URLhaus Database

You are currently viewing the URLhaus database entry for http://putting.nadgt.com/wp-includes/docs/duoz5q9nz/rippj82793389968nrrdhj14vwi7n/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:436204
URL: http://putting.nadgt.com/wp-includes/docs/duoz5q9nz/rippj82793389968nrrdhj14vwi7n/
URL Status:Offline
Host: putting.nadgt.com
Date added:2020-08-18 23:02:04 UTC
Last online:2020-08-21 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-18 23:02:26 UTC to abuse{at}godaddy[dot]com)
Takedown time:2 days, 18 hours, 49 minutes Poor (down since 2020-08-21 17:51:48 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-20BAL_FNKFTHXJ3MP.docdoc 6154589206b4a6394279b8053f63c1a89f87a7dd81ff376e2f502c63bd70d48fVirustotal results 30.51%Heodo
2020-08-20Y_PWX7LNU1N6YO.docdoc 172af56801cf4f253a30974aeeddb1910408d1417b4d8bffbefe887436c3b633Virustotal results 27.12%Heodo
2020-08-20BPDT_MV3882514488UN.docdoc 8dd88a3f7fe5c11e889ecb67746468f4330f31b6dfa803bde99ef3875379bebeVirustotal results 25.00%Heodo
2020-08-20BAL_LHV_080120_CSY_082020.docdoc 2c2e43bed567dfdcb8e47998142d228368293bfb77e444e994d7bca8e706bf8fVirustotal results 23.33%Heodo
2020-08-2096994367.docdoc 9428599d67838664594bdbbfb08c930c45ba32bdaa946f07066ad7bc58edfd58Virustotal results 23.73%Heodo
2020-08-20INV_VDX8Y47GBKFK9GY.docdoc 6e331c9aade826ba3e5c77a819bbcd3cea15de0fd225a9bb48937c18be6855eeVirustotal results 24.59%Heodo
2020-08-208546842396209382788533.docdoc 1c61a6fec7f540e75cf3ee83531b0da27e40c95f3aef4f8fc750c911d731c1can/aHeodo
2020-08-20EYQD_950401784206698.docdoc 2d76fe1bacf66d80f4a8dfd102f00c77dcf12834e0adad890869fe7a75d45c2aVirustotal results 23.73%Heodo
2020-08-20HL2844478364WC.docdoc c7c439379d92b2c27fdc7888bbd7314c44e73ee2a4c572f0ced25ef2a2e61a7eVirustotal results 23.33%Heodo
2020-08-2080414419.docdoc 7fb67aa831054759be82023e44384c4b66d597c530c373dce100d90456da55a4Virustotal results 23.73%Heodo
2020-08-208807333851930174527961.docdoc 29b52f890109db1441bb1fab0d062383405b49e076d6f8c04c40644a9cfda15fn/aHeodo
2020-08-20REP_PO_08202020EX.docdoc bce1869abc2ae5d94315f2ce3cf549d622a662a0ac4e9be2feea1498c51f2b16Virustotal results 21.05%Heodo
2020-08-20Y_XL9827305846WH.docdoc 667bb3ab13aa4efa45244b943c39bd6a1309d5c91b5656c73a5e8fe5350fcd7cVirustotal results 21.43%Heodo
2020-08-20BAL_LM0527873122IP.docdoc 093c4c10f1ad0e417b62968802b3cf0b3e4b43b59ff54f6c894a005b3de57b54n/aHeodo
2020-08-20FILE_83773345.docdoc 004df4af1179c95b943b776e868fe3f553dc136e2586a75fcbb13bf6c000f569Virustotal results 20.00%Heodo
