URLhaus Database

You are currently viewing the URLhaus database entry for http://word.ahavid.com/wp-content/dkh6phc2/976ha616548580202bhggfw777h5ndj88i6l/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:588208
URL: http://word.ahavid.com/wp-content/dkh6phc2/976ha616548580202bhggfw777h5ndj88i6l/
URL Status:Offline
Host: word.ahavid.com
Date added:2020-09-21 18:00:35 UTC
Last online:2020-09-25 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 18:02:41 UTC to abuse{at}amazonaws[dot]com)
Takedown time:3 days, 17 hours, 51 minutes Bad (down since 2020-09-25 11:54:35 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-2359061781344922635223.docdoc 93376fc8dbfe2e11658564d1aa1e9088e6f7ad6a61d1ff146651df3d275c839dVirustotal results 37.10%Heodo
2020-09-23FILE_GEI_090120_FDJ_092320.docdoc bbb6d73f3985fbf140b54d8d677505a103c94a9bb2c084c3fb92dc9c80e06a80Virustotal results 37.10%Heodo
2020-09-23C_QF5400267680EJ.docdoc 236f77c28643d0ad263544a59652f3a3392c2de3e57ef1644b7d3716e5b87a96Virustotal results 36.67%Heodo
2020-09-23BAL_93218832082628384.docdoc 1a3e133eccdd96c0e73b7ace7d55b34ee165cc3e1fc1416b7713e7d69c7ef8c4Virustotal results 37.10%Heodo
2020-09-23INV_ZWILQPWCS1T8Q.docdoc 952b656649c633a039c06ac4138ac005b789c82749170299de7fbb2a45f22a10Virustotal results 37.10%Heodo
2020-09-23INV_YMB_090120_SJC_092320.docdoc 542210ff4a5bcd55269d32986beffc517eedfd9dbf7c26aafc1ef038220a4d27Virustotal results 35.48%Heodo
2020-09-2337078796.docdoc 1cf04ce2088e4668862b236ff64c927dabb94b87783eacd8cb0818cdd35bd6b4Virustotal results 34.43%Heodo
2020-09-23DOC_2343661102566.docdoc 83fea429143a296d2ee25541c1ba6861d46671d6ec7aa0aeeee4a81b6e252696Virustotal results 33.87%Heodo
2020-09-23PO_09232020EX.docdoc 9bf3580debc9cca0d98daede5437d3f9d05589a97f8239278ba209805e8c0379Virustotal results 33.33%Heodo
2020-09-23YLSW_365827841046.docdoc a367f82673d105dca478418602c9f38633a5347fc2b0f565e828cb4b52e89424Virustotal results 33.87%Heodo
2020-09-2328239544.docdoc d83b4457e963cb82b3322d4ac94c492e4ee3c024573964d25ded75239d9623ebVirustotal results 31.15%Heodo
2020-09-23DOC_JXZ_090120_FEL_092320.docdoc 0d15d81842c24d36b2e24fc1f2d8eeca0cb46f6afaa26190d26a0fce7480a855Virustotal results 33.87%Heodo
2020-09-23PO_09232020EX.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23BAL_44651503815.docdoc 936e0b3b696a31047618a5ffe005e0500e2dd472581d4df1580db803e19cca8aVirustotal results 35.48%Heodo
2020-09-23INV_67236013.docdoc 50c9d530111fe31904255db5abdbabd939542a19af71c656dcdfd44c9fe2b4b0Virustotal results 36.07%Heodo
2020-09-23PO_09232020EX.docdoc ddf9cd73acc0f44cf4ae5e63e11779ce316031dced2882ea971ecc4a99a37b80n/aHeodo
2020-09-23REP_PO_09232020EX.docdoc 4e02784f17b866165db458c9ae3f13edf8dae02967921cfec16074018e8cd2e7Virustotal results 35.00%Heodo
