URLhaus Database

You are currently viewing the URLhaus database entry for http://lura.co.za/wp-admin/payment/08kevaw34qq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:431332
URL: http://lura.co.za/wp-admin/payment/08kevaw34qq/
URL Status:Offline
Host: lura.co.za
Date added:2020-08-12 22:59:06 UTC
Last online:2020-08-18 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-12 23:00:03 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:5 days, 7 hours, 4 minutes Bad (down since 2020-08-18 06:04:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15INV_PO_08152020EX.docdoc 45d56ae98b903ed9de020e018e51c9d37a174963d35142bde75b6da213b0afffVirustotal results 38.60%Heodo
2020-08-14PO_08152020EX.docdoc 75a72a41ab01b2732ce7d72f8099772cfa9eeffd6de415ac468e8f979c38d466Virustotal results 40.68%Heodo
2020-08-14FILE_QWM_080120_QRR_081520.docdoc c837fd8744bd36a0ac0a3a3f11e102063d60651777ee888c2f3f8e83c54a6483Virustotal results 39.66%Heodo
2020-08-14INV_PO_08152020EX.docdoc f868e00a4f8d182360784894248a210bb56e707c5a830c89485b157ff1a72402Virustotal results 38.60%Heodo
2020-08-14DOC_PO_08152020EX.docdoc b7a5233a4bac135e1d7b9c85e89cf9140cee08cfedd72993f82513c8ae8d7c3eVirustotal results 38.60%Heodo
2020-08-14FILE_PO_08152020EX.docdoc 2cc92eb221a22aae29a8ab8e91b0e71af5e3f60a1256a36dfb0f83273ca36babVirustotal results 40.68%Heodo
2020-08-14FILE_XGZ_080120_PDI_081420.docdoc 739eab0c4f294e4ba8fff9f685d6ab8303b5e4ab1caf9482d846afec5aeab316Virustotal results 38.98%Heodo
2020-08-1482279915.docdoc 4a4029474014846a17463695f4af7917f8fc4fd250f36e96bcc1964d4bce93d0Virustotal results 38.98%Heodo
2020-08-1459064045006022602.docdoc 13b77d42335eebbe42a2865518e7321b9b5ee20642398435eb99520169b95a6fVirustotal results 40.00%Heodo
2020-08-14Z_2145708288807823250.docdoc b118fd8dcf97cf570ff2c1e3640e17e7fe7bd4f73b7ec79f4aac13d6b1fcca19Virustotal results 38.98%Heodo
2020-08-14WX_RE4642552451JK.docdoc 87257c3d34ffa05f4d177c92995d8a973b2ebcdcf8ff92e46c85fc42dbef7724Virustotal results 38.98%Heodo
2020-08-14INV_155106264321948219483368.docdoc 3a6a5e8fabf3eba8321844d7c90ffa39fa7a8aa698d2ad2d99f108799e516840Virustotal results 41.67%Heodo
2020-08-14DOC_69360429844062684440797.docdoc 9ac39257848f5230280cdf36073427054ed0e00f5d7cc1647f125fcb5f663e22Virustotal results 30.51%Heodo
2020-08-14DZ_82675382.docdoc 7a64f22546075f7c16e338a3f061015107732fb18889ea9ad7d1a66ee5177e00Virustotal results 31.67%Heodo
2020-08-14REP_GG5518390121LO.docdoc 822dbd9ee80d66a3dd1c882add767f4b644e9083899aa8e81dc5cca461b2e26cVirustotal results 31.67%Heodo
2020-08-14PO_08142020EX.docdoc 69c0f172c5f915aae73813afb13b0dea6ea5b676961d73b0b57614b1c0f24332Virustotal results 31.67%Heodo
2020-08-14AZ_LAP6NZDRLR.docdoc afbf98d583ab4b3930cfc62d7c78ee655ddf72359c70df788a150bbdb15fe405Virustotal results 30.00%Heodo
2020-08-14CFX_080120_ZLH_081420.docdoc 2958931d81ad10eb95bb3fca9457a800e9b4a9459d2727f30cb5d49d7bed0527Virustotal results 24.59%Heodo
