URLhaus Database

You are currently viewing the URLhaus database entry for http://lambroscenter.com/wp-admin/HggY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:433451
URL: http://lambroscenter.com/wp-admin/HggY/
URL Status:Offline
Host: lambroscenter.com
Date added:2020-08-14 18:36:06 UTC
Last online:2020-08-19 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2020-08-14 18:38:04 UTC to netops{at}singlehop[dot]com)
Takedown time:4 days, 20 hours, 19 minutes Bad (down since 2020-08-19 14:57:57 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15INVOICE BUBY3787 11721869.docdoc b9d2bc9624f1e81b007fd1d89170294eb6eb29c779f83f4e75576a0fa3fa421aVirustotal results 41.38%Heodo
2020-08-15InvoiceO677874537632.docdoc 8166f9d5647da264c416fb5151e8f329302965d5717c6d4210d146fc41acd16aVirustotal results 40.68%Heodo
2020-08-15INVOICE-HJ31-820368.docdoc e661e88652754e32269956878b435a3d8e7884d7af66fd23ec88f5ff1a59e235Virustotal results 38.98%Heodo
2020-08-15INVOICEH36056642038.docdoc 715b876221f1b5e1bcb052a019ee033638ba9829c8ee712edc2ef66cc27c0e7dVirustotal results 40.68%Heodo
2020-08-15INVOICE-EIOF20-3557326.docdoc 39e1005ce7b833af7d15208f045080aff3d0cea6b1695169d52a4eebece6ed61Virustotal results 40.68%Heodo
2020-08-15invoice-XMLY3-4381440.docdoc 4326d85e4e39067b708e94bd523761b0b7cfb2385279926d9678c9436f77c83aVirustotal results 41.18%Heodo
2020-08-15Invoice-FW13-1512369.docdoc cebc1f02cb5c7f918e32b0703c5cea992c71ac183a21cbe3033ba9c9521ea186Virustotal results 40.68%Heodo
2020-08-15invoice-UTI03-1370269.docdoc 87de64ca5d6a56c0052011b27d90cd655caec767b7a67347cbd10c060108aeb3Virustotal results 41.38%Heodo
2020-08-15invoice_Y8897_9486410.docdoc eab20959bc5079c5ec1b36810cc4511087f90d989ca29d297bb6b000c7bcdcc0Virustotal results 40.68%Heodo
2020-08-15invoiceP27097577.docdoc 786999121e626bfe51caeb919834a7203f54369b39681cfd2b71fbd653d25842n/aHeodo
2020-08-15Inv_YEUS66_5520658.docdoc 6d849f43785ca5cf641082748de6d9fd4c8b5d11863de48acfff9ebe7ab20b32Virustotal results 41.67%Heodo
2020-08-15invoice-YWBF53-365895370.docdoc f459c6f45a6dcaad9d11f1ad70662c64a3daf6d066282b5b6626b3e281767f29Virustotal results 41.38%Heodo
2020-08-15Inv-58-8802382.docdoc 8a6578df6c38df21c5ab813758504bfe9a414846c9caa29cac17c6a7244e41e1Virustotal results 40.68%Heodo
2020-08-15Invoice-257-5569148.docdoc 911f2bfa86abc00f8fc2ea9dfbe597349baff6522fff47de22aa0ae77f31ece9Virustotal results 41.38%Heodo
2020-08-15invoice57613143.docdoc 5ef82a837959acd3ffd63fcfb6f497c2ed4b29c0f50047539044636365ba1d00n/aHeodo
2020-08-15Invoice_MG8_251988.docdoc b2d036dd47e8eed612cd5fe5dae22412f857756ad9f6a4a293cf7990bc73c8b3n/aHeodo
2020-08-15Inv_BTUE2_631047093.docdoc c7214b10c8cbeef517f4c966a111017a37e144cad39e215bf93f5632109d4040Virustotal results 40.35%Heodo
2020-08-15Inv-S49-608002118.docdoc 08cd2d6d4abb73bf8576707707a01d080b71ccda36ddad179a4caf3943f60cden/aHeodo
2020-08-15Inv_OVS3_228059634.docdoc 903b4b0dbf79ba01b1c8a324c887cf2e6e7ddff21d2cb2091ab77cbc6c13b467Virustotal results 40.68%Heodo
2020-08-15Invoice_QGK22_436714153.docdoc 1fc2a5a85e81f16a544f41141eb6609caacee1f79acb843c42f94dacb68ef8d2Virustotal results 40.68%Heodo
2020-08-14Inv_FYT56_2612892.docdoc 65531b466ac29ac2fbbdd69e1f6408eccbd82b4a998e13fe2ce4592ead35deffVirustotal results 35.59%Heodo
2020-08-14INVOICEW2282359133716.docdoc ac17c79acdf8dacbc6b93da5811f3ed7c7304e25f8f69612a93dd594cececa16Virustotal results 38.60%Heodo
2020-08-14INVOICELIUT29668796.docdoc b86c240ff73da180f757c89c445ffcabe432f5274d37075086d28f00b41871d4Virustotal results 37.93%Heodo
2020-08-14INVOICE-OS698-6801489.docdoc 5a339bed662000c7482bef1785340e56fb3f3a495dde5df8e37cc237ac111374Virustotal results 38.60%Heodo
2020-08-14invoice14495233.docdoc 284869d2f6bf8757c4361deba6f72989a57e8fc84c93be00e7d2e9be8b979d61n/aHeodo
2020-08-14Inv-UPR06-18173950.docdoc f20172234fc7b9530178bcee6f948b250a4b13e382fafedfd7957560dc1e8234n/aHeodo
2020-08-14Invoice-JMD1535-1210920.docdoc 4e4e13b049124c6db74594ed0351792442e0a91a82abc72f06601c9598c241c1Virustotal results 38.33%Heodo
2020-08-14INVOICE FQZC7 06351762.docdoc 95cc5ce9259454f349e823d4c1e4c546a303dacfd17dd01c60af5f9dfb171cb6Virustotal results 36.21%Heodo
2020-08-14Invoice606559824107.docdoc c2e044af01e5ba139d873400d8594ed2349fcb2f9005243a69c8476d0570b32aVirustotal results 36.21%Heodo
2020-08-14Inv-KRVA2598-79467856.docdoc dd2524d80b806431cc0021f456fb7d4ad370b7e31652f050e26839e76255be51Virustotal results 38.33%Heodo