2020-09-23K108ASZ2U.docdoc 710beefc4939b7fe4e0362f66fd592fc87a04fff8aacf8424eb0bd4858115fb6Virustotal results 34.43%Heodo
2020-09-23DOC_48784997.docdoc 1ce7da03432f012ef79797a1eebcc19389de8f1ad5f493fe02e71ac4d324464dVirustotal results 35.48%Heodo
2020-09-23FILE_CO2553427319JF.docdoc 69c8a52193abe2bc88f50c8148f109627cb56b3dae0b2a0ab1ed528d5b4cd559Virustotal results 37.70%Heodo
2020-09-23QBM_090120_PHJ_092320.docdoc 33029135b1c5093cf9c743ba3bd14e04bc7e7a2ec9c971b92555dc08bef6d405Virustotal results 35.48%Heodo
2020-09-23INV_PO_09232020EX.docdoc d883db39359e5a0cf794c3c7892eec5ae89669110839e909876a1b5aa527ddbfVirustotal results 41.94%Heodo
2020-09-23LJB_090120_MFS_092320.docdoc 2f949a337c2746a62b0f22fdbd222a7783251f0b81a7332e4724a59da312369bn/aHeodo
2020-09-23INV_46346378.docdoc 93fb00cace65d90b02ab79f949887b3eaa5b0a0bca1e4a9d7c20576f8ad18deeVirustotal results 33.87%Heodo
2020-09-23L_807202688219.docdoc 66aa75aca1e5a0fae3797f424ff58868d5a813eeef2d2c287a893e91b60769f8Virustotal results 30.65%Heodo
2020-09-23INV_JUW6OD5SYCL72.docdoc c4ed4d279282ab289d7a00ba9d05f1f31af4a3dafbe02ae91aba6585d55506ceVirustotal results 31.15%Heodo
2020-09-23DOC_PO_09232020EX.docdoc e757a53e573f1584dd56ed851acc303473be8922e8f879bd1dd8f9b8dbec4eadVirustotal results 31.15%Heodo
2020-09-23P_91389976.docdoc 23bc63af094f80c54cfecb85f86f0b2f1975ae55f29d9d66ea61d6612c36a567Virustotal results 37.10%Heodo
2020-09-23BAL_35268589.docdoc e543adff7cba9ec05fc7d78a55b89e22cea00ca50df6e67e06250420b9f2ec48Virustotal results 27.42%Heodo
2020-09-2316998607.docdoc 8545f8aee7ed198b20effca9952996d49c5b91811a6dc47bdda10aa92e633938Virustotal results 28.33%Heodo
2020-09-23IQ351ABTZYOCQYW.docdoc f8f2dc63225fa38d16de547469f9c418f3093385a270836e7431aad8bf52eebfVirustotal results 28.81%Heodo
2020-09-23KDB_090120_JNB_092320.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 26.23%Heodo
2020-09-22DOC_L0MWAZ237VMC0.docdoc 698748ed65c5d697095b866208160f8b4142e8d3e66a8cf826de1601fb3b080bVirustotal results 29.51%Heodo
2020-09-22FILE_PO_09232020EX.docdoc 65da347c17ea74a9ddd129c6a7d05a42b72f4d4588b3d53e70ce9e96a118cd69Virustotal results 32.26%Heodo
2020-09-22FILE_PO_09232020EX.docdoc a764b97c10642b54bb233b7b21600d0fee72a50715fbf578956ad7ccb2371f8aVirustotal results 30.65%Heodo
2020-09-22FILE_2389204168233023003.docdoc f81dc1dd571c29424756de4b14efa593fdea619f32694846535c4820c9acf375Virustotal results 31.15%Heodo
2020-09-22GG_016689272343907205.docdoc 8fe10663f36d8403d8c75b3a696a4dd96ded71c95bf3e5d88f34c4dc7ec96835Virustotal results 30.65%Heodo
2020-09-22BAL_2522809438389538964475.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066en/aHeodo
