URLhaus Database

You are currently viewing the URLhaus database entry for http://afmahsports.com/wp-content/Documentation/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:435184
URL: http://afmahsports.com/wp-content/Documentation/
URL Status:Offline
Host: afmahsports.com
Date added:2020-08-17 21:22:07 UTC
Last online:2021-01-01 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 21:24:03 UTC to abuse{at}tierpoint[dot]com)
Takedown time:4 months, 16 days, 15 hours, 19 minutes Bad (down since 2021-01-01 12:43:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-01BAL_BUO_080120_LDJ_081820.docdoc 5d423fc54fea2aab0c905e32a63397c0b39419e98d6b50af5079a73c7052fdc6Virustotal results 55.00%Heodo
2020-08-18BAL_2619464755755707496115.docdoc d455be8bab47cee43ba5e71e1ecb482cddbc0c320d39874a081d23d5d27d7fa8Virustotal results 42.62%Heodo
2020-08-18GDZ_2320438216679992784.docdoc eec53e193ef4301a8a7e0c901b5525cc447136daa569cb0a4e589d75bed15be9n/a
2020-08-18DOC_642635589604903295279.docdoc 27c375a8f3878f06b0f95f14705dbf8400f42c0208bdbffc432c9fe9be231b7an/aHeodo
2020-08-18ATYMQO8DN0W.docdoc 4b2c463c130aa9358e9853fd7af4e476c3f9721168623f6befc47050979d936eVirustotal results 42.37%Heodo
2020-08-186412143651773429544344.docdoc 5b6530e4d580725b37bd1d03eeb44c472d0529b1422b830bebdc62bf8b6d0c83n/aHeodo
2020-08-18PO_08182020EX.docdoc 5c8b923944c5816b259806159d34a3d379b2c8f347ef3b69cbc5b18f60637d93Virustotal results 41.67%Heodo
2020-08-1869866282.docdoc a9f2dfb969ec4a5c09edfdcf49a041eed112c8ef64c36610131b1ef17118292aVirustotal results 43.10%Heodo
2020-08-17PO_08182020EX.docdoc dff1df7c560a8a24caa14cf006d941b7c3d80648923fc99f691cf668706dd683n/a Heodo
2020-08-1748818494.docdoc 48ac357a569de9399290b5cce4f93f578284a5d9d3084db298f250e5fd364feaVirustotal results 41.67%Heodo
2020-08-17U_WMI_080120_ZVR_081820.docdoc 000a79f815b3fec41875c4a836751712c6447fad1a61998108810463c083a669Virustotal results 41.67%Heodo
2020-08-17BAL_H3024JWZO3AT9.docdoc d4917c2e36254107abd6f1f06201f1cedf4bc6fdf73e569b6ae7827bdf677925Virustotal results 42.37% Heodo
2020-08-17JJ7706621910HZ.docdoc 7776a0f18e269f643225df332d619771a31094c4f40736c9a03d179c03fbc668n/a Heodo
2020-08-1778173344.docdoc 18b1585abb668182213b56998ae5ed30758e1649c11469b52af43723c5b0704eVirustotal results 40.00% Heodo
2020-08-17PMO_080120_WSF_081820.docdoc 5e842e47338636cf919cf4da91f192fdee581c3e70625ca84d9ff63ab8b6a012Virustotal results 40.98%Heodo
2020-08-17JS6284032182RK.docdoc b2499733b6451b23e4b006ad5b7ae21e8c11cb477da78bccffd9ed41f5ba0a28n/aHeodo