URLhaus Database

You are currently viewing the URLhaus database entry for http://safoss.co.za/wp-admin/xWDp8XDc_3yDwfsVS5T_disk/interior_forum/iv0top_412suy25s/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435451
URL: http://safoss.co.za/wp-admin/xWDp8XDc_3yDwfsVS5T_disk/interior_forum/iv0top_412suy25s/
URL Status:Offline
Host: safoss.co.za
Date added:2020-08-18 07:26:08 UTC
Last online:2020-10-05 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-18 07:28:03 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 18 days, 7 hours, 56 minutes Bad (down since 2020-10-05 15:24:57 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-20mes 20200820 4297.docdoc 06c1e44e06eb6b439d5cd8c0bbc56c48e33b613fdff9f70f7f8d93d2ba739f2dVirustotal results 41.67%Heodo
2020-08-20Rep-35209.docdoc 8f6788d862d18d0671375430af4c756bc9cdc6b99663b5df0842840a77af44d3Virustotal results 38.33%Heodo
2020-08-20rep 20200820 273.docdoc 89b6ed4e8a0cf8a07e457b0f616f06fc4770fd168802ee6180994858453dc3f3Virustotal results 40.00%Heodo
2020-08-20arc-2020_08_20-8036184.docdoc f6393c7e4e0b8603bbf2de4f4a138e6002e14b472d8d79514ed04a38bb6abd79Virustotal results 40.68%Heodo
2020-08-20INF 20200820 447.docdoc 67a3761b4abfe902aeefe85f6d92576b90564d706f24a08b54b1e90e5cec0105Virustotal results 40.00%Heodo
2020-08-20Doc 20200820 JF430.docdoc 62ec1bd0426af880a8212346e5dd56fa705a031c9b838cba9dc012e37a661ceaVirustotal results 43.10%Heodo
2020-08-20list 20200820 815985.docdoc 2f13cbd9b3d9704bb02e53765d7e7d2c8a7966a9ced9230815a6903d666352dcVirustotal results 37.29%Heodo
2020-08-20Inf-2020_08_20.docdoc 6679ce1f8ad158f0d6b60d0ba53a9320239863e3250674f436ec67091b98ae80Virustotal results 38.33%Heodo
2020-08-20inf-20200820-P401.docdoc b10b19c1f993e77bacc7116920f5c3211701223777403cf710ef56a257238986Virustotal results 36.67%Heodo
2020-08-20MES_20200820_5979.docdoc 38910d48a5b54e7d0b4f33b6ae9ff7668cb5a8ea4b8895d894b73115cf8d3596Virustotal results 38.33%Heodo
2020-08-20FILE_12997.docdoc 744029fece917740a88f43a6f35c563dce6abb340e34652085620785547883e6Virustotal results 36.67%Heodo
2020-08-20ARC-134.docdoc d551c7110c0181f84537e3409a1adba4a5ea0f98caa90475c6ce740e2c3fa9c6Virustotal results 38.33%Heodo
2020-08-20inf-29254.docdoc 7cc0e3d8f9ddba41b45bb2a39640734af4833f6385f2439c7f910cc4b1e332c2Virustotal results 38.33%Heodo
2020-08-20INF_79363.docdoc 9346e0df5753ddd0cf872c48b8c64bb882598744fa1621cbd9f57546750a6d46Virustotal results 38.33%Heodo
2020-08-20File_20200820_RE17277.docdoc 9ea89a24c2efb06595aa09d8d9dc8ac79ad4a9df0d0d99a7fd5fe63fe9e1f7f8Virustotal results 38.33%Heodo
2020-08-20Inf-2020_08_20.docdoc a07b4b70e44a67ef59e7bffe9f8765f449f5e739d25ad9c49f88d65607e38f42Virustotal results 38.98%Heodo