2020-09-22LWM_090120_CEU_092320.docdoc 8f8f1029e9909427e27aa6d225db5eb6d8767560af23836c44a0abff203eae4bVirustotal results 27.42%Heodo
2020-09-22VH_41050106.docdoc a0b12fdc4f5929ad169ba50c79da1722abb70cdb418ce0cac2275aea75431d9dVirustotal results 27.42%Heodo
2020-09-22IM0310252282NB.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 27.42%Heodo
2020-09-22GW1690840288PJ.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405can/aHeodo
2020-09-22Y_CND_090120_WYL_092220.docdoc 8b086b781acec12715982f30c39eb5d20950325e39a5d84b33a6df96d9edcf8cVirustotal results 27.42%Heodo
2020-09-22BAL_4008469053780830.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efn/aHeodo
2020-09-22DOC_SUE_090120_DIB_092220.docdoc c12fac9cd3355e4f8d1f11015cd59fd3b476b20758d57988889bff4c5a352726Virustotal results 27.42%Heodo
2020-09-223TS07AWXEKQ.docdoc 26df475661d0c478c1fd69028ee3eca341beeb52a8d3a364e0c9d2796718325an/aHeodo
2020-09-22INV_318727621020616619449741.docdoc 2bf3d0be0ec0aaaf33db1bbe5cd306e4f922dc550013d001e834f25ad4897e2cVirustotal results 46.77%Heodo
2020-09-22Q_ZQV_090120_LRV_092220.docdoc 115d1ed6f823c370e1b33dfa97569b4c77dd8e1021f3e62f54ca9860da3d0033Virustotal results 23.33%Heodo
2020-09-22FILE_UW1975024273IG.docdoc 280a1aaaebe209d8b8f7a652fd2f9f9efbbb3a6731328ee3d5da4caff1bfb02aVirustotal results 23.33%Heodo
2020-09-22FILE_8YP7T31J97Y97.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 46.77%Heodo
2020-09-220553516053266119550031.docdoc 868edec3ec279aeead8acb68afa154463ee9c468e59e7a39c2ac8cc532356c27Virustotal results 46.77%Heodo
2020-09-22AZI_79197797.docdoc 3dbb23434b36b5af1f130c71f68242eab4c94cb3a14fd3d686641753e345d4f8Virustotal results 22.95%Heodo
2020-09-22REP_5F4R6RO.docdoc cb3213e75e68a01ab8325df1ad28ed2ee40a3db14d2c90693f1fad690ad94ff2Virustotal results 25.42%Heodo
2020-09-22FILE_PO_09222020EX.docdoc 5c4608b3b751fb1ca62b60e4ecf738b7363dfdd2c9d252c9cb91a8c12cccd26fVirustotal results 24.59%Heodo
2020-09-22EEB_090120_UJN_092220.docdoc ab47f88e27c562d0bf15fec6cd22ec5ffc419cf09f3d877005ae1444da7a40c3Virustotal results 38.71%Heodo
2020-09-22DOC_554472603132085261350.docdoc 9787b45133bcc34be0a429c433382108adfb5e5d3f2636e5a2c818dea83b3118Virustotal results 39.34%Heodo
2020-09-22C_507958135163699601460.docdoc 871f2b403272d8adc62f2d8941dc9f4ebeb3e9f24006bf0b11084e21904cdb32Virustotal results 31.67%Heodo
2020-09-22REP_JVA_090120_RCL_092220.docdoc d383058a1983bf4c916ed464cc0a06212e566a0b6bc14cf4cc949519aa417fa2Virustotal results 23.73%Heodo
2020-09-22NZK_090120_DLD_092220.docdoc 013f49af6f7f5e1e34116aa22e1bc2ba4babbb2c0b0f97bf4da287ce88b16a16Virustotal results 51.67%Heodo
2020-09-22REP_CZMNZKA.docdoc 5b38fc0a82ee2bad1bffc097d51204cfc0a8891028bbe88ccc02e3aeb5bdc701Virustotal results 51.61%Heodo
