URLhaus Database

You are currently viewing the URLhaus database entry for https://elntech.co.za/wp-admin/personal_box/open_warehouse/18889821863780_Z2CHb8TZYls/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:308505
URL: https://elntech.co.za/wp-admin/personal_box/open_warehouse/18889821863780_Z2CHb8TZYls/
URL Status:Offline
Host: elntech.co.za
Date added:2020-02-04 23:16:06 UTC
Last online:2020-02-20 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-02-04 23:18:03 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:15 days, 5 hours, 7 minutes Bad (down since 2020-02-20 04:25:48 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-06rep_2020_02_07_JQ32797.docdoc b299c8241e7f53713cd2c9a6ed02c9eecbe795a6aee09aadec03a08cce18f7afVirustotal results 29.03% Heodo
2020-02-06Doc_20200207_316701.docdoc 76ed65f4166ab70a504fa0c58b5fa4d5afbbdf92c3b7770185b137ac87aa37edVirustotal results 29.03% 
2020-02-06list 20200207 21004.docdoc b6a866cd6767e85ce9779e18601e4ff38f6a25e8bf459d47936489b9d58ba9c9Virustotal results 27.42% 
2020-02-06DAT 4018.docdoc 903eadc1bcff1ede5e8a4887d539b907837b35b6ae79a1b7cd200ec455cee00fVirustotal results 27.42% Heodo
2020-02-06FILE-2020_02_06-M8052.docmdoc e62205f9ad8ce110e6f628a4622e7f12d9db3b4c2cc100e1d464b06f2a2b0afbn/a Heodo
2020-02-06rep_MP8750.rtfdoc 548c32e1f7c11d658a1b45cc341ea2480b28c86e352baf366289aaa70a9e9292Virustotal results 29.03% 
2020-02-06rep.docmdoc 00810a12662ed1714ce797c700855a606ab35c246a1c1a2ada47b503d612a82dn/a 
2020-02-06REP_2020_02_06_8283.docdoc e2242f427a47cdd239a61505c64bb7956f2c451a95ae9dfcf44f845fafeab46aVirustotal results 25.81% Heodo
2020-02-06list 5065.docdoc 464e3fbff2832e347b5bfa5fd0151fbfc4f3107cf97f74b7addcbc2984b60143Virustotal results 26.67% 
2020-02-06List 20200206 6039561.docdoc 20a0926fb970d58fb5681385d5b8bbc67f1abdfe2e240c721e1034857c14cb9aVirustotal results 24.14% Heodo
2020-02-06MES-2020_02_06-QW791.docdoc b99125a74c2d36d2875478ee03096a69ad74f272c1ced98d2e22ea0f2a3d3191Virustotal results 22.95% 
2020-02-06REP-2020_02_06.docdoc 186ad5a4edbbc67f97e4c4d0236f263ae46435a2687639dba2a0a91edd0d6ce5Virustotal results 22.95% Heodo
2020-02-06File-20200206.rtfdoc 413a1918fa059d5be9e47bd9fb404c1f58c2c5262e3c2f4371a88f4cab9a9c93n/a Heodo
2020-02-06MES.docdoc de051ed1500a8c104656fd5cdfc8735affb7c0bc996b98ab0872bedf6d4172ffn/a 
2020-02-06Rep_2020_02_06_672307.docdoc 7fe4afe59b087bf542c67a12ac54ccb89eab281656477ed8bfc41ebab0e0135fVirustotal results 20.97% Heodo
2020-02-06inf-20200206.docdoc 7713e180e8a62f6041738a796b29f6efeab8431f8b6425016a4242f64df7061aVirustotal results 20.00% Heodo
2020-02-06doc-2020_02_06-34238.docmdoc 17593bcabe9abc1036651dddd696d02cb77c94ed237afdea9922c48880b9ef4bn/a 
2020-02-06DAT_20200206_T97274.rtfdoc c7662c41a76803dcb646c8d920e316033baf7eaeda42b42305d4bab1a3a49fbeVirustotal results 33.33% Heodo
2020-02-06ARC 2020_02_06 2672956.docmdoc 43e38902740c39567550fd0e4c87c00947c5fe577765eb00051f0212c05d7cabVirustotal results 33.33% 
2020-02-06file 20200206.docdoc 702b22d598064f664dd6fbf97fb50364269f0215cbeabf867165861dd0b7d82eVirustotal results 32.79% 
2020-02-06LIST_20200206.rtfdoc 9005832cf404bc1202dcad8865b5250a9826f2fa18a6e23ee0a7e705c1d63ab0Virustotal results 33.33% 