2020-08-14DOC_LYM_080120_BNX_081420.docdoc 8f9649dab8ca8b9830c3cf160314bc7bf4c8e9e64454056eba927e3d8867ba77Virustotal results 25.00%Heodo
2020-08-14INV_44273475.docdoc bdbae02329ebe760f9cd3c11622499753afc8819a3dc69a61bf0af89493c7173Virustotal results 24.59%Heodo
2020-08-14PO_08142020EX.docdoc 60c6203d9b7a2178fb3f76f12d896c8191aaef13c55973e5a177df215181683dVirustotal results 23.33%Heodo
2020-08-1475825049.docdoc 5374fa0008e88c1da4ca74c275de2befe1d2ac21ab89f0c885b89eddcdcad2bfVirustotal results 25.00%Heodo
2020-08-14JMBFVWRD.docdoc 443bc7ea2da243b9cbee67539dc163b1f99967ac38471bc13aea2e25944a8d22Virustotal results 23.33%Heodo
2020-08-14REP_CCZ_080120_VSZ_081420.docdoc faa4c872e4e08e1146cc849b5a9f4302d22a6a7b88f28c20d267b44d7d6b0c5cVirustotal results 23.33%Heodo
2020-08-14REP_WF5933595271ED.docdoc 8877a28036104574726011685f484c4bab9130f19e059e7a2dd35d62f6161d65Virustotal results 23.33%Heodo
2020-08-14REP_PO_08142020EX.docdoc bb3f1de1929aa472d3dac314f3f6ceaf8e2afdf9b95f97d844bfa70965d8783eVirustotal results 24.14%Heodo
2020-08-14GS1763749590XA.docdoc ce9ff1845b08d7610cd9a181ced3676fc04452e4d019ef14a48d59634b45cff1Virustotal results 23.73%Heodo
2020-08-14B_21996244.docdoc 92386e2f315d649c3565cbcd1df211f967b66594ff68453608b6125236b55a53Virustotal results 23.33%Heodo
2020-08-14REP_RL4960721207XF.docdoc 015676bf9d7c61adca32bbb32d96fa37a913a64442c577859be0e39884752bb3n/aHeodo
2020-08-14BAL_44840609.docdoc 184f481ac2e0638a5f29787df5ef317f15c5b1509de96eaef3f949c86c2f8b78Virustotal results 23.73%Heodo
2020-08-146747216954970860788599.docdoc f92c670905c9b92334b90a5f812306d265e6e9e54c7b4ad16847d5c6234cb670Virustotal results 36.67%Heodo
2020-08-14DOC_8339857428065203.docdoc 0f80316b76262700a25c47fc972ed9f77b1d2f997f7d8f4f2dc7c00a2c59eca5Virustotal results 37.29%Heodo
2020-08-14AW_PO_08142020EX.docdoc 022d18a79ba451e68a02a8c682623c79c30125f85a0735fe5453ba1232ffbc25Virustotal results 35.00%Heodo
2020-08-14OAG_080120_PEE_081420.docdoc fa4a4908d530908c1e687ff784931d3e57af14fe24494b625e45f1f0387a8528Virustotal results 35.59%Heodo
2020-08-14TA5557185305CB.docdoc 3435e343b0a6c8e9196499ac3dd741f97bc11a10039d254d98a744d6fcbe3d2eVirustotal results 35.59%Heodo
2020-08-14REP_78852957.docdoc 0928f7c9c557d9e232052edc5377f9986651f02861f1f90ae67a9bcdf3caa375Virustotal results 36.67%Heodo
2020-08-14REP_0216954687606762902475.docdoc ac72c66d611118545906b5f23ba3aa32a7dcf91eb2f2f41c1476afea66ad21faVirustotal results 36.84%Heodo
2020-08-14KBD2VJN55.docdoc 7f0cfcaba7df4371efff36fa780cd28015c7c1694c8792fa2f56dd86b7ce8989Virustotal results 35.00%Heodo
2020-08-14BAL_PO_08142020EX.docdoc 6ab2c399c8174e97809e728dc331f229df5e7d30dba04a5b1658ff245c45a657Virustotal results 35.59%Heodo
2020-08-1424604476.docdoc 13425d91c0471208df6a06b23e5f176fea8637422e82c95f1ecd534aadda855bVirustotal results 36.07%Heodo
2020-08-14EFAZ_MHONNQ7NFPRIKWYQ.docdoc 28bc4f423b833b0fadccb2de2327be63041318014cf1ae1e1dc1941010322f53Virustotal results 35.59%Heodo
