URLhaus Database

You are currently viewing the URLhaus database entry for http://addahealingmusic.com/wp-includes/d4zkckftm2p/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:415731
URL: http://addahealingmusic.com/wp-includes/d4zkckftm2p/
URL Status:Offline
Host: addahealingmusic.com
Date added:2020-07-21 05:26:39 UTC
Last online:2022-03-15 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-21 05:28:04 UTC to abuse{at}megatrhost[dot]com)
Takedown time:1 year, 8 month, 2 days, 10 hours, 13 minutes Bad (down since 2022-03-15 15:42:00 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-13n/aunknown e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855Virustotal results 0.00% 
2020-07-22DOC_00892884.docdoc 91420939d17611e6b1215827089e2e118b07eaeb3034e72059b79148104ae337Virustotal results 40.32%Heodo
2020-07-22REP_96241343.docdoc 432d6d6881a6d2006ee6d849c32688e7243f4b6f06e42ebeaab0665807c3140eVirustotal results 40.00% 
2020-07-22BAL_SM8323445403QV.docdoc c9f585e76195bccbecfc06a49ff58041d156b95ab4e7e12c664332b57a86e2b5Virustotal results 40.00% Heodo
2020-07-22XT1154085221FS.docdoc 52d38a2e099e1a91adcac50b986c9283c6b503449c08f1ea50f1202176bfd48dVirustotal results 38.98% Heodo
2020-07-22GZN_070120_ICJ_072220.docdoc 36da82529398c84564c41db4ee6bd80d8f27729d46fe18511455ce03a0c3a0f2Virustotal results 38.33% 
2020-07-22REP_VN4538178933WB.docdoc bff462e527dc2bbfbc6af92e64f4d57c7587401687561163e0a6a3ec37414d68Virustotal results 36.67% Heodo
2020-07-22HOBN_18455551.docdoc 3249c6416297b56a2e2b0f8e5a7953a0d8ed783591de7cdac42bdc694631f11bVirustotal results 37.29% 
2020-07-22DOC_WJ6073163906PO.docdoc a1169e902ab8c4c2dc02af0a77012bbc44d149973cdf8002231a3f9f177a542fVirustotal results 36.07% Heodo
2020-07-22V_1755794070807085.docdoc 75976bde3b02341d4f05b9672041e7cecdc933663249a73fc38982cd66982d47Virustotal results 31.67% 
2020-07-22DOC_6GGFGDUG.docdoc bd83f09ecfe601637ebab977d8f363a89860c60d16456c28bcbfc30ae1778885Virustotal results 30.00% 
2020-07-22K_06959373.docdoc a86f1e9e1fe56b2a602940171cc372f4aac4616897c720351e8b379a4c6520fbVirustotal results 30.00% Heodo
2020-07-22DOC_PO_07222020EX.docdoc 55e84398cd55149723b8680739ed42c4a5b52da9a84aae98b979409d9dd11cd5Virustotal results 31.15% Heodo
2020-07-22T_LT1608052886AV.docdoc 00ef2d68251c66dcd85acb5c11837148de33e43d9a98eda9d28435c9d74477e3Virustotal results 27.42% 
2020-07-22BAL_7ZVX7PX5I2H4UY.docdoc 30c4cc96ab9f83017f38edba3d630eb388ab4540951a1f799ef60ff5659ea45eVirustotal results 26.67% Heodo
2020-07-2215231992.docdoc 6999be5570232cb11189a152478254ef33470426036d88fa74b45305031efb73Virustotal results 26.23% Heodo
2020-07-22BAL_YYG_070120_GTO_072220.docdoc ee36488e9d6d8ea09cff02367c7212d0503f376346c3b40aed03e01c1b1aa668Virustotal results 26.23% 
