URLhaus Database

You are currently viewing the URLhaus database entry for http://offerhungama.in/wp-includes/swift/uzr18c21m1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:416242
URL: http://offerhungama.in/wp-includes/swift/uzr18c21m1/
URL Status:Offline
Host: offerhungama.in
Date added:2020-07-21 19:27:27 UTC
Last online:2020-07-25 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-21 19:28:04 UTC to abuse{at}ovh[dot]net)
Takedown time:3 days, 16 hours, 44 minutes Bad (down since 2020-07-25 12:12:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-2310097293.docdoc 5cdc96bec1f2d169457b067fe393ac32ee1b41e4243d3cb7b59d20d95cd5f22eVirustotal results 41.94%Heodo
2020-07-23N_ZBR_070120_QMY_072320.docdoc 2c4488a6f51c9e243a1723fe43f3b1b4c6feb9e8e1b5611edf1494b0495423efVirustotal results 42.62%Heodo
2020-07-23148497423435990402967248.docdoc 5f2520828449385a186054f9fd1888a69f6d808ee764bb50c387821529d0fdc0Virustotal results 43.33%Heodo
2020-07-23FILE_PO_07232020EX.docdoc 337d0f509a061e77549dfcf7c2a178ce5d01e9a6467033cc68aabac91c9d6c4bVirustotal results 42.62% Heodo
2020-07-23GZG_070120_EXB_072320.docdoc 201e65180b4832e4846c2b92accd04338090231dff03fcd300543968d409f828Virustotal results 43.33% Heodo
2020-07-23INV_36816982.docdoc 0d4d84b4ed0c4a8e8c9f84e6e3867fac00ea5484f6892545456598a190dd99c7Virustotal results 42.62% Heodo
2020-07-23ENJ_5244216803599.docdoc d131c618751641683f75fc2471996ffce57977de598654efa46d29ad1bdbb6deVirustotal results 40.68% 
2020-07-23PO_07232020EX.docdoc 2403eb46760fc42de500a11f1ef2ed9193bbcf6869d68343f1c9ca5cd754621aVirustotal results 43.33% Heodo
2020-07-23FILE_KO0813264942VO.docdoc 7470d42e27dcc8eb13d9c5a4834ea53e27ab889b433b3798d7dba2475ec5ad6eVirustotal results 42.62% 
2020-07-23DOC_PO_07232020EX.docdoc aba7df9e5780927498f58cb4482f30ac95c85e74d6e71a4a340768b6d5fcec63Virustotal results 43.33% 
2020-07-23ZNQ_070120_EFK_072320.docdoc 90fcbf490c8b5c82b4a621d2eda95d5a174ec25e79494532d86b437fd4752977Virustotal results 42.62% Heodo
2020-07-23XY_78200061.docdoc a38009fa686fc8b2d5d64ac631da032b3ae4306eae5f763c354a30bd27acd7e3Virustotal results 42.62% 
2020-07-23REP_06708774.docdoc c3959ea8f24121577d9921bd69d95b3a680fea6a6d86ae9e4687d9f05ae6610fVirustotal results 43.33% 
2020-07-23PO_07232020EX.docdoc fb1f786f0ee87634573d696bfa8c3c77de7931a5a5cd367e29526eebc26c3bd7Virustotal results 41.94% 
2020-07-23FILE_1890284315962625793873431.docdoc ce4fa229e438e2f4fb5ed3904bc8eaa649ec0f72a8896c42c26f4c4ac3fe9bb6Virustotal results 43.33% 
2020-07-23REP_66618769.docdoc c307436eafab96d2c26a88ce87ccc4a9513e92bb62f67a1259b985f9bbc7b1dcn/a 
2020-07-2399815382.docdoc e887884ab75f057789b77715e51767f86bd1f2c5857c595af609fee2f045ef87Virustotal results 41.67% Heodo
2020-07-23IKN_28887585.docdoc f696c100ad68214e4689b5dd0ee16a0d47eb16a2e018c02396c3c4632a71c3dcVirustotal results 41.67% Heodo
2020-07-23BAL_OU9069918213YP.docdoc 61077d5fd0bb05fdfde47490320fccf5db5b458c1d2144bec7ee9c48e15a506cVirustotal results 40.98% 