2020-08-14AW1859788216TM.docdoc 36d38e224e4d9711b5753532010c6306d1a2f2c9a73bcefbb77c27b8e4efbadcVirustotal results 36.07%Heodo
2020-08-13H_95477861.docdoc ae61420aebc07da884917752dcdac62809ccd7a3eb2ed470a3b6c810e7635adfn/aHeodo
2020-08-13INV_794071460514732493.docdoc 668487ec145e75676c1a4fd6e0828331c412f7fe35709a3deb6d182debad6422Virustotal results 37.70%Heodo
2020-08-13EO0865332859HX.docdoc 0eebb848380c00975634d13afcb080cb6fc678874057e01d2024589bc443d5a4Virustotal results 37.70%Heodo
2020-08-13REP_0912930833.docdoc 34aed4bb09915606f5373f0d72261b384fe3d85fcde9b3c716ac00967158ec77n/a Heodo
2020-08-13BAL_36011585.docdoc 8829bbce815af3eb259bf395ab4bc8e41ed24c260d590c7a8253172b4e6ded79n/aHeodo
2020-08-13REP_AS0592067909SX.docdoc 91a52a2771534f1d27c8d0bc0c3faf71165f394a77b4d5a811c5fdd15b203e46Virustotal results 38.98%Heodo
2020-08-13DOC_GYU_080120_PQD_081320.docdoc 0f56c76a4c47767ff9ff3f8a9fdc37edabf5d585992ab218eec6d39627dee63dn/aHeodo
2020-08-13INV_20060127.docdoc 181c8cee3b6463be02aa4dcfbcdecf6a495a03e0692a379e34467dd0ed5a6fdbn/aHeodo
2020-08-13I_30851969.docdoc b4a759ab982ab288dd6ab871610df205148b10cf4305cd15be190ceb1370e330Virustotal results 38.33%Heodo
2020-08-13REP_868397212.docdoc f153d1cd2401db480ab764a78b8a1928c558755e34f37ecc8ece84b1f14e6964Virustotal results 36.67%Heodo
2020-08-13FILE_LPO_080120_LQI_081320.docdoc 6411bdfec957841d02b2697f3933820d3c41f39d1622b2f74d1fbd5b0f66b0e2n/aHeodo
2020-08-13P_RQ4958240500HP.docdoc b8c7112d2672445960d4ca69da612b07b761b5119015c0dc4e75064b85978ff0Virustotal results 36.67%Heodo
2020-08-13X_IFK_080120_TFR_081320.docdoc a4d0b1c2b75f14515784a678a437ffdd8b5542fe3c2d738cbe7bcde2d5b15e0dn/aHeodo
2020-08-13YL_PO_08132020EX.docdoc b8748876a802240520ada4d1493ffef171a7e7a99ad42481dbeffec99b436c50Virustotal results 36.67%Heodo
2020-08-13DOC_PO_08132020EX.docdoc f959a3ec8067a6967f047b19554210234638a6ac9b0bac85e006979f09c33d11n/aHeodo
2020-08-1333686031.docdoc 787b6d7c7eccdccf7041ef2028eebf0f8eb9691e1fc1561c6a6c13985156b1a7Virustotal results 32.79%Heodo
2020-08-13REP_35696996003.docdoc d567a4097feddecd5e5cabcdde2f997521126535222bec36e0514da36a9886b7Virustotal results 32.79%Heodo
2020-08-13BAL_ZLY_080120_JCU_081320.docdoc 8c8c709e2b7cfd3dce74062f2564bef84cafcc329cbfcafbc2c056c35cc38c50n/aHeodo
2020-08-13D_KFJ_080120_NKP_081320.docdoc 5dfe99bdd766418f029d534146438a97818581f989d4b2ebf5f92179344000c0Virustotal results 30.00%Heodo
2020-08-1360801318.docdoc 3d9b7dd248282da644efce8e11e6933424e766ba770a6c0eb2f817b312367a1en/aHeodo
2020-08-13BAL_XS7769946021HN.docdoc 8a0a74b31fb30ce1a4adbaa3945c4186c7d467268e76b9ca802905b7cf5fa54eVirustotal results 29.51%Heodo
2020-08-13REP_00513565.docdoc 3dd6562787c08407c9fbd639fc7e1b5a90251fbf8bc40b032135cf84a2243970Virustotal results 29.51%Heodo
2020-08-13DOC_GC0003799614CR.docdoc b51738d4d37c472d3b1b69c1f7cab2d120fd9f2e53a524e772a263e65a892c94Virustotal results 28.81%Heodo
2020-08-1314039396.docdoc 22c4bc8c9ad10df54d22ae6a89c1b937d49982a7b9f6ed54798394dc9033c0cbVirustotal results 28.33%Heodo
