URLhaus Database

You are currently viewing the URLhaus database entry for http://critarion.ch/wp-includes/paclm/5emxh2d9d8qf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:446380
URL: http://critarion.ch/wp-includes/paclm/5emxh2d9d8qf/
URL Status:Offline
Host: critarion.ch
Date added:2020-08-29 00:26:21 UTC
Last online:2020-08-29 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-29 00:28:02 UTC to abuse{at}internet-group[dot]net)
Takedown time:15 hours, 9 minutes Good (down since 2020-08-29 15:37:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29FILE_GZUZS1N6SNG9HOJZ.docdoc 88d30253d2c0c540f3b85f677f0ce96cfa3274e1f45e46248e30388ff7462d79Virustotal results 47.46%Heodo
2020-08-29VTW_557394548854668933118.docdoc 7bb6a59e90701bb2af8a195fe877681d0446710c6001ce3b05e2e87ac4860d37n/aHeodo
2020-08-29Z_XVM_080120_IHE_082920.docdoc 53e903bc510d95d7ee4b69cf0859a845875fd6d4b2b671589b10afa1ca9d3065Virustotal results 37.29%Heodo
2020-08-29DOC_QO0227116994UB.docdoc 0833f23911507c602cb4ee77cc044f2e3e9076b317e2657369d5a9abf133cd71Virustotal results 49.15%Heodo
2020-08-29K_QCZ_080120_RDQ_082920.docdoc 1abfb23d0ef450db1e33f441e234e648df678ba7b2bf48ec1a2fe1ea9d657b16Virustotal results 49.12%Heodo
2020-08-297CBQ83GH.docdoc 908ad291f015a3faf89ab8e32e19af7ba776b38c685af22aae217f7165421dabVirustotal results 45.61%Heodo
2020-08-2919538698.docdoc f209ab8d6f3245e310df1b4d869bc6aa15a8fbff5ae8977bae8cf3eb7151eb88Virustotal results 47.46%Heodo
2020-08-29REP_IQI25FRSGF0Z711J.docdoc 476a07be55d2f9cb6bef5120000e2db89698b8d1fdb678c4aafb3569f02434d3Virustotal results 50.85%Heodo
2020-08-29DOC_174405311.docdoc ca7ffa1708bb416ae9e386f1a02b2d038f3e57bcfd56d68c0759eb10494aa5a8Virustotal results 36.21%Heodo
2020-08-297959867971180790.docdoc 9cced472b4bf2aee0566e840d931ec5f646763f0474ae8f11a5986bc15caf86dVirustotal results 33.90%Heodo
2020-08-29DOC_55123314.docdoc 13df7d0cf9c4f67e22eb093ff92b70f61fe8e5c61d1afb6c933fee76f2525aben/aHeodo
2020-08-29SOD_080120_YSE_082920.docdoc e6a9504687e323b407f75b7da6fac5fd2d27fcc79adf2bd95d66450b053f8f69n/aHeodo
2020-08-29DOC_30983349.docdoc de44fe670b71e48b1843105a2dfaae7ca11a5097201a2f6180ac58fa8041e37bn/aHeodo
2020-08-29FI1238627410TZ.docdoc 484063f42105842edd452a0e315775c1eaa00baf150117c6349f43f9a1a4b1bcn/aHeodo
2020-08-29Z_AR3977403049IF.docdoc 08a84bd28c3b7aed1f0c0dd3cf53c71afc707b41aceb34f8694e4a8f740d3f27n/aHeodo
2020-08-29PO_08292020EX.docdoc c6b6b43e64de8dc117501dc26b4afbba6fac8241a1253e5058a91fea0e11bcb4Virustotal results 43.10%Heodo
2020-08-2999275262.docdoc dd74db1005ce523b3ca1c828581efff59a07187ca1556d43437f51ff38f6396en/aHeodo
2020-08-2912133477.docdoc 244d9b70116c5920925ca6dd26e1b162e49daa93c561e5ae6d9d8ed195945478Virustotal results 41.67%Heodo
2020-08-29INV_NEXKCXG9YH.docdoc f052afc3e5ab6e8e177fa3db669970e08c7f54226c4a75fdf5f44df88b521a3dVirustotal results 27.59%Heodo
2020-08-29DOC_GWS_080120_XQV_082920.docdoc aada778a6ee21579478c37d9f766a74e2abfae033441a997ea715036316c9eefn/aHeodo
2020-08-29INV_45182887206.docdoc db5d1df258f52d33f22c630cbe8f27f55e548e910d8b851365ecc612bab09177Virustotal results 35.59%Heodo
2020-08-29PO_08292020EX.docdoc 651697a7ad4735c29617111afdad056545ae1047760f46b4266c80cbd4b784aan/aHeodo
2020-08-29P_11652263305007915316.docdoc 01371d2802721d16a5f83938f491a4b8896161541b7f5cff1fd68a20f93f29a6Virustotal results 33.90%Heodo
2020-08-29REP_SPA_080120_WOQ_082920.docdoc 157051ab74fe0a9998973c53b29676ad387279383f482890cf7e5cf173b66129Virustotal results 30.51%Heodo
2020-08-29Q_42541226.docdoc 1a0b2d954e4b0e1d3b217d9240cd26ab870841bb7b6fe7937de95e1e714f8c03n/aHeodo
2020-08-29RQ2887311352WZ.docdoc 7a4812e295a6a335b88235a8b1c270e27d12dc6ea227c00abc5719618f5f26fcn/aHeodo