🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://jimlutzforohio.com/wp-content/swift/ya70132464563i0fsbynx8oen1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:421881
URL: http://jimlutzforohio.com/wp-content/swift/ya70132464563i0fsbynx8oen1/
URL Status:Offline
Host: jimlutzforohio.com
Date added:2020-07-30 10:03:34 UTC
Last online:2020-07-31 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 10:04:02 UTC to abuse{at}linode[dot]com)
Takedown time:1 day, 8 hours, 36 minutes Poor (down since 2020-07-31 18:40:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-314G9Q8HTXKBXX.docdoc 70924fc6c621c4d89c01cf966e0759c7efafb358fdfb087b76ac091cc5cef356n/a Heodo
2020-07-3126467177.docdoc 4f8d2a942c244360b6b8c311d59352dad83f77899cc7d4094efd99c2e324af8fVirustotal results 49.15% Heodo
2020-07-31BAL_BR9643323594VX.docdoc 5f3764a42ab9cc52fdd195dbb18957316d72bf382a89b998df3186f4635aa55cVirustotal results 47.54% Heodo
2020-07-31BAL_EK5734832039YY.docdoc 53b0406efd3043bb9a82034aad1061ca92952b9d1a9111ba31afbc95d47076c6n/a Heodo
2020-07-31ZF437HH.docdoc a4793238143f28a12c3574808fca946d088dacc4570bbb1fd33df193b2185bb3Virustotal results 47.54%Heodo
2020-07-31GZ5366215242IS.docdoc b57bc7dd589454fa0f07ea79ec130baeabc4f14804df12eeb7fa990cbb703791n/a Heodo
2020-07-31DV_979489436679673.docdoc 5730c4c8436965355b6f87bb9ddd7c86a1a11e75775c732c12fe03fa142d0757n/a Heodo
2020-07-31B_PO_07312020EX.docdoc 55da5c5eb03990c56ace11826deedcc82fe9d5f1a0fa6055575be6d9830f85e2Virustotal results 46.67% Heodo
2020-07-3152813213.docdoc a91aa5169058a6d7ac62f61108428fa3d9f8aec8a24b1c0bf032b18a26047770Virustotal results 45.76% Heodo
2020-07-31K_GND_070120_EHZ_073120.docdoc 87a3224fa89663f53a2114b2db0c6140013d1f5ea825037d85290190c0081e44Virustotal results 45.76% Heodo
2020-07-31BAL_O6TY646H52.docdoc cfa6624b88ef3814f55f48c574834fb7e6bd4c5102043a9b1568f571201d6a49Virustotal results 44.07% Heodo
2020-07-31DEF_01250305763774.docdoc 9a9cd71793b09f981ba4404a0281b4443309cb521fe6096f5df138502daa01a9n/aHeodo
2020-07-31QHF_RYL_070120_CEG_073120.docdoc 97a0ba05768ba99119322c6cb79f62bfc92dbfbd64b56b393aa203e7679f5328n/a Heodo
2020-07-31DOC_06065397545173939905.docdoc 6a0ae157161a401ce10b9193d319636f8d7c0d4a9c16581e01810d96e5f878e3n/a Heodo
2020-07-31WE_73750263.docdoc 2f1f7209f67f3d0b35e8ffb126f47975811bac63e9bc0e409a90e3cdfc15c76cVirustotal results 42.37% Heodo
2020-07-31FILE_MLP_070120_GGC_073120.docdoc cfff60f6938778198175a6d8a3bf888e554ac46c2b6db4fd4e3fe452472ba24cn/a Heodo
2020-07-31J_08724713.docdoc 33cc5ac87a9b8a4bceb717df74b6cf6b1162ff33a67dac529744e3f81c55636cVirustotal results 45.00% Heodo
2020-07-31DOC_HR9073485179FS.docdoc 8d3d57f3ae15f3a97337fcd5d624d4e1dabe04c558203f41ea9e93c23928790fn/a Heodo
2020-07-31382767005773739162.docdoc fc8260756d35c29ece5bf1f7e3841128d9a81a67341151568d6885a070cd82b6n/aHeodo