2020-08-13B_YN3131393267FP.docdoc 44a4e9297c1d0191631e49532aa755b5a7928836c63b7a9f37deb77293cf2ec7Virustotal results 30.00%Heodo
2020-08-13REP_17781699.docdoc 09bd7f442749dac84e11577aa507719969f7eac112f256a50e5b9e8d823a3b78Virustotal results 26.67%Heodo
2020-08-13C_PU9935281249NG.docdoc 79b609ddf074406de181d656544923255389ac44a068ddaeb858e6546d2787f4Virustotal results 27.87%Heodo
2020-08-13DOC_90035138545777.docdoc bedf54726f739f906db66965be55e05516b933ce872264751f3dd48f5b9db8fcVirustotal results 26.67%Heodo
2020-08-13FILE_MLX_080120_RTN_081320.docdoc e9a1e08c1d8de096fd30cfc93c23d0037c4016bc7c4cad64c8c4c7b6fb3a717bVirustotal results 26.67%Heodo
2020-08-13BMF_080120_LOL_081320.docdoc 0c4015de45653ee2f8fc6e338461a2377e14139b1ff879df5a2fe1d3c200a15eVirustotal results 28.33%Heodo
2020-08-13C_TLU_080120_MZG_081320.docdoc 33dcad34dd7bf732f89c6d54880f01b2f952fd6f08f89062109af185e73d0e22Virustotal results 27.12%Heodo
2020-08-13VGX_080120_BUJ_081320.docdoc 57077fbea2ccbc5464be5b94b7e01a59f4b28e6658a7a432645380f6413e8a00Virustotal results 27.12%Heodo
2020-08-13INV_QT2640522977LA.docdoc 5194be1983e90239f9db2e155ceda0e8c3614455a64815f33ef7c8a1bac92cc5Virustotal results 25.00%Heodo
2020-08-13INV_A3OEA6IL25K.docdoc 3f9f641892bac263ede86f11632b4a6498dcc2b94b13727c5dc8c8c594e0f608Virustotal results 27.59%Heodo
2020-08-13REP_76230419.docdoc e1bf8d2efe529d4cbe16fa5c6f747b604e88d6ffbeec9742a7617aa8617a9133Virustotal results 26.67%Heodo
2020-08-13BAL_PO_08132020EX.docdoc 1ac4188f22c717e76b493881ab12ef60e719cb86d2e5289f743b42b338cb5b96Virustotal results 27.12%Heodo
2020-08-13INV_47059379.docdoc 9806f54f8d2769646e6a9caee3f1c15a1b47f781be6eef64c390d6e9ee867bd4Virustotal results 26.67%Heodo
2020-08-1375787092143147298057109.docdoc ba510b5a0f97430a09efbd12acbb4c1be869e71e678adf5fa0b5498fb477068eVirustotal results 28.33%Heodo
2020-08-1326996512.docdoc 286553ae57a160d6c96aead277a25d92227a3f0030fb98198e7be863f897e1deVirustotal results 52.46%Heodo
2020-08-13REP_XSZ_080120_YXO_081320.docdoc d3cbf8eb26742271a0281233827b52ab52334bef5335d0f8a27c9db613de55c7Virustotal results 53.33%Heodo
2020-08-132286782675748497.docdoc aa6d1d92278957eef1af09829bba94b4b37a84b56cb33e65cd070f7ada92e244Virustotal results 51.67%Heodo
2020-08-13Q_KH7039917623DQ.docdoc a5f57f7cf9288f13cd7e297715c8e108eb7cafb64d3f8241811e872196857d08n/aHeodo
2020-08-13DOC_RE8304545453OV.docdoc c2bb5e128810c06abd15ad3ef0bc95622c20da154ca500892972305c94feabedVirustotal results 52.54%Heodo
2020-08-13INV_72416561.docdoc 2ec1025c3a44b35de74853b22998ea439d6eb5f0d92d9065256692f0deadcbd9Virustotal results 51.67%Heodo
2020-08-13BAL_FII5C7E.docdoc 5ec2a412f6729dbbd84453b84c85ac56f93e865a1900eb514efedefedc56467fVirustotal results 50.82%Heodo
2020-08-12W_RUD_080120_WRK_081320.docdoc a9af06ae735677ec282b4a66f7bc85a343dc7c71491658673fed6150e05ef3c5Virustotal results 50.85%Heodo
2020-08-12J_MJH_080120_HKR_081320.docdoc 2b66ecd3111becc2a55700b18472d4d52f1647499c9946c6ce191a23b86feb20n/aHeodo