2020-08-20INF-2020_08_20-GB853606.docdoc e5da2bc79938c38b6d1deb7265a10cef4adb6664addab2bc3739942b0a0d0d34Virustotal results 33.33%Heodo
2020-08-19arc_20200820_H943681.docdoc 2c5b0a5c645d8ca87fd7a703e770536a91e2178a14a3b50980fc71231a5c9049Virustotal results 32.20%Heodo
2020-08-19doc 2020_08_20 PI32375.docdoc 0cd31f3fe195cfa0c025d27c1cf6ad200d8228b2fff802412181fece4bbf5155Virustotal results 28.81%Heodo
2020-08-19Dat_A05653.docdoc 18f2491dcef8d7f0113049e146994fc5a8fc1615ff0fbbd659fa0a5d580ea72dVirustotal results 28.07%Heodo
2020-08-19Doc-2020_08_19.docdoc c940432dc1875cdb1adfbda4eb2c3a23b3a10fd0a53cf12cc32e79389120b5d8Virustotal results 26.67%Heodo
2020-08-19FILE_2020_08_19_351.docdoc 7b1214f3fa1a87909df1dc2aaf3d66f4ef5ebe9cc2a8040bffa44e44e28ae36bVirustotal results 26.67%Heodo
2020-08-19INF_2020_08_19_JBO2494.docdoc 1a5032c8701a96210fcf5526730ee3db4924b92af58495bcfaed6912b1d48cb8Virustotal results 26.67%Heodo
2020-08-19DAT_20200819_LB392251.docdoc 7dc844f8716dcdfe52e129c179b48139c29cb20831bd719a02b8120135a7ddebVirustotal results 26.67%Heodo
2020-08-19arc-20200819.docdoc f7e9fa608f55e54940a272093c78974b3e2350594feb6bee7e0847ac03e975bdVirustotal results 27.12%Heodo
2020-08-19list 20200819.docdoc 480761889ebb7040b138b87207419aa6634dfec3a5c8b3672392b21bfb15c46bVirustotal results 26.67%Heodo
2020-08-19INF 04899.docdoc ad1cd733252039fe55df9241f672a3e0dc2435552a2f48e40f56477612916743Virustotal results 26.67%Heodo
2020-08-19file 2020_08_19 047346.docdoc ccf7aa2ddbffb5627874d5d3a1595b112fc715c76264882477835efa5c64e0ebVirustotal results 26.67%Heodo
2020-08-19File_20200819_I00199.docdoc d54b881b142aa3ec2e3b816d4dc326d23176dee31c65f78ff9b9328f61aaedb9Virustotal results 27.12% Heodo
2020-08-19MES-3602.docdoc 4f49566c22cd95508f39368f73be4e9b6c9c8e504c519f2383cc00fb67d28c55Virustotal results 23.73%Heodo
2020-08-19ARC-889.docdoc 66915150d26a0500bee5a47eef810f6d5ef9c9a9282973f17b3e434bac5600bfVirustotal results 21.67%Heodo
2020-08-19LIST 378.docdoc 0ce5e53c8098dbfc4fd1e58da405b66f8289522b964544eaa585a1094562edd9Virustotal results 22.03%Heodo
2020-08-19REP.docdoc 017dedfe5d57e11c86048a8f6470f4d48573fc0bc581b8ef0a6e22c06169770aVirustotal results 20.69%Heodo
2020-08-19LIST 2020_08_19 UP6906.docdoc b4980748305d9329f376c996a7887e4cb40713c823693998d4360500c510062an/aHeodo
2020-08-19DAT 20200819 N413.docdoc 305cb6c8382b96303f2a72bf13d1c5396188b06612236babedc20ab620eddba1Virustotal results 20.00%Heodo
2020-08-19list_2020_08_19.docdoc ff3dae4dba7055a170bde6b5cd1c62c47c680d32b65e19ea32fc4af41f8c3f06Virustotal results 20.00%Heodo
2020-08-19list_B01889.docdoc 1e1bd9b8516ba6602eafeeb65a0fd430014d63b18bb637cc352f7f55ccd80332Virustotal results 20.00%Heodo
