URLhaus Database

You are currently viewing the URLhaus database entry for http://safoss.co.za/wp-admin/FILE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:599718
URL: http://safoss.co.za/wp-admin/FILE/
URL Status:Offline
Host: safoss.co.za
Date added:2020-09-22 19:25:37 UTC
Last online:2020-10-08 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-22 19:26:02 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:15 days, 18 hours, 7 minutes Bad (down since 2020-10-08 13:33:43 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24REP_06891678004.docdoc 0c7afbe35c98a28e15a89bfcadca720430162ad730a496d96595ecfbd3cd1683Virustotal results 19.67%Heodo
2020-09-24BAL_51525393.docdoc 1e8a41d3b5b66bf2151302e128b041ae3994ea9a2a0a688a098fb691a692e222Virustotal results 24.19%Heodo
2020-09-24SVO_090120_ZGV_092420.docdoc 5cbf1dbfb7530a124b943acb74153419ea9a9f6430256394a40e958a34dcec0dn/aHeodo
2020-09-24INV_F9MCH4J6151QY3Z.docdoc 7f2909dbaff2ca4d076322b968a100de8c38b257858149d44dc8976189d2571fVirustotal results 20.97%Heodo
2020-09-24F_43531935550985900225.docdoc 43204d25bd95979baf79eb7193cc7466a0fd658e87c94d666d71b88ac6979e88Virustotal results 20.97%Heodo
2020-09-24W_H4D0IO7Y8O3M.docdoc 37b5d86751a2c999901df382ddadc7aa72d891a4e24ef527e02266ffab2efa41n/aHeodo
2020-09-24BIJ_090120_UYC_092420.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 26.67%Heodo
2020-09-24028340907959940831.docdoc 36d85a22ed91060a9856d8e691083a49da8ba00d0d3d7fb87819e36fe325c31dVirustotal results 30.65%Heodo
2020-09-24PO_09242020EX.docdoc 2e3f0cba76c76de6beb1d7782576c1913d7a5ec9e471a36bac04827d26b0185dVirustotal results 31.67%Heodo
2020-09-24PO_09242020EX.docdoc f97b2fe462e15ffbe47937e6d6ad815595fdb180d137a7ddd92f9f41e5a6b5eaVirustotal results 27.42%Heodo
2020-09-24UB2862516963WW.docdoc 7e5a42a73c29e93f48c97d924845eef4cce7d6a931dadaa19068f78f4bb83015Virustotal results 30.00%Heodo
2020-09-24INV_79253799.docdoc 5c7bfd1823b37a4f48ff0166d60e88e0be88ae562cf87c6bf393597da4fd835bVirustotal results 27.42%Heodo
2020-09-24BAL_886764608.docdoc d9e5e99a04e37db7783f369c532e2e6d5171b90a286f2c397fcd6356a1abcce9n/aHeodo
2020-09-24INV_YBN2F7BG.docdoc b56489389c1e6ac6a72a02bee6d40a243d9b77778e255686c8adaa77247a7cd8Virustotal results 25.81%Heodo
2020-09-24REP_PO_09242020EX.docdoc 33c770f81db667213e95c2c605c64bbb8aaedd59dc212d411eee46171f3020a3Virustotal results 22.58%Heodo
2020-09-24DOC_LJZ1DBAB8MD0FO0R.docdoc 0124d3e8aff15d102fb833f22f02e06f09205ee29cc4bb8c1bd2568234eeb319Virustotal results 20.97%Heodo
2020-09-24Z_7354264039204526.docdoc c8de91c5a698b19b834995d8d06dcfdbbd8147015a34eaf4fa99ccd6cdf012f9Virustotal results 20.97%Heodo
2020-09-24M_FW0512098921QU.docdoc e009e8425fa0d5b45b611b840745257948eb8d154a75046329e7bf699f3a60d9Virustotal results 21.31%Heodo
2020-09-24REP_636497435942456688.docdoc 6cbd2115091ed6aac27b36f75ef0aa1328e9cd43fc463b039ff9cefed0d8b1f8Virustotal results 20.97%Heodo
2020-09-2469296940.docdoc 54d6881837b3fcb6a0b3e639c58f6e159abb745d0862e1f5cabe6c7df3a3da12Virustotal results 19.67%Heodo
2020-09-24B_9THT651FYRY6MR9Y.docdoc e2dffd7e2a3663a738dac21fd590dec2cce14df9ccf7aebcc5944258a827bc04Virustotal results 20.00%Heodo
2020-09-2480602099.docdoc e03588b5c327278e634c775b1f13c311c8aa3494cddd7aff114eab54dcae3c5eVirustotal results 40.32%Heodo
