URLhaus Database

You are currently viewing the URLhaus database entry for http://equimination.ee/wp-admin/OCT/cjj4ymrzjq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:598249
URL: http://equimination.ee/wp-admin/OCT/cjj4ymrzjq/
URL Status:Offline
Host: equimination.ee
Date added:2020-09-22 16:05:08 UTC
Last online:2021-07-07 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-22 16:06:41 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:9 months, 17 days, 17 hours, 7 minutes Bad (down since 2021-07-07 09:13:47 UTC)
Tags:doc emotet link epoch2 heodo link ZLoader link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24DOC_42229399.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24A_58540630.docdoc f1d7646cf6abe9a746a6dab251be541e66a294060a1f32665b7e1c5d54de17dcVirustotal results 29.03%Heodo
2020-09-24INV_861510156590.docdoc d038ad9d31d6764ec9e5ad2246c2f2a99e0c06ca8798bd54e73deecb05dab14dVirustotal results 30.65%Heodo
2020-09-24REP_784145542838516509051.docdoc 0ce47002a6074a859caf912c52447785977b4694c431ba468c48fc21843eba5dVirustotal results 29.03%Heodo
2020-09-24BAL_87507355.docdoc 2e3f0cba76c76de6beb1d7782576c1913d7a5ec9e471a36bac04827d26b0185dVirustotal results 31.67%Heodo
2020-09-24S_8414619681073956.docdoc 0513605e1d28ab01152da25d30cb6762b95b79d8183cb775c505abc6f341e4f5Virustotal results 31.15%Heodo
2020-09-24YX3507354531AQ.docdoc 322437c9e679266325e5e5e4e5192b3480e02f680d56fbede6b807db9def583an/aHeodo
2020-09-24DOC_TK7999925509JL.docdoc 3f0693ecde0d7c9983bda3bfa22fbb8243695bf8a48ae127e121813ae527334eVirustotal results 29.03%Heodo
2020-09-2436454252.docdoc 2272f7dfb66fc89d7009e57d66837d63d1e4296c78eed8333b156d7bc0eaee14Virustotal results 29.51%Heodo
2020-09-24FILE_13759969.docdoc 35fdf71d1156a709edbfc6250568a61a62afb183218e5fc5ffc1249ab07bb4b3Virustotal results 25.81%Heodo
2020-09-24FILE_KXV_090120_MJS_092420.docdoc ab91db60823e2094091fd21a60eda971c965e334da7b12f08b02334d781397e4n/aHeodo
2020-09-24DOC_71277954993635522.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-2412732821.docdoc c8de91c5a698b19b834995d8d06dcfdbbd8147015a34eaf4fa99ccd6cdf012f9Virustotal results 20.97%Heodo
2020-09-24PO_09242020EX.docdoc b0c9e63cd039da312aea84e7c632e4faab8fa1bf3b6d8382f6fd898635c39941Virustotal results 22.58%Heodo
2020-09-24INV_BE5606948507EG.docdoc 860994a6cb882e801a963f6e00a8bca34f28efaa71b690e5f77b8c2e644dafb6Virustotal results 21.31%Heodo
2020-09-24WKO_090120_QIE_092420.docdoc 54d6881837b3fcb6a0b3e639c58f6e159abb745d0862e1f5cabe6c7df3a3da12Virustotal results 19.67%Heodo
2020-09-24NE_37457427243723057368770.docdoc 8b209e2d294b8c5b50bd83d9fd9184268ce21313f7d5876d74c7e10f48ac946eVirustotal results 20.97%Heodo
2020-09-24DOC_WM8998068682GU.docdoc 7439811010be6eb023390a28eff9b2acf598883daf1cb66bf4c6e78bb8f13998n/aHeodo
2020-09-24DOC_PO_09242020EX.docdoc f2621313b9111b762e3fdf55bb9e64523d3a6ee50a09b193cc339ab22a42cecfVirustotal results 41.94%Heodo
2020-09-24BAL_KLW_090120_BBK_092420.docdoc 4d6a492ccf58a9712b96c0ce4443b1881fa7405bbda94ce7cc0a92ef06a2daafVirustotal results 40.98%Heodo
2020-09-24FILE_46157579339110793773750.docdoc c1b41bcc38633ca3448055479dfc5bbca852649dbca3c9b90c0f8d884c9dd705Virustotal results 40.32%Heodo