2020-08-19Doc 2020_08_19 28804.docdoc 26dce61e09cc8b2d4d6d397a262348c91742adb49a51a8f062e6025e04cd5287n/aHeodo
2020-08-19Rep_20200819_3475436.docdoc 8f73ccc50ddd45b9ae2f651ab2b4bd7b773920b14e7ff44f075c9756b4b87458Virustotal results 18.33%Heodo
2020-08-19Doc ZUU3431.docdoc ac5d6169036212c360d8f4232685f6664041d612f03126d5ae29a48dfdcf2d1dn/aHeodo
2020-08-19FILE 2020_08_19 BIH108.docdoc 963b5a5d7697620b406fa79e667784b136bd5f07ce3384a384b679bb1f046e65Virustotal results 18.33%Heodo
2020-08-19Dat-20200819-193008.docdoc 4f1f186c9993f7a0816cf46d8aaafd5057718ca9b9102e98fb12fe2c2ea1bb24Virustotal results 18.33%Heodo
2020-08-19inf-HOR042046.docdoc a89dfc30991ead0295642952fd63fd59f14f553c17c7c3a438d197dcae019683Virustotal results 18.64%Heodo
2020-08-19List_20200819_360.docdoc 355ae9ce7f18c1cd0e3f82cba9251b9b368cb11edb902fe09e6d8d4a471d5091Virustotal results 18.33%Heodo
2020-08-19Doc-2020_08_19-9445788.docdoc 87a90ac40158e53a2309863a8bebfe1218f13262f87b93db76e5fc79ed1c388eVirustotal results 18.33%Heodo
2020-08-19MES 2020_08_19 1120371.docdoc 44116755a469545747d98ca4dad33a22c5565d571be3001cb95cb4971c532c3cVirustotal results 18.33%Heodo
2020-08-19mes_20200819_IED43836.docdoc 6694fe251d3d322846bd820435fba33e44ed217f3f9e2bf3a1ba2f71a2c8b4bcVirustotal results 18.33%Heodo
2020-08-19Arc 2020_08_19.docdoc 06f924f51874c7df81f49a607dddc6e977b700d5ce712232c7e962d77150bb01Virustotal results 18.33%Heodo
2020-08-19Rep-2020_08_19-742.docdoc 4aff494156109cde9b6e276763ac3797bdcf712a55c119b108b3d5d854bb8fa4Virustotal results 18.33%Heodo
2020-08-19FILE-20200819-442846.docdoc 4a1a50b2b4fbd12c0a323d5ac275bcdec7c1ca37fbb518a9c11a86dfde2b0798Virustotal results 18.64%Heodo
2020-08-19DAT 20200819 299.docdoc 741441215f02f536e57bad81a0cd2549669c22dabf11a9db8076f3e7ec6acf1bVirustotal results 18.33%Heodo
2020-08-19INF-2020_08_19-B630211.docdoc 568b22f1a6fb077fd3828a09858b4bcd8401325c01f2aed85b3a39e12777cb35Virustotal results 18.64%Heodo
2020-08-19mes_20200819_HJ212.docdoc 82b2463c462ac62073f95ada6f8aa70c265d0d7ca216a36322994f2d464bda58Virustotal results 20.00%Heodo
2020-08-19List-20200819-151.docdoc c94255c1e218f6578be80a7dd64f4d75acb2c91812aa436908f37c81d531df90Virustotal results 19.67%Heodo
2020-08-19FILE 2020_08_19 F376.docdoc 2dea73b6391db01c0900ef660c75b0841dcb9fd8fd91c892a5faee2e9701606eVirustotal results 48.28%Heodo
2020-08-19FILE-PE355434.docdoc f4e30920b70f56cf729fbd18a0d60e33b391f7e5307d39b78d9852f9918b46ceVirustotal results 47.46%Heodo
2020-08-19dat_738393.docdoc 1c98753feb43790bf0b2979ae0d73c4760638ab1d9c5d6b6336ce2241ba31aa4Virustotal results 45.76%Heodo
2020-08-19Inf_20200819_OES5167.docdoc 305d205cdb3c030f05543db463c783753137d91a3d8c2721189a94fb36e4f7c6Virustotal results 47.46%Heodo
