URLhaus Database

You are currently viewing the URLhaus database entry for http://hccsouth.myap.co.za/wp-admin/common-jzuBL2W-m3WhMpqXciQ/open-7a8x8v6-9fpgocgniz9a/bub9y9o-w454/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300341
URL: http://hccsouth.myap.co.za/wp-admin/common-jzuBL2W-m3WhMpqXciQ/open-7a8x8v6-9fpgocgniz9a/bub9y9o-w454/
URL Status:Offline
Host: hccsouth.myap.co.za
Date added:2020-01-28 19:44:12 UTC
Last online:2020-01-30 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 19:46:04 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 day, 23 hours, 18 minutes Poor (down since 2020-01-30 19:04:37 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30INF_7253333.docdoc 6edd33f15c012fa0a5a49cc0ffa73234c8c178849d41a7b60cececefd9c852dcVirustotal results 38.10% 
2020-01-30doc_X525366.docdoc 8f4a6501b7d0a50fd6e8efa50f1eb0cf68d343cd44f5e4b28c47fd843d56fe6fVirustotal results 37.10% Heodo
2020-01-30arc-20200130-320.docdoc 27e174efb0d6e8b05cf666fd50c3163d91cd9bc9416197af58f70c1f027d2a0eVirustotal results 32.81% 
2020-01-30DAT_91019.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30Dat 838398.docdoc ddf014e6d9e70bc1709c2ccde24524fc72092f929ea37df901ee88f152ae4c43Virustotal results 28.57% Heodo
2020-01-30MES 9798542.docdoc cbfd00a796bdd447134f7dc1f38823e8e2eefb7075068cc197ec67c044ecfc24Virustotal results 24.19% Heodo
2020-01-30Dat-20200130-1849054.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 28.12%Heodo
2020-01-29File_JM380890.docdoc f794730342329d1ca756e53becae5be97d1f5fc5628dc8dd371111d0d8df96c3Virustotal results 32.81% 
2020-01-29inf_2020_01_29_AC34394.docdoc 0b0243567f8017cba7be007b4d797731af10a9c7e9971cb09881d0a646bf88a2Virustotal results 30.00% Heodo
2020-01-29Mes_Y6842.docdoc 8c178af12cf53e214a99e4c9125f73724ad6029bfb2e095b3c6257cb3a25109cVirustotal results 27.12% Heodo
2020-01-29dat WN541.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29LIST-20200129-725.docdoc a1245dc00abc837e5b912c2aab2cc8eb34eb70db4bad71991edb4854fccadfb9Virustotal results 24.19% Heodo
2020-01-29LIST-554825.docdoc d6548725e281a6fac0ace4af505c15a21b8e1582ab951ad62e29dc42cae45885n/a Heodo
2020-01-29doc.docdoc 5ed01ecc76724ef8dff654d4ef2b359c600c6dd3da2481677304b851d0c752b7Virustotal results 43.75% Heodo
2020-01-29arc-2020_01_29-2238460.docdoc 85359d87138be58de0c049e5c520f4de37adde9310893971769a0c640ba0a0fdVirustotal results 44.44% Heodo
2020-01-28Arc_20200129_0746088.docdoc a5b8d8907e0cf3e09b5a2e7bd993dca67975830d84b0ff832334fdafe4f656d3Virustotal results 39.06% Heodo
2020-01-28dat-20200129-EN264.docdoc f2a6a0283ff20ad3d0855ce7825d84920a0a27c55825a5a5b9ba91408388a402Virustotal results 41.94% Heodo
2020-01-28FILE-99853.docdoc d92bc4efa28b232e6331a4e9b5f75992659ad3e64268f5adac60ea14f9932f5dn/a Heodo
2020-01-28Mes_CL3804.docdoc 398e5c6e98100856a2765bf819465dd76ab630b9defd11c2829ccd2ba428eacaVirustotal results 35.48% Heodo