2020-09-24O_IWX_090120_WNR_092420.docdoc 600c433856179a39c24e978c417634772d605b733afea857de865c8ff787105fVirustotal results 33.87%Heodo
2020-09-24PO_09242020EX.docdoc 2ec5659b0eadb3f644298e5c297be25451dff898c0551365d0d757a4e5975556Virustotal results 37.10%Heodo
2020-09-24REP_10214585.docdoc 3f165297835a1afd80d7c9fcf087b03e04dd420e6e747ae16a5d0cb6da8eaa97Virustotal results 35.48%Heodo
2020-09-247872328186218484248104.docdoc 3b95077a69ba1ee1226face3a5f83a78950357b93815180ebb6b6772cf8212e8Virustotal results 37.70%Heodo
2020-09-24QR5348396414GM.docdoc 79a7d433152a96d54a0687fd65dae6aab97a6af26dd206692bf88636977729a1Virustotal results 35.48%Heodo
2020-09-24RBM_090120_VPO_092420.docdoc 7f480dae416960104d9733a280be27c1a6381c1a310cb1f7b7b4acb7aa83fcdbVirustotal results 36.07%Heodo
2020-09-24INV_31124839.docdoc a71d3dae8594c0336d66e366a3911fe4f349966e73fcb6c5fc9ed3077c8fcb6cVirustotal results 27.87%Heodo
2020-09-24INV_6923846063700457.docdoc a26964e2d826f555642d9dac0e19c5bf685767b5a0cb12d9a83e6d332251b17dVirustotal results 29.03%Heodo
2020-09-24REP_PO_09242020EX.docdoc 9ca8f66ca174af2d6d9944b2cfda4685bd8710217610c24b6332ae5436c52405Virustotal results 29.51%Heodo
2020-09-24R_67457448.docdoc a6bdea3758ccb519e3736628a467290a74b47562f8a489e89346642276c9f177n/aHeodo
2020-09-24FILE_80217346.docdoc 0e30a7bc2d19a489b6c26b22e411e9f691cfb0b9d693a5888ae064519809470cVirustotal results 29.51%Heodo
2020-09-23DOC_791577408642676813673.docdoc 324337642923507f95f8882431a523b118e670bec80dc82ea989321c6abd2e37Virustotal results 29.03%Heodo
2020-09-23INV_09691697.docdoc bad24e6bdf40e58be83bdeb717bcb1a09ae986e50f8c51fdc11ff8de777a4482n/aHeodo
2020-09-23DOC_47877775.docdoc d74a0a2af76d37b9621074bc15dee942c972ea0fe761110f8767c1b836dec555n/aHeodo
2020-09-23WBXY_50154206.docdoc 904d90bfbc81471348f882ff514202163724e2e016e942a659e5e7cacfe5c9feVirustotal results 29.03%Heodo
2020-09-23Z9VYQWL0IFJVW.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23RZXSKV6ES.docdoc 15d9c4a8449193c0406c1005887328daa93d847ea063f9097f0eee39bc404df0n/aHeodo
2020-09-23J_PO_09242020EX.docdoc eabfce0e3ace401756754cf86b0f1b5f1057f2a9466eb1b74c4bb1cc0c134d71Virustotal results 38.71%Heodo
2020-09-23DOC_RW5916726219ZC.docdoc ce373513080505fd4e582d2b84d8a670e7c84c18db398f74ddce4490adb67517Virustotal results 35.48%Heodo
2020-09-23G_6H9YP5IPN6OCXZ9.docdoc 4d6009c18bae92b1e904d67ab192ace86b9375c14eeb4eb84401e3a363b403c1Virustotal results 36.07%Heodo
2020-09-23INV_XC7314719847QR.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1Virustotal results 35.48% Heodo
2020-09-23INV_66553446.docdoc 5b534bf80108820c4b2ce654b225ca8cf8fc10176fb2d3b51b3fcdb0fc5c6200n/aHeodo
2020-09-2328093209.docdoc 84d892d9a7fb0b13d3688390c0e4c1eda7945a7531348d664924f48b38e67cdfVirustotal results 33.87%Heodo
2020-09-23REP_FA0489275841EJ.docdoc 6bb96965fcd7c4acb3b22a1c3f1459a042c13a92860c474997aadfb217a905bcVirustotal results 33.87%Heodo
2020-09-23INV_PO_09232020EX.docdoc 275e74c921d4676893e049215cd0a40ade4ca28564af84272af361f86f62283aVirustotal results 33.87%Heodo
2020-09-23A_33413658.docdoc dc22889242c4ec3f0a5cbe5050df8ee1ccc8231c28a144700b02bbaea1e2a1d2Virustotal results 31.67%Heodo
