URLhaus Database

You are currently viewing the URLhaus database entry for http://kultfitness.com/wp-includes/XubvOifYz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:421979
URL: http://kultfitness.com/wp-includes/XubvOifYz/
URL Status:Offline
Host: kultfitness.com
Date added:2020-07-30 14:24:07 UTC
Last online:2020-10-12 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 14:26:03 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:2 months, 14 days, 7 hours, 26 minutes Bad (down since 2020-10-12 21:52:55 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01INVOICE_QSJ6_803070.docdoc 56916942bc59a1ae0cc030beaf907b54631390e0a5fa7d75bce1f120df88d843Virustotal results 47.54%Heodo
2020-08-01Invoice-PZG5354-385866371.docdoc ec39e7db8df5d0c11991de7b6482accdc4ceb42d31613c528ed2529bcd6c7312Virustotal results 47.54% Heodo
2020-08-01invoiceDAB7688900812.docdoc edfc4402aa1edeb3963b39254898ba90853d7d534f422df002db968975306740Virustotal results 46.67% Heodo
2020-08-01Inv_M5_61358938.docdoc cc6c1f937278d090d1fdf3b960f92e0222e026d418899b9f64769304616277b9Virustotal results 47.54% Heodo
2020-08-01Inv-Y6-435880162.docdoc 3319161bd68eb25b4c036ad8cfeda6934ae3c38a12713c9f109818b03390c7acVirustotal results 46.67% Heodo
2020-08-01INVOICE 087 5801790.docdoc 5501f723697b0f6c5eb89e873828133dc1b9f465321a797930c9a071d291fd18Virustotal results 46.67% Heodo
2020-08-01invoice_GTX8_56890735.docdoc 56764b6f66de3b045860f5398b4fb8f24c11ca8d959231a6b0f63d82626f5a55Virustotal results 46.77% Heodo
2020-08-01Invoice-BMNL9799-938937519.docdoc 7525e9c3dc222fb7e0bc897856d98ec233aabda4ecff64336788e29ad6e2dec9Virustotal results 47.54% Heodo
2020-08-01Invoice-KP0286-311338871.docdoc f0f8fc1e5b217106feab3dd3060589f3f87760337747f52bef4de0cd6ddf298fVirustotal results 45.90% Heodo
2020-08-01Inv-ZOV23-346055.docdoc 1cbf7f820a202aeac886022e7758273e6accb62389897c387b80b7aa711adf7dn/a Heodo
2020-07-31INVOICE-1-363293941.docdoc 58716951590c1341ba410dd9f789899240e75b017604d8fc2d49e86f843fb389Virustotal results 46.67% Heodo
2020-07-31Inv-UYGQ414-53363329.docdoc 29a33547180f8a2c21bceb0424f9724b50dbdf57104000d4562a96c1c8a4f241Virustotal results 50.00% Heodo
2020-07-31Invoice-ICB13-047377826.docdoc e272cd40c1e1f839d797cbdfd1574d19a1cf68c11f47c04172e944d06ce6f525Virustotal results 46.77% Heodo
2020-07-31invoice_FSZX75_560431.docdoc 69574cf913cfd357b51a19e616dee5e675a28e3a397826f7fc4ec4d9c8ef61d9Virustotal results 46.77% Heodo
2020-07-31INVOICE-AHW7-767854.docdoc 1489edcaeb77576b964e01c0afecd1d1d5ce35b05f335e4473be0fe3255e802fn/a Heodo
2020-07-31invoice FNMU7 5728816.docdoc 7ad485f73ed801fe057ee89153970c59e3dd7331d317808f0f04c7a138d6aebcn/a Heodo
2020-07-31invoice_XBVQ94_68169808.docdoc c13e46d1796c767f42fcb0b83df4e4e8775ff207b91c3cc649a3fe3f4690a89fVirustotal results 49.15%Heodo
2020-07-31invoice HOQP16 019643625.docdoc be9580ee19139809910c67fa4e0f35bf76001f0fe80e6923b8ac0a4c6365555bVirustotal results 46.77% Heodo
2020-07-31Inv QEOP45 735128874.docdoc 604d8d4b25d82a9fa60525c21b4f7ff9f0edf0d00aea808ceef6bef8e9e4f4c5Virustotal results 49.18%Heodo
2020-07-31Inv_Q8_060097.docdoc bdca99af8fb2e41f029cbfd5733521eab5744382fc0e38dd79767a27378416e3n/a Heodo
