URLhaus Database

You are currently viewing the URLhaus database entry for https://jsd618.com/wp-content/PbbZi-nAqvACpE2Fgo-box/security-warehouse/xuwgi-7v502095uv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:295677
URL: https://jsd618.com/wp-content/PbbZi-nAqvACpE2Fgo-box/security-warehouse/xuwgi-7v502095uv/
URL Status:Offline
Host: jsd618.com
Date added:2020-01-23 08:04:56 UTC
Last online:2020-05-22 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-23 08:05:10 UTC to ipas{at}cnnic[dot]cn)
Takedown time:4 months, 0 days, 0 hours, 28 minutes Bad (down since 2020-05-22 08:33:46 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24inf-91955.docdoc d7cced3bb1b3af97fb56977dd4263f3a5a0ea7cb11798ee24153413ac09f002aVirustotal results 26.98%Heodo
2020-01-24arc 9852392.docdoc 1152574f8e44d0e8d372e21b715911bb6441dd3ab700cc6ebc6fdd9ed5d3f79fVirustotal results 29.03% Heodo
2020-01-24File_2020_01_24_671209.docdoc 9ee3737563b9456f1df85cd49ee7cbf7a995e52ab225b3e5b6b81ac731b62cc3Virustotal results 27.42% Heodo
2020-01-24Inf-2020_01_24.docdoc 7f0c9aed260e602ccc6fecdf02ef0f77b12ca9a067b9693e77a533850298b509Virustotal results 25.00% Heodo
2020-01-24Inf KS66884.docdoc cd9635bca5eb3bd211f28a66da92ec3f3faef6db127656aac9496f1bbee8d3ecVirustotal results 27.42% Heodo
2020-01-24Inf-063.docdoc 1a8a41cd0c967beeddf5ff91598443d77050bcd001a922d12043631147f218ceVirustotal results 28.12% Heodo
2020-01-24File 2020_01_24 NUE758.docdoc 8dfda883de58e06c92b64245474e42e52ada0a0dd10cb9218595fb09bee88463Virustotal results 28.12% 
2020-01-24Inf_20200124_E15131.docdoc ce660d7f4d173999ba421ad499211d7a5860bb5917791a8f626e84b49b216746Virustotal results 28.12% Heodo
2020-01-24DAT-20200124.docdoc c86502170f9dd2b3e17715bdf23916760b86bba38f889c85bfc4f0e3a0fea368Virustotal results 25.81% Heodo
2020-01-24rep 2020_01_24 38598.docdoc 33145aaefc03e7107307e826f851d49fd1d591416445598aeda02316980aa8bcVirustotal results 25.81% Heodo
2020-01-24Inf 516444.docdoc 5e9e5fee667c68399c18efe19908084111fc9664c9db9b8b68d02d27ac2c0c71Virustotal results 25.40% Heodo
2020-01-24inf 20200124 PCT8890.docdoc 81c33f77266118c411d4f25bc5f34e1a3f25c53934c080c4097a88e8b9ed1741n/a 
2020-01-24rep_20200124_M311.docdoc f8e5a48fa21ab15f165fa212c584068c9c275fab547b3b65f04d40ccc151ca19Virustotal results 45.16% Heodo
2020-01-24list_20200124_A2835.docdoc b3a81c7283bf49daa2a7e72ccfc22f08a52895522d3d584796771602b887d0f8Virustotal results 44.44% Heodo
2020-01-24doc_20200124_794.docdoc a5949311c983e124ba9f32963d4edcfec18258c0993ae8f423472645c91d8314n/a Heodo
2020-01-24REP_2020_01_24_YY282.docdoc beda0838615f06cbeb4c2cd683091ff68eccfb4ac59dfe175ed6f3aa8c878972Virustotal results 40.32% Heodo
2020-01-23REP_20200124_MI5157.docdoc dcd9613e4c74c03508bab4afe05cb54716057c6b38fea1e9dae9d42041eb43a6Virustotal results 37.10% Heodo
2020-01-23Dat-1275750.docdoc 356d9d432807a2d7fb61e5893fffec5494ff1c4500b5e0786e8548fa32ca930aVirustotal results 36.51% Heodo
2020-01-23doc.docdoc 896f2aa2b32a68993941bfcf83d13844d0729441fb870d3bc6c9e7626da650d1Virustotal results 33.87% Heodo
2020-01-23Arc-20200123-3895.docdoc 93bb9d052dae7e7965182fcd79c48c1e7e88e30f37ebf761462d4c5c5c629049Virustotal results 30.16% Heodo
2020-01-23arc 20200123 OL0532.docdoc 737261cba27fb5709e37158314184d01a7f6a36386fc2535e236893d82590df2Virustotal results 29.03% Heodo
2020-01-23FILE-5792919.docdoc 44713e481564f2ce7a930e43bcdda80390718b92301f85cb575098959de0f6e1Virustotal results 30.16% Heodo
2020-01-23LIST_BIR271.docdoc 2ef37c6a7f53e69a4e81613d72c21e1bc4413d4c3ebfbdb59f4c5a43b7233ae2Virustotal results 29.51% Heodo
2020-01-23MES-2020_01_23-842137.docdoc e64e311b594718ab849cdf6a3379d11774932a94c3498135f107d659174adb40Virustotal results 28.12% Heodo
2020-01-23FILE-083.docdoc 7c6b31364028d77f2db085615af43fd3b6b991f4bb3f16e271c313d1380310a7Virustotal results 25.81% Heodo
2020-01-23LIST_20200123_5760354.docdoc e5afc379b50bce74cf1a04bf9c3c7076606bccf43f6fd011c95beb8859b95245Virustotal results 25.81% Heodo
2020-01-23dat 2020_01_23 933801.docdoc 8854c592155c1bd835e9edee147c7fa3714ba319ad138943dae4aa94a01d2adfVirustotal results 27.42% Heodo
2020-01-23LIST-20200123-E27958.docdoc 1b2a8fa233d738505dc4538a43ab60d5f61cc7e52dbb8d6314510cb80a96e044n/a Heodo
2020-01-23LIST.docdoc b63585f5efab051c9a793dac78be7af0a7bb002f803b2d67a828065ee6ce54fdn/a Heodo
2020-01-23list-20200123.docdoc aaade832c86b767e64ac370ec468133b1b0f777316fc22d37a85c2254ad1d752Virustotal results 20.63% Heodo
2020-01-23mes-2020_01_23-5294335.docdoc 0602a260f7babf69b17ea0c106902e0aa1210f18240011382c3d1b89cbf2a78fn/a 
2020-01-23Arc_8897009.docdoc 633d6ebaaec651d617bce067d144490211a2c39578124942c8b95c77fe221c30Virustotal results 20.97% Heodo