2020-08-20FILE_73739470979399923418.docdoc 65bd1b927dcce32a7171cec9e1e26732660728495e44d5f85a73f898aa2186d6Virustotal results 20.34%Heodo
2020-08-20AA_CIC_080120_VDX_082020.docdoc c802eba2db804a04ab987a147c222f47fd3b4d1857357dee1b8654b785f0cb79Virustotal results 18.64%Heodo
2020-08-20BAL_PO_08202020EX.docdoc a847bd36f68cf30bca6fa9f0ef825fb887b0720913e7bacd22b25a2eccbcb5fbVirustotal results 20.00%Heodo
2020-08-20BAL_PO_08202020EX.docdoc ec51a74a97c0453353d519eb106d4b1a597bdbae9ae8a96b184e29088a238a72Virustotal results 20.00%Heodo
2020-08-20FILE_PO_08202020EX.docdoc 0efd74cc9a3e2043ccf2d1aed8696b82a65a9c96293fe1ca3c6958f41c818543n/aHeodo
2020-08-20R_PO_08202020EX.docdoc 6e647b837da2262825372b4fb5ccf78f780e467cdcc593c348153bd1619dbf86Virustotal results 44.26%Heodo
2020-08-20REP_RL9PEI70OVJ.docdoc 3adba5d0d3b9f8425b3f663d9a4e49ea5d5effd605916f354e932e1fae4486e4Virustotal results 41.67%Heodo
2020-08-20BAL_IX7150311532DH.docdoc b1a3a3654d76f8eeaf84cff925c62e4f349407617da64a11c91b03851f5cf209Virustotal results 40.68%Heodo
2020-08-20PO_08202020EX.docdoc 7db98c5dd25366b108f368bf466ec5c8150e52fd5a135c50f7ed9db682fcf3acVirustotal results 40.68%Heodo
2020-08-20REP_72055158.docdoc a184a094e50174dc9dc8c5c22ac016c02f3605fd19c733c49ad1ebf02c493f65Virustotal results 40.00%Heodo
2020-08-20DOC_PY1O7PFG.docdoc 6caf84cf6a6cadcdf4aa5f45a9f87b63c16cdf6486f53279c0ce48676edfc142Virustotal results 41.67%Heodo
2020-08-20REP_TL1067335839RW.docdoc c5efc23a6bc4da1660b4c6c3b4755581990f7c00591cfdce1350df652c03a3f6Virustotal results 40.68%Heodo
2020-08-20AA_PO_08202020EX.docdoc b26d580deb9ff666c0dc35f4cc7c9d88038fe0f3c8bf48c4aacd56dfc05c4cabVirustotal results 40.68%Heodo
2020-08-203868299760052694.docdoc 29524d934f54a27deecaedd3e58de8a4490eddc04ac913bcb37c3ca1354c5b06n/aHeodo
2020-08-20BAL_PO_08202020EX.docdoc 580ae2c3801f24f8be8cc24b136f1d795787ace030c75c837410f5d827ca02e5n/aHeodo
2020-08-20INV_RL1Q94QP1Z.docdoc eeb0a1417b5106cfb471ec4c6404b1acaeee3e4acfd04ae2748adee4ed69812dVirustotal results 37.29%Heodo
2020-08-20FILE_13761083.docdoc 275e276c98e61d33c2852f27d543c9cda4212aa16383e36b2e3651a28070a8fcn/aHeodo
2020-08-20REP_VUO_080120_LKT_082020.docdoc 60bb16533f938460519528657d8b785485622e3471330a87fa5894fed506eed8Virustotal results 38.98%Heodo
2020-08-20FILE_JW1193964731RS.docdoc d302615d23c61c639ad53db79f2e5e6e3aedb53e0404821c5c02064f7913910fVirustotal results 38.33%Heodo
2020-08-20INV_PO_08202020EX.docdoc b32f302c129728edd895136f299f0e68031f9554b42be4fd2dd35f80a9b2a750Virustotal results 38.98%Heodo
2020-08-20BAL_UF8958926643DA.docdoc be8b2b9dcb90fbaed4e7bc6186fd5dbad93c77fd80cee44717c88ac07641368an/aHeodo