2020-07-23ABMT_DBS_070120_EET_072320.docdoc 41189934c14711a0804f2705cd9e9831907aeeef63d1969fbd8438389ac2c9f7Virustotal results 40.98% Heodo
2020-07-23O_XJ8100321090QY.docdoc cebc54a58a021a0d955723c260148d0d20cbb7c7ef59586a5dc6370bd7fc03ddVirustotal results 40.98% Heodo
2020-07-23E_539376718874707838463919.docdoc c0f7c736eb0dece796e74848ce229d17113f5a1e94570952391fecb6ef362433Virustotal results 40.32% Heodo
2020-07-23KK5850608554EH.docdoc 67b4d45558173d9845374c02d96c5835e69913c4bbdbd480549a9d493533a4d4Virustotal results 40.98% 
2020-07-23O_01549495.docdoc a0fe687640b5e1dd66f75770b5f81570eee2dfdeea5955882f12b6e6be05e498Virustotal results 41.67% Heodo
2020-07-23JSI_070120_BMP_072320.docdoc 8c457c505817b87c7b59486ef32e36330f01767f01b97e67493bf65df9f19c7fn/a 
2020-07-23DOC_PO_07232020EX.docdoc cf0b313eb90ec7e86a16c5af80147288aeded5d6e8d1333bef4c68c5c9599223n/a Heodo
2020-07-23M_040224104902303.docdoc 60bd24426f0d271756f6d5071da1534deb37c8398e7e1ed66357b9104111d54bVirustotal results 39.34% 
2020-07-23VQC_02085828.docdoc 516119b22bf255a207f5453e26a9292d9eba7cb81b8619dd36a560fb057094afVirustotal results 38.71% Heodo
2020-07-23E_PO_07232020EX.docdoc daa624b964e78d640d7be3b509121048114a186d6e9982ef7a9498d81373f90dVirustotal results 39.34% Heodo
2020-07-22L_LNV_070120_HDQ_072320.docdoc ece54d4d0a7d1ac6029624db0e3983d0fb7926c523a190cb5179e98272da53f9Virustotal results 39.34% Heodo
2020-07-22INV_791I5BUWJXSXRV.docdoc d50d98dcc8b7043cb5c38c3de36a2ad62b293704e3cf23b0cd7450174df53feeVirustotal results 40.68% Heodo
2020-07-22INV_59378469.docdoc d490b0224c7403b91377d919134919169d42a115e897465d27fb8e4d61b35efbVirustotal results 39.34% Heodo
2020-07-22HPK8KX2XVOAEC.docdoc d6dda19b45b3e10925dfcab7b4c0060f7cc816d29ccfa5b68e8f45bd7c69192bVirustotal results 37.10% Heodo
2020-07-2271717832.docdoc 694e3d8db738e2dc0c126f0e8eade84677bf290041e4aff16d4b82301a59f8daVirustotal results 38.33% Heodo
2020-07-22INV_05969780.docdoc f1ebb4160dba56424b98b04a121a56dbe21ad5e7a2c4bb3816f2dc0eaf0e3afdVirustotal results 37.70% Heodo
2020-07-22REP_LC1430243571TO.docdoc 52d614878963e173c2d71c4a5acb9362518cda99df23bd2d1525f50f93eccc0eVirustotal results 36.07%Heodo
2020-07-22KP_HE1703396495XT.docdoc 31f10fbec828f05f9da7e2141f83bfef5e0faa29a398a6912c4ada5c8c14e963Virustotal results 39.34% Heodo
2020-07-22DOC_M1INHWG3I5S50B.docdoc e4318624a64a3ae6339fb9f313b16d683af5a4407afa1aadc2d50d7fe53d9a62Virustotal results 35.48% Heodo
2020-07-22FILE_PO_07232020EX.docdoc cba77c21112d6316eb5eab671dd2463f2586a647f85134cb322b440c631a2b15Virustotal results 36.07% Heodo
2020-07-22REP_6X639146QBX0WNO.docdoc 918c4de750f45bf110d850e4b64a174f67aeee896ce60cff7ddec0b720cd3b57Virustotal results 37.70%Heodo
2020-07-22R_1XVZGQJPEK7ISPF.docdoc d4a47bdc41372423b274ca067414af10e6096b6e909a51f8e35db1219a38e294Virustotal results 37.10% Heodo
2020-07-22REP_PO_07222020EX.docdoc 1cd9889ad43cd422276df08ecb1c646d283f3c9eef9fd2729d119a76939698a6Virustotal results 37.50% 
2020-07-22FILE_5247502996152848224775670.docdoc 0bd41c31d1af2a85a0761c4b3a4afb986cde439e17ad9c73cc093ef9c0188820Virustotal results 39.34% 
