URLhaus Database

You are currently viewing the URLhaus database entry for http://pjgroup.co.nz/wordpress/swift/oahffi7476988931568hjo0psiaihbt4ey90/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:589486
URL: http://pjgroup.co.nz/wordpress/swift/oahffi7476988931568hjo0psiaihbt4ey90/
URL Status:Offline
Host: pjgroup.co.nz
Date added:2020-09-21 20:16:08 UTC
Last online:2020-10-08 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 20:18:08 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:16 days, 7 hours, 26 minutes Bad (down since 2020-10-08 03:44:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-23INV_QMJ_090120_GMI_092320.docdoc 46cfb218b8b268ef4372057514f93c2282c6eeb1474b574f5f8a3c291cb6269eVirustotal results 34.43%Heodo
2020-09-23HTH_090120_WEC_092320.docdoc b9b92fd2db926541ffe87cdb4d652394ddd2b33559d51db96c862ffe2e6c2e1dVirustotal results 33.87%Heodo
2020-09-23XN540Q9.docdoc 68829c16b0c9bb2f8079fe163e05ccc8662973e4ce79afc0693733937fad88e4Virustotal results 34.43%Heodo
2020-09-23INV_9AFSCQZ81BLBX.docdoc 15c9d94e300b7177907171c24a7cf8cbdf3ae42a1bace42390eaeceff66d89b6Virustotal results 33.87%Heodo
2020-09-23INV_ROD_090120_KJU_092320.docdoc 60c842c5f189f507fc85b61c2c4f51f02082609590c8b3e38580179f6d6c6657Virustotal results 36.07%Heodo
2020-09-23DOC_0064494230107632.docdoc 93376fc8dbfe2e11658564d1aa1e9088e6f7ad6a61d1ff146651df3d275c839dVirustotal results 37.10%Heodo
2020-09-23SO_05282446.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23FILE_89835606.docdoc 936e0b3b696a31047618a5ffe005e0500e2dd472581d4df1580db803e19cca8aVirustotal results 35.48%Heodo
2020-09-23KY4204436894FK.docdoc 50c9d530111fe31904255db5abdbabd939542a19af71c656dcdfd44c9fe2b4b0Virustotal results 36.07%Heodo
2020-09-23INV_PO_09232020EX.docdoc 15b6e8645e321e35774c5f7b9e295ba0e3d31d3f116e7a67724e6e0e5f8f3ed8Virustotal results 36.07%Heodo
2020-09-23DOC_CL5165946205DV.docdoc 27a9009cd17248d4d19b35988974f0e755e69a439f1025ece6b2ffb357087846Virustotal results 36.07%Heodo
2020-09-23UD29F6X4Z2T69.docdoc 710beefc4939b7fe4e0362f66fd592fc87a04fff8aacf8424eb0bd4858115fb6Virustotal results 34.43%Heodo
2020-09-23REP_KLB_090120_WML_092320.docdoc f732dff0368dd8ff983021f4786d2c04ecb2f9196327138f25d6ca5272c9b556n/aHeodo
2020-09-23PPX_090120_WOR_092320.docdoc 920ec5e49cd513625409968ac2e4fff374909c666943e0f55771bb56f1ce2020Virustotal results 37.10%Heodo
2020-09-23PO_09232020EX.docdoc b853cd46658fd7e0fc597e041702404ceb38bce2a718061faa3170d5389828bfVirustotal results 36.07%Heodo
2020-09-23DOC_PO_09232020EX.docdoc d883db39359e5a0cf794c3c7892eec5ae89669110839e909876a1b5aa527ddbfVirustotal results 41.94%Heodo
2020-09-23REP_XDL_090120_BNY_092320.docdoc f06641ee9e6b743cb2edbd1898982be6d7ea50c042b93330a7bb869df86fb945Virustotal results 38.71%Heodo
2020-09-23753307119722849406968.docdoc b171914b2e5a10fd997e51268f01a70b254f0aa55080906c36c6159bd325c9feVirustotal results 30.65%Heodo
2020-09-23LX94K02S2D9.docdoc 7fc71d784c714360d684b4c25382fe807f04a3cbd861352f3c19fa0fd789e59dVirustotal results 32.26%Heodo
2020-09-23BAL_237229408122024.docdoc 23bc63af094f80c54cfecb85f86f0b2f1975ae55f29d9d66ea61d6612c36a567Virustotal results 37.10%Heodo
