URLhaus Database

You are currently viewing the URLhaus database entry for http://aigforms.myap.co.za/wp-admin/available-section/ceehis2q4df1tf-xzbi7e-7ofwz2ool94-9e9cyxpiu/1f7lQE1qID-r9mufxGkg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300326
URL: http://aigforms.myap.co.za/wp-admin/available-section/ceehis2q4df1tf-xzbi7e-7ofwz2ool94-9e9cyxpiu/1f7lQE1qID-r9mufxGkg/
URL Status:Offline
Host: aigforms.myap.co.za
Date added:2020-01-28 19:23:06 UTC
Last online:2020-01-30 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 19:24:05 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 day, 23 hours, 40 minutes Poor (down since 2020-01-30 19:04:41 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30Mes_2020_01_30_547.docdoc 6edd33f15c012fa0a5a49cc0ffa73234c8c178849d41a7b60cececefd9c852dcVirustotal results 38.10% 
2020-01-30file 2020_01_30 2262208.docdoc 8f4a6501b7d0a50fd6e8efa50f1eb0cf68d343cd44f5e4b28c47fd843d56fe6fVirustotal results 37.10% Heodo
2020-01-30list-20200130-DT421.docdoc 27e174efb0d6e8b05cf666fd50c3163d91cd9bc9416197af58f70c1f027d2a0eVirustotal results 32.81% 
2020-01-30list_2020_01_30_Q315.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30Arc.docdoc ddf014e6d9e70bc1709c2ccde24524fc72092f929ea37df901ee88f152ae4c43Virustotal results 28.57% Heodo
2020-01-30Dat 20200130 Q678.docdoc 093fe06865cc5cd449e9684d621efaf181505881f5e0e818b0ec9c4459ef1ba9Virustotal results 22.95% Heodo
2020-01-30Mes_WIL2847.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 28.12%Heodo
2020-01-29file_810.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 34.92% Heodo
2020-01-29list-Z460586.docdoc 7e8c0e91d30b485bed7963d9d3169c243edb3f5f2ce5e8049df4731007ea4d61Virustotal results 32.26% Heodo
2020-01-29Inf 20200129.docdoc 93e6b158ccceb81017a551ff0ede39622381a6ee79e572a206f2756b342a47fbVirustotal results 28.57% Heodo
2020-01-29list 2020_01_29 VM850.docdoc 41f2df35fe03375e39b939c95142a9c04e1613e60bcdeb4f50ea339349d04243Virustotal results 26.98% Heodo
2020-01-29file_2020_01_29_F837427.docdoc 0b0243567f8017cba7be007b4d797731af10a9c7e9971cb09881d0a646bf88a2Virustotal results 30.00% Heodo
2020-01-29MES_2020_01_29.docdoc 6765421b973c2bc3603b0f52f3ed514310bb83b678823614f845b6d4b1cbedc9Virustotal results 26.56% Heodo
2020-01-29File_MZZ08905.docdoc d5521f8c7503d195adc9ca09b693f9ae4717aedf70aef290cf1b0a11f772031bVirustotal results 25.00% Heodo
2020-01-29FILE-20200129-07516.docdoc 94e0d6de6118c26179d6f05dd39b5583f1fe79c66151f666734b93a655a71930Virustotal results 23.81% Heodo
2020-01-29FILE 923155.docdoc 7c22eab322ac6b786498c54df9abb223c3466203f681028b1023147f081fd6can/a Heodo
2020-01-29Mes_20200129_J364.docdoc d6548725e281a6fac0ace4af505c15a21b8e1582ab951ad62e29dc42cae45885n/a Heodo
2020-01-29Dat.docdoc 5ed01ecc76724ef8dff654d4ef2b359c600c6dd3da2481677304b851d0c752b7Virustotal results 43.75% Heodo
2020-01-29mes_LX417.docdoc 705a21a458e18ec2353f1141cd6971cd6ffe76398c6c0bffea9c4f3e2c370c87n/a Heodo
2020-01-28Inf 2020_01_29 0622.docdoc 522de927311fdb0ba76d51ac880c13fa8dce461eec5a120570a58e27fc82fa06n/a Heodo
2020-01-28List-20200129-JG792.docdoc f2a6a0283ff20ad3d0855ce7825d84920a0a27c55825a5a5b9ba91408388a402Virustotal results 41.94% Heodo
2020-01-28mes 20200128 F70428.docdoc 9a1962dfceb1a62ff349d932160c03ec9304954e3a0fb69e25b672fbef7b90b4Virustotal results 36.51% Heodo
2020-01-28file_20200128_TP6994.docdoc e6384df1ef6040795e8d6521f54723cd118a6b6cd4a007f0ca96e3558f55b81bn/a Heodo