2020-09-24IG1318618987WX.docdoc d0ef85eed2f1afb6cfdbb09ccad7eb677bb731e080ebd4975734a2e996f08581Virustotal results 38.71%Heodo
2020-09-24REP_19483852.docdoc 19cb69cbc19879e5cae4e56b1d702cfcd04c72ebf8a9c795592d509a91e5a2ean/aHeodo
2020-09-24DOC_LUUDDVCGFAX1WE27.docdoc 353903d7b90942b9e45059e7a1ea56eea91c412f5cf0864982870f55f9e61e98Virustotal results 37.10%Heodo
2020-09-24DOC_PO_09242020EX.docdoc 813c3689cf9fecd602a950034dcd90f060f360f68193e239a02e13ed8587c220n/aHeodo
2020-09-24FILE_49341879.docdoc 7aed739ebb48064d94fa17f51816a7d3f4414ec8d578a6bde0830e844055e971n/aHeodo
2020-09-24INV_J4DLUQ227ZVO1ED.docdoc 8f054924ac0e3a72b2725a18206bf1e2faaa327460d2e7199b1152126241d054Virustotal results 35.48%Heodo
2020-09-24QQ6837530382NH.docdoc 79a7d433152a96d54a0687fd65dae6aab97a6af26dd206692bf88636977729a1Virustotal results 35.48%Heodo
2020-09-24GTG_090120_KPQ_092420.docdoc 7f480dae416960104d9733a280be27c1a6381c1a310cb1f7b7b4acb7aa83fcdbVirustotal results 36.07%Heodo
2020-09-24BAL_RPZ_090120_HSJ_092420.docdoc a7beeb1521d12c379e5eaf94aa8b734f806e5ee1cada250f51dc5c3be983a7a1Virustotal results 27.42%Heodo
2020-09-24FILE_JZ6804554490FO.docdoc 0185c23ef468c062bc446ffc87e7af495c49e991d0a24c67634d8f0cd3d8bf8bn/aHeodo
2020-09-24L_YP1017565851BX.docdoc 63a21ca1981314f43015cca1b3f053dfde7f225e00d9efa0e76816c438ab00ceVirustotal results 29.31%Heodo
2020-09-24REP_52720655.docdoc dd71f46f9effed338d5abf88b9b02d44434366d833bb55051cdec45c5b090916Virustotal results 30.65%Heodo
2020-09-24BAL_2153607152821758288551066.docdoc 1cc5edeae07046d2a02914d85adea7d129c619124b76e405e99f63acb512503cVirustotal results 29.03%Heodo
2020-09-24PO_09242020EX.docdoc 097a3af6719d48a0d83d9c75a6e8edc0d4cbbfd508488a6bc28c27fd21b3e7d3Virustotal results 28.33%Heodo
2020-09-23NT3737401073YZ.docdoc a5cefc7eb57545e36ce9f959ac252dd0901cbac2b6d83bae4a92daaef93f383an/aHeodo
2020-09-23INV_PO_09242020EX.docdoc 904d90bfbc81471348f882ff514202163724e2e016e942a659e5e7cacfe5c9feVirustotal results 29.03%Heodo
2020-09-23YNX_AEO_090120_KCN_092420.docdoc 928e299ed0670b544432d1c87854ef00421ee91e55581b623158ef13adabf501Virustotal results 27.42%Heodo
2020-09-23REP_4174071249887928206350.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23INV_PO_09242020EX.docdoc f62ef7f415a25bbe326cecb39a15134327c963de9253795427a71974f8845b6fVirustotal results 34.43%Heodo
2020-09-23SEDW_0VZ166Z8KMY8A86I.docdoc 1564b58731e911bff6e6da3fd6f973730406a155c372f7da226cf5c2e53f295bVirustotal results 39.34%Heodo
2020-09-23FILE_OU0610289649HQ.docdoc 0bab9cd9401d43739be303f2f040aa4559bdcfce229754a8c6f2758d3046b54cVirustotal results 35.48%Heodo
2020-09-2306271376.docdoc 17f28ba9ec3406178924435252e81db9e219bc21ccc0520d3c699ce0878dd738Virustotal results 34.43%Heodo
2020-09-236606183241134.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1n/a Heodo
2020-09-23A_LI2NIRID6M6ZJ.docdoc 3d0062b20db4e52a4f9612964699a06f8920aa931e2126424d8190273b7eb948n/aHeodo
2020-09-23YW8466568625VY.docdoc b2f9a597db846fff8f8fed8d950d0b3be1f06ba1dfe8add6aef001f6d469acfaVirustotal results 34.43%Heodo
2020-09-23137564747644761.docdoc 84d892d9a7fb0b13d3688390c0e4c1eda7945a7531348d664924f48b38e67cdfVirustotal results 33.87%Heodo
2020-09-23FