URLhaus Database

You are currently viewing the URLhaus database entry for http://mashhadani.com/z/a.Doc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:5090
URL: http://mashhadani.com/z/a.Doc
URL Status:Offline
Host: mashhadani.com
Date added:2018-04-13 12:16:06 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: oppimaniac
Abuse complaint sent (?):No
Tags:doc downloader

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-04-18n/artf 070dbf63b47a3b467c8f0e35003c2eeb09528557b8cb4ed176cbad9aa8ddc1baVirustotal results 50.00% 
2018-04-17n/artf 93a12d8b3e01cfbfe66dbda256dad388db96697d458f5c1601eb05f9bd9f61aaVirustotal results 46.67% 
2018-04-17n/artf 93a12d8b3e01cfbfe66dbda256dad388db96697d458f5c1601eb05f9bd9f61aaVirustotal results 46.67% 
2018-04-16n/artf 25c8e5f21a10421d564a2cf0cff8cfca3b352c1e89d4ad00337d4bfa88fecf66Virustotal results 48.33% 
2018-04-14n/artf a0736bed4bf19ab191cac9debe8d0c1e41ac00398679411a707c8e3cfa02d818n/a 
2018-04-13n/artf 721535fb02b690e2e535f0e15585a2e4a50964ace086a64452b5f4a3b27459f6n/a