2020-07-22INV_IP4460421933ZP.docdoc 49e20fcd1ebe7943437c809b881031d59e45a98614d1c7af96b3c1835d4586ccVirustotal results 26.67% 
2020-07-2257733877396174168876400.docdoc adecd8241c21aa989810258e39d162aeb6ec0b86ca6a884fa3a542ad306a1c63Virustotal results 26.23% Heodo
2020-07-22PO_07222020EX.docdoc a76feea95a298d6f94ca0a719376f30e4409a18555e10bdb1e90a24c7facf294Virustotal results 24.19% 
2020-07-22FILE_PO_07222020EX.docdoc c14ddeac4500ec2bb65828bcf770f5ce11a369ca829f2c68587632e1dccfd995Virustotal results 24.59% 
2020-07-22F_PO_07222020EX.docdoc 5f5a353ccf0dbcfaa0859d0a1db152f2d40735bce47864d7ef9c12ab93c8ca88Virustotal results 26.23% Heodo
2020-07-22M_PO_07222020EX.docdoc f9b9806f9c7c88864e0ff685eaab801a085f8c567b7d6993101bafa58c4833b8n/a Heodo
2020-07-22H_LHZ_070120_NBS_072220.docdoc 593793a914684244b3c51333736fffc1cdc69c51759831c888b66e6a07ef8b72Virustotal results 24.59% 
2020-07-22616845027381494793.docdoc 9dc3bf8aadd5819cf5be10ee9a0af6c94bc4b8a7a193cf539ef3ac9288ca9f15Virustotal results 25.00% 
2020-07-22BAL_PO_07222020EX.docdoc e138da30fb56344429ee51040714270123930932db14186bb12630a53d904fdbVirustotal results 24.59% 
2020-07-22REP_PO_07222020EX.docdoc ed1a41469969a80fefc58566124f44e0846bff21d8e51d897da0d10b2386174bVirustotal results 24.19% Heodo
2020-07-22PO_07222020EX.docdoc afb0e524b7db64a122b728e245c9696835a816e3cf272da3b39ac35bba514abdn/a Heodo
2020-07-21REP_8S0M11EJ9O.docdoc 620ed9cdd6372b6bd9572a507c6c349ec07cd10cb45cb36216f21e2e6b025d2cVirustotal results 24.59% 
2020-07-21DOC_CX7769317866VE.docdoc c6ca23f36d524391de9970059d2e0faf54270286e320503e3eadf282ab5082a2Virustotal results 24.59% Heodo
2020-07-2153283212.docdoc 737dad0010dfc90068d5db4073a76c04f2e9aa7549373686028374e3bbbdb652Virustotal results 24.19% 
2020-07-21B9CO7L6024TU.docdoc 5c3d472318679572aeebf4c76cf7f2ead0f39f72e9d9d3e26604c88f35364b4dVirustotal results 24.19% Heodo
2020-07-2141464901.docdoc dcd97e231a7928660c49c35be9d5b8f839ccd3e2b8882ddd60c22b1bd012ac4cVirustotal results 25.81% 
2020-07-21BAL_OEA_070120_JCZ_072220.docdoc bc7398dd8ac94a9ff8ca7a93f0755681ec84ca7fd05058ddc053cd16e1b3f4e3Virustotal results 25.81% Heodo
2020-07-219285872023285560.docdoc c0af5b3ed8e1c92c57aa0e1b6f60d24b4ddc6a95ae92906d793d88413fa9904dVirustotal results 24.59% 
2020-07-2171529138.docdoc eb1f5512e10d3a5224fa2b7a8d42a8b6fdb1b4fa705c24514c2b04fa6fa3bda1Virustotal results 26.67% 
2020-07-21INV_FXZ_070120_DWU_072220.docdoc bfb0b36ae7105ad67727e68789279e3550b6750177ae7c2fc1007438f686f070Virustotal results 26.23% Heodo
2020-07-21KKI_070120_QVO_072220.docdoc eb3009e003594f7c6d5a2c373db44fe65d9acc0be9c31c317bf9ebfad08e633eVirustotal results 25.81% Heodo
2020-07-21REP_KN4516497484SP.docdoc 2f4719fe8c7d6c5de85448ec6a443b49b51cbee1b16d7d67e6a8e497a3b5cd7fVirustotal results 26.23% Heodo
