URLhaus Database

You are currently viewing the URLhaus database entry for http://todaynewsly.com/ads/y8g8ymh50212479388638tohxackjplg1ucbk65/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:431701
URL: http://todaynewsly.com/ads/y8g8ymh50212479388638tohxackjplg1ucbk65/
URL Status:Offline
Host: todaynewsly.com
Date added:2020-08-13 08:38:05 UTC
Last online:2020-09-04 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-13 08:40:03 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:21 days, 22 hours, 50 minutes Bad (down since 2020-09-04 07:30:50 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-26SL1454024211FM.docdoc 79d50d10e71ba1bafd2a1d8ef69a2db29abbb18e3615874b8c3b581b3d1f18d3n/a 
2020-08-21SL1454024211FM.docdoc fa036f4497d97525916c69697352e20c35f9a74e55c9a74ef9e1244903098db4Virustotal results 67.24%Heodo
2020-08-13REP_765047076.docdoc 4b99e8df8f724bfea2f32a9274cf4aa0f41b3e57a2b1ec753b17514149c670b2n/aHeodo
2020-08-13XZ7503311144RI.docdoc bd7871f1fceddc02727f3be310e4507aa75ac650a9319a03989d0a1c18bc74cdn/aHeodo
2020-08-13D_JYF_080120_OTF_081320.docdoc 9544785ab882041f58e5879a9cbadb6d7058982180ead9e1eef44adf3b92fca1n/aHeodo
2020-08-13DOC_NQA_080120_OSX_081320.docdoc 96541ade20ee56d34128b8857fc782971f0fd6c62d70d5b4c899b0f35bde5ae3Virustotal results 27.87%Heodo
2020-08-13INV_49274485569664024.docdoc 11115387b71ec2162713a34b3ced799ace3def99ab9e495234326a68ae1f6ef9Virustotal results 28.81%Heodo
2020-08-13PO_08132020EX.docdoc 430d07c2162af45022115ce4b557ab182afc95143b698568d50c41832c6b281bVirustotal results 29.51%Heodo
2020-08-13G_PO_08132020EX.docdoc 52426d2c2644ab78cd7fbe3a9e0d19acbd34903d9f62d42fe2e999b964e3eea7Virustotal results 29.31%Heodo
2020-08-1332820738.docdoc 0c4015de45653ee2f8fc6e338461a2377e14139b1ff879df5a2fe1d3c200a15eVirustotal results 28.33%Heodo
2020-08-13X_PO_08132020EX.docdoc 33dcad34dd7bf732f89c6d54880f01b2f952fd6f08f89062109af185e73d0e22Virustotal results 27.12%Heodo
2020-08-13BAL_066109858297818635474552.docdoc 57077fbea2ccbc5464be5b94b7e01a59f4b28e6658a7a432645380f6413e8a00Virustotal results 27.12%Heodo
2020-08-13REP_38154192816878.docdoc 1a457779d9b645e40120f23efa5aef5b0b97308f610fea5a06377c0603636f98Virustotal results 25.00%Heodo
2020-08-13FILE_PO_08132020EX.docdoc 30aceb60d6841a0f444bf36dbf53b021d32f7c1494c42f2c8600c6ea1b84909eVirustotal results 26.67%Heodo
2020-08-13DOC_JD0423147140VY.docdoc c5a0eac9aaeb84217b16d894a11fc533d9125f2c70cecb67dfd600b798295e1cn/aHeodo
2020-08-13Y_PO_08132020EX.docdoc 9806f54f8d2769646e6a9caee3f1c15a1b47f781be6eef64c390d6e9ee867bd4Virustotal results 26.67%Heodo
2020-08-13CFF_080120_UTJ_081320.docdoc 860473e6379cadac980b8957fa674badc7dbb97d0a11f86f1c9eeea6cbfcb20fn/aHeodo