdoc 29487cc347b96694240c5003b2fde7f8e509ac63ea9365249aa1a23c122502ceVirustotal results 27.42% 
2020-01-22SW_NR3949104144TW.docdoc 669eefc104d806bd76c96aea4774af65b2fdc557d7bb93f72910014b7093d9c3Virustotal results 26.56% Heodo
2020-01-22INV_M6E6GJZZ3KRSPI.docdoc 9e8f3c1221d4f90c920d8987531fcef5c6d5ce9582ebf6769e4591d8ad4fe3bbn/a Heodo
2020-01-22UNXW_XXROSBMLW.docdoc 7dbff2021c2a1cd1f3dc2b0ece205d20825cf085edd229ea9fe3cd19f42721e3Virustotal results 27.42% Heodo