2020-07-31REP_52748788.docdoc 18d9ef695345eb4c97d2ac385a33550e01a3760dd3e3edeea1507af436451b0fVirustotal results 43.33%Heodo
2020-07-31H_43642058.docdoc 9c184a50a28234ea058519a136d7e474a3e8fa0d75828d3b5167ff02cbf87b8fVirustotal results 40.68% Heodo
2020-07-313406974980696277773.docdoc 522b63a0d190f96b3d7e635d7431958b68f94c8f95a44594318d0e382b17bad5Virustotal results 41.67%Heodo
2020-07-31INV_90674642382837875.docdoc 3a41d6d1c8f3a6cc5c8df663c33ac3854169a275bed3731c2fa2536de9aae6d3Virustotal results 43.33%Heodo
2020-07-3142277342.docdoc 20265e7b88ee06f8d6c99269ac1bc743eb01af3e679b55558ab32d0e0177d22an/a Heodo
2020-07-31I_PO_07312020EX.docdoc da59a26f771c7a720ed7c690852b971068c090d3fbad6c755e62526acff9dd89Virustotal results 42.62% Heodo
2020-07-315974111606168641030347.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3Virustotal results 48.33%Heodo
2020-07-31INV_07961406.docdoc ea37595a4802120f66a609e536e29eb8d342291b5e852c8554b1ed845a2e7fb8Virustotal results 49.18% Heodo
2020-07-31INV_AF2815685494TC.docdoc eb4de0607032c708751372ead86a2fed758f83ac11f563f2763f2703f13f6c77Virustotal results 48.33% Heodo
2020-07-31INV_GP7877126296RJ.docdoc c8d29c17695244d3a3703e94ab4af9dfbfa15eb3b92906fc2139292a7fa28d09n/a Heodo
2020-07-31YQI_56638576.docdoc 2db2afb589741f5b0c9d9664e2510f5d3497e24ec06588da2004db3c53074267n/a Heodo
2020-07-31J_FQ5681311635UF.docdoc 17592f34648b1b8fabe68fb11ba3945bb82b9b7c3eca7f20210fa1d18c1af346Virustotal results 49.15% Heodo
2020-07-31FILE_JGN_070120_PDQ_073120.docdoc 9e2281655f7c68cdd376157b01db76237250a6c8a9ad766b4c9e541980f6168dn/a Heodo
2020-07-31FILE_PM0250459056QK.docdoc 4c7ecb99c3763636a148a4f3acc34885807261432a6d9a30a46f362d75b01578n/a Heodo
2020-07-31REP_QW8736517027SL.docdoc 49607420463039be83e2fef6d13b6998ba5829ba255f017c28ce9fbb5f45487cn/a Heodo
2020-07-31REP_TI1966579288AR.docdoc 86c5dfaedbd4d9194b9b151a7c04a77eeed74491bc24e407bdfa249f82ba0377n/a Heodo
2020-07-31REP_PO_07312020EX.docdoc 56d187176e22e7ee7159e0a45fb2c16ccab49b8f3c6cb92e5adce5acdb2325caVirustotal results 49.18% Heodo
2020-07-31PHU_84221843.docdoc 8d7f5cd06bb06193bf56a6084659355f3087b32118304efa7f736950c5c3224dVirustotal results 48.33% Heodo
2020-07-30DOC_TFGIL7BD.docdoc 226d9689fcf84f7cf9decb14e3b58a86f7f82df4ad2646632444f63095544015n/a Heodo
2020-07-3078167843.docdoc 785da8b434141923c6196ff5c06b283e08a9ad63ed5454278a6826312061bb0fn/a Heodo
2020-07-30CHOTYELKT5F5M1.docdoc 7c27fc12153685ebfa853201b4b71b6183b994f0bee705daf6d52db0f1062747Virustotal results 50.00% Heodo
2020-07-30FILE_DX7565429638JQ.docdoc 2479f0c202e0b1e1af6e349625250c5e8433d8c2971ba1cb5325402e1ca70e54Virustotal results 48.33% Heodo
2020-07-30OAP_070120_RZX_073120.docdoc fa9ebbddf93bf0bde73a7e62692c9a2ba07478ad334b60810862fe795384032en/aHeodo
2020-07-3008262009.docdoc 2f335817434e148eb3306ec99d29a3947f89ff9e3aee56f76f227d5894334abdn/a Heodo
