URLhaus Database

You are currently viewing the URLhaus database entry for http://alphaomegasl.com/wp-includes/zsuzhu-7m-1219/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432120
URL: http://alphaomegasl.com/wp-includes/zsuzhu-7m-1219/
URL Status:Offline
Host: alphaomegasl.com
Date added:2020-08-13 16:44:03 UTC
Last online:2020-08-14 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002866648 created on 2020-08-13 16:46:09 UTC)
Takedown time:22 hours, 23 minutes Good (down since 2020-08-14 15:09:23 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14InvoiceUR488348874202.docdoc c2af257a8a40028722b621eec7a07631530b6ad0a75733f89eb70aad03b1e4b7Virustotal results 30.00%Heodo
2020-08-14InvoiceUR488348874202.docdoc c2af257a8a40028722b621eec7a07631530b6ad0a75733f89eb70aad03b1e4b7Virustotal results 30.00%Heodo
2020-08-14invoice_31_55634347.docdoc 3d724c912fe861eb76717b53d4569224781d214fcb1d54b54a4f99d4908e0394Virustotal results 27.87%Heodo
2020-08-14INVOICEFHN7639685453.docdoc 8668a5aae3e7db513fdb925e16313049037536bc67a86ed756b682c98b7f6f09Virustotal results 25.86%Heodo
2020-08-14Inv-655-85501689.docdoc aa431fd3b4d6535fe771e56eb36fab47a8aed5572200c9bc3bff969fda210235Virustotal results 26.23%Heodo
2020-08-14invoice_CHCA7820_22596788.docdoc 6969c9659df92d53fbfae853c8c208cb0e09fc6acf7dce23773cb66cd060294dVirustotal results 25.42%Heodo
2020-08-14Inv_A90_819255957.docdoc 4828a6c7692c1ca3bee53f0c8dd1ff26f21faaf8cb2c66e0c4c460c6dc9f6dfaVirustotal results 25.00%Heodo
2020-08-14Inv AZY2172 07542234.docdoc 78933fecf248691aab0f40469c0dcd29e03ea9922aaf89b7cdc830b802cfa8a9Virustotal results 25.00%Heodo
2020-08-14invoice-Q72-61123424.docdoc a39c3a1d85563e52225ba5a4b21a11c2020fcfe4370f36c2bc012ae19d91103fVirustotal results 25.00%Heodo
2020-08-14Invoice ZHEZ3 509404.docdoc 0bd1c09908f6c09ae5217b631f5041669b722d5961f9471365b074d51d9a7a36Virustotal results 23.73%Heodo
2020-08-14InvNHWX00966410502.docdoc 7358c63d00a9a687434f3915c70e05e268b5d414d08c19e063de5f08e84e92e3Virustotal results 23.33%Heodo
2020-08-14Inv30618917.docdoc 2a7342691538ac359f25d6ccd05e6b81f64ea3dfb5fe8af5f23eb3f3425a056aVirustotal results 23.73%Heodo
2020-08-14Inv PGYE8163 6999558.docdoc c8491294ace5a6682e374787541ec78d155b4e288f143a086cb3320328782317Virustotal results 24.59%Heodo
2020-08-14invoice_AOZ4_647256749.docdoc 8aa7b26f53f2ebc1a1678bb6f61704527478b875e9c4947c3193d966f0664efbVirustotal results 23.33%Heodo
2020-08-14Inv_RBTH4520_577098.docdoc 99db7baf30cee72146c4791d36d158ca3ed62a58dd3bd57b7bfa60d0f13b08d9Virustotal results 24.59%Heodo
2020-08-14Invoice L136 113500.docdoc 27db24afe51c643a809e559c190b96146022ef6d3394b8e990c6eee4bb9846acVirustotal results 40.68%Heodo
2020-08-14INVOICE RI517 307315.docdoc fb17807621969c33d345882ad5ae95cd5294c32509e13a6fe8ce1d317a5c3f4dVirustotal results 38.60% Heodo
