URLhaus Database

You are currently viewing the URLhaus database entry for https://mohdhaziq.com/wp-admin/protected_section/test_area/B4ZD8uvi_aq34JLnpkdie/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:434589
URL: https://mohdhaziq.com/wp-admin/protected_section/test_area/B4ZD8uvi_aq34JLnpkdie/
URL Status:Offline
Host: mohdhaziq.com
Date added:2020-08-17 12:25:15 UTC
Last online:2020-08-18 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-17 12:26:06 UTC to abuse{at}ovh[dot]net)
Takedown time:16 hours, 52 minutes Good (down since 2020-08-18 05:18:26 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-18list_20200818_Q5032.docdoc 2ce679953d8f4a7b2d6d9f47c635d574aa6e6a9ea94154654e1bb1472971f502Virustotal results 45.00%Heodo
2020-08-18REP-20200818-0853.docdoc 4a49fe6ff5e8731a7aa0536b8f0c0dbc5673dae67c35f0141efb3807cb21daddVirustotal results 45.90%Heodo
2020-08-18dat FHW91701.docdoc f3155524e3a1006204ec5ef83349e5fa2fcdf663c69d598cdbd5cda6a378a0b9Virustotal results 44.07%Heodo
2020-08-18File 6056.docdoc 3f6f39740bdd518fc2428fa3aa082d73291be1fafe720a4a86d251a9ad92afe2Virustotal results 44.07%Heodo
2020-08-18DAT_20200818_FT3812.docdoc 1c62113735e6ddecc264c05212144be5441448de6c9cdc063a1d3ff2494185a7Virustotal results 46.55%Heodo
2020-08-18LIST_20200818_8084303.docdoc 9f6acf9a0b1abf9481a13650ecdec0e7a9cb7a4c30938c2ffcca8da0934a96d2n/aHeodo
2020-08-18DAT-L333653.docdoc c096790fac979c0cd6d10f7870eca525a28891a4462431c6204c5f6adbe9157bVirustotal results 43.33%Heodo
2020-08-18File 20200818 NRS0984.docdoc 14af02c786ea12c4843ad6860839b102eb8e62ee07901297724c921065dc3081Virustotal results 41.67%Heodo
2020-08-18List_6418308.docdoc 503c77f99b0c8271cb80a1101e69d6c9060647f7a4a8451c23aae49bd344b634n/aHeodo
2020-08-18FILE 20200818 957848.docdoc 403175e425e2a4c0eedf4b7a5fee64bdcb3b6e6929a1aea63dbda7f9a84e8086Virustotal results 41.38%Heodo
2020-08-18dat-2020_08_18-GE1255.docdoc 2c71b781d036db2d4d077269622615c4f83acf550bc178674d9c49d9360376a9Virustotal results 44.07%Heodo
2020-08-18list 20200818 C420.docdoc 872c0c3578f24be338bcaa8a29f2b157d80a2d3d5e5ecbd33b028bced714c077Virustotal results 41.67%Heodo
2020-08-18MES_20200818_4152015.docdoc 0ffb643d2ef22089512c5de14e1d2f14d5632e77e9f609b1374c79fbe0a788e0n/aHeodo
2020-08-18Rep-3536.docdoc 4426143a003042fcf53c32a42cb6e2dfa30ff4dfdf7e2248eb6533df67ac8723Virustotal results 41.67%Heodo
2020-08-18MES 20200818 Q241822.docdoc cfe5cae34d529a71812a66cb3d6f2e9b2b7446bf4ece6aeae5c32c9cb325ce7aVirustotal results 42.62%Heodo
2020-08-18Rep XF88040.docdoc 92bd87c0eed15bf75f7c61b1879280e25a7997a4afe7c804c82a3902f51d46c1Virustotal results 41.67%Heodo
2020-08-18MES_2020_08_18.docdoc 8bbfe9b6aae9ae8cd42ef61b046d0c690f0637f216d5a22d4a5f7911b59469f7Virustotal results 41.67%Heodo
2020-08-18dat-1013.docdoc e976f7e4de4c0bedc4e4bbc27752994f9110c050508b106611f035260551a8e0n/aHeodo
2020-08-17REP_2020_08_18_YW114268.docdoc e997b17d809b4d63590d7b7cca81318d3ecd18b59a46a4e83d88af6dfaeba54bVirustotal results 41.67% Heodo
2020-08-17rep 20200818 CB16618.docdoc faffee3625908bf1e2cb82c961bd1d777beeff0f87166e3aedc6fa984834c42fVirustotal results 41.67% Heodo
2020-08-17LIST-86625.docdoc 32cb1657bab6cea4734f694fefe16389dca17cad7673cc0be676c77e070ae735Virustotal results 41.67% Heodo
2020-08-17inf_20200818_324.docdoc 34c3b24fcdb685c45554b1bc9ab60336cfb9233e87c3f21c61bd63723fea1338Virustotal results 40.68% Heodo