2020-07-22M_20040192778598857132568.docdoc e3b40abe8849ea4e531f61c3887d9c21d56c811f948ac36abb97499389ffd435Virustotal results 36.67% 
2020-07-22PO_07222020EX.docdoc 68f9b64e9a653222987af70ced81ea905fa8528e05629ee6b26c3e801ac8afa8Virustotal results 39.34% 
2020-07-22FILE_GHK_070120_NYU_072220.docdoc c3d6f7e8a9dbb2ec09cb6152ac193f18c3a4e742fae9ba6cb35d7fb6622b9648Virustotal results 38.33% 
2020-07-22DOC_SF1334070873IX.docdoc 1695789d253d8e54ff6f46a72c16b4b63aa03ebdc251b65333073a9d70811ef2Virustotal results 38.33% 
2020-07-22NB7LQ97W8YP66K.docdoc 6832132a30fdd94a35af4a2a1a0adc2f864f9410f6266a79f461f2c2727ee923Virustotal results 37.70% 
2020-07-22DOC_PO_07222020EX.docdoc a82109f8fbf62524daee674feca6fa72a4c3641450c09a4b381995bf61dda662Virustotal results 37.70% 
2020-07-22INV_64047024.docdoc 45cbb72e4a00c0dd4509a419da9894bb87c5752a206a7d71a77ce1f3560e4d16Virustotal results 37.70% 
2020-07-22BAL_25459141.docdoc 6ee52218b54636db8edf7833738f921c320966b59f82e84047628cd124d5bb62Virustotal results 37.10% Heodo
2020-07-22P_UBJ_070120_YPF_072220.docdoc 218a9eeb52984bfb956e887df5190845197214a6819f3d2c448ca8e6fba15bf0Virustotal results 38.33% 
2020-07-22DOC_DZ0846530561CN.docdoc ea07e6910173653aec1132cbc38a8c6ce4ef990a002cfff8cadc502ad5b22d9eVirustotal results 38.33% 
2020-07-22FILE_ZCQ_070120_MZD_072220.docdoc 0c133bcd327858b979c14422ac2623c0efef1dabc588f2e775e58049bacf093eVirustotal results 38.33%Heodo
2020-07-22FILE_674592593.docdoc 4ab1de02515cdfd8f8ad61a1b7b8d15bc2be0d3e840dd8cf578fdebef9732955n/a Heodo
2020-07-22REP_LJ0539493996BW.docdoc 5a48b5b0a9e9f5d700e0c140eed2bc976da9c99332c10a6d0da54719eb68f991n/a 
2020-07-22FILE_MTAA0JN0J02.docdoc 7e7aa30ca5690996f1a10f67cfb4dc964e5abc8b9ebb860ae6c3c770ff551894n/a Heodo
2020-07-2246764636.docdoc 9250d08026b599f3db61fd76dbc27e4679aa734e469a9706c50d280c1d86913en/a Heodo
2020-07-22IH9393580029MM.docdoc d5df21344644cb13c8c9b799aca8036d222a1e97aae7e51043dff695c0485ebcVirustotal results 43.33% Heodo
2020-07-22DOC_33681275.docdoc 5cbd34babe0ec377534dd02560a79250776943095dad7b6d53f17cbfebfe738eVirustotal results 42.62% Heodo
2020-07-22FILE_PO_07222020EX.docdoc 717d843ec0f588601f8e53158a3cf6c88ca8f514c3f32cbaa004b9d6cb8fe6d0n/aHeodo
2020-07-22DOC_PO_07222020EX.docdoc 516b990afeea66dde2feaf3c08cc03d53b102010a7563f735bcd2a9298a4978eVirustotal results 44.26% Heodo
2020-07-2242453181.docdoc c3e199b25039291a3cd52f41fc4e65f928c6cb79ad1617ad1bfbdbbb3b2bb396n/a Heodo
2020-07-22BAL_784531072054718.docdoc bcee8585b63be179a43c5afae53fdd8be7dcea3a28d4cc94d9ea9f4ae58aaa34n/a 
2020-07-2229009971.docdoc 9aa88e0b920319854af15ecf938c37ed20ef8922b14d3aef3c431e7244816a70Virustotal results 43.33% 
2020-07-2210792834.docdoc 4f570c04964591359b3a835706b150300323a18af856c99baf66709fbb142400Virustotal results 39.34% 
2020-07-22REP_WG9637388870WS.docdoc 9da867b47cb1f85364e0ea24a033e9d0fd9f79e6fd1f3ab4879547f87d8e4ca8Virustotal results 41.67% Heodo
