URLhaus Database

You are currently viewing the URLhaus database entry for http://alfapress.com/form/http://browse/mt5wzrldAEQ8GjkYxO/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453295
URL: http://alfapress.com/form/http://browse/mt5wzrldAEQ8GjkYxO/
URL Status:Offline
Host: alfapress.com
Date added:2020-09-04 13:00:08 UTC
Last online:2020-09-09 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 13:02:02 UTC to abuse{at}lacnic[dot]net)
Takedown time:5 days, 0 hours, 25 minutes Bad (down since 2020-09-09 13:27:23 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04rep_2272.docdoc b246ae5854fc909f2e54163de7a8e78ef5de5a8648ec2768c6533c0ad65a15d5Virustotal results 26.32%Heodo
2020-09-04mes 20200904 7355564.docdoc 60417a3fac59e91bb0031c7e6fc97a808021296c159f11631bc3ac3e34ec5603n/aHeodo
2020-09-04DAT_20200904_QKO62488.docdoc 20f0a0ba4cd0dac615e918dd489d36a9dbe9da8eccd28074379ccb9297f44202Virustotal results 30.00%Heodo
2020-09-04Arc 2020_09_04.docdoc edbc22e742e12b2af45a775673812f2c751b4f9071a83b9565d3d547fa380655Virustotal results 30.00%Heodo
2020-09-047343476_2020_09_04_93680.docdoc 0568526f45b6dc177cf7e11a8bf286cdd2b253a794da1153795aeec136ba3313n/aHeodo
2020-09-04UNTITLED 2020_09_04 3473.docdoc ba82dfa2da1757e5cb6ed6f9bb2d2c820d055dbab664b798475fd4a94d8476b9n/aHeodo
2020-09-04LIST_20200904.docdoc 7160ce21f102d1b919bee53947094d83fd11055b2eadb90b11d5923498d504c3Virustotal results 29.31%Heodo
2020-09-04UNTITLED-2020_09_04-903.docdoc cba83b613d73f634da924685c3cfdd701edddbc80bd28399548cbdee1e5f4df1Virustotal results 26.67%Heodo
2020-09-04Mes EP744.docdoc 4f1efb479047eb160b579acb41f5f020b5c98546b837d8f74862d98ffef4840cVirustotal results 25.00%Heodo
2020-09-04rep_20200904_55348.docdoc 22541ac301b5c8fdf15f74cc06df0c5a237bfe5593f910699acdaa3ae869edd9Virustotal results 23.73%Heodo
2020-09-04Attachments 2020_09_04 HN81112.docdoc 92292a49939cb6ff5b8d8da77b4c5a898f4d833bbf5ec9fc2ec997e254c91e35n/aHeodo