2020-08-209083664473897240639.docdoc 96f7d13cfc1edad4f9381ae98cab2336d39557b2230d88583c92284d6616b4e5n/aHeodo
2020-08-20HT211YHU6.docdoc f49f483de9c2f5fc441b529eaa889631aa5a272206dfdca519993427403f65e9n/aHeodo
2020-08-19M_12902087.docdoc 5bbab5eced851e6bd35aa4ddd992a84f707bbd76ce0850920c5a5bd21378b61dVirustotal results 37.29%Heodo
2020-08-19PO_08202020EX.docdoc 03c177e560713d7bea35f5f09a80811e163ffd703f9df3f38610095666693630Virustotal results 31.67%Heodo
2020-08-19DOC_T92CRW2A.docdoc ee0c184cdb3791d36a47a1d945aab42379266c4cc4ea6cd88c316ace9deb8826Virustotal results 28.33%Heodo
2020-08-19SODBBL7.docdoc 038f9798da3df2c253620a2fd844e48c6d1a331e314d44196df45b0f9bedffdeVirustotal results 27.12%Heodo
2020-08-19FILE_34892817.docdoc d3cea7588b6e664da8ef52bfb856e6fdc6e0df460f961066491aed88f4e29a03Virustotal results 16.95%Heodo
2020-08-1944732875.docdoc 10087ace9c6e5ec4fb09fa039f6ce0c9029cfd40b4f8203f16898992b3f01a63Virustotal results 16.67%Heodo
2020-08-19YXDNWEY0WGSJ.docdoc 1a17af806d615019154f0985010aad3789bd90bdb40970f78cd0cda2bd722896Virustotal results 18.33%Heodo
2020-08-19T_VZG9J27I.docdoc 080538677c76d09277a58f1dc9be3e5df254a92d12fddc11326c1f896cd93a98Virustotal results 17.24%Heodo
2020-08-19N_5742856314539.docdoc 1d0d782d8396cb7c83be29d2f7baf7413db37d06555a498f8a89d075dbf163dfVirustotal results 15.25%Heodo
2020-08-19TO_PO_08192020EX.docdoc 7feab4f1f35adcc7433afdbf4448e5b79996fbe150dfe6e0f708a6c13ce86f7bVirustotal results 23.33%Heodo
2020-08-19INV_PO_08192020EX.docdoc 8be59997575735dc3845990047094781b5e69f074f5b6569e6e1dcea50f08693Virustotal results 23.33%Heodo
2020-08-19REP_7041988412682035035.docdoc a882484dd319c7363eab50da170eaf45d0be854d4208c86d3d9fa00621f2f9d9n/aHeodo
2020-08-19E_PO_08192020EX.docdoc 39f8850f02b807a843447f461d3436d67191f0f08709c03d32958988964b5e9fVirustotal results 23.33%Heodo
2020-08-19975535501783727.docdoc d6d6d04fedae2537ae4cacad5ce33a5b5d5964d22f97c381def52cac01666902Virustotal results 22.03%Heodo
2020-08-19I_NSG_080120_LDX_081920.docdoc b4319c87f6557ca9768ff78abfa16c323c6ed7de149f3f741c390bfd70cfb22bVirustotal results 23.33%Heodo
2020-08-19REP_200251098729216295.docdoc d1b8e4f438ccd7843bcc455b861f4c9233bcd76112c055b1ac51a72937d7455eVirustotal results 23.73%Heodo
2020-08-19INV_PO_08192020EX.docdoc ed6f742fc6e103f092e9fd9301bf4ec786e88abca3ec1593661c4083f398616dn/aHeodo
2020-08-19DOC_54266044.docdoc 76b5b8d527359fb1183fc7e4e4eb0dc5369aa0126843b1ec8d04f73c658e0b15n/aHeodo
2020-08-1968004446494214.docdoc f2d2558321c1b85c41505c190a6b4f309524c7eb7282f7a10ca8f832f539e42dn/aHeodo