2020-02-06Dat-EKD51362.rtfdoc 24bc1b322505611fc96f657f00be75ad4a096d02fc3e78d4b45369b13358575fVirustotal results 33.33% 
2020-02-06list_20200206_5701415.docmdoc 58f94895848e841464a8b36d26e332a50e9b082bd7df37c1c054168929b7b34eVirustotal results 31.15% 
2020-02-05MES 20200206 WS846.rtfdoc 335e92129e141d12928fdc17fbb6c1dfe8b6fa59b2ff2a4ad0c60f4f0637ee83Virustotal results 27.42% Heodo
2020-02-05rep 20200206 ML374625.rtfdoc 061b77c1354bff1d5cafa4e10d903ee5feb16bb91c295298444e056ffefd1370Virustotal results 26.23% Heodo
2020-02-05Mes-334319.docdoc c1d36e9aab2030f23a10178cc432f92255b74c7e2382840bbae1ad7c099e97a9Virustotal results 26.67% Heodo
2020-02-05arc_2020_02_05_PH245369.docmdoc 1566745273aeac5249400c456f82b70e870825a50ee2457479f734c7686dfb54Virustotal results 26.23% 
2020-02-05Doc_2020_02_05_489.rtfdoc 47ca3de0e80a4e9571311ab0b2470ecc29d18c990b063b57aef1818e5a3c260aVirustotal results 26.23% 
2020-02-05list-20200205-MV83937.docdoc b03e332d75fae1c213d41742abe758225f46a5ae68755f6d57dd3cb44326312fVirustotal results 26.23% 
2020-02-05LIST-S0642.docmdoc da0b1e331a89bd28e4338a886d224c01e9194a764a6ded30bac8b16670a589b3Virustotal results 26.67% Heodo
2020-02-05List 20200205 MJF396586.docmdoc 4bda34084014e21ceb2db8fb9003f36f4b3a7bd5a8bcfb9b1badbf13529a6d84Virustotal results 26.67% Heodo
2020-02-05ARC 20200205 6581111.docmdoc 1d71db32310de6088f008bda0c652b8a1715c3b98c549cfca90601bdc70c59a8Virustotal results 25.00% 
2020-02-05doc 20200205 WP579.rtfdoc 6228be42f808ff1c2d59dc6df839b24c07a9e9640fffea33d21e69f3b2765a69n/a Heodo
2020-02-05Dat 279267.rtfdoc e017e89646b0d091bc67504f4318ea078b5a279edd898f418ff735e40c432e28Virustotal results 25.00% Heodo
2020-02-05Dat-535572.docmdoc 4a45120dce1cd34a211f66e94d6a16a0e567d8aa85527c6fa830f99691cd1816Virustotal results 24.59% Heodo
2020-02-05dat F02248.docdoc 6552a6b01beec690c8ebf79b58d1397c3e9449e2d59c4f17b1d0e24415fdc05fVirustotal results 24.19% Heodo
2020-02-05List 2020_02_05 5502579.docdoc add57fd6782c427fbdbab1e52f313746c594f78a352135f6961c6e7d3d9ea2f6Virustotal results 24.59% Heodo
2020-02-05mes_2020_02_05_QH03884.rtfdoc e88dccaec3107938ce2733cf049c5ace8f7d614e24a96f1b60da298112f6b5een/a Heodo
2020-02-05file_30600.docmdocx 3002799efe2f36491f41e0c5e350a6c6ae06bdc8fbef3c1ddf753c6c2e206736n/a 
2020-02-05file-SU727.docmdocx 3c0292963e5af1dfc8aa14b1b0408c3d3e0873fde4dd75962bd380b5aa67eb36Virustotal results 34.92% 
2020-02-05List 20200205 D8665.rtfdocx 98a046c048e6dccb43c0c6c6ce35eda6d4792e013b3bb7abf69702d4736b8840Virustotal results 34.38% 
2020-02-05Inf 76840.docdoc a464fbbd0fd6eb2e09bb5c04dd46379d3cf1c4f67eeb3f4e9f0b9f7896a2192fn/a Heodo
2020-02-05Rep-2020_02_05-79640.docdoc ab25cd8065a0df8608fcd69bd29689ae7657b263b8290a459052ff0cfcac3951Virustotal results 30.65% Heodo
2020-02-05doc 20200205.docmdocx 87bf983815a7bdfc6fda722fa02b1adef0c064fc60a443faed053662ba92a74fVirustotal results 32.20% Heodo
2020-02-04file_2020_02_05_59808.docmdocx f2d5330b5aa423a1c21c6f960154447080fb0b6a7747307519ce8d57a310d1a0Virustotal results 29.69% Heodo
2020-02-04dat-4696.docmdocx f189891eacbacefcd510376ad44060a48962b25cfabcdd82b7845acdb512bab8Virustotal results 30.65%