URLhaus Database

You are currently viewing the URLhaus database entry for http://hccsouth.myap.co.za/wp-admin/zpi0yf-xkas-01/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:307949
URL: http://hccsouth.myap.co.za/wp-admin/zpi0yf-xkas-01/
URL Status:Offline
Host: hccsouth.myap.co.za
Date added:2020-02-04 11:27:12 UTC
Last online:2020-02-28 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-02-04 11:28:08 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:24 days, 1 hours, 51 minutes Bad (down since 2020-02-28 13:19:52 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-06INVOICE R5_08553818.docdoc 6f2348d8a57193b749e7d6f280092c70d37e793b14f39be69bc976bab84958dbVirustotal results 21.31% Heodo
2020-02-06Inv 2_79399878.docdoc 67617db60beb8c4cce54db289e3d3a8406049516de95ccc8940b0d1735caa144Virustotal results 20.97% Heodo
2020-02-06invoice_SOS37_778661016.docdoc fd7c8c6cf457d1d127ee24d40ea990ccae1f8f8e8c648e61c760124a04dd4941Virustotal results 22.95% Heodo
2020-02-06Inv 0_9790739.docdoc 5f1d9dff136888c71d8b157e91821d73a94faa92af1bdc04912d223b7b1de32dVirustotal results 31.67% Heodo
2020-02-06invoice_KUXC1_9931419.docdoc aa1a76b81c26b3039f992fa97b4738751e8bd457072a3c63260ce986b96488edVirustotal results 33.33% Heodo
2020-02-06Invoice OZ5_723323575.docdoc 9eca08bea00fec73f8bdc769abf28f857d39de7d922c4d0dfd4017dc5981d2b0Virustotal results 33.33% Heodo
2020-02-06Inv-NNQZ0029_286856.docdoc c7b6f46f5a55f557c829d3a1e6d171b7fc2577517bd72b3219b805304f56a2fdVirustotal results 33.33% 
2020-02-06invoice-3060_329405956.docdoc a6f19dca43628c0760f4bc6d493a9607e9d9ab713610dbd09c19d7670ee49cb6Virustotal results 31.15% Heodo
2020-02-05invoice_L2870_368247.docdoc fbc7e227ec8bd45144bdd33ac13c8a9b563282ce2c47bed6f613e71ed22dea4bVirustotal results 26.23% Heodo
2020-02-05invoice-MKG2_730101354.docdoc 4c81ae4043b5ebb941a22c4511a4757a6a0ca5a842660b5c1ea31c57955800c5Virustotal results 26.23% Heodo
2020-02-05INVOICE-US394_781675871.docdoc 9f6e3884e315de26a6adb8852faeaba696904331425f2e25144be6675f9f1cceVirustotal results 26.23% Heodo
2020-02-05Invoice-LCR5523_999862820.docdoc ad495b7efc571f2027ae5d71d64f570d3120edb60cefb029658e4b6ec588e4b0Virustotal results 26.67% Heodo
2020-02-05Inv RRE01_545337558.docdoc bac64a981e3fddb119868ac4b6c14005db9b3c64f608849911d6c08947267dcan/a Heodo
2020-02-05Invoice-235_76692968.docdoc 80ff1f7758139fb61d82afe12894afc778068701ba7fc6acc78f1e05b8e6d90bVirustotal results 26.23% Heodo
2020-02-05Inv X8021_044245249.docdoc 2592177b8fc2dad7890e1d568a33bde6b00c015fc0c96dbccf47299f5f0953b2Virustotal results 27.87% Heodo
2020-02-05Inv ZX0510_790361.docdoc 553bb18cdd7ff56366cb6f9509373cc5c6e58e24d1056bafe7e9bde95f6817d7Virustotal results 26.67% Heodo
2020-02-05INVOICE_A71_1660888.docdoc 3d86715a18dc19cdf1364d58ff7deee2c387cde502de5b43166a7c0d98b2a24an/a Heodo