2020-07-30SDC_070120_UGG_073120.docdoc b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378Virustotal results 50.00%Heodo
2020-07-30OFFW_34410901.docdoc b428976d96415b32efb7157b375160dd676b448e1566fad5dd8da634fac3cc64n/a Heodo
2020-07-30DOC_37405942.docdoc 0dfe8241724d2db0c393e179062ae196f5655be6e3335c37b05cca6cbb2e9205Virustotal results 46.67% Heodo
2020-07-30FILE_529962566617204.docdoc f3ceae5781ace1e523935bb48baaf6484791c5cde8e95f8ce6db69f31b2917a4n/a Heodo
2020-07-30PO_07302020EX.docdoc b3c476526978c5ce2f22627e47f21fdd3a16f03b166965bac3be05ca29b80575n/a Heodo
2020-07-30LQ_W5MRNQVKEY1D3K.docdoc e36e626e95cc4e2feb34bfba30b423f08786bde39a1ddda5fa65ce1abc18bdb7n/a Heodo
2020-07-30INV_PO_07302020EX.docdoc ae3abc573956f6ecf54602dabcc2c4c20488c1bd826e4a064e379ffb44b76424Virustotal results 47.54%Heodo
2020-07-30BAL_TKQ_070120_QBI_073020.docdoc 044a931e427040bddbe572ff16a3bc688cd83e8796727a0df74491157ba7d1f5Virustotal results 47.54% Heodo
2020-07-30REP_WM2355982903YB.docdoc 3ec0cda0966fdfac5059b61d8b718eb7dc9e4454c370aa8260f34a3c759d43c2Virustotal results 48.33%Heodo
2020-07-30BAL_VDK_070120_JNF_073020.docdoc 283efeeb5d94aa4225e28185f34f70d6f0e53099cd8e085c4be5d1638fdb8d33n/a Heodo
2020-07-30F1GVC8TO9JF0.docdoc 21670c1b2f6bd3739bdf6a11f4edc5cf70af68046eb16b6a392cffccb2cdaf84n/a Heodo
2020-07-30DOC_58264130.docdoc 5c7a7a9074d122179780a3db64b04f9d8225c9d4004dd201eb6e650e8d072dbdn/aHeodo
2020-07-30IUR_070120_YGP_073020.docdoc c02e0eb20c2fc2499173394f114c843e96a7bedfb367ad2c5b83b11d32bc5e7cn/a Heodo
2020-07-30INV_PO_07302020EX.docdoc 962a4c9cebc2543e78e0cfc5d7a7d80aeb7e6681d8096c50841ca5f650728b7en/a Heodo
2020-07-30B_295742715887809388815.docdoc ce8a5ee320c9b6063d4b5abe1ff2a16a6e9c5d1c49f4f88425e345aa8c140b7eVirustotal results 45.76% Heodo
2020-07-30FILE_PO_07302020EX.docdoc 4a7d878c04ec1cdef03d09b1d9b9472942179bc3533f66dcfc115876b722ca59Virustotal results 44.83%Heodo
2020-07-30XPZBWJYEP8Z16SS.docdoc ae433920b47d1f5005e907e2c2d7186ccff63c77cd7c2adca9c6af59835d9b3aVirustotal results 45.00% Heodo
2020-07-3080555227.docdoc 644ecceefd25470a4909b40c0d4c590ef6f5df9613ed3ed3703d2795a21930f3n/a Heodo
2020-07-30REP_PO_07302020EX.docdoc b142f2afa6f949be5fd70d20821f44b28680f06d06ed60e6311e9ab9c898f5e3n/aHeodo
2020-07-30BAL_IL3610701277IZ.docdoc 5aca4b2c9a231b560e0375a292defe35147afbfd61d77863c69ae2b1bfb1d544Virustotal results 39.34%Heodo
2020-07-3072680864682814392.docdoc 7f808ac67ce1cd2c1e08a46de2537e6471f4ae05aaf7f61d3d21091745adad9aVirustotal results 42.62% Heodo
2020-07-30FILE_5Y3RU97BV10.docdoc 4e19a40400b659e85d29579ef73d26b68f233b36c95955e2133c2d7f11e6eb3dn/aHeodo
2020-07-30REP_SQ8305967542YY.docdoc ccffd1057a0198494234050b71333c4cb0411d6c9fb3fdb730043076797c6fbcn/a Heodo
2020-07-30BAL_345739805.docdoc 4915fffcb5757f63c46f371633682137c7b06333d25ba8d6dcada016e19a3b28n/aHeodo