URLhaus Database

You are currently viewing the URLhaus database entry for http://propertywatch.ng/alfacgiapi/https:/Zinu7D92Vmlk9vgkvXPO/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:452675
URL: http://propertywatch.ng/alfacgiapi/https:/Zinu7D92Vmlk9vgkvXPO/
URL Status:Offline
Host: propertywatch.ng
Date added:2020-09-03 18:26:08 UTC
Last online:2020-09-03 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-03 18:28:05 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 25 minutes Good (down since 2020-09-03 20:53:06 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-03Attachments.docdoc 2bb99d9824b62fad58399309008db0c35224a435f3128a9f1104bae218fff192Virustotal results 28.81%Heodo
2020-09-03Doc-20200903.docdoc 54e914ada679af6812636e98ea035a024075eb6c2d3c5691d7ecb4bc6912e3b9Virustotal results 27.87% Heodo
2020-09-03File 2020_09_03 E607454.docdoc 2a9b356e211b6fc43b720fc28d8c9e2845466e9c79163ddb6b75ba3f9851b5adn/aHeodo
2020-09-03121_2020_09_03.docdoc 45dfa0acd3e383703d19e0c80284cce37c8de2fa9e193ce08e94e49a97d530afn/aHeodo
2020-09-03List_8137488.docdoc 8271c25e365343d937c375bcf822595d5cc823433d3d01b5a24874d1bcd89f9fVirustotal results 23.73%Heodo
2020-09-03Mes-20200903-VI689787.docdoc 88c16f598ab3e2ae31833ecde0a55057c723a25101a16540d55fe86ea861fe2dVirustotal results 23.33%Heodo
2020-09-0300243YKO 20200903 855.docdoc bc4ee7e49e05ab462e199c1a2635de8de23b9ca32d8c7634cc4902f425967e22Virustotal results 23.33%Heodo
2020-09-03list-2020_09_03-4406.docdoc 0e1b345a2a69f1e43b44f5d5424f1148b51a253d6f62da579146e9d698a392f3Virustotal results 23.33%Heodo
2020-09-03206887-CB962.docdoc 344e99de41cc160db6473b5ce912cfe060e040f041a213b9f9f65b72e9d62f1fn/aHeodo
2020-09-03Mes 94587.docdoc e6c4accc4dc0b7466fe7c7fb8bde85ef87a0604f53bdf089c2def419214f14faVirustotal results 22.03%Heodo
2020-09-03File XFV9914.docdoc 7542089a9b48b8812b9b4746ac6fff006e18134f861730e1c85c4cfadcebd7d5n/aHeodo