2020-08-17FILE-20200818.docdoc 6535313a52f000bc92afec62f22968677544878c5cf2109e862e72f7c441dda0Virustotal results 37.29% Heodo
2020-08-17rep-20200818-4531.docdoc 818e631aced6291b95a641f2eace827a0b9f2ee202b364a3a09378bc52401e03Virustotal results 40.00%Heodo
2020-08-17Doc-4852080.docdoc 1c00d01cd184a0d2a13e0b10fc17fe857ee0c55fe6894a8a538685b2c7a9150fVirustotal results 38.98%Heodo
2020-08-17DAT A859180.docdoc 47b3fee25d6683706ef483aa30125377edf7bb21dd17638c81c52fa7e64966f7Virustotal results 34.48%Heodo
2020-08-17dat-HXY417.docdoc b5ba2a25b6b78baed8f427232afed8841e367725d1fb05bb47b5ec863dcfcf7aVirustotal results 35.00%Heodo
2020-08-17mes-87634.docdoc 332fb15e827574730b238731c1d69515d2110a2a48ecf3742552854097bbc5a1Virustotal results 37.29%Heodo
2020-08-17ARC 2020_08_17 886789.docdoc 978eeecce40faa3115232aa22fa2b53bc7559cb9f4c5ac82ed26728e460a78bdVirustotal results 32.79%Heodo
2020-08-17REP_20200817_01686.docdoc 068447c2fb052258a7ea0ba47b2fa89cd69bb3a9bc9457e394de0a70a1277da4Virustotal results 33.33%Heodo
2020-08-17File 2020_08_17 597.docdoc 4e222c92dce7f604bdab06a48a8b26d08c4c3ff4e455795f8024e98823f1c13eVirustotal results 32.20%Heodo
2020-08-17arc 20200817 97775.docdoc da10e987e0f17cdbf08a4c765e272d4feb929d329ba74d4fb5d1d27c36c1ed38n/aHeodo
2020-08-17Rep.docdoc acb3f0096eb9c1cf6eb8d3fbe21638451d06476cfc2a9571cdef986da4b07c20Virustotal results 31.03%Heodo
2020-08-17rep-20200817.docdoc da36139efceba6bdc76e654a8ee65827216781721578417791ffd386102b8272Virustotal results 29.31%Heodo
2020-08-17ARC_20200817_533338.docdoc 37fa3d3cd6ac66a6c2dac81cdbfa47a07af9cc5d6103546473c07d0dec853636Virustotal results 30.00%Heodo
2020-08-17Arc 6453.docdoc e72e7fc919831a1466ce7e52f75ba5ed79a6ae5c1782de1f1e33b1130f843609Virustotal results 28.07%Heodo
2020-08-17INF_ICM5354.docdoc be3ec3f71ce797fc82f6e2c0d4544dde3c5ab20ff6df9ed778b0ba1199a980e2Virustotal results 28.33%Heodo
2020-08-17LIST_1783.docdoc 7c36e6a351ea7a57bdbec894054f6a997e79596a6bd0f68845bd3b6e9eaad37bVirustotal results 25.00%Heodo
2020-08-17mes-2020_08_17-E67649.docdoc e4db4ea9470b17de4ef84c2c86c06d071fd7e443202331df06e303b9bd9a135aVirustotal results 25.86%Heodo
2020-08-17INF 6424.docdoc 8b689a2b1b329de864a728b4d212d99d754ee1ba922d6995f3eba7c8f2e5812bVirustotal results 26.67%Heodo
2020-08-17LIST IWO283598.docdoc 9049b9d56ece9905383bfe0eb13e25c92f80955c6b711b8743fc404def776f1dVirustotal results 25.00%Heodo
2020-08-17DAT_TAL37130.docdoc 0b3c0e9e585c187c0cd73a7b46e88b06de2dcf0e3bc11e372868160594e150d8Virustotal results 26.67%Heodo
2020-08-17Rep.docdoc 8a346d540cf74e5dd42aa37659347c7620b972f541ed167bf4ffe7cfcacfe5e5Virustotal results 23.33%Heodo
2020-08-17file_2020_08_17_FB21769.docdoc 683251a1d571223428ec926ef741b19a2274b13d904fc8154915ace942c29e8cVirustotal results 23.73%Heodo
2020-08-17DAT_20200817_5324.docdoc 6345eb23231f0dc6c89087b411c649f2a3259a066c20232d8e1ccaea0e0d9792Virustotal results 23.73%Heodo
2020-08-17ARC_09058.docdoc 0ffc730b768c45ae0f359cbcfad987af88e15ac6e383857a2d42e7be17d01bf7n/aHeodo
2020-08-17Arc-71578.docdoc 80033762f63c113feb8a08a6c06eb29c8d53d857d30f3a85d05cf47c021afd08Virustotal results 22.41%Heodo
2020-08-17list-2020_08_17.docdoc 2c2d3c4b97887da9753012fdf167bb4da83ab8ced7eca83281d632ee9059fa73n/aHeodo
2020-08-17inf.docdoc bd7da471737e6929c32e4241266df6009460e4cfa82bcbf8e042ea1822a6753eVirustotal results 22.03%Heodo
2020-08-17file_601.docdoc 27909dc3ce5e8cd44a16347ba031de54221c460728d2f325b3d33a78bc15c198Virustotal results 21.67%Heodo