2020-09-23BAL_22448888.docdoc 22aa434e3a4d0f635bf148f1f870c5a5a3847bcf2517470e76299e86dd047320n/aHeodo
2020-09-23INV_PE5760051204FO.docdoc 87147834cbde11b3f37c516844cf8d9ba78e603010280ee9eef5e29c92b10425Virustotal results 34.43%Heodo
2020-09-239THT651FYRY6MR9Y.docdoc 93376fc8dbfe2e11658564d1aa1e9088e6f7ad6a61d1ff146651df3d275c839dVirustotal results 27.87%Heodo
2020-09-23REP_03573797.docdoc 8e5061f5e4e9ccedd7ff53ed54e71fd8aa5b7f0233554264714dd85d6554dd49Virustotal results 36.07%Heodo
2020-09-23U_PO_09232020EX.docdoc 45d80072d3caf8df2c3d54d35168efdd6a9e53c59a5f5118d1a1c459fa5daa25n/aHeodo
2020-09-23FILE_PO_09232020EX.docdoc 48fb9960d4880303b9ac71ab8d6d52f5853ad6b0520aa8a6ebc470ddcbd3085fn/aHeodo
2020-09-23INV_PO_09232020EX.docdoc 1e0e7d2681a3e9e867a6dcc1c47ace2c85c1cdb60f751585adff359da52f7c87Virustotal results 33.33%Heodo
2020-09-23BAL_CS9378294188JQ.docdoc 8f58229ee88c03984d543e38f3a6c941ade770afd39c50199efb29993357db30Virustotal results 33.87%Heodo
2020-09-23BAL_65859664.docdoc 837c550fff034632d2b0963b5cbef7f23f932fb6439d9ec26b324655c31b1320Virustotal results 32.26%Heodo
2020-09-23BAL_RSHNIMI.docdoc 6597cce19314dbeb14ef1afdbc6b97dafe8bcc6483f7e4a1031300ac22db531dVirustotal results 33.87%Heodo
2020-09-23BAL_PO_09232020EX.docdoc 0d15d81842c24d36b2e24fc1f2d8eeca0cb46f6afaa26190d26a0fce7480a855Virustotal results 23.33%Heodo
2020-09-23BAL_JDN0FFIP8CXM32XO.docdoc 7928a27bbbae2f5305d56e27ed5ffc6858558e3829273fdc33307cf76f55eb93n/aHeodo
2020-09-2359081618131924679.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23L_QGYLNA6PH2D3HY9.docdoc 936e0b3b696a31047618a5ffe005e0500e2dd472581d4df1580db803e19cca8an/aHeodo
2020-09-23ZRK_090120_HBI_092320.docdoc 5ee7aea51b23645203711f5af8db6a5ed697f0bf9ece2adb34c6a23a6e220dbbn/aHeodo
2020-09-23V_QGX_090120_DJV_092320.docdoc 15b6e8645e321e35774c5f7b9e295ba0e3d31d3f116e7a67724e6e0e5f8f3ed8Virustotal results 36.07%Heodo
2020-09-23671903667421987033.docdoc ddf9cd73acc0f44cf4ae5e63e11779ce316031dced2882ea971ecc4a99a37b80n/aHeodo
2020-09-23REP_PO_09232020EX.docdoc 4e02784f17b866165db458c9ae3f13edf8dae02967921cfec16074018e8cd2e7Virustotal results 35.00%Heodo
2020-09-2375762635.docdoc 90bb75f0c88bcf2a5196f73f5bfa35fe230b05ebd75d6b6f61a1440c763aebb7Virustotal results 36.07%Heodo
2020-09-23B_34GLFVAMC0NN.docdoc 1ce7da03432f012ef79797a1eebcc19389de8f1ad5f493fe02e71ac4d324464dVirustotal results 35.48%Heodo
2020-09-23BAL_48606579.docdoc 69c8a52193abe2bc88f50c8148f109627cb56b3dae0b2a0ab1ed528d5b4cd559n/aHeodo
2020-09-23BAL_6705303537771.docdoc 567a979b7f1a51639017799b8645535f97627dcdf0a707d8daf974cc776f8ed3Virustotal results 40.32%Heodo
2020-09-23BAL_MLHYBHNTHTKCF.docdoc 3ccb6e15d1d669f80a3b40e294920eda308017848943e5539c5493a5e39cad03n/aZLoader
2020-09-23CC6029556136HX.docdoc 5cb9f67f8d803e2b5cbdfa3f2be7bb32a7cde2670256be9d0c998626a49ce7f2Virustotal results 37.10%Heodo
2020-09-23FILE_FH4471654001OE.docdoc 660f78796bad236818c239f650cb2139c4b079a2f0f5dfd4d0bc59eed2b85035n/aHeodo
2020-09-23BHY_H6UV4XU2PG.docdoc 66aa75aca1e5a0fae3797f424ff58868d5a813eeef2d2c287a893e91b60769f8Virustotal results 30.65%Heodo
2020-09-23INV_FC6599985973PA.docdoc 7fc71d784c714360d684b4c25382fe807f04a3cbd861352f3c19fa0fd789e59dVirustotal results 32.26%Heodo