2020-08-14InvoiceQRDX130798042033.docdoc bef80c676faefc196703bfb61cf9459a8d09946d366edffa5810dcf3345f927eVirustotal results 38.98%Heodo
2020-08-14Inv-R4198-175819073.docdoc 845f584a4b58e05f5eabb64041142baac8b97a971f88d4cb2544c4ac3af97a3aVirustotal results 40.00%Heodo
2020-08-14Inv-JGA41-47485829.docdoc 854fcd9b34f74cfd7956a1bfd5de137afaa0c79aa3e1e80ccc4f87410e0e6159Virustotal results 40.00%Heodo
2020-08-14invoice_714_94151868.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14INVOICE-A1-5488442.docdoc 8b725e5a090dcb30815c5df978e72af9a04372b9fda6729678004e9bdd617ce6Virustotal results 38.33%Heodo
2020-08-14INVOICEUKQW907399964957.docdoc f740ad05fe75e146443ce0776602fc5828a534f28e1e2f34a1d785083de85bd1Virustotal results 38.60%Heodo
2020-08-14Inv_S361_06093487.docdoc ad1c63f07f872f3b37453d29dce7654dc1b79e4f3e875dd8090977c30093b6f6Virustotal results 37.93%Heodo
2020-08-14Invoice-0-01525624.docdoc 0b134d91d537beab9f4e700b126eb1b43b69c80126818592cef4697fce08263bVirustotal results 37.70%Heodo
2020-08-14Inv 433 83921675.docdoc 4398bc31070f761b318b30f297d363b006ed9e84c6af0aa45ad140f57e7c1529Virustotal results 38.98%Heodo
2020-08-14Invoice LVEG8 83197697.docdoc 532d6be9513e3dea9cfb7040d4e2b0878429f90b84e8c3229ba775ff99dcfbbcVirustotal results 37.29%Heodo
2020-08-13Invoice-XJWT7734-630047557.docdoc 3c2103ec1e6af0ce039524d58d70a4ced5e2845549def894d03f836978afa09dVirustotal results 38.98%Heodo
2020-08-13invoice_N2_2931620.docdoc 3eb6b088630e12b4b89f3af4f5b1366626605adddd5d7d447d1b4b8246d305bcVirustotal results 36.67%Heodo
2020-08-13Inv-RJM7-31594032.docdoc 02002790f4d5801feba9f00836aa82e8762db15f9dbe6f7aa8b7ab84b661c284Virustotal results 35.59%Heodo
2020-08-13invoice-1-702831.docdoc 226139f39424aaafeee49dc0a927be5da4a28431b970df629c236c7509680210Virustotal results 35.00%Heodo
2020-08-13InvoiceG4721383852.docdoc 653065e50db8318e4c980f45418849681df513e216b29c07cc7036442b0f9cfeVirustotal results 36.07%Heodo
2020-08-13invoice A3475 202496.docdoc 5afd28f4c27929a5271720ade77b26422b7596600473f76d9aca778869203bacVirustotal results 36.21%Heodo
2020-08-13Invoice-QS7935-262754.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo
2020-08-13INVOICE-N3-625948821.docdoc efd5ba3aef6a5b7efdf02bba779391cf010ad01d68be10642219e412a940797fn/aHeodo
2020-08-13Invoice-BO802-3135095.docdoc 76430c64d6d3cd144fb33a546e278e5558d3ae2083365596b14840bdde404b2eVirustotal results 35.59%Heodo
2020-08-13Inv-7-55105548.docdoc bb480394e0201866ae43a5b60c1ec371e3dd37a01e922a8dd5ff68d8cb325f3eVirustotal results 40.00%Heodo
2020-08-13invoice-01-318389.docdoc efd984b76bd38cb42bed4343bccb28e13e0e6f33e2795237f42c25f313c8ed81n/aHeodo
2020-08-13invoice-WED4-619642440.docdoc 6d62db6118095a780840f4d79898c2cf4a4f61a2d6549cd77e0e5dad0ebd3ecaVirustotal results 33.90%Heodo
2020-08-13Inv_OLY9379_403518.docdoc b38d736d513ae70545b3d388dbbf8e9e327be6276a22fb4e10422991f08dd1d7Virustotal results 32.20%Heodo