URLhaus Database

You are currently viewing the URLhaus database entry for http://mgsaltyapi.com/wp-admin/multifunctional-sl66-8p0maajsuwix51/v1ST5n-7f3ZPee53n-L9W3t2p-9ultbTS0bEW/060411442688-4jwlKG4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:434568
URL: http://mgsaltyapi.com/wp-admin/multifunctional-sl66-8p0maajsuwix51/v1ST5n-7f3ZPee53n-L9W3t2p-9ultbTS0bEW/060411442688-4jwlKG4/
URL Status:Offline
Host: mgsaltyapi.com
Date added:2020-08-17 11:57:03 UTC
Last online:2020-08-19 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 11:58:04 UTC to abuse{at}guzel[dot]net[dot]tr)
Takedown time:1 day, 21 hours, 53 minutes Poor (down since 2020-08-19 09:52:02 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19list_2020_08_19.docdoc e539186195154e173115f68e790dac9a32909a8c4344a387ce25fba6fbf55d27Virustotal results 18.33%Heodo
2020-08-19file 20200819 9779.docdoc 741441215f02f536e57bad81a0cd2549669c22dabf11a9db8076f3e7ec6acf1bVirustotal results 18.33%Heodo
2020-08-19MES-TWP105.docdoc 568b22f1a6fb077fd3828a09858b4bcd8401325c01f2aed85b3a39e12777cb35Virustotal results 18.64%Heodo
2020-08-19arc_N739.docdoc 1dd9e898cf2ef400f93bb6759c7453980dc396b70c7c8748055db01b62685f2aVirustotal results 18.33%Heodo
2020-08-19FILE 2020_08_19 D625289.docdoc c94255c1e218f6578be80a7dd64f4d75acb2c91812aa436908f37c81d531df90Virustotal results 19.67%Heodo
2020-08-19DAT_92135.docdoc da820b108be2808d9d5d1909a3d8683f33f902abe5ae4e5e319d6aa766aba61dVirustotal results 47.46%Heodo
2020-08-19LIST_2020_08_19_QU860.docdoc a09fb497ce5738081489fafa343ed354128eba16cc5f8f6bfbb26ff79e19ceebVirustotal results 47.46%Heodo
2020-08-19mes-EP80911.docdoc 1c98753feb43790bf0b2979ae0d73c4760638ab1d9c5d6b6336ce2241ba31aa4Virustotal results 45.76%Heodo
2020-08-19rep_20200819_506893.docdoc 305d205cdb3c030f05543db463c783753137d91a3d8c2721189a94fb36e4f7c6Virustotal results 47.46%Heodo
2020-08-19ARC_888647.docdoc 7065577cfc7f1d2a71a9044c23838d7703f1a1e02b2c222ab507407a778aae24Virustotal results 47.46%Heodo
2020-08-19Dat.docdoc f6feee3a8137cb0cab6667842f06e07f96e54fc2f15ebe079dc30b4060d52452Virustotal results 46.67%Heodo
2020-08-19List-2020_08_19-BD888061.docdoc af3f70492545cd6391ad67cedb9347c9e78980d2462b1b1a6b656113d246e010Virustotal results 46.67%Heodo
2020-08-19Dat QM8159.docdoc 8ecfd0e0dbd4257b0b0f97f99517f9d1d825e32d7862b1ceb1b6bfdc67b205a0Virustotal results 45.76%Heodo
2020-08-19doc 20200819 UQ373.docdoc 9f95680d93e52258b33600da99d066d953f0aa373f991d850e83ae0e050fdb4eVirustotal results 45.76%Heodo
2020-08-19list-655.docdoc 5194005835c1f487f14f03ea67a9300ad9821c5d0922e5549321d2629448f630Virustotal results 46.67%Heodo
2020-08-19doc 20200819.docdoc 5a63ce9de6a721eaabedc5a95a579a3eee404a94034db171f646e24517fed367Virustotal results 46.67%Heodo
2020-08-19ARC_2020_08_19_168318.docdoc 682cb4ff880f1a6a000f5a227f8dba42abd73d836308162dc519644d9dae94efVirustotal results 45.76%Heodo
2020-08-19List-2020_08_19-7189.docdoc 40ba73d22e9dab3b78ab066b7fce42d3bc541832c4d6a8ce3c564f2290c0b308Virustotal results 45.00%Heodo
2020-08-19Doc-20200819.docdoc 7833c0d39d11142241550af1fa9cb743026dc00c841f79a52d695fd8e9bfdd43Virustotal results 46.67%Heodo
2020-08-19Rep_2020_08_19_QXE446855.docdoc eb36ddd9edb9f64c1d10743135f87875826990fee2cde8abfcc653b1045c9061Virustotal results 46.67%Heodo
2020-08-19INF.docdoc 5df568ab274842e91a3f5717af61fdbe6827249fc71e135fdc493f5177ccac7aVirustotal results 46.67%Heodo
2020-08-18Dat_2020_08_19_NBL27391.docdoc 5644494f53e0f58e39e8c623b06d33e093d920e7728632366beaa74ce3ce75a2Virustotal results 43.33%Heodo
2020-08-18arc 2020_08_19 5901.docdoc 96ff6e1cf0debb38b542d25de485f8bbedbebacc99a76bc427946603266b19b2Virustotal results 43.33%Heodo
2020-08-18inf.docdoc f7f2b55cdbf9f24f6e1850b32aa87b859717f840d46caff776674a973d28d51cVirustotal results 43.33%Heodo
2020-08-18Mes_33828.docdoc 91abaab1b3daa4a4dfe3d6c8adf5c5c8f0ec0551c271417fffd61444cbf47346Virustotal results 44.26%Heodo
2020-08-18File SS560643.docdoc 942ccd6baa3b3eea249f01497d82b6835ddf27ab79c9db9561a3f473e05eceaaVirustotal results 43.33%Heodo
2020-08-18dat-OQ4401.docdoc f4b06b5878e6216de2fd744371e3da706006cd0eaab9952e028ed23bdb5b89d6Virustotal results 43.10%Heodo
2020-08-18list 2020_08_18 UM078326.docdoc 2df5b20d8f749d1edb14c16c6c1c1ce78165354f3d038a23ac8d4d99188391bfVirustotal results 44.26%Heodo
2020-08-18Arc_2020_08_18.docdoc 8eff0446f444542435bf1ea66d34ac5b2339a87d7702ba744f403dc5ec5d4795Virustotal results 44.07%Heodo
2020-08-18MES-20200818-7302567.docdoc 2665e27cc12b9a111b35b73a7afd85da8a5d1877d6270f6d8ea48edd2acc0718Virustotal results 42.62%Heodo
2020-08-18Doc_2020_08_18_PV469109.docdoc 52386a3f4ed721abc491a22e4d08ba4497e8392249b04e5fbcdcff39502cb314n/aHeodo
2020-08-18REP-QFY7642.docdoc 119e31c97f1254759e57ac901452c408e74c094919190ae94625b5e5a40312e3Virustotal results 43.33%Heodo
2020-08-18Arc-2020_08_18-2452.docdoc 72d943737f8d648bf65f1f9071ab2656abc7a9095e4bb53f4be92836d49aaca5n/aHeodo
2020-08-18list-2020_08_18-6766795.docdoc c2c31857eddef908bb15ebce07f54e91a068ffff5b92014fd70c1d5ce8f34cd6Virustotal results 40.00%Heodo
2020-08-18inf 2020_08_18.docdoc cae4e9249f1219782d6c234dc44eab63930830f75ab90f4d533f0ddd3bacb745n/aHeodo
2020-08-18rep.docdoc cbe9a323a3f8c6f8e119d5765df5d8c8aec0899db8729b8cc5f63e877925173aVirustotal results 37.29%Heodo
2020-08-18Dat_2020_08_18_CBO18894.docdoc 220f661d5186fcdd525b47c5a909197b80b076950ab2a2f94b6799328cbd1f19Virustotal results 35.59%Heodo
2020-08-18DAT 20200818 014293.docdoc e7a00b147a66d2906ffd241a1932f0d5eb5b8164ecb3d26b96172c47d551c1ffVirustotal results 28.33%Heodo
2020-08-18Dat 2020_08_18 3020331.docdoc b9e74d54e9138fa7ef402b14aa1df4b1b59295bf0664eff87426820863baa337Virustotal results 30.00%Heodo
2020-08-18file 20200818 G7376.docdoc 5761b96d033bca0977cc67ee0a51123d3986e1ea0e0f7dad51925b7a2a141555n/aHeodo
2020-08-18mes W290.docdoc a3d686e64806412716e762358904ec4b07f8d3ba5c22f42fd6463288f544658en/aHeodo
