URLhaus Database

You are currently viewing the URLhaus database entry for http://jzwebhosting.com/wp-includes/http:/lm/P5imxZFOWK/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453667
URL: http://jzwebhosting.com/wp-includes/http:/lm/P5imxZFOWK/
URL Status:Offline
Host: jzwebhosting.com
Date added:2020-09-05 01:47:34 UTC
Last online:2020-11-05 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-05 01:48:03 UTC to abuse{at}liquidweb[dot]com,ipadmin{at}liquidweb[dot]com)
Takedown time:2 months, 1 days, 17 hours, 33 minutes Bad (down since 2020-11-05 19:21:57 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05mes 8985.docdoc 4c3f9a91ab8bd67a7de8b61f6d5e49c34a0c3ded123f63205f02d17ff570c204Virustotal results 30.00%Heodo
2020-09-05Doc_2020_09_05_GYB9067.docdoc 8abd1fd956a522b05535b6b9ddb53a6c4353e20235979a9ed05679ac4f2a95can/aHeodo
2020-09-05List-XU66102.docdoc e598cf9a18d4db4fa8174ec8f921eb470f8b844063cec6fa35185f7f8f1d2b4bVirustotal results 30.00%Heodo
2020-09-051172852_2020_09_05_59163.docdoc 99b355a60a9590d4a7695c3e6dbd12bcc643041c7f98e39ebb7bd29d4300b770Virustotal results 27.87%Heodo
2020-09-05Attachment 61460.docdoc 36db57afc7d4faa57d7bbd559db7ca4ae2bd483caacaa9fba1a3cc6839b240a3n/aHeodo
2020-09-05Doc 20200905 096557.docdoc e89ae83996380754135f2a758f5a9506a7a44eb610c70b28f909b2f0b73ce548Virustotal results 30.51%Heodo
2020-09-05Mes-2020_09_05-UJ352918.docdoc 4160aae4b7d4ee73a7137bbd2d8c5cad6f215282af86bec49526c1b15db1c50eVirustotal results 31.03%Heodo
2020-09-0542210KF_20200905_NEA25932.docdoc 21f96b0a4c469ce65b33f8065a32ea2bd729830598c2d0af1e670ca4f84a1ed2n/aHeodo
2020-09-05UNTITLED 636041.docdoc 523e87e4ec97f2222463589b553503e6fd1b248fb7856dc28bb5a67f05709a6an/aHeodo
2020-09-0535149287 2020_09_05 727.docdoc c1658fd6974ace7a621b0e46c9d3f1bbb8ad7d3ddeb3032082937f3133c1c063Virustotal results 30.00%Heodo
2020-09-05INF-2020_09_05-116346.docdoc ca1ecf3a84713ebe3b95b15bb7e7d4fe779daa81b1a2879feb79423222472ec8n/aHeodo
2020-09-05dat_20200905_I147.docdoc dd845235b8dc3a025eea6b0904c7e90b610afc290c4b55a7921062ba9f33cdden/aHeodo
2020-09-05Rep_2020_09_05_692.docdoc 62cc3eedb06b43f8a3e286b0a9f04cbf36fe240a532b217d91950ea20fa0ba9cVirustotal results 28.33%Heodo
2020-09-05DAT_IJL821958.docdoc a6861aa553541ef958ad8dbfff87e748c920813dd0b745d69787b2818357158aVirustotal results 30.00%Heodo
2020-09-05Arc 2020_09_05 K43214.docdoc 5b82741c8587a1a90e3ce044387a541c69a916330391030a4daa50aa1db6a445Virustotal results 28.81%Heodo
2020-09-05Attachments AP85640.docdoc 4845d731ee51494da878e4a1e0c22ad0e6e1885aebe593bb6b3adf115f9c84d3Virustotal results 28.81%Heodo
2020-09-05Doc_2020_09_05.docdoc b1d37441a65187f53492dcd30fe0d3fafb9de343694c7ac79d3ce5434cec9350Virustotal results 28.33%Heodo
2020-09-05Untitled 20200905.docdoc 7b33fe4f09c06251aba09bbc5407ae8fd899bae0a40d3e7d55f3806a8b6a74a6Virustotal results 29.31%Heodo
2020-09-05WBI41965_H23793.docdoc 0ca5df179f725a9c12ba1385711972c7e55bc02359435e954db6e65f1e2036fdVirustotal results 27.87%Heodo
2020-09-05VM677 20200905.docdoc dcb081f33d098bd8befd0776a185a13823b7a4f29087f39cfb3b1cc9693722f9Virustotal results 26.67%Heodo
2020-09-05File_2020_09_05.docdoc 2ddd8ba7251afbeee6c41576c377265c1a2a9f5370cd66683c24db0c89a0062dVirustotal results 26.32%Heodo
2020-09-05Untitled_2020_09_05_ACS45092.docdoc c66ac5fc632592fd547d29b2ea0d58d6fd421effca802489611fb9a43a656a45n/aHeodo
2020-09-05mes_20200905_418170.docdoc 0917f0cbca78c19301ba65aa799b29dcf90ee3666fc9f8b83f00c5ea34a0eba6Virustotal results 26.67%Heodo
2020-09-05MES 20200905 YWO85666.docdoc a4455d8697ed542eb675343e5b8806faa6b522c16a69fa423acaef8577319b47Virustotal results 25.86%Heodo
2020-09-05DAT 2020_09_05 ZV26251.docdoc 8d7ac57ba3c19f60ff3e7d2e5bccfb5a790b9d05c84fd5237e4235be91fde6a9n/aHeodo
2020-09-0513735239-20200905-6687.docdoc 83d89a6f47106112698cbbe3f9f407abbefeaa5304896f38e7bff037db8cf901Virustotal results 25.42%Heodo
2020-09-05UNTITLED-F858.docdoc d933cd9a8fdaa58bf021074d4dcbca7f3fed26971db346a66f8b2435afb70b50Virustotal results 21.67%Heodo
2020-09-05INF-20200905.docdoc 92bc3c4ef5b89ad046cb64e9cd6ee2eb8d1053b1b07620f1a0aa6503912b05efVirustotal results 21.67%Heodo
2020-09-0563093575_2020_09_05_4097295.docdoc 349685f93e08324717dd09b79130205af7e095872a599905ac58c453d5a4f25eVirustotal results 22.41%Heodo
2020-09-05Attachments_20200905.docdoc 072bf6d9f33086a40282befdb7fbd11fc1015d54c2cf4935ba1dcce2934cbd5eVirustotal results 22.03%Heodo