URLhaus Database

You are currently viewing the URLhaus database entry for https://agaazclasses.com/mail.agaazclasses.com/attachments/glsjiip/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:535738
URL: https://agaazclasses.com/mail.agaazclasses.com/attachments/glsjiip/
URL Status:Offline
Host: agaazclasses.com
Date added:2020-09-16 18:39:06 UTC
Last online:2020-09-16 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-16 18:40:09 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 52 minutes Good (down since 2020-09-16 21:32:44 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-16L_HLY_090120_QOU_091720.docdoc 2d28945e5e6a8cb9f9e82d32bbff50d953e72e8f55c46e910c596d92bf646963Virustotal results 26.67%Heodo
2020-09-16DOC_RYG_090120_YSH_091720.docdoc d30169f108ec72fbaf16bb8726e798602988e1c42a7b3020b0ef0ad0572f9625Virustotal results 25.42%Heodo
2020-09-16SDAZRHI7.docdoc 1ecaceaeb20649c823b3a63accf639925ba8e4c350b2509496c04dbd622d5d4en/a Heodo
2020-09-16MI_JY1580937306ST.docdoc f656f7fc2ac175767aea79393803f493b18211403a390c2daf9c5dae720e26e3n/aHeodo
2020-09-16674A0AUWRX16EZX.docdoc b88f5009f8b75ec0a35f549fa777d05a819b0ca478eedb65a7b0a9fd01d51e30n/a Heodo
2020-09-16PO_09162020EX.docdoc dfa214a6c649b4cf4acd5b30977e16134b4357e994a10a0d1f1147a53a9bf383Virustotal results 25.86% Heodo
2020-09-165W617A1H2P.docdoc 7ad1bb86cc5ab4b2563548f2fc53faf9ed64e5216c895c9a425aea815a45b6b4Virustotal results 40.68% Heodo
2020-09-16DOC_HZ7735819317IG.docdoc d7f12b14c351620ca64769a126560507c4746cc966510d04d0fa882e521128c4n/a Heodo
2020-09-16Q_PKQ_090120_KSG_091620.docdoc d4d482bd99e2f75b977c3fe22ee3df44c1e3758bd61f0636d31c1e35c2d38be6n/a Heodo
2020-09-16BAL_JSS6ZK8XGV77M8.docdoc 95af0a10239920178927ec407c28ad601db31d71b0a4a64091f1271a6b58d912Virustotal results 38.98% Heodo