URLhaus Database

You are currently viewing the URLhaus database entry for https://moraniz.co.il/wp-content/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:428124
URL: https://moraniz.co.il/wp-content/docs/
URL Status:Offline
Host: moraniz.co.il
Date added:2020-08-10 07:57:33 UTC
Last online:2020-08-10 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 07:58:02 UTC to CloudFlare Anti-Abuse API)
Takedown time:4 hours, 38 minutes Good (down since 2020-08-10 12:36:57 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-10I_T8IU8JR.docdoc 38aec6035b9dc07a41f0b344d8a84b416a54ac964178c2a9a23e139287ffceb8n/a Heodo
2020-08-1001686461.docdoc 3279305c76025d9335931768dfb6a02880eebae4e37850754d311dbcb3052bd8n/a Heodo
2020-08-10Y_831581445070872117326.docdoc 407736ca4a4bdab4ea158b768aacc22239f4c364a9a0911bdf0531d5b6857456Virustotal results 28.33% Heodo
2020-08-10T_RXEB3ZLLH.docdoc 0a635c6914b1d696e249b62eda3f0fa60f54bbc2c24939308a6f45b0a601796fVirustotal results 27.87% Heodo
2020-08-10BAL_RXN_080120_XYR_081020.docdoc df1f8dc5bdb2922872307a97d663e7a17bf750c84e97d3a48d9f92422a7111b9n/a Heodo
2020-08-10DOC_PO_08102020EX.docdoc b1a486493dfaccd3d95b45d85742514fbe0a6e13162a5caee9e160c8333f19c5n/a Heodo
2020-08-106964753532563360321525.docdoc 4ef3be78e6d5e7488bfec47d05dcb528ae781bbfcccf27d5775eabaf583ec691n/a Heodo
2020-08-10DOC_80844015.docdoc 823905fd21de95f90cb999a5c563bfde685d25fd1354b031ccda7b5eddfb0828Virustotal results 27.42% Heodo
2020-08-10Y_84293917.docdoc 00c383eacd7b63d195a48209dcf50a472af7a4691c0282eae92de08d0a1d44eeVirustotal results 26.67% Heodo
2020-08-10FILE_739764630610.docdoc 6be0d7b3de87cd34b500d16c52771c2f1058f7a9bc2185e7f757cc577419bc00Virustotal results 27.87% Heodo
2020-08-10REP_EO6810639685AB.docdoc 3ed0591ff0b06363dd4747fd9c7c2ec4b33d7c1a73fbef3cc6d86e9980d7fcecn/a Heodo