URLhaus Database

You are currently viewing the URLhaus database entry for http://canon.myap.co.za/wp-admin/ZZd87uc_2dE2NrnEheg5_module/verified_forum/6788699262627_SgM5kaDlDWK1I/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:307937
URL: http://canon.myap.co.za/wp-admin/ZZd87uc_2dE2NrnEheg5_module/verified_forum/6788699262627_SgM5kaDlDWK1I/
URL Status:Offline
Host: canon.myap.co.za
Date added:2020-02-04 11:24:27 UTC
Last online:2020-02-28 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-02-04 11:26:07 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:24 days, 1 hours, 53 minutes Bad (down since 2020-02-28 13:19:53 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-06MES-20200206-3102811.rtfdoc 9939a4736b098ea35c08d44595c037aace4805372e670c1e5c9766df967b2d19Virustotal results 22.95% 
2020-02-06FILE_20200206.rtfdoc 6359275fa65b551a691c324e03fa5c3c73ace835ca4f3d90087dc3332f76ececVirustotal results 22.58% 
2020-02-06Arc_20200206_SC316.docdoc 7fe4afe59b087bf542c67a12ac54ccb89eab281656477ed8bfc41ebab0e0135fVirustotal results 20.97% Heodo
2020-02-06Dat_2020_02_06_9404.docmdoc 7713e180e8a62f6041738a796b29f6efeab8431f8b6425016a4242f64df7061aVirustotal results 20.00% Heodo
2020-02-06Inf_5609.docmdoc fa37e0cba4786db4ba847c2e4f9b4ee78aedbf0eea4491228705fc00980af4e8Virustotal results 32.79% 
2020-02-06LIST 2020_02_06 736102.docdoc 346d01cf657414934f8c87af6f0ae07d23875f613db84e483f2174b6353ab405Virustotal results 33.33% 
2020-02-06dat_20200206_OH26331.rtfdoc 84e6bb18fc4d5994987feb9edc02eaaec7cc0988b27845fb8735d3c45591e5cdVirustotal results 31.67% 
2020-02-06Mes-2020_02_06-789.docmdoc 00788bb2b24d0e0cb6eb61a72e29440b474f722cd5c10a79b29d02bae8319929Virustotal results 32.79% 
2020-02-06Inf 20200206 4244.rtfdoc 9005832cf404bc1202dcad8865b5250a9826f2fa18a6e23ee0a7e705c1d63ab0Virustotal results 33.33% 
2020-02-06file_2020_02_06_M3403.docmdoc 74491fc6dd7ba85729f150a091baf5019a4a9cfcfa8e7bb6d450c9edf7762fb3Virustotal results 32.79% 
2020-02-06Rep_2020_02_06_59894.docdoc 77016ff9da8e219908f060ccb135597a6d365ce13a53cb4f40e13ec91bbc37b3Virustotal results 32.20% 
2020-02-05arc 2020_02_06 48600.rtfdoc 335e92129e141d12928fdc17fbb6c1dfe8b6fa59b2ff2a4ad0c60f4f0637ee83Virustotal results 27.42% Heodo
2020-02-05List_Z05871.docdoc 8f2fbc53d8f8bdf05da88e924c8a768a3553ca543aabe034572e0b0f2b38486aVirustotal results 26.67% Heodo
2020-02-05Arc L73430.rtfdoc 85d825b74358c12b84824b2d46cf048e3dfe836a8c320d88d301331a46e62ec2Virustotal results 27.12% Heodo
2020-02-05INF-20200205-YC10584.docmdoc 4ae4da24890dd5b1baf266b99dd34d8d2ba9e958cf57c56069ab7959d39f7a71Virustotal results 26.23% 
2020-02-05dat-246148.docdoc 59dd4e381b291b460fa9a19705f59aa130ec42495f72ac9010d417197166b58cVirustotal results 26.23% Heodo
2020-02-05INF IMX93816.docdoc c0b9c90ce017a4e5196e744c7948464ff57431da4a1d820793c5aea57cc0a095n/a Heodo
2020-02-05MES-BQ3166.docdoc 59b1973230dffbe699193f1b10773d0e327fdde500ae9ce1a1af2024c5f38140Virustotal results 26.67% 
2020-02-05DAT-2020_02_05-K88195.rtfdoc 4bda34084014e21ceb2db8fb9003f36f4b3a7bd5a8bcfb9b1badbf13529a6d84Virustotal results 26.67% Heodo
2020-02-05File_V805.docdoc 1d71db32310de6088f008bda0c652b8a1715c3b98c549cfca90601bdc70c59a8Virustotal results 25.00% 