2020-08-19REP-20200819-8447.docdoc 7065577cfc7f1d2a71a9044c23838d7703f1a1e02b2c222ab507407a778aae24Virustotal results 47.46%Heodo
2020-08-19Doc.docdoc f6feee3a8137cb0cab6667842f06e07f96e54fc2f15ebe079dc30b4060d52452Virustotal results 46.67%Heodo
2020-08-19mes_J63767.docdoc 00ae8c566e55be2bcbcd11072f67a71e34b8b28b3e3dcb0f949043c17c398ecdVirustotal results 46.67%Heodo
2020-08-19LIST-20200819-UNO970044.docdoc 8ecfd0e0dbd4257b0b0f97f99517f9d1d825e32d7862b1ceb1b6bfdc67b205a0Virustotal results 45.76%Heodo
2020-08-19Doc_2020_08_19.docdoc 60529051426888b950c39051f1ae3ffd04df199460f8f08ad2fb4ae0d65837f6Virustotal results 46.67%Heodo
2020-08-19Doc-20200819-I473677.docdoc 5194005835c1f487f14f03ea67a9300ad9821c5d0922e5549321d2629448f630Virustotal results 46.67%Heodo
2020-08-19Rep-2020_08_19-9704.docdoc 5a63ce9de6a721eaabedc5a95a579a3eee404a94034db171f646e24517fed367Virustotal results 46.67%Heodo
2020-08-19INF UIA702227.docdoc 682cb4ff880f1a6a000f5a227f8dba42abd73d836308162dc519644d9dae94efVirustotal results 45.76%Heodo
2020-08-19file_4240439.docdoc 40ba73d22e9dab3b78ab066b7fce42d3bc541832c4d6a8ce3c564f2290c0b308Virustotal results 45.00%Heodo
2020-08-19list-2020_08_19-4440567.docdoc 7833c0d39d11142241550af1fa9cb743026dc00c841f79a52d695fd8e9bfdd43Virustotal results 46.67%Heodo
2020-08-19MES-2020_08_19-4298521.docdoc eb36ddd9edb9f64c1d10743135f87875826990fee2cde8abfcc653b1045c9061Virustotal results 46.67%Heodo
2020-08-19MES 2020_08_19.docdoc 5df568ab274842e91a3f5717af61fdbe6827249fc71e135fdc493f5177ccac7aVirustotal results 46.67%Heodo
2020-08-18MES 20200819 PIR981932.docdoc eba02aeb5ab35694f34f8048ad03accea87abc6915db54d0905d905a155901ffn/aHeodo
2020-08-18Inf_20200819_RNV04968.docdoc 96ff6e1cf0debb38b542d25de485f8bbedbebacc99a76bc427946603266b19b2Virustotal results 43.33%Heodo
2020-08-18Mes 2020_08_19 BQC860264.docdoc f382710578f3df562db77ea613a75d9485ab315f7f8b7e5aa86e8120a0f0bf6dVirustotal results 43.33%Heodo
2020-08-18ARC-SG07884.docdoc 8f47cb493376d43a1a8f2ccadec7a4cade6df8e86bf5159d54781451519064c3Virustotal results 44.26%Heodo
2020-08-18Inf_2020_08_19.docdoc 942ccd6baa3b3eea249f01497d82b6835ddf27ab79c9db9561a3f473e05eceaaVirustotal results 43.33%Heodo
2020-08-18INF 2020_08_18.docdoc 0b917b8ca6c2c9e9db80029b56dd84f7749411b7e06dcb5beb78940c4d0d59ddVirustotal results 43.33%Heodo
2020-08-18DAT_YGJ0394.docdoc 94ace7e2d381dfd76ee7a14ca9dd506f68b294af71ba21068cf646c1442e9d96Virustotal results 43.33%Heodo
2020-08-18rep-362918.docdoc 8eff0446f444542435bf1ea66d34ac5b2339a87d7702ba744f403dc5ec5d4795Virustotal results 44.07%Heodo
2020-08-18FILE.docdoc 81a254ffe9cc5094cfa32cac704d5273a94a9f9f8af621676853247eb6c92be3Virustotal results 44.07%Heodo
