URLhaus Database

You are currently viewing the URLhaus database entry for https://maxis-wp.sunagolearn.com/wp-content/0LGKWRWL5APU/sg3g70097394229863uzcc0f8z76vwyru/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:538636
URL: https://maxis-wp.sunagolearn.com/wp-content/0LGKWRWL5APU/sg3g70097394229863uzcc0f8z76vwyru/
URL Status:Offline
Host: maxis-wp.sunagolearn.com
Date added:2020-09-16 22:27:12 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?):No
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17E_PO_09172020EX.docdoc 6ba572ac222372c95a63401ec2b6710af0a9445d6c38efc7cf8397461ab1fd8eVirustotal results 27.12%Heodo
2020-09-17BAL_ZN90WX4712Z7N8.docdoc d55ed14cb859a16cddd063eefbcc2fbc78b5e75f2b964eb1f33e1954ce9f0c71Virustotal results 24.14%Heodo
2020-09-17DOC_ZQU_090120_MJW_091720.docdoc 11edbb83a5be58e02605322f9c28134420f1aafe0e30a23b264ef751657c70daVirustotal results 25.42%Heodo
2020-09-17REP_WTO_090120_PVI_091720.docdoc 409d5db4ee06957895e043e25c81a8d9b2438a172c248bfc3f149c6c947e3ce3Virustotal results 26.67%Heodo
2020-09-17U_DKVUDP5SVP.docdoc 85ecc831aac84128028e315d8229777d99b91e6adba5a437b18e0f2a3c34e76eVirustotal results 25.86%Heodo
2020-09-17UF_28698909.docdoc 6d27f5af653565630751a1ab0faa64d0c28949cfdceef04b4c543a0b4a7666f3n/aHeodo
2020-09-16REP_817846071854130564.docdoc fcb293cfa69d4cbbc6afa71ad0a6456746863f91a54c2af300ca91c088f9c2f4Virustotal results 25.42%Heodo
2020-09-16INV_286467650266896.docdoc 66bd50b4b2f0524aff6b9f64fcad5a686d04778fc56eae470249da88f7c40077Virustotal results 25.86%Heodo
2020-09-16BAL_PO_09172020EX.docdoc b3f921be965718a9741b8f63d9b29dba0345f98cdfda7a0cabae90ffabc8043aVirustotal results 25.42% Heodo
2020-09-16FILE_AJ3205600772OU.docdoc e247f4f69c1be4c95bdf6687e2ae1adbd1635c126ace3b544ad989024da5fb3cVirustotal results 29.31%Heodo
2020-09-16BAL_8S8Z59O.docdoc ca5204766a181d5961896a0f4c506ed00718fad078c3a951d9343e52ad7f16d4Virustotal results 25.86%Heodo
2020-09-16REP_S5QDT8V3NBQG6FJ3.docdoc 3cf8f34ba881699b5932783c60c591a6b88b1523d772b1fa292425764b0aa3f8Virustotal results 25.42%Heodo