2020-08-18FILE_20200818_9722763.docdoc d85ffc795b5a9281a364b18d12c87bdb69c6351082d974bdb58839e9058b1503Virustotal results 22.03%Heodo
2020-08-18inf_20200818.docdoc 815ea753eb5622e307fa07d7adef0952ac8ef117a5174a66a9ea21bbf740a858n/aHeodo
2020-08-18rep-20200818-XU2916.docdoc 6f0f54737b574488c42223ae81bd83ea0da431f0732413951fe4572ca19e6442n/aHeodo
2020-08-18inf-2020_08_18-DG6339.docdoc 35b18dbdea7ae1b3d982973c26626ba8af054713d0479a8c1ad278abc7e8bcf0Virustotal results 21.67%Heodo
2020-08-18MES_E53781.docdoc ef82ba7726590c175aa9483782be07ebf1c3ca56839c2a61cbfea1f8a8aae774n/aHeodo
2020-08-18dat_20200818.docdoc 98ff1d26226bc654bacac7dc85fd4dc8ac6988dbb67d4997b98f07f328a02f6bVirustotal results 21.67%Heodo
2020-08-18file 20200818 HC6710.docdoc 11fc1f9d6498f19e72ab631137d825255d199ad361f20916cfc2130f46661061Virustotal results 22.95%Heodo
2020-08-18inf_20200818_PRE259.docdoc cb25ae558b0f7fcfc47025986a8012bb4b205121e43c896f85fcf9e1dbff0441Virustotal results 22.03%Heodo
2020-08-18ARC 2020_08_18 BHH07068.docdoc b1a5b0c45a385a514d7ee49f36e2df92b90949faf44927ad0a6540f39686a5f4Virustotal results 21.67%Heodo
2020-08-18list_2020_08_18_B1321.docdoc ca13f800b50bf58a4b795fc6da781783074ec311cdcf92e79eefffd9b952747dVirustotal results 21.67%Heodo
2020-08-18file 20200818 WQ9694.docdoc ef65c9f4858045271c7a6baf6f96364dd76acc60c1c3da6ac156bdb6322c43bcVirustotal results 21.67%Heodo
2020-08-18Inf 20200818.docdoc 07295ca2a5d3946d2553fc0a3e140872311843c9f6d20130ed5cd7d0f073826an/aHeodo
2020-08-18rep_20200818_999434.docdoc b532ca1d80293700b173d821d788d7f1a27d7a9cbc5b8e83aa351dd69e0fbd5cVirustotal results 21.67%Heodo
2020-08-18LIST-2020_08_18-TK206094.docdoc 4cc1cdbdd17e8f0b7cb09725937c61cb74bab089ccd7249d8198c12f62b0c857Virustotal results 44.83%Heodo
2020-08-18MES 2020_08_18.docdoc 26919d2560f6e6e4b5c44add2fdda04f676163a1085799bfcacaec874289f126Virustotal results 45.90%Heodo
2020-08-18List-914.docdoc ce7f5157d0128d0740ec074ee8db6dd03e234c410111f7aa6832f7adc820cfe0Virustotal results 45.90%Heodo
2020-08-18REP_2020_08_18_495187.docdoc a792d36a5d86adccbd0b2ccbb0fd67191beecb5e7230040f8d4626c8d47fd717Virustotal results 44.83%Heodo
2020-08-18Mes 20200818 MQ86409.docdoc 25ee4f3c43b72dc8241940ae6f5418b60bf58dca63bd4a9d08d45bc566b1cef3Virustotal results 45.90%Heodo
2020-08-18LIST-2020_08_18-OUK5552.docdoc 81ec297e1363823b4a4170387a248d68e35aaefafcd998d0f30c090fdb0a7ee8Virustotal results 44.07%Heodo
2020-08-18MES-2020_08_18-993731.docdoc f4ba8a9821511abb3468fe9b723eb0824e9aacbe438dcfe071714b37df33c068Virustotal results 43.86%Heodo
2020-08-18mes 2020_08_18 39533.docdoc 85d29d1d7b0defac3d595525d663889a12f7d5388d8bb0a993665335f72bac30n/aHeodo
2020-08-18dat_2020_08_18_364.docdoc 23866d5c01d81dae8b6112cf09cb195b3caeab201b8d5b2074c6c01e280d1783Virustotal results 41.38%Heodo
2020-08-18doc 20200818 OQP85720.docdoc 5b2f315f6910580a86de6995dc3bb3af0bba726b0292875fbeeb557d17759d57Virustotal results 45.00%Heodo
