URLhaus Database

You are currently viewing the URLhaus database entry for http://www.premiumztore.com/wp-admin/balance/bppjho1k8/g4xoag12355157232ynx19bvl78hqmz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:446012
URL: http://www.premiumztore.com/wp-admin/balance/bppjho1k8/g4xoag12355157232ynx19bvl78hqmz/
URL Status:Offline
Host: www.premiumztore.com
Date added:2020-08-28 12:29:34 UTC
Last online:2020-08-29 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-28 12:30:05 UTC to abuse{at}dreamhost[dot]com)
Takedown time:15 hours, 32 minutes Good (down since 2020-08-29 04:02:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29FILE_584052257492.docdoc aada778a6ee21579478c37d9f766a74e2abfae033441a997ea715036316c9eefVirustotal results 34.48%Heodo
2020-08-29PO_08292020EX.docdoc db5d1df258f52d33f22c630cbe8f27f55e548e910d8b851365ecc612bab09177Virustotal results 35.59%Heodo
2020-08-29SIFA_USA0SVI5.docdoc 651697a7ad4735c29617111afdad056545ae1047760f46b4266c80cbd4b784aaVirustotal results 33.90%Heodo
2020-08-29REP_C9HN7PCFY.docdoc 01371d2802721d16a5f83938f491a4b8896161541b7f5cff1fd68a20f93f29a6Virustotal results 33.90%Heodo
2020-08-29REP_RXZ_080120_QNO_082920.docdoc 157051ab74fe0a9998973c53b29676ad387279383f482890cf7e5cf173b66129Virustotal results 30.51%Heodo
2020-08-29DOC_FS4460006737LQ.docdoc 1a0b2d954e4b0e1d3b217d9240cd26ab870841bb7b6fe7937de95e1e714f8c03n/aHeodo
2020-08-29REP_56504730819085400.docdoc db1d3d2b15cc11493eabf3ae9ddf03d01861c1699b81a760eef10f48a9c4a2f0Virustotal results 29.31%Heodo
2020-08-29V_HCO_080120_XUV_082920.docdoc 2b8c2b9a9c7d844ed52ed9144f940f325bccce6ad4c74c524b4470ee94a583ffVirustotal results 30.51%Heodo
2020-08-28CBNH_CHC_080120_PMZ_082920.docdoc 933af4898a9ce638e04dbcf02e075e9f7eecf02ab22cebc4488517cd415e1c71Virustotal results 27.59%Heodo
2020-08-28BAF_GI9524512697UB.docdoc f5d308b615528818047b9010074fd219d6248ce43aff167bcc0bbb56a6d45504Virustotal results 28.81%Heodo
2020-08-28O_JEJ_080120_MJV_082920.docdoc aef46f7e71936aca8da4fff081f587fe6293f09dac7b27fc70f372088eff86f5n/aHeodo
2020-08-28F_UMO_080120_MGO_082920.docdoc 167504fd75c887fa1e091030f6f8899e57917c86c6e455c8f7fe99b378bb5f71Virustotal results 26.32%Heodo
2020-08-28INV_TTL_080120_TYG_082920.docdoc 3e8f3a7d0d0ce8e8ab7b5363b9c12f3219bd75974ac09118344ccc9c2b727727Virustotal results 32.20%Heodo
2020-08-28P_AN4803614574JD.docdoc e5cbe16ff82c0a8778906a889f99a6cc41def9921e1944cf107eab74e277559bVirustotal results 28.81%Heodo
2020-08-28U_87632933.docdoc 3a81d48dd27d252c1d0dbbbe11a02671bc68c7b1970611a1bde4bcf3beaea556Virustotal results 29.31%Heodo
2020-08-28REP_QSOT0ORG2NNI1ZU.docdoc fb2ffb3aa6e2a0f7a272c7bae05e700460c73f88daef8b34d0ae4332116d3ee2Virustotal results 30.00%Heodo
2020-08-28PO_08282020EX.docdoc 5332fb0050d2e914d7bad1f7ee68a30aec6cf4afb47db5fbad43cdc3cb500209Virustotal results 28.57%Heodo
2020-08-28FILE_PO_08282020EX.docdoc e189a7569815651cf514dcabf42ee4991cc49f7653402684fbf55db8353f7908Virustotal results 29.31%Heodo
2020-08-28FILE_PO_08282020EX.docdoc c795b19f871d0e1ac944400c6a910641454ffd71ec1c676185e9444399997d33Virustotal results 27.12% Heodo
2020-08-28BAL_18104563.docdoc 1803fa537b36e16132a5b47171a58d1ca83f5254575e790017e36517709a1a01Virustotal results 25.86%Heodo
2020-08-28U_39456971.docdoc ebbbf1104be5c5f4f000285e72aa802cdac327750e71a35a101e4ecac224d1d2Virustotal results 28.07%Heodo
2020-08-28REP_10MK9TNR8HIVWUX.docdoc 74fd5e51184bd860adf8fa2da123bfc7876d06d7ac5007da67eb4a56f54640a8n/aHeodo
2020-08-28WND_080120_RCH_082820.docdoc 1324cdee7c8703547e61f73304abbfa0e134df0a5ffd1d9cda593e4a1b9110cdn/aHeodo
2020-08-28WK8231087601WG.docdoc f49d9546a53d5b00619acd8dd32985c7475d25628ab997d7f6160250372fb2dfn/aHeodo
2020-08-28REP_PO_08282020EX.docdoc d1511a600b9d22d7d714df89c667ab913ccfe116fad6aa3759320416e83f6e23Virustotal results 28.81%Heodo
2020-08-28O_LPEDU1GVO.docdoc 395577d95250941c35985848770af43890c58b468224a59a4fc203ab5c75c048n/aHeodo