2020-07-21FILE_PO_07222020EX.docdoc 4a6f267daadb0dd612dfec5f99bfda7da3e527108b3105e2ad116bb9ccc92c51Virustotal results 26.67% Heodo
2020-07-21JAD_070120_YTQ_072220.docdoc cd6f41e3821d55917fa4a0cdbe223abdb97ed8da6f7870d449d8e81ed6f9ec69Virustotal results 26.23% Heodo
2020-07-21INV_734195478294629.docdoc 6616cbabce1dd4cb3515191b2ed913e01a7ffc8b1cff8ec410600930bbdf7f3fVirustotal results 26.23% Heodo
2020-07-21FILE_57498887.docdoc 5966dbc11d924231b5d148a1a821154f88e469adcb6e884d4dd5102c9e598e9fVirustotal results 24.59% 
2020-07-21BAL_83850530.docdoc df3b437a0a2555b3ae16c3634140dd1ff3832120d3376e4a11ec45a500250f4aVirustotal results 32.79% 
2020-07-21BAL_83850530.docdoc df3b437a0a2555b3ae16c3634140dd1ff3832120d3376e4a11ec45a500250f4aVirustotal results 32.79% 
2020-07-21INV_YR2740209828MB.docdoc ed1fa22cd74f33f9e0a5d4191f4b7304925eae53db04e752d2095134b6f0100fVirustotal results 32.26% Heodo
2020-07-21P_PO_07212020EX.docdoc 6b606b07e4ddf623479f05fe2da2628bfb74b953116407b7e4ad3cd64421de36Virustotal results 32.79% Heodo
2020-07-21INV_SI5501689934SH.docdoc 1eb40695aac83a3f528f16af863be6327354d555eadf1695c53904c523ac9a86Virustotal results 31.15% Heodo
2020-07-21REP_JY6356904635OU.docdoc c22e26dfab6e9d1a9b274c81e01683828409ad629bf7883a0d58600c1f8db403Virustotal results 31.15% 
2020-07-21BAL_BS3JHUN0ZHBKDLW.docdoc 6acb37f46741819ca10ee4ccb7f88dc94b5dc36a3a1c5c366450d76db4b42a6cVirustotal results 30.65% 
2020-07-21REP_20968206.docdoc ffc575665829ae7905ee6e5f2194883080c4ec8d2fa69ac1770319767a1b5456Virustotal results 31.67% 
2020-07-21DOC_NZF_070120_KWM_072120.docdoc d087ddd4ab54eacd0bdaa2be04850c18ab694655cebfb68094cc191e7479b793Virustotal results 30.65% Heodo
2020-07-21REP_XTJ83PT811S.docdoc 74db9fac3d9a684b81ce1975d06d184a85bc67d24466aed35ff6ee475e21d16dVirustotal results 31.67% Heodo
2020-07-21FILE_MDB_070120_DFD_072120.docdoc a543b622ebcc58314854fa85473ce89753b8c30877e2562d607aa9483023d16fVirustotal results 31.67% Heodo
2020-07-21JA_91322462.docdoc cead2b444fb70319f7ad607f10b254f3888d97ee61adb8a5be9492f259718ec9Virustotal results 31.67% Heodo
2020-07-21EK_XB6221656102SV.docdoc c50850a81ad3ce08fc961162e1082494177f8e501dab0e698bce46ffef854ef6Virustotal results 27.87% 
2020-07-21BAL_IP6051488497JI.docdoc 9730ab9a8c60bf06cd93ddc13f7a80f30ce61e20782b9ff1c85dbeff59e3062bn/a Heodo
2020-07-21W_NKK_070120_YED_072120.docdoc 26d6a947ace5dc20b8511699014a7230d627b181f37246807ea85cdeadea61fen/a Heodo
2020-07-21P_DJI_070120_GWD_072120.docdoc 454c1cc1f9583beec51230534131bba60e6483bb9363ead5a4b7b33f54e30a51Virustotal results 30.00% Heodo
2020-07-21BAL_79376780.docdoc d79c71d538e01fa78030decd715462c870e06f70c88f52d1d917e2302ba1c140n/a 
2020-07-219295279304373327029.docdoc 7c0e49dcc082c8f4b4fac91339f378ea04ffb0ccbde5018346e4f95f30fcb05cn/a Heodo