2020-09-23INV_VA3181487081UL.docdoc 5503f97a821a1c8dee9c3e1bcdc31e1fc7d98157b552c7cc79605a9d68dd8b12Virustotal results 30.65%Heodo
2020-09-2343231733.docdoc ed8554b439c265332707e99e7be35db1e9e217801ed277161fcf7c6bcf98bea1Virustotal results 30.36%Heodo
2020-09-23PO_09232020EX.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066eVirustotal results 27.42%Heodo
2020-09-23J_83039042.docdoc 96d1563a935b2b69580ef4ad19410bdb741917fc4d0aa8855e4eba258db0645fVirustotal results 27.87%Heodo
2020-09-23BAL_9EU4XJJDBOCV.docdoc b9230204a6b5bb648c78437d34a9350a40aa179243813ecef19402cd1f319b96Virustotal results 27.42%Heodo
2020-09-23DOC_PO_09232020EX.docdoc 98f1a8a99449cb92a1d946e110ba5decc069079ddd01fe5ded4bc075313f3bd6Virustotal results 30.65%Heodo
2020-09-23DOC_YF4994557595ID.docdoc 04648ce7223361494ad5620c674be88a869710007f672d05721b77af59be70fdVirustotal results 30.65% Heodo
2020-09-2315803901.docdoc fa7f4b3fa89ce1e3cf1f45674f36346e729aced2de513c5a058f935c65b3cffcVirustotal results 27.87%Heodo
2020-09-22E_31973087.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efVirustotal results 27.42%Heodo
2020-09-22683567199076725301469447.docdoc 93fb00cace65d90b02ab79f949887b3eaa5b0a0bca1e4a9d7c20576f8ad18deeVirustotal results 30.65%Heodo
2020-09-22REP_LEVAR14J.docdoc eec6b346639f5aa9208c2fbc57161a281b1f72b3902a41ffdfe3a3a5b1ae3a3aVirustotal results 30.65%Heodo
2020-09-22BAL_14664414304977451158029.docdoc f81dc1dd571c29424756de4b14efa593fdea619f32694846535c4820c9acf375Virustotal results 31.15%Heodo
2020-09-22REP_PO_09232020EX.docdoc e543adff7cba9ec05fc7d78a55b89e22cea00ca50df6e67e06250420b9f2ec48n/aHeodo
2020-09-22O_NS1370916361AC.docdoc 1d2f06cbed29c06113fd84cc5a4db4be24346887afa63d85909dd60882a38336Virustotal results 27.42%Heodo
2020-09-227SSIWLZ.docdoc f929a641d61afcc3da16efb268321fa3a98a19ed3cacd0d1b6b2a98c5de37d35Virustotal results 27.42%Heodo
2020-09-22PO_09222020EX.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.42%Heodo
2020-09-22EN0250958985HO.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 27.42%Heodo
2020-09-22REP_MIO_090120_DTC_092220.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405can/aHeodo
2020-09-22FILE_99139560.docdoc 65da347c17ea74a9ddd129c6a7d05a42b72f4d4588b3d53e70ce9e96a118cd69Virustotal results 27.42%Heodo
2020-09-22FILE_DO7070516667EK.docdoc cc43bfd0ea39a3afc6283e4734d480bf62fbbb227016a5cb42d288a8f5f3c956Virustotal results 27.87%Heodo
2020-09-22INV_95844678.docdoc c12fac9cd3355e4f8d1f11015cd59fd3b476b20758d57988889bff4c5a352726Virustotal results 27.42%Heodo
2020-09-22PO_09222020EX.docdoc 1ed6b1e213f69006f71aeed5c6f64b9e9794f28ec523ba0f6be4a26b3233af6bVirustotal results 32.79%Heodo
2020-09-22PO_09222020EX.docdoc 2bf3d0be0ec0aaaf33db1bbe5cd306e4f922dc550013d001e834f25ad4897e2cVirustotal results 28.33%Heodo
2020-09-22OO3345111337NU.docdoc ac2c3f821d1b8396beab7de56b3a602234c69bb7371437edeb475e3a4d8c28d4Virustotal results 22.95%Heodo
2020-09-22I_PO_09222020EX.docdoc ca7549ac47fe8878435d685f43fefa878b106015da743a5ddfe694d36a0eec97Virustotal results 49.18%Heodo