2020-08-18List_2020_08_18.docdoc 9f6acf9a0b1abf9481a13650ecdec0e7a9cb7a4c30938c2ffcca8da0934a96d2n/aHeodo
2020-08-18REP-20200818-6071493.docdoc c096790fac979c0cd6d10f7870eca525a28891a4462431c6204c5f6adbe9157bVirustotal results 43.33%Heodo
2020-08-18mes_2020_08_18.docdoc 77893a46e331faf345a8134849c0182109a90c65f156f288b95f054bc8bf667dn/aHeodo
2020-08-18list-2020_08_18-56131.docdoc 78159b47ee6e43a81e5f727e9f01d56700fb22cca0c9f6cde333e91c0130dee3Virustotal results 41.67%Heodo
2020-08-18ARC-20200818-TUT529.docdoc 403175e425e2a4c0eedf4b7a5fee64bdcb3b6e6929a1aea63dbda7f9a84e8086Virustotal results 41.38%Heodo
2020-08-18Arc_2020_08_18_8357.docdoc 2c71b781d036db2d4d077269622615c4f83acf550bc178674d9c49d9360376a9Virustotal results 44.07%Heodo
2020-08-18dat-20200818-RL480063.docdoc 872c0c3578f24be338bcaa8a29f2b157d80a2d3d5e5ecbd33b028bced714c077Virustotal results 41.67%Heodo
2020-08-18List 2020_08_18 54645.docdoc 0ffb643d2ef22089512c5de14e1d2f14d5632e77e9f609b1374c79fbe0a788e0n/aHeodo
2020-08-18FILE-20200818-CGM62313.docdoc d34a4e095dde98d6740346383251d18ce5f9bb8c58071f128db8083844be55e7Virustotal results 41.67%Heodo
2020-08-18INF 2020_08_18 955582.docdoc e7007d098ff3b77d307fdffbc2b566e6396298bfb9718bd207a8b377aca0b96aVirustotal results 42.62%Heodo
2020-08-18dat 2020_08_18 0392505.docdoc 716cb0fed68d3999a988461ba151d314310471e1ff5e5267419ad5f378da2150Virustotal results 40.68%Heodo
2020-08-18List_2020_08_18_EGL3381.docdoc 8bbfe9b6aae9ae8cd42ef61b046d0c690f0637f216d5a22d4a5f7911b59469f7Virustotal results 41.67%Heodo
2020-08-18mes_2020_08_18_1047157.docdoc e976f7e4de4c0bedc4e4bbc27752994f9110c050508b106611f035260551a8e0n/aHeodo
2020-08-17DAT 20200818 0399.docdoc e997b17d809b4d63590d7b7cca81318d3ecd18b59a46a4e83d88af6dfaeba54bVirustotal results 41.67% Heodo
2020-08-17REP-359320.docdoc faffee3625908bf1e2cb82c961bd1d777beeff0f87166e3aedc6fa984834c42fVirustotal results 41.67% Heodo
2020-08-17ARC_20200818_D7977.docdoc 5f0f7cccdbe15b26ad3d18fe0dc9c31aba891cea529b65e56c7dda35fa776c0cVirustotal results 42.37%Heodo
2020-08-17File_20200818_Y331429.docdoc 34c3b24fcdb685c45554b1bc9ab60336cfb9233e87c3f21c61bd63723fea1338Virustotal results 40.68% Heodo
2020-08-17REP-2020_08_18-DK569540.docdoc 6535313a52f000bc92afec62f22968677544878c5cf2109e862e72f7c441dda0Virustotal results 37.29% Heodo
2020-08-17Dat 2020_08_18 OGL309315.docdoc 818e631aced6291b95a641f2eace827a0b9f2ee202b364a3a09378bc52401e03Virustotal results 40.00%Heodo
2020-08-17Dat 2020_08_18 9868148.docdoc b217056622d2655617081ef69ad65da589c7ca744d2d1d6b666425f5d55f4644Virustotal results 38.33% Heodo
2020-08-17dat_2020_08_18_8113931.docdoc 47b3fee25d6683706ef483aa30125377edf7bb21dd17638c81c52fa7e64966f7Virustotal results 34.48%Heodo
2020-08-17list-20200817-V771.docdoc b5ba2a25b6b78baed8f427232afed8841e367725d1fb05bb47b5ec863dcfcf7aVirustotal results 35.00%Heodo
2020-08-17arc_2020_08_17_Y41037.docdoc 3c021a95e5f5b22f4efc9f3fc678defdb4c50196549ba03786c0aa2bfead670eVirustotal results 35.59%Heodo