2020-08-18Arc.docdoc 52386a3f4ed721abc491a22e4d08ba4497e8392249b04e5fbcdcff39502cb314n/aHeodo
2020-08-18Mes-3907.docdoc 830569cee9172bcad9f7c205210f393136c53f41606252a10e763c8e9c2064a2Virustotal results 38.33%Heodo
2020-08-18FILE-552.docdoc 0b363d06eef3483aa25d2de2db90bbc7f005cdff8f14bcbd6f44f29676696a5bVirustotal results 38.33%Heodo
2020-08-18LIST_2020_08_18_P8853.docdoc 818f55b9e395ed0a08beebd22e8e4404e570fe3f7b113c2b53cf13a36a8d1930Virustotal results 39.34%Heodo
2020-08-18dat 2020_08_18 B084253.docdoc c674ec5f3cdf350eb7768e985c94060f26903274d10b581bab0fc71c730f0179Virustotal results 36.67%Heodo
2020-08-18dat V010.docdoc 93114977eaae46aa265bdd2918d70cdbaf292177875098c8e3f52bb992f719a1Virustotal results 37.29%Heodo
2020-08-18Rep-20200818-K9382.docdoc 220f661d5186fcdd525b47c5a909197b80b076950ab2a2f94b6799328cbd1f19Virustotal results 35.59%Heodo
2020-08-18INF-2020_08_18-CH1044.docdoc c2ddfddccb101d4e986562ca370e4c29e0ec7f510f7a657f32d61ae37a173c8dVirustotal results 31.15%Heodo
2020-08-18doc_2020_08_18_928.docdoc 96c73835686797a5dbc5dbd37ef4a7291b69f848d7ca403c9ab404f4f7f650e7Virustotal results 28.33%Heodo
2020-08-18inf 2020_08_18 8455.docdoc 84e3d0512943c7f88ed646190a17521f13a3540c2574350e0abceeddd0c18dfeVirustotal results 23.73%Heodo
2020-08-18Rep-2020_08_18-559.docdoc a3d686e64806412716e762358904ec4b07f8d3ba5c22f42fd6463288f544658en/aHeodo
2020-08-18rep.docdoc 2205e547d23005dd90dfbdb24d868bab2f4d6cc70c025a1825c050812ab27f45Virustotal results 21.67%Heodo
2020-08-18inf-261139.docdoc 2d9c3ad3458a6371d8d940be9e5379d3334396576ac0a4cf794f13309056ce6fVirustotal results 21.67%Heodo
2020-08-18list-009644.docdoc 6f0f54737b574488c42223ae81bd83ea0da431f0732413951fe4572ca19e6442n/aHeodo
2020-08-18dat 20200818 TA151.docdoc 35b18dbdea7ae1b3d982973c26626ba8af054713d0479a8c1ad278abc7e8bcf0Virustotal results 21.67%Heodo
2020-08-18Rep-317.docdoc ef82ba7726590c175aa9483782be07ebf1c3ca56839c2a61cbfea1f8a8aae774n/aHeodo
2020-08-18Doc-20200818-281335.docdoc f9c427a4bfa737b6f93b8d1271eb7c351a78fa1296db93634de337be0479d319Virustotal results 21.67%Heodo
2020-08-18inf H196020.docdoc 9f1df99d205063984fcebb467c9a0f5e788e1fc90b2e9438d7837423c46faf0eVirustotal results 22.95%Heodo
2020-08-18Arc-20200818.docdoc b0ac5f239adc62a48ea0931e271da006133cbbb682b536ef44d0df5981aadafcn/aHeodo
2020-08-18ARC_2020_08_18.docdoc b1a5b0c45a385a514d7ee49f36e2df92b90949faf44927ad0a6540f39686a5f4Virustotal results 21.67%Heodo
2020-08-18file_20200818_B619351.docdoc a25626931bcfadb676c517df03d05fbce9773af0e65cadaaa029d2703b7ba584n/aHeodo
2020-08-18Rep-15482.docdoc 1ce7f46e76bf702335c5d17d2dbbfad847de0b0f46912fe0e2444c2cf43bc23fn/aHeodo