2020-09-23REP_PO_09232020EX.docdoc a7305cf8e088408136fdfd5deadd230a7d00a03b1cc3fc12fc0705a30b4e0ae7Virustotal results 30.65%Heodo
2020-09-23L_VSZ_090120_UFI_092320.docdoc 8fe10663f36d8403d8c75b3a696a4dd96ded71c95bf3e5d88f34c4dc7ec96835Virustotal results 36.07%Heodo
2020-09-23REP_PO_09232020EX.docdoc ed8554b439c265332707e99e7be35db1e9e217801ed277161fcf7c6bcf98bea1Virustotal results 30.36%Heodo
2020-09-23FILE_LY8744451770IW.docdoc c6e601d3f1268441a2518c331465ffd7acd22aae6e1526662ffcac834946f259Virustotal results 27.42%Heodo
2020-09-23FILE_QRD_090120_HIE_092320.docdoc 052552b8940e682ef01c6161f4b074cbcb5dcf412f62b64eafda4e3b304368ccVirustotal results 27.42%Heodo
2020-09-23JEX_MDZ_090120_MLD_092320.docdoc a306f78cac809e60ccf84e607470e4c43f0de4efe4dcd2f0e470786a5f672a35Virustotal results 29.03%Heodo
2020-09-23BAL_831735259786636.docdoc 98f1a8a99449cb92a1d946e110ba5decc069079ddd01fe5ded4bc075313f3bd6Virustotal results 30.65%Heodo
2020-09-22FILE_4833954301713.docdoc 698748ed65c5d697095b866208160f8b4142e8d3e66a8cf826de1601fb3b080bVirustotal results 29.51%Heodo
2020-09-22PU_66019601.docdoc af31068680a432b4d1d2164488f6353795fbb745479373bbafc6a60e9cf25169Virustotal results 30.65%Heodo
2020-09-22I_ZCQ_090120_EFS_092320.docdoc c12fac9cd3355e4f8d1f11015cd59fd3b476b20758d57988889bff4c5a352726Virustotal results 30.65%Heodo
2020-09-22Q_OH5064044088LQ.docdoc c4ed4d279282ab289d7a00ba9d05f1f31af4a3dafbe02ae91aba6585d55506cen/aHeodo
2020-09-22REP_EWH_090120_MMY_092320.docdoc b84c54a1704a22ceac88f79804b5a23b2a64547cadf21d76291d01f84b0e77d6n/aHeodo
2020-09-2236250977.docdoc 5503f97a821a1c8dee9c3e1bcdc31e1fc7d98157b552c7cc79605a9d68dd8b12Virustotal results 30.65%Heodo
2020-09-22N_KD1046211786EC.docdoc 1d2f06cbed29c06113fd84cc5a4db4be24346887afa63d85909dd60882a38336Virustotal results 27.42%Heodo
2020-09-22FILE_02020401.docdoc 8f8f1029e9909427e27aa6d225db5eb6d8767560af23836c44a0abff203eae4bVirustotal results 27.42%Heodo
2020-09-22DOC_TYBJ1HBOH0E9JX.docdoc e446be795bac5464b1bb80859e2ffd0857fe8d26f1f6973457b491498010f0c1Virustotal results 27.42%Heodo
2020-09-22INV_90744635.docdoc dab27520c5577f059d11bd78d22f8d5cf492cdc0150781ba9b28b5fbacc5c185n/aHeodo
2020-09-22FILE_GJ8846544112LL.docdoc f8f2dc63225fa38d16de547469f9c418f3093385a270836e7431aad8bf52eebfVirustotal results 27.42%Heodo
2020-09-22P_5392515370.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 21.74%Heodo
2020-09-22PO_09222020EX.docdoc 0bf81a6e813d1474fb8f3bc1b2071f479aa978b3e536a2c960d60226fd1ebaaeVirustotal results 27.42%Heodo
2020-09-22REP_62791513.docdoc 158dba6d537edd9c1fb56cc2c1307f00634cf5188667321946c2247e02eb6c40Virustotal results 27.42%Heodo
2020-09-22INV_26829029.docdoc 02503f6546f32015f98eb839efb8b3d86d56b8ab5de5a30b5d6e99b4bd41802dVirustotal results 32.26%Heodo
2020-09-22JV2680539671VL.docdoc 87f58543c86151e96b31f59d447ae70c1bc19c0eaec22d93d1291679cae0ea67Virustotal results 32.20%Heodo
2020-09-22INV_PO_09222020EX.docdoc 98ed7b170bb0ed8347e7011169d58c72eb48bb85e312974151833265446a9acdn/aHeodo
2020-09-22DOC_OPC7AVL7YJNWOR.docdoc 6c12352efd4f3c01d75a62ff92dc923f367b1a81dcb6b7ccb436c8a27f1f3be2n/aHeodo
2020-09-22REP_8WZPSKQ.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 23.73%Heodo