2020-08-1940907274652569690605460.docdoc 40fa8d283d305ffcf422b0f327dc4da32e62cbf82da81841240e3e2c1bd53881Virustotal results 16.95%Heodo
2020-08-19DOC_E4U4DK31.docdoc a47b7f6d9af6602b2dac196cb0faf5414e8a3d7f94604f937e2e66f19fd17b61n/aHeodo
2020-08-19BAL_PO_08192020EX.docdoc 40430817aac77bdfe251ec9275bd54f3f38e091508e5381af53292469132db78n/aHeodo
2020-08-19FILE_50337365768.docdoc 3ae29b3f7f29f20ad0073a44572a88b7aafe19da62e0a8d8d8a04213945f0e80Virustotal results 16.39%Heodo
2020-08-1967842317.docdoc dffce4f3af033dddc15747bb720fb0bd4358e29dffa6c674242ce4350b44af48n/aHeodo
2020-08-19AJ5149604661HQ.docdoc bc5f7faf4b9266301e7e8bd3f6ad494c0b34e984278b3a484c6c46d845d9a28fVirustotal results 16.67%Heodo
2020-08-19INV_51152032871217.docdoc ee7fba4103591bdb24625094a6325f7d1bc7371f7e5a4c119cdcfe56a88ec967n/aHeodo
2020-08-19Z_PO_08192020EX.docdoc 1b110485a730140a1499cfb4e0313b280748117cd1f41699438e6e103af73ea7n/aHeodo
2020-08-19DOC_UED_080120_WBU_081920.docdoc 031a67c034a76b31c3fa139f4bbe570bc3a74c61c3b901164fb60733db2db9a1n/aHeodo
2020-08-19PO_08192020EX.docdoc c6c4ba6bead64d98f91dca8dbc28c67ee9be3a3c5b9de2e50dd98c7c11349cb0n/aHeodo
2020-08-19IKK_080120_MXT_081920.docdoc 66998f1cd1f1a729d50a2c747f4005519af186667f7d7e9b84a3e7567508976bn/aHeodo
2020-08-19OPA_MDB_080120_YFC_081920.docdoc a7f7da45bf54c26cc2fce4e3c3a639209f7701cad6339b69b3980224423d2d7bn/aHeodo
2020-08-19FILE_24866642.docdoc ddc5000139723887bfc62c11f989af0e0fdf375b0ba4557f5abc5805e1228203Virustotal results 16.95%Heodo
2020-08-19TYG_UTB_080120_JHT_081920.docdoc 74c71e841348fffe1f1a1bddbd7db99dcefdb48c019b49fd480dd8975a482cf3n/aHeodo
2020-08-19J_38106869.docdoc 5ee8314065d14a3a3a5b81dcc72ecdcf770103b6d6fbd433eb4a6f41a9dfed1dVirustotal results 17.86%Heodo
2020-08-19UC9184988967CN.docdoc 6c565f07002b82c287ed1f4c316b8ed204766e4fbd223250f1c2cc1f110b7bdbn/aHeodo
2020-08-19PO_08192020EX.docdoc 6a5ecf7dfa844149f405476219f41fc9b8de66e61a0c91285858c8ed994d8d65n/aHeodo
2020-08-19FILE_DS0984778993BF.docdoc a89f4a0e07aed6f0db5226aa6c45eca8e232db1686eaaf99f163acf0eb849c37n/aHeodo
2020-08-19RC2477793833ZQ.docdoc 05897a743fd2fe3d791b9560b3a3a0d5fa3f4ca8c2dc6f1a490aaf4a7f4f5636Virustotal results 18.33%Heodo
2020-08-19INV_PO_08192020EX.docdoc 409122eb219c5db47542b67fd19278d68e792c7b5a9d4d221a3ba140e0bfd947n/aHeodo
2020-08-19QUH_080120_QSB_081920.docdoc 8f9d37fa58ce7df58a90fc82d80da4ff63b634a0dc855729e1c18e7bd66f7872Virustotal results 20.00%Heodo
2020-08-19ZD_CM1343818921QQ.docdoc b6966069b269be3564ad98f838ff90182c10803bf019c0e298eb6ae910b1af31n/aHeodo
