URLhaus Database

You are currently viewing the URLhaus database entry for http://ziba.club/wp-content/LLC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:544892
URL: http://ziba.club/wp-content/LLC/
URL Status:Offline
Host: ziba.club
Date added:2020-09-17 11:55:10 UTC
Last online:2020-09-18 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-17 11:56:29 UTC to abuse{at}ovh[dot]net)
Takedown time:1 day, 1 hours, 31 minutes Poor (down since 2020-09-18 13:28:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-186455921436821280899137700.docdoc 1e3201bbb2deffb9ba87ab7c3c4a40d86a2453bd105b0bede74c0ede7aada9b9Virustotal results 20.34%Heodo
2020-09-18UJ_8435735282432811.docdoc 7236342a25d3c4a01142b4e442a06a79b04c20546e4694f7cec1b829c13fbd5fVirustotal results 25.42%Heodo
2020-09-18FILE_PO_09182020EX.docdoc 917291b862e0556f8d98d9dcae320d8b6d9307ee1978e2c8ddf0608cfb87ad85n/aHeodo
2020-09-18J_FLJ_090120_QJF_091820.docdoc 2121c5bc91b394da5845d8effc92948979f57c4bf252ffd09451fda76e1c273bVirustotal results 22.41%Heodo
2020-09-18BRT_090120_YNI_091820.docdoc d2a69c58abe4e6aa189d2eb2df014d31d32208d552627e3802565ae231cbc587n/aHeodo
2020-09-18C_EBAP60NY6MA4.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 49.15% Heodo
2020-09-18BAL_67597075.docdoc fe543bf25849e02f9c6cdbb37ffcf838eddcff1effb9dea466557fabb673bd20Virustotal results 50.00%Heodo
2020-09-18W_5980106147384496929409737.docdoc 7d6af6fb5524fab475918225161ccfa03fd6b0893b5d6aab343555908978e002n/aHeodo
2020-09-18F_6025696663252.docdoc 81098064cd4ad8fdf1ccf43093703418fee8dffb9970aa44e9f9be469df9a310Virustotal results 49.15%Heodo
2020-09-18BAL_UDO5UMTAGZ7.docdoc af0e40cc260afaf98685419c7a7e2a7bb5071876da22daeafb069c208b8a9ff1n/aHeodo
2020-09-18BAL_NOJ4FITUGIG6.docdoc 8f5dd0f7d3c0f356a4a2cd39351f11b5be1e32ff16162229fff6548dc8ada245n/aHeodo
2020-09-18DOC_DI2322814976CQ.docdoc 8780a28bd25c92af4f9ad2f7a4b99acaa81ae7f410964f7155f9b69037cd2c15Virustotal results 49.15%Heodo
2020-09-18INV_88961604.docdoc 4401b8e76e1cba8daffe10ee7151f70d1ccb78a6857c49598c33f9b8bade1541Virustotal results 49.12%Heodo
2020-09-18REP_02728158.docdoc 7a20cfdc1bf8e38ae094a08d8c24b9fe9afc5019768f31ce2a89a17898420878Virustotal results 45.76%Heodo
2020-09-18BAL_94187527.docdoc e28bdcb88599994404e848c8dcbaeca4af4468e9e45941e1d16541054b9f0fe1Virustotal results 44.07%Heodo
2020-09-18D_PO_09182020EX.docdoc 1121962d0a0d52780b13618c7cdcc2916ea8ffdcccb17ae0e54e0b9f8799c5ean/aHeodo
2020-09-18BAL_LVD_090120_RRW_091820.docdoc db5b2b2884b15b7c147a886a252cc856516d36b4c8fb587dc9a46063f39153a1Virustotal results 40.68%Heodo
2020-09-18BAL_38974461.docdoc 7e96a13f66a51a3a39430169e9c21da4780b9630c7699ffab5ae9b137122dfcbVirustotal results 38.98%Heodo
2020-09-18DOC_PO_09182020EX.docdoc 88ef0981b06e7ac4b9df459d7c10edc857fcf9c170057b9220ef9ddfd550f06dVirustotal results 43.10%Heodo
2020-09-18BAL_HEX_090120_VGE_091820.docdoc bf8ba8f948673c3556726edb8ae210bb81ee962e4c6a15cfd27e3901396960a4n/aHeodo
2020-09-18INV_JF2994883730KZ.docdoc 971112bf91b341992aa8874b52425261e68b7cec89ea114487056783acc97e56n/aHeodo
2020-09-18UJ_WU4456266473ND.docdoc 4b9a2688db3fd6465d84ee5baf9fbdf6c50772a16d3e7c265c758ae284e8a63dn/aHeodo