2020-09-22X_PO_09222020EX.docdoc 61b104c81d6e07bc38102631a844c6247bfb16ff720fc134b3a95d601df23fabVirustotal results 42.62%Heodo
2020-09-22FILE_64712204.docdoc f574d141e50f5f004b6d5b2932ce746ef012404c5bf46933947ad0ce3b397665Virustotal results 40.98%Heodo
2020-09-22INV_BI2430335485CG.docdoc fb096cb018d3c66f22c322028f9e8f1f049e9a9eb3531f9e893c3d2522f35951Virustotal results 36.36%Heodo
2020-09-22XGGTUKX4NKMQA.docdoc 79a4f9be0ba6aece829290e01255b06fad24cd387c1d27bd98ce0ec1dbc0dfe3n/aHeodo
2020-09-22DOC_PVM_090120_DRV_092220.docdoc fb7120cd04c6c488c5a564bb24d9d155389d7cb8a0293e552dd385110bc6ec9fn/aHeodo
2020-09-22PO_09222020EX.docdoc 9e25ce36733cb087f13b4a1c744a28856f2e1e878782893ac18e682ad0f2e842Virustotal results 32.79%Heodo
2020-09-22DOC_PO_09222020EX.docdoc d9f03fa12161b634159a69d97eaf66f6e621ecf8cea896527a14510f0c7e4ad4Virustotal results 33.33%Heodo
2020-09-22BAL_XCT323V.docdoc d1083829516cf0b07a7ebf52d747d76ab73da99f9cb042d583f241687917a433Virustotal results 33.33%Heodo
2020-09-222209518509726670190246605.docdoc b9ae26c8fc56943d82223a7d3c26671f4247a42d3d56fc25a455217cb84674b7Virustotal results 32.79%Heodo
2020-09-22SO_FAT_090120_THM_092220.docdoc 23184d215b3db4bb670b2c1e70e1b7f81760cdec7e35b8a0a90cebc4a6797eccVirustotal results 31.67%Heodo
2020-09-22B_482W98S.docdoc ed6598e7e6d37524439397ed78a735fe41117f47c0964cba780b5800d4eb5146Virustotal results 33.90%Heodo
2020-09-22INV_SY1835816608RF.docdoc 9addba96a219cf69e04822cf43a65d6b7da0f848ac179d2276ef2a448ca362cbVirustotal results 30.51%Heodo
2020-09-22INV_50758876.docdoc ce04dad796a1819d846a6a981c97426c43b0943deed734991bc6780eb54ba074Virustotal results 30.00%Heodo
2020-09-21PO_09222020EX.docdoc 0ecb8f0ac3c2c27f213dff3752b70d6832343dd6e1ef7e95e066e0446ef384f8Virustotal results 31.15%Heodo
2020-09-21GZPF5VFNCOYJ06V.docdoc 0b406d237fa37888f1acd0ffc4b59577ffd5e45b792a835c2141483e2206ce9cVirustotal results 30.51%Heodo
2020-09-21REP_3083466934021786078.docdoc 86a8ee1c5f1f5ce84a8f3b31c04f51e324a47d2de0936339357ee0e9a139e0c6n/aHeodo
2020-09-21INV_FH4682845197DR.docdoc 74c1fc2f43a4a426a9f4ffbc4738e6107d95009d67a202f0c8a2a1b80ef60937Virustotal results 31.03%Heodo
2020-09-21BAL_72024846.docdoc caefda78ff290b2ad9de3f8ee864f985144a3caeb6e307e034427b5f621184daVirustotal results 31.15%Heodo
2020-09-21J_22044038.docdoc 05d8b6ee1e6ee87acce063fdbd25c9973252d1cddf3f0a393f1a4eac6ab49793Virustotal results 31.15%Heodo
2020-09-21KN1301098591SS.docdoc 1ee23bc9e2a3807499d0fd736a4503235cc2d46e14429f19ff423fb2095bc38bn/aHeodo
2020-09-21DOC_76985935.docdoc e1e28e6b69d9f4ccb1171262803787c1c468b9b27924012d88df127d9aa1b480Virustotal results 31.15%Heodo
2020-09-21REP_BU0001866629RR.docdoc 38429e629d4112efe0a0932335bbe5288c920cc21fb98fe8b687c50083b0dbaan/a Heodo
2020-09-21DOC_74767704.docdoc 292a48621b6f7863d1a7d04f25cd2c6ddbcbf5abac1282941d3ba20ae076b776Virustotal results 27.87%Heodo
2020-09-21REP_NG5264338793EW.docdoc 2fb1aaab163c5d674f32a4afd442561b6333e3fe377c272f69c96090d934ac93n/aHeodo
2020-09-21REP_PO_09212020EX.docdoc a26de4ba071b2f3d5f5fe238c0fcaa9d641019a4593ede7bf28e04a62f26c2dcVirustotal results 27.12% Heodo