URLhaus Database

You are currently viewing the URLhaus database entry for http://zambeziexpedition.co.zw/wp-content/sites/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:444505
URL: http://zambeziexpedition.co.zw/wp-content/sites/
URL Status:Offline
Host: zambeziexpedition.co.zw
Date added:2020-08-26 16:25:09 UTC
Last online:2020-08-26 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-26 16:26:02 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:4 hours, 48 minutes Good (down since 2020-08-26 21:14:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-2692614377.docdoc 41627e3471672730007dc13d026ac234950ae1f71564721c77dd5aff29e9c51bVirustotal results 32.14%Heodo
2020-08-26INV_63843531.docdoc d6f8e60e80e4142bd6e6c2162f5b44596f03cf98b415d29a0099e3462bc60dc1n/aHeodo
2020-08-26BAL_12878090.docdoc 8d55499216baf8d4336c908f7cfe243e51a6da3542a26504de0c18c18febbfbbn/aHeodo
2020-08-26DOC_EI4737670447GG.docdoc 65d504b93571392cb6513b7fa5bed4bdd2a2ae7e3d7666e409f0b13e56f1e314Virustotal results 30.00%Heodo
2020-08-26FILE_AFS_080120_MFD_082620.docdoc adcff3f1b60e737879478f5ffe1450906166be8f4b197343ea2684bcb11d1f1bVirustotal results 30.51%Heodo
2020-08-26PA0910142272LP.docdoc d9d8d7e4e5f7fa56ad36e21ff3874101b96e601a79397a7aeff7918cd9d0ec80Virustotal results 28.81%Heodo
2020-08-26FILE_PO_08262020EX.docdoc 39fffa400541356137e91075849e49947cd4864baeeacbc328e6aa73f52ef4fcVirustotal results 33.33%Heodo
2020-08-26FGF_BR5950585867XN.docdoc de6eef8f559ed20487bd721dbd7d2d2c26871567abca7c8ed929e8a16a3be992n/aHeodo
2020-08-26REP_PO_08262020EX.docdoc 71a9af3c869b41333224d9d53eae47aba49f7c8512250f3286ef22680bf6ef9dn/aHeodo