2020-09-22REP_ZW5NJJSXBWHDJ.docdoc 82ae83e8a0801c8202a132e1e29d286e4783465939a4fa261fc1e7e73f709ea0Virustotal results 50.00%Heodo
2020-09-22DOC_YK8147635804TQ.docdoc 38f1b170bb971a130f88c65c81b00d2ef29a3e9acb9ef22cfdfd9be5555211d2Virustotal results 49.18%Heodo
2020-09-2239988322828029537675860.docdoc 193194a1f2cec3953fba2121f846171524d92ef27569d72e891d3a175cafa647Virustotal results 49.18%Heodo
2020-09-22REP_SPDEP6G069K.docdoc 3df6e7a0157c80044bf987544ff878153df7d16a46c4e4b60824c3264bcd2e78Virustotal results 50.00%Heodo
2020-09-22FILE_UMF_090120_XMR_092220.docdoc 578e0149bfd762e04af50580b876ce1fe3662cf264dcbaef3707e2f3f0ac321aVirustotal results 50.00%Heodo
2020-09-22VMOZ_PO_09222020EX.docdoc 7fed177a6d039f59eb4c6332a8a46818b463e43f6267f271dd4f9b9807eb8844n/aHeodo
2020-09-22H_7G6OCMQZX5X4M8J0.docdoc db850ad7899f9d7b77e6a749543643030596ff548f4ebc57d463cac0a52a6ef3Virustotal results 50.00%Heodo
2020-09-22INV_PO_09222020EX.docdoc f7d185bc2085e44ced3ed36baa71b29f5a9264496d2a184762afbe0469d50448Virustotal results 49.18%Heodo
2020-09-22BAL_89471922662391954.docdoc 7b7e57020a464e5add5295ca3cd879abe23347e18d1599805ab1145809ae2d37n/aHeodo
2020-09-22ZHT_090120_EPG_092220.docdoc 51ae65c1bfb9227a2a69b19041097b6323131a87f452e961d28d112302ec7203Virustotal results 50.00%Heodo
2020-09-22BAL_95317640.docdoc 1b29befdf0bca8218c36edb5cab59349355ecbdc760f419096bed97f5630be14n/aHeodo
2020-09-22G_21717374.docdoc f8a9eec75fa4360483b50dbac630a13f91975dc2415df9eed41c9aab0f6b6e13Virustotal results 49.15%Heodo
2020-09-22FILE_52034044131265.docdoc 8d49090e5ad1ca487645e8dad8b6e90d267b4a7f5d4cdf4d9c4441d969f088caVirustotal results 45.76%Heodo
2020-09-22INV_9E9GGKBXAHTY.docdoc ec2ce44f2fbd4e3dae1a7268da4de197bd006a620ec08af7122f25557cd49196Virustotal results 44.26%Heodo
2020-09-2216230618492435825854805.docdoc 61b104c81d6e07bc38102631a844c6247bfb16ff720fc134b3a95d601df23fabVirustotal results 42.62%Heodo
2020-09-22INV_PO_09222020EX.docdoc 2441d3572b85985e60886402e103e4f699b34844f25875813f617c2ac28618daVirustotal results 40.98%Heodo
2020-09-22GB0235229701EE.docdoc f574d141e50f5f004b6d5b2932ce746ef012404c5bf46933947ad0ce3b397665n/aHeodo
2020-09-22WMC_090120_KFZ_092220.docdoc 565c24c4b23f316d85d82e81ec9243b6f2246974aa3939cf69a305d71c14a1ceVirustotal results 35.00%Heodo
2020-09-22I_3030WX52V4VPHF.docdoc 718113e004b811df9d311a7edec1092b2aab2d9173d762022544a74b5ba02657n/aHeodo
2020-09-22FILE_YY0705644674OH.docdoc 3ed5e00e046ce19a840746219ff3efcd6fcc4ddd0b608e51203398bfe2360da2n/aHeodo
2020-09-2230902786231.docdoc 9e25ce36733cb087f13b4a1c744a28856f2e1e878782893ac18e682ad0f2e842Virustotal results 32.79%Heodo
2020-09-22T_4I80AWQDJ63SG.docdoc 7cb0e900a796ae5c53375b1dca69897de5ffe140cb72224a428bcb8327937f23Virustotal results 34.43%Heodo