2020-02-05dat_20200205_22881.docmdoc ab556aef3f7baf74127e682541cd5bb674af38a62c4c1f89ff43f09388894af2Virustotal results 25.00% Heodo
2020-02-05dat_20200205_22881.docmdoc ab556aef3f7baf74127e682541cd5bb674af38a62c4c1f89ff43f09388894af2Virustotal results 25.00% Heodo
2020-02-05inf 20200205 SZ4148.docmdoc e017e89646b0d091bc67504f4318ea078b5a279edd898f418ff735e40c432e28Virustotal results 25.00% Heodo
2020-02-05list U180.docdoc 4a45120dce1cd34a211f66e94d6a16a0e567d8aa85527c6fa830f99691cd1816Virustotal results 24.59% Heodo
2020-02-05FILE_FF4809.docdoc 6552a6b01beec690c8ebf79b58d1397c3e9449e2d59c4f17b1d0e24415fdc05fVirustotal results 24.19% Heodo
2020-02-05Doc 20200205 EO931992.docdoc 544e09d5a19e01f91c458d3b56a2dd3aa5d6623ea0857a3a56662454bd417dedn/a 
2020-02-05REP_096.docmdoc 07fe2fb2cf6e99bc0fee819b38bda8d4c0e8f7d18f8faa9775463041c71ba5faVirustotal results 24.59% Heodo
2020-02-05inf-20200205.docmdocx 3002799efe2f36491f41e0c5e350a6c6ae06bdc8fbef3c1ddf753c6c2e206736n/a 
2020-02-05List-2020_02_05-202533.docdoc 3c0292963e5af1dfc8aa14b1b0408c3d3e0873fde4dd75962bd380b5aa67eb36Virustotal results 34.92% 
2020-02-05INF_2020_02_05_M656103.rtfdocx e96b3b96851ad8f49fa155f44b5dad11bedded8a6c96898fa814e872822f3eecVirustotal results 35.48% Heodo
2020-02-05dat.docmdocx a464fbbd0fd6eb2e09bb5c04dd46379d3cf1c4f67eeb3f4e9f0b9f7896a2192fn/a Heodo
2020-02-05DAT_2020_02_05_S718270.docmdocx ab25cd8065a0df8608fcd69bd29689ae7657b263b8290a459052ff0cfcac3951Virustotal results 30.65% Heodo
2020-02-05file_G004129.docdoc c88c5193f9ffea07709eeb7dbe053ec079f2a2d4f142fd26ca76ed7f55c6e6abVirustotal results 30.16% Heodo
2020-02-04Inf_20200205_6215.docdoc f2d5330b5aa423a1c21c6f960154447080fb0b6a7747307519ce8d57a310d1a0Virustotal results 29.69% Heodo
2020-02-04LIST_2020_02_05_541843.docdoc f189891eacbacefcd510376ad44060a48962b25cfabcdd82b7845acdb512bab8n/a 
2020-02-04list_20200205.docmdocx 3e807f7cb48c71df4ce8ba0a0024238ec14712f1e68e7d0c959ab376f2fbd524Virustotal results 32.76% Heodo
2020-02-04FILE 109.rtfdocx cf00a0e13bdc326ecf08bd0238ee35c3600642133c7f84f69b0434aa63bfa291Virustotal results 32.81% Heodo
2020-02-04dat-20200204-5657.docdoc 226e3d9397801a0c20fc12e65373887d6b8e32d5d47ea818a8b891be4513e330Virustotal results 33.87% Heodo
2020-02-04Mes_D348005.docdoc b652230d0ab5eba2fd05573b7ef10013f6563c1bb9f64d5f5106b15cc8a5ade7Virustotal results 31.75% Heodo
2020-02-04FILE-20200204-ZB6025.docmdocx 265e4a2697fbfecc43edb76419d9e4a8928492d01b548cd7d6804226d6b2a593Virustotal results 37.10% 
2020-02-04list YEN1564.docdoc 12edeef0065331ab3b8644b9c14a1267b266a96e33ad20e9055315c454b750a4Virustotal results 37.10% Heodo
2020-02-04Rep_2020_02_04.docdoc a22639097a957b8debdfb4ff182eb2b6a288368b09b8427853ed91346b687737Virustotal results 35.48% 
2020-02-04Rep 2020_02_04.rtfdocx 8abe3476f2e6ec41653192f2adc6b6095371ddb2fa46044e4e8644c6e5d9694eVirustotal results 36.51% Heodo
2020-02-04Doc 2020_02_04 R443413.rtfdocx b71394268acf3acca757143450d5ccc9030bb60cd3e5e9e3245f81fa1b63e757n/a 
2020-02-04ARC 2020_02_04 RJ639044.docdoc 3455fc14bf4bc55e2cd1a0d3e6ba9f195bd43d0a44099f3f23cb2c9b95310140n/a Heodo
2020-02-04List_2020_02_04_T812.docmdocx 8850bfdd37da2c746074f307dfcda1b492a3d639d6a48a9d56dc084fec7c536dVirustotal results 37.29%