2020-08-17doc 2020_08_17 2971873.docdoc 348368dc3b9ba59325226c159fd0b695e4256ad96894a3f58d3b97297a87a1b0Virustotal results 33.33%Heodo
2020-08-17FILE.docdoc 068447c2fb052258a7ea0ba47b2fa89cd69bb3a9bc9457e394de0a70a1277da4Virustotal results 33.33%Heodo
2020-08-17doc.docdoc 4e222c92dce7f604bdab06a48a8b26d08c4c3ff4e455795f8024e98823f1c13eVirustotal results 32.20%Heodo
2020-08-17Inf-20200817-4680523.docdoc da10e987e0f17cdbf08a4c765e272d4feb929d329ba74d4fb5d1d27c36c1ed38n/aHeodo
2020-08-17Arc 2020_08_17 M74957.docdoc 2bf93775cbad0953590c5e66820b5cb447eaaad0b0450e53e4bbe9fb951ef90aVirustotal results 28.81%Heodo
2020-08-17inf_2020_08_17_LRF277.docdoc da36139efceba6bdc76e654a8ee65827216781721578417791ffd386102b8272Virustotal results 29.31%Heodo
2020-08-17Arc_GQ3058.docdoc 37fa3d3cd6ac66a6c2dac81cdbfa47a07af9cc5d6103546473c07d0dec853636Virustotal results 30.00%Heodo
2020-08-17Mes-2020_08_17.docdoc e72e7fc919831a1466ce7e52f75ba5ed79a6ae5c1782de1f1e33b1130f843609Virustotal results 28.07%Heodo
2020-08-17File_2184299.docdoc be3ec3f71ce797fc82f6e2c0d4544dde3c5ab20ff6df9ed778b0ba1199a980e2Virustotal results 28.33%Heodo
2020-08-17DAT 2020_08_17.docdoc 7c36e6a351ea7a57bdbec894054f6a997e79596a6bd0f68845bd3b6e9eaad37bVirustotal results 25.00%Heodo
2020-08-17mes-2020_08_17-79001.docdoc 414a3261de7975d33e98be8efd2d34d23f9b0f3f51146b5d771026f5eb0a27d1Virustotal results 25.42%Heodo
2020-08-17ARC_04899.docdoc 8b689a2b1b329de864a728b4d212d99d754ee1ba922d6995f3eba7c8f2e5812bVirustotal results 26.67%Heodo
2020-08-17DAT-2020_08_17.docdoc 285cbe4cd306ae4c3557c91c2fd38e3a562f79d21643a6295b53aae718aae367Virustotal results 26.67%Heodo
2020-08-17Rep 6791049.docdoc e484e9b8614dff68bd63e103a395b4e03576c2f72fdcba1ff45344012e0f51b6n/aHeodo
2020-08-17REP_20200817_SI6335.docdoc 768b963eba0a3f6936ff6a6953909f9f70e8751a3b527b73aa0bb5def1b18305Virustotal results 23.73%Heodo
2020-08-17MES_ZIY33724.docdoc dbecd98d9fd1626b3aa562d063ba66033db39d1b8e846afe8634d738feeda550Virustotal results 23.33%Heodo
2020-08-17REP_20200817_O9369.docdoc 6345eb23231f0dc6c89087b411c649f2a3259a066c20232d8e1ccaea0e0d9792Virustotal results 23.73%Heodo
2020-08-17LIST-2020_08_17-778323.docdoc 0ffc730b768c45ae0f359cbcfad987af88e15ac6e383857a2d42e7be17d01bf7n/aHeodo
2020-08-17dat 2020_08_17 8386.docdoc 80033762f63c113feb8a08a6c06eb29c8d53d857d30f3a85d05cf47c021afd08Virustotal results 22.41%Heodo
2020-08-17List-249467.docdoc 3075e5f4103e8dd642f315d74bf45b8683c6634fd3bf5958bc5225f745dba25cn/aHeodo
2020-08-17mes-20200817-756952.docdoc dd90e23dd04ffd1b25a1f18be7b336ee6480e86a8b8d187185828c99f7850167Virustotal results 22.81%Heodo
2020-08-17list 2020_08_17 IR600646.docdoc bd7da471737e6929c32e4241266df6009460e4cfa82bcbf8e042ea1822a6753eVirustotal results 22.03%Heodo
2020-08-17LIST-2020_08_17-C7012.docdoc 5dbe478ffc810f6483b188ff86828412b661f3d7e9ae71a84c549694af142547n/aHeodo
2020-08-17DAT 3444.docdoc 1722f8015d90337f8829fb9890cf1c4d04a60dcd0ded0c9d1d8d070034ea423an/aHeodo