2020-02-05invoice-UW4_8188282.docdoc dc0402b2e8b444ac6695dd0686b697822b5c339fb556f63aaf4cb4dce9354572Virustotal results 27.12% Heodo
2020-02-05INVOICE-UQH2310_228743369.docdoc 6e4f1e55d03c7f87e1640ee1dba3bbbf7f3d01655098885ef1db6e84a5947292Virustotal results 27.12% Heodo
2020-02-05invoice_XN8875_714413.docdoc cd7205a871273f045d8ee2a8621fcd7dd7778e062e3598507c21ffb656752721Virustotal results 33.33% Heodo
2020-02-05INVOICE_494_793793.docdoc d753eaf7b22aea01dd44dfba5b9fc26ebb5677f4a713b4afa69d8c34efe836f0Virustotal results 33.33% Heodo
2020-02-05Inv_EJ356_5947754.docdoc 471942cfd9aa93923bc0f054e64201217913ae24a3e192919207202918c628fcVirustotal results 32.26% Heodo
2020-02-05Invoice_MAJP3489_096688892.docdoc 50ed2de7492f944d8a34c9d454c3757a58d26078f91dd5de90ac595eb6279dc7Virustotal results 42.86% Heodo
2020-02-05INVOICE_T1_3721625.docdoc 4887e700c4997ddaab9733c0dc0696a27e93eb2c02e2839119c077c2b92fd2d6Virustotal results 34.92% 
2020-02-05invoice ZO453_015408.docdoc fe95a5f68fe689f22c1ba6e479febd867fbb29760f0063700ad27d7d8b482d67Virustotal results 34.92% Heodo
2020-02-04Inv-0088_42479772.docdoc c01faf044c1df797bde7ae50e931236add55e532401115f33435ad6802eeb184Virustotal results 33.87% Heodo
2020-02-04invoice-JPBJ284_6847519.docdoc 0b2ca06ad6086c411fe61f2b5a791d8fa9336d920a8c39214db4c4b05e69a3acn/a Heodo
2020-02-04Invoice-MC89_97871057.docdoc 41aea47e36728ef17f91fb0ed0239001ef742699f4e187e54d4e107680725a5eVirustotal results 34.43% Heodo
2020-02-04Invoice_CKD101_814847250.docdoc 9cf373c9a2dc126d14647d1c4f9bd6a554335f4f00f76b6ad0ce24dff7d1c054Virustotal results 33.87% Heodo
2020-02-04Invoice-MF882_987825.docdoc cf00a0e13bdc326ecf08bd0238ee35c3600642133c7f84f69b0434aa63bfa291Virustotal results 33.33% Heodo
2020-02-04INVOICE-M1_902313.docdoc b4c3990e73035881f982534ee5ccc3a30f80b58c625e28b6f68067c223589fc1Virustotal results 31.75% Heodo
2020-02-04INVOICE-I1_654776273.docdoc 40c57139f9fe475f5e06542c48aac3476cd943f3530f73ef44a60db380bf9e04Virustotal results 38.10% Heodo
2020-02-04INVOICE-QUCV748_9862620.docdoc cf761039f6144534194bd9b3c7b79c189a433742c439a379d11e351c6b46263bn/a Heodo
2020-02-04Inv-ZK9504_1419175.docdoc 1173cf1516a39c758a543aa77e5efb97ae7c0405e4d4921939f774fe9a48be41Virustotal results 38.71% Heodo
2020-02-04Inv-Y320_739347.docdoc b38620f90ec6f200c3c194fb6ec3444c55f50151f4a47cd6ff0eba0bc12a03can/a Heodo
2020-02-04Invoice_IHS443_30770238.docdoc c6f67345d51de31d968f542885d815a518e46ae16c2629694893cceceb18ff3cn/a Heodo
2020-02-04Invoice_MZTW9_2421062.docdoc 073c64aace2e395d927a52fac9abc86ab289aaaa00bebe880dc097c54e8cbb78n/a Heodo
2020-02-04INVOICE GLKQ79_3226791.docdoc f243a8a66b3734ae705e62579b6520ebd361bf4f5b5b51462032c3c2261f8841Virustotal results 35.48% Heodo