2020-07-31Invoice_TTI565_538318.docdoc 3894868ce80d6b74f1b59ee048a65f322852a7e1fe3681de77aa3d16a95e8c0cVirustotal results 47.54% Heodo
2020-07-31InvoiceR451821627.docdoc 958410d0bb67c7d367734d2485d41525305b9b547c7382bbc8a615da1c93cf30Virustotal results 46.77%Heodo
2020-07-31Inv-SP1624-521206.docdoc d4c0573790c2e02c30dc3ef6e219a26840751e18de0537fb023782af9db88116Virustotal results 47.54% Heodo
2020-07-31Invoice MMHB31 15881872.docdoc 015ea078c5fd0a7e7358750b113536aa28746f179954e4c37e6185b99888c39dVirustotal results 46.77% Heodo
2020-07-31Invoice2491401811.docdoc 541a2147a3dedf8a670a6f6db27757358e9762a15c2b2ab8f8aa7b384158cb76Virustotal results 47.54% Heodo
2020-07-31invoice-QRX9-029150554.docdoc 2793dc7590ad4da3c118e4aac6a771ee48f213454bea29f708b1d4590fcf2ba8Virustotal results 46.67% Heodo
2020-07-31INVOICE 1 76683880.docdoc 2ffaeb1accf696b047193a4fb4a47238f2a3b582415a75cade2bfe9b69982a2eVirustotal results 47.46% Heodo
2020-07-31invoice_A4678_33404770.docdoc ec7eb2c54e1270337a6ea2e96d5af73def6e7f39f39ebdf8ab75b29eae4b865eVirustotal results 46.55% Heodo
2020-07-31invoice 8310 9834806.docdoc 80b42f3e3f2aa0e14a13b15336be50853898ab711533f01420be367c69d9911bVirustotal results 47.46%Heodo
2020-07-31Invoice_QL0_367386907.docdoc 6157dbba4f741eefa74c0f002ed410a6117e719c2e626ea9dd8668d7452afa24n/a Heodo
2020-07-31InvoiceT784154749.docdoc f38d973c25ff2fc00109ee8ed445e3bdaf3fcaeff6db54b863ad025a9104ae24Virustotal results 49.15% Heodo
2020-07-31invoice DUDV69 934082589.docdoc 99b43c6e14bfddc98c87cb9dc35cd89b59a2797e8893f5005eb0868226027f35Virustotal results 46.55% Heodo
2020-07-31Inv-ENR3566-14164177.docdoc bdfb558047f777f0a0fb66e81bab1d2eefe9a0041a72d203b52456717f30a594Virustotal results 44.26% Heodo
2020-07-31invoice-JDQK430-2426655.docdoc e8960fed4c714be347182294b90b9fc936d842241905fe3e4376bf7c904b6b1eVirustotal results 45.76% Heodo
2020-07-31invoice-SM00-456463363.docdoc ffcca6f9140c3ff0a3f0e0b888148ebf2d55a3ccfa54636106362ea6f9045f0cVirustotal results 44.07% Heodo
2020-07-31INVOICE8101_300138.docdoc 3d8ef147ca84e9943fdc850171e2de9c05b0db3472cd05901e4f109e7fbe07f1Virustotal results 50.85%Heodo
2020-07-31Invoice_JX39-24373403.docdoc c7ed06b6f4284ba3fd857f03875187654aad78683efa88d3ed984fe057d484abVirustotal results 50.85% Heodo
2020-07-31Invoice M21-961557104.docdoc c66fa17e4f5d76079707aa28d126feaef92ac1245b1ecb420e7e632e8eeb76a2Virustotal results 50.00% Heodo
2020-07-31invoice-Z3_0489848.docdoc 65ed04daee56dea54218b810fdf6d5699fc5f893be26173334db43e31417fdb6Virustotal results 50.00% Heodo
2020-07-31INVOICE-8-380471.docdoc f554d67a1bac2a6fc64ec282706c416190d555857ddf80e8b243366b8b738987Virustotal results 51.67% Heodo
2020-07-31Invoice-FFX4365_24265286.docdoc 9d87ada7dcb70d012d66826ec3f4f26a2f853edce07b15282c119048283a80edVirustotal results 50.00% Heodo
2020-07-31Invoice164{:REGEX:.docdoc b6ffa6767e3b7c53645dc329280108bc5145c28514aad30f28d9b628bb3bed9dn/a Heodo
2020-07-31invoice-AMU8 377607059.docdoc 8e95611645644103d2ab67a6ecba315228abcad85d986852783b1af75477a63dn/a Heodo
2020-07-31Inv_208_354543.docdoc a66c8b3ac71836a695c8b180ad8ef6721bbfa4a1ab53b4979fd851ea6bce0908n/a Heodo