2020-07-22FILE_AL5472839483FN.docdoc 6926e9ca66bb3358bc37fd3518064ce47beafef2445ba28b64cf343c9f3fa6cdn/a Heodo
2020-07-22A_LEX_070120_FLW_072220.docdoc f1b7132df8ec796787268640384eeb445a1ffc5c0ad9f2c780ad7383f2b9e185Virustotal results 36.07% Heodo
2020-07-22DOC_HGU_070120_ZMF_072220.docdoc e36be98a3e3d568430d52706ee06d935e126942b2a5c2453f5478d8c0d58acb7Virustotal results 40.98% Heodo
2020-07-22INV_02653613.docdoc 605e68db4024034f722b64cb62676029ba7c1ec38fe58ac535909068a5d53535n/a Heodo
2020-07-22QFBG_936277532125105283324918.docdoc 7637b95948804cd3f468b989a06871c75ab707cb5d5a3940d2c9b32e23f489ebVirustotal results 40.00% Heodo
2020-07-22ZS_YF0945906968VY.docdoc ccfc9e0e3ac2fefd24a4a6b8cf30eca4d2d055e7618a88a85fed9a94c3d57c5aVirustotal results 39.34% 
2020-07-22648985259921261964403399.docdoc a85b49835e765830754418dc015f05c49faeb9977fa40516283a2ce04fd1e622Virustotal results 40.00% Heodo
2020-07-22H_F4RRQFQ37IO.docdoc 1553b84424e37a674a207e800743ff2d1d135d34695a7759b332366843027d70n/a Heodo
2020-07-22N9WDZBGM6PMLSR.docdoc 09ff59e3aa0a87e0028a01ccc11acdf7bb537cda761ef20a6d6528aa762a6aeaVirustotal results 40.00% Heodo
2020-07-22DOC_PO_07222020EX.docdoc 68742e960aa88d7a38f1caf8c84a380e68ef6f351f7557c5710f76d8c191a719Virustotal results 40.00% Heodo
2020-07-22REP_BK1998534272VE.docdoc b0d2d85d5a862821097426b42232cd00ad75e701e7196056ce14b85d1e36276aVirustotal results 38.33% Heodo
2020-07-22RCY_VV9254441157CW.docdoc ad64b9d43e975aff3eea26608a183a9aa7f3558ad48b5dca3641aa50ee650eeeVirustotal results 36.67% Heodo
2020-07-22REP_HR1438140214QL.docdoc b62a1c960c1e1635a15bfc9d7f02f48844cc4e9d49355449bc23aa7d5572c292n/a 
2020-07-22DFW_070120_ZGG_072220.docdoc a1169e902ab8c4c2dc02af0a77012bbc44d149973cdf8002231a3f9f177a542fn/a Heodo
2020-07-22MQ_IU1529965492OB.docdoc 75976bde3b02341d4f05b9672041e7cecdc933663249a73fc38982cd66982d47Virustotal results 31.67% 
2020-07-22FILE_86382687761554.docdoc 120f732aba4b64d3432a7909b4ef59ce8ce605c0c202211713040e457d3bd341Virustotal results 31.15% 
2020-07-22DOC_97950700.docdoc dd584a748f37459bb1c1c14e33cf396479669e2a15dd267fcb952d788ae4a0bbVirustotal results 30.00% Heodo
2020-07-22W_PO_07222020EX.docdoc 1e3af37e16412c773f67b690a273c0c17a35d7ff6ad70b411cfc8b8c9a269e14n/a Heodo
2020-07-22DOC_34034325.docdoc 00ef2d68251c66dcd85acb5c11837148de33e43d9a98eda9d28435c9d74477e3Virustotal results 27.42% 
2020-07-22VYHQ_PO_07222020EX.docdoc 99e4ace02c6584969197f86d1122c6dab6d35545343a0138df9821a3a71ddef3Virustotal results 26.67% Heodo
2020-07-22VU1889843719WA.docdoc 5c1251139b141b728d3489236c0c8cbd8762fc941f5aa0476d86b6adf4a90c0cn/a Heodo
2020-07-22UN0511281669SS.docdoc ee36488e9d6d8ea09cff02367c7212d0503f376346c3b40aed03e01c1b1aa668Virustotal results 26.23% 
2020-07-227SYRTOAJ2.docdoc 49e20fcd1ebe7943437c809b881031d59e45a98614d1c7af96b3c1835d4586ccVirustotal results 26.67% 
2020-07-22REP_YQC_070120_NRE_072220.docdoc 44649b15c8270438769bec658bd63477e64a1164f0e721c002eedaffd43b5256Virustotal results 26.23% 
2020-07-222173645746553.docdoc 3d556f0009c372e7b8c40ee0d72ef13026b96bcf3268a7dd838eea37029dd3cdn/a 