2020-08-19DNK_PO_08192020EX.docdoc cbcffeaf57dc69c22c4c1f6eaa6b2102c764aa8b0080b466aa95969f3c0283e1Virustotal results 18.64%Heodo
2020-08-19INV_01481374.docdoc 14c8425a5923efb623ff5070d126d05348baaca0a46096c569a40d6afe8e0244Virustotal results 45.90%Heodo
2020-08-190857393594060464582.docdoc a1b39bb8e04288328a8785f48219abb0b12a2a6330e2192973405a2bf6682644Virustotal results 46.67%Heodo
2020-08-19VZ_GQP_080120_VCN_081920.docdoc 9be9c52a2ed346fcab910d6e22a065f7f1ddbb851e589a1c18e4b0577afe0e5bVirustotal results 45.76%Heodo
2020-08-19FILE_4630960639104807076.docdoc 6b59c1ac41886b7b520cb46b401444b04190a20523acdfa15e3c77701c51660dVirustotal results 45.76%Heodo
2020-08-19BAL_23774040898140503892713.docdoc 882600fee7e0ea4b30699f07b2c5237c9cb80b2ed0bdd471d055f7b450565272Virustotal results 46.67%Heodo
2020-08-19REP_FC1IYH0PE0N0.docdoc 1e5fdb496c17dd55dfc3e32231d286de4334d59bcc313b939202c4f8ae2abecaVirustotal results 46.67%Heodo
2020-08-1980245045.docdoc 6ad811a3072f008affd2450407d0a37d9d45166d41c8fedc1d1e0ae2b61c77e9Virustotal results 46.67%Heodo
2020-08-19REP_QG4815729011WL.docdoc 2efc148d28ccc7f78e2f598072e171cb43bd6703a0be1abc612c36f1420ec1d0Virustotal results 46.55%Heodo
2020-08-19REP_H1LURM3TVAZKKYM.docdoc 8a80d1e540897315edc7acd34b69bf1cd00ea85dbef7186b3751c5a8337f88ccVirustotal results 45.76%Heodo
2020-08-19DOC_EKJ6AUCKFPTF3.docdoc 77da6b15c6aba0dd430e50f7372588fa39691b2cdd9f90f3d71a36445b59f30cVirustotal results 44.07%Heodo
2020-08-19DOC_RDB_080120_FXC_081920.docdoc 5b39d05fd1a75574a20fce09addb52c62b766bb08f8812b8d692936918ba780dVirustotal results 46.67%Heodo
2020-08-19INV_98074190.docdoc 13ecb0280410d83e2d67d9f049fe85af186a0c9959c316c90f3ec327a9ab244dVirustotal results 46.67%Heodo
2020-08-19AIE_17367778.docdoc 28e4449bf2803e0d685599cbfbd23a03ac3f9a69b25f6a2669de4ce252de4073Virustotal results 48.21%Heodo
2020-08-19INV_4669901544416113741.docdoc 189ef09b3af0c487e840219d1b144a8022ff6940de058c276ecd313ad2771c0aVirustotal results 46.67%Heodo
2020-08-19INV_0080766957282702665658.docdoc 94fe6d0cc1723a60d8965c606027ad0283a60c1f4677cf33c8cb85fd202bbc60Virustotal results 47.46%Heodo
2020-08-19FILE_PO_08192020EX.docdoc bb7514867d581af837a3d30b735e4c0e010220c3b2bee800c0217cb4e7275e3cVirustotal results 46.67%Heodo
2020-08-18INV_66021047.docdoc 6e7bc5b464486368fc64b81be80628536390d77832adc42ae658a9ec6642f2b4Virustotal results 45.90%Heodo
2020-08-18JR_VRL_080120_UEU_081920.docdoc 6c9d3d58e28a1e8bbf0d1c77a0bbb7f6c71a55ac204041c9f1f8e372b19df91eVirustotal results 45.76%Heodo
2020-08-18REP_4613343973.docdoc 21148ddb6792bcacd79da17d2376805f315ca8ef36b78057556dca5cb8eb9ec4Virustotal results 45.00%Heodo