2020-07-31invoice KEAM6 2084836.docdoc e5e54d832fa5fb735e145e940936d4fa7a472c5f0de5133cfd4c0581e764c313n/a Heodo
2020-07-31Inv WTK5-080673.docdoc ea4ec66d739ec6c93a0e5890743a01a5283b804889147308ba45d35ee1f2247dVirustotal results 50.00% Heodo
2020-07-31Inv-RXN5 458524825.docdoc 2239e9dfea333b691ad7931b2f663ce27192aa0bfe9b4c7112e98eeddc00ae38Virustotal results 51.67% Heodo
2020-07-31invoice-B0171-402724441.docdoc a766fc0e20a4f8cbf281aef6bb29f7a20a937044d7fd4e008c1097cf266c24beVirustotal results 50.85% Heodo
2020-07-30Inv-KDIP6-755688.docdoc 2e24bcec136a5b896e730820974bfa9162575d275b2ee669ece097f7b195e4f7n/aHeodo
2020-07-30Invoice_KF0 382902039.docdoc f2e5dfabe9cc22bc5f4995c900e073bcf2219dd18413aa69a7d1148fb6257585Virustotal results 50.82% Heodo
2020-07-30Inv R3527-483617927.docdoc 881c5ef2385626accbec7572c0b5c5b5cdff760f61e1bb044546983d6c3fbdc4Virustotal results 50.00% Heodo
2020-07-30INVOICE-EN5655 664578099.docdoc baef0f6a498331d648f442e8851509d8e91245685e215ae6beb917e8d4a9980cVirustotal results 52.54% Heodo
2020-07-30Inv-E85_88578604.docdoc 1c8026d6bd75a1ea091d6a6676d3a7e3bcba3b17717e21607488b9fdb762fba7Virustotal results 49.18%Heodo
2020-07-30invoice-SXS3-34862454.docdoc eb0c42082f911cdcef8ef582fb3b24067cb2825910839bc6f4b1a4ddf20fbe5bn/a Heodo
2020-07-30Invoice-DDH4_0669967.docdoc c88f76b9652dbc11087aa8190c0221e871fc1cbda0349c84fa8c9ca161aa970dVirustotal results 48.33% Heodo
2020-07-30Invoice5352_342511.docdoc 73893811ca278a3dd0be7d512b791be9de0331c3fc6c82c42026a4f4cffe2481Virustotal results 47.54% Heodo
2020-07-30invoice-XH3_81336119.docdoc 8c9e45486e237d3a93fe2fb374ca8fd519f832929a7b631b86216680c4a4b0a1Virustotal results 47.54% Heodo
2020-07-30INVOICE-FG5-103060.docdoc 07a7615f05229feb74b9df0b9ccabcd1b162b654b65824d8662e61fd6ae61c93Virustotal results 47.54% Heodo
2020-07-30invoice_OK9821{:REGEX:.docdoc 50a9515bccff228f5546f9fb72d0dccc6e8beef5827a8f9c09da0eee89a79872Virustotal results 47.54% Heodo
2020-07-30invoice C0{:REGEX:.docdoc 22a4985e60204df157cd134ac6049f1137b57ee8577d5603c23a829c574d4a36Virustotal results 48.33% Heodo
2020-07-30Inv_U091_1211881.docdoc 7a8d537573808df38b103ed3d3874876753612fea566162fbbf9cfca51baac88Virustotal results 49.15% Heodo
2020-07-30Invoice31-633133599.docdoc 6c3a08adeeec901334591683b81c83d788d410f88bf645a4a63b65efef289fc3Virustotal results 48.33% Heodo
2020-07-30INVOICE_524_7779496.docdoc f2a8be2190fc82926a24c1d0bc6cd8f554949ebd1fba55ec585b40896ef68bbdn/a Heodo
2020-07-30INVOICE-OSJH5579{:REGEX:.docdoc 8ffe071345d0016afd6054f35a6a1bc1fd15deeb8c37d36e6e29bd92403c0424Virustotal results 43.33% Heodo
2020-07-30InvAI977_4730270.docdoc a73b5137a487f37f2fa62bf4b6efd685f2aeecb72166fd9fb07b0a8f84aed362n/a Heodo
2020-07-30INVOICETTE70 004250669.docdoc 0195eda6f0dbf03b6fa7c2689f538bb998ce4cc533fd7117c956c7c5c2f62437Virustotal results 45.00% Heodo
2020-07-30invoice-EFS75-2701968.docdoc 3680cd9e4a6dc09bd0e3b635bb2daa987417d060d6e27d4b84de08a466dc3c65Virustotal results 46.67% Heodo
2020-07-30Invoice-N85-137112163.docdoc 57cd3c6667afd66293fe85bc6632764caa8217677ecf64f34c72677367fd9472Virustotal results 46.67%Heodo