2020-07-22FILE_6551228495459243818525.docdoc 61b94e8bbe7564405293dadbf39ad662250c4327556639f79c09ee9e56cf909eVirustotal results 25.00% 
2020-07-222ICS0DGWV1.docdoc 5f5a353ccf0dbcfaa0859d0a1db152f2d40735bce47864d7ef9c12ab93c8ca88Virustotal results 24.59% Heodo
2020-07-22N_GS7077339105AC.docdoc 584fbf65a3d7eff0ed9282b47d237781da7f7aeb0092ecd034d3edb66adbc6dfn/a Heodo
2020-07-22BAL_26491655.docdoc 91e07fd7aa524859f51ff55a874649b91f7d9a4672489458d204054fff2cb9e6n/a Heodo
2020-07-22INV_QMA_070120_DQG_072220.docdoc 593793a914684244b3c51333736fffc1cdc69c51759831c888b66e6a07ef8b72Virustotal results 24.59% 
2020-07-22INV_PO_07222020EX.docdoc 756efc8d3530d9e9b4141763d1a89a2092a54347108a59790356c0c3506082ben/a 
2020-07-22FILE_3WJBOW5HN9.docdoc 1ff7a8450997cc013c4527af47bac34423607b8fcda043bca82df0e6b3e823e4Virustotal results 25.00% Heodo
2020-07-22K60BMOCH5GYZ.docdoc ed1a41469969a80fefc58566124f44e0846bff21d8e51d897da0d10b2386174bVirustotal results 24.19% Heodo
2020-07-22FILE_SAF_070120_DBX_072220.docdoc 10963f8cec95f3f18634db9382cd4403523a624d72a459c29c9c3baf27097509n/a 
2020-07-22BAL_LRRRXOD8Y.docdoc 62f04c722299e8d193bfbe9dcde36cba23bf403f4476d6755bca71d6d49987bdVirustotal results 24.59% Heodo
2020-07-21BAL_88013248.docdoc 620ed9cdd6372b6bd9572a507c6c349ec07cd10cb45cb36216f21e2e6b025d2cVirustotal results 24.59% 
2020-07-21PO_07222020EX.docdoc c6ca23f36d524391de9970059d2e0faf54270286e320503e3eadf282ab5082a2Virustotal results 24.59% Heodo
2020-07-219BVIS0XQLH7NK.docdoc 737dad0010dfc90068d5db4073a76c04f2e9aa7549373686028374e3bbbdb652Virustotal results 24.19% 
2020-07-21BTE_070120_KII_072220.docdoc 443699b3e3b9a7f6acc2e21bce3a2bfab58a5fc166c408de2a1d5c8f57ed7376Virustotal results 24.19% Heodo
2020-07-21REP_82939782.docdoc 9f59209f542f739dd433026c1d8d27be15cd6a200911c01d5e075ef2350540c0Virustotal results 24.19% 
2020-07-21REP_PO_07222020EX.docdoc a6f854e3c35ea6d6a5cc1ae65197f94c8274c5e72b7641cd8ab8f0537a05c9f4n/a Heodo
2020-07-21REP_ZL6395634711HN.docdoc b7dea776f9d38a8a290e2686dd008bf00d1ee54958d38c1a4961c7f3aaa653faVirustotal results 26.23% Heodo
2020-07-2101453149.docdoc 1bbd415af19576e0283d80affc0740d7d0c324afca367e1113ad0404ceeed801Virustotal results 25.81% 
2020-07-21RAI_070120_EUD_072220.docdoc a687cedab74fe24b95545319ea7ef7ea0afb3d56feeee11e42021892ecb50da2Virustotal results 26.23% 
2020-07-2112063957.docdoc ed83c94a771e57b78025258c6f5247debaee74c1bfed17a2cee430f31ff91f08Virustotal results 25.81% 
2020-07-21INV_12209035469911862466.docdoc 0c69f537211ca18ffdcd88151cd0e09636aec3e5708e6fde3df55bea4884ba5dVirustotal results 26.23% 
2020-07-21ND_LZ2SY0ZUEBN.docdoc 0e0dd25cf77e553864313736b0920a661812e68334e93090f51845a1c6fdeca5Virustotal results 26.23% Heodo
2020-07-21INV_1812077075755.docdoc a501ba4d5001cfc0fdb0e8b95b1dd154dc0c9c3d3e0ffdce873526f1855bc618Virustotal results 32.26% Heodo
2020-07-21NCW_070120_RGU_072120.docdoc dc9149fd6d462db7ca3f0ef1d4705abb0ff34fa3551bbaaeeecd597a01e445d0Virustotal results 32.79% Heodo