2020-09-18DOC_PO_09182020EX.docdoc ed98997bd450d0c8f1285f0677f4735e52e35f8504b6ab44ca0af91650f29ac4n/aHeodo
2020-09-18BAL_BTZ_090120_LWQ_091820.docdoc 6e221be1094865f6f92e91e222da06c0cfb67ce691d0bd25afb4b4324bb05714n/aHeodo
2020-09-18REP_13646745.docdoc 230fa7a324c31b742bc3e78cd724d571d7a462ba188b8e6dfc9f7060cb24fbc6Virustotal results 35.00%Heodo
2020-09-18BAL_20003865.docdoc 4a6e1fd8e8858273824ae02adbef685cf16079c6baa36e1ff244a6b93db151b8n/aHeodo
2020-09-1853428572.docdoc c68b2be94aaee607635cd2becf20f8fed9be32225970b5572ae7c83a643b7211n/aHeodo
2020-09-18PO_09182020EX.docdoc 043a2eea0e970c626f6ff1aa5ec43ffd5974bb5192e55c0595ca6b3ef0404fd7Virustotal results 34.48%Heodo
2020-09-17A_PO_09182020EX.docdoc 12412cd6a77f4f37c4af299317f54c6e10deb114a14d2ed1f0de95a3f8466b51Virustotal results 35.00%Heodo
2020-09-17PWQ_090120_COQ_091820.docdoc 074d30932dc73bf17312105a7a4a157bd6cd44f75ce2cd67026282c6bdb3b21bn/aHeodo
2020-09-17REP_197719113315617.docdoc b7ddf91ff9e8e25f296efc62a0d79d6077c5ab794410acec14f45d7e96a35d4bn/aHeodo
2020-09-17I_934911333.docdoc fee4f66531abb15058e37ea550aab747c84213322ca2e601d25dd1de87c7c234Virustotal results 33.90%Heodo
2020-09-17PO_09182020EX.docdoc ebce78b8c9a54b4d497ed1c424eb689cd0959596daf9f6748a46b65aa84b91dan/aHeodo
2020-09-17REP_01843054035.docdoc 009081468aa09b402378444010fd772036dbefb92c839179c69cdbcb23133a33n/aHeodo
2020-09-17REP_HP9177869649OL.docdoc 9c119c1d39a1e41201dfbb087466fa543558f959d147c3e8ef77650beaff2d9fVirustotal results 33.90%Heodo
2020-09-17INV_80500962496460901615.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17FILE_797479554792242044368949.docdoc eda948b222a92d6413713f55234470c04b2433e2382638dcd362382b73dfcc8dVirustotal results 41.67%Heodo
2020-09-17CWR_090120_CTG_091720.docdoc 46ed6bbe96a97f0da9479591c55394830ccd60524bcfa7b78b035514fb9a8ebaVirustotal results 39.66%Heodo
2020-09-17FILE_5TIOBGILD6OEF4.docdoc 55f67049f14332814d65bbc5690f2538dd7fe24edb943627e039a7ff43ab1fb8n/aHeodo
2020-09-17BAL_CPF_090120_RZO_091720.docdoc 03de8778d73e8753ae7006da7b533c87ac0ee1c1552d06188e045d5d578782a7n/aHeodo
2020-09-17BAL_HQ9129245057OY.docdoc 55e876b6274746f9d8486bee3ae8b45b9fac29272c39e6d09ec38a93903d3decVirustotal results 35.59%Heodo
2020-09-17YZ_814617506181.docdoc 14650f22ccd9ac8f4effcb6415afc3ee21a1a681e0d621888dd3e28a30e9e237n/aHeodo
2020-09-17FKE_090120_BFM_091720.docdoc ab673a4d98deaf332cd304d7285159dc8a473d8fb207d7746403ecf3e81371d7Virustotal results 31.03%Heodo
2020-09-17DOC_09937897.docdoc 24c7551200e919fc0bdce151aef784c0c324c81a337a8bf70e67cfebf1abae0dn/aHeodo
2020-09-17BAL_855531774284265501.docdoc c6dcfa2a31a094225c25a0d53cccd915b76ab34be20b10fc775d740b3e6d9b21Virustotal results 32.20%Heodo
2020-09-17INV_ZI0573193019HY.docdoc 22823faf02dacc31bab524d0ff73e36775b3f629be5a241f9334b6f094220b0eVirustotal results 32.20%Heodo
2020-09-17EKX_090120_HKN_091720.docdoc 58e9e29b2ad9adffb9050f55dc81946e45a9f4dfbf263e4b4a1af049f2897148Virustotal results 33.33%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 48161edaf6dc6f677f000108096fb60a547709797ada71d0c7e48667f035851aVirustotal results 32.76%Heodo