2020-07-21INV_7611041159699574043272721.docdoc 5f3da5a1b6d61a46a16169eaf72e463f3f5483f15213d0799b577d4684e38a70Virustotal results 28.33% 
2020-07-21INV_69943079.docdoc ced32d6bf400cc3bb59aa1929efa4c17228064153ca0615288fc1fefde35f11bVirustotal results 27.87% 
2020-07-21INV_WUOQ4WLALJ.docdoc 6aae57a7a60c8c2529948a9290becdc90f10be950ad2133ef7cbb1c366693f4eVirustotal results 26.67% 
2020-07-21DOC_15406737640.docdoc 974a9bde6fa374685e63b50d21dd8254256dd8f6418d9d65e208a465a0141f73Virustotal results 24.59% 
2020-07-21FILE_TH5792502498KL.docdoc b4f865e3011a63a5b8a0da14876282d97d5144e153f8316025555d276602d335n/a Heodo
2020-07-21KX6225444024UC.docdoc 281280ed257511ed8f8f2b291a83ce2978bc6e6f14c52ca9ce10540c70cf0605Virustotal results 24.19% Heodo
2020-07-21INV_BML_070120_FIF_072120.docdoc a77f0d09a07d8f85b737d25216501b343e22c4e04a6f88b16dc1ab9ea1b2a222Virustotal results 25.00% 
2020-07-21FILE_94860565.docdoc b1a935c9a64f8a2191e613e696c6df7a5892c608ec14c6f72c3459c4a62f2865Virustotal results 25.42% Heodo
2020-07-21REP_4763638730403761208.docdoc c1d1210982635dadb2f24475c235301c47a2929b5b3caa913ebdad6df34a0c71n/a 
2020-07-21DOC_MP9689609853CK.docdoc 6ea128ea049d2ebacb539514c677bb05791d9844046f47e6e1e3dc783f2942fbVirustotal results 22.95%Heodo
2020-07-2174988513604823881290661.docdoc 003110462b096556a9d96dca0472feaa2dee2edaf6d8d0e179dc08a8a8f2b775Virustotal results 23.73% Heodo
2020-07-21DOC_HUF_070120_QIW_072120.docdoc 76135328ce70dd5755fa54408d962b10954d6bb5c47f883a7c2bdd1defbebb9cVirustotal results 22.95% Heodo
2020-07-21FILE_DYGLXRMEN3.docdoc 283288b5bb193523ad2659b4cf322feea153048b6f27a8fa9673ca683bca177fVirustotal results 22.95%Heodo
2020-07-21FILE_9609969388168551951884.docdoc f2e0593ca696ec36f6b813e857b8fe6741252d7b65df42e5e16bb3c80bc7a90dn/a Heodo
2020-07-21DOC_13554966.docdoc b3b5e742a9efcce621c8d70898b0ac59c13ad4c0e62b1cfc1b6642c403cfa5e5n/a Heodo
2020-07-21BAL_XA3672577304WX.docdoc c0a07acdba0bcb551c7783cdc1b10474c024031f6f011ee1761843ca640b1c3dn/a Heodo
2020-07-21INV_NY2346800596CU.docdoc b946948073ee057b1f1cdf3b7c54098e9eb35bb8736104d13e2f3febb038f2b3n/a 
2020-07-21FILE_4728665720376.docdoc 8b448dc2b315f49801c7b4d4b20a2d3163f9c9376a3c36dc4dc7a52513a101f0Virustotal results 22.95% 
2020-07-21DOC_7430913647999204938264700.docdoc 660ff4d3124a99db58894556a3461eda17393ca94c27e075185e72536eb6735en/a Heodo
2020-07-21BAL_UCN_070120_LNR_072120.docdoc fc2bb7719f33ff249113e3c05c4b2b6fdbc99190e250b3073295e271c553f0d0Virustotal results 32.26%Heodo
2020-07-21T_PO_07212020EX.docdoc d604f20c04d25e448176ddfdf3e01865091590cdf5f2cd2c42eb9af7cf41c718Virustotal results 33.90% Heodo
2020-07-21LJ6060934871YG.docdoc 53b9a409018adc25ac26a608d9fae417659211d8754dbf7f07c3e4710a026774Virustotal results 32.79% 
2020-07-21INV_159927456427914.docdoc f23c88283a5b29e45eb6658afb904be03923f73895e4f6b232f3e04e288bb715n/a