2020-09-22AX8767059348TP.docdoc 81f0521a22118d4b0d1ab491183c0e961d22f56fb43d063febfdbf53348add1fVirustotal results 31.15%Heodo
2020-09-2238597968.docdoc c12ff20f228002fc1fd26b5e7c4dcede37847cda8ed616e187c81b2465874ed1Virustotal results 34.43%Heodo
2020-09-22FILE_46427500466843633.docdoc ed6598e7e6d37524439397ed78a735fe41117f47c0964cba780b5800d4eb5146n/aHeodo
2020-09-22EAC_090120_LXH_092220.docdoc 9addba96a219cf69e04822cf43a65d6b7da0f848ac179d2276ef2a448ca362cbVirustotal results 30.51%Heodo
2020-09-22C_1279475717.docdoc 43b978d85da34d8b60a7555d0c1ca67e51817214b70f29e321eacd4c96f35051Virustotal results 31.67%Heodo
2020-09-22SA_89648240.docdoc 62f036b925c8b4c5c90b88eaf15e774481a952ac6e1c7596916e10054b82daceVirustotal results 30.00%Heodo
2020-09-21GQBUNXE7HVH8I2.docdoc 6aaa5d1200a0ddb1900acfe0f5b79eac2ce5b928d30db37c4f21e43cea55d69eVirustotal results 32.20% Heodo
2020-09-21272683637415.docdoc 4b79ba0096d15d6a7c759fdf3e094194707f88072e8aeb0d53979a88db734ae2n/aHeodo
2020-09-21BAL_ISY_090120_XZS_092220.docdoc 86a8ee1c5f1f5ce84a8f3b31c04f51e324a47d2de0936339357ee0e9a139e0c6n/aHeodo
2020-09-21LFO994AD.docdoc 75aacb9b9e0f3b4113358caf49078bb79286fb9637c523807a8f533d0df7c834Virustotal results 30.00%Heodo
2020-09-21M_PO_09222020EX.docdoc caefda78ff290b2ad9de3f8ee864f985144a3caeb6e307e034427b5f621184daVirustotal results 31.15%Heodo
2020-09-21XYZ_090120_IJS_092220.docdoc b0c1e64b3b04df99668587d56d89c513ced13de50d8596e1d49a2eac66c96049n/aHeodo
2020-09-21INV_52350841.docdoc 9f3a5491d61d0e1c05f436639b20d24b38465f96aecdda836f9fe292d1af0b34Virustotal results 31.15% Heodo
2020-09-21953817331285.docdoc 250c90b6b133e2ca3a8acd3ce9891d956b41e53837ea9d9aec4b1477b10dc49fn/aHeodo
2020-09-21VEJ_090120_MCW_092120.docdoc 292a48621b6f7863d1a7d04f25cd2c6ddbcbf5abac1282941d3ba20ae076b776Virustotal results 27.87%Heodo
2020-09-21BAL_KV6686452226TP.docdoc e6573ea6cfe0bdb4f9b3d43b7b68207d18fb492c9ed35aaf6bee52d0d681a9ddVirustotal results 28.33%Heodo
2020-09-21PO_09212020EX.docdoc 5af136d60a366d4fa170883a816b530f4ef2828bfd11eafe0204c4f202deb748Virustotal results 30.00%Heodo
2020-09-21DOC_31418357.docdoc 6ca00f6d839ec9a1a0d786abef71fce3d2d88018968bbd427a8e2d25f6099c57n/a Heodo
2020-09-21OXK_090120_NHY_092120.docdoc 440c241e8dfd087944e10b8d9018d49df75698168d5257a2c7a756a7672dd0fcn/aHeodo
2020-09-21M_VH51HS8V1568V.docdoc ceacb71b802701140f4c5432823b479d42c5d3a712c0972d8316b7d145b3b366n/a Heodo
2020-09-21INV_AWZUMLC6YBF.docdoc 1e0ad6475aad3deb28ea9202c57b64589fd3638b15484a6f614fb7ae4879f071Virustotal results 23.73%Heodo
2020-09-21INV_PO_09212020EX.docdoc b28378e6974a53507bdc9ccccae320e4998c79966ec3a03aa0fbbdd5465df93bVirustotal results 24.14%Heodo
2020-09-2153857623.docdoc e04805dbc00956b3ba5cca341501b0653edea4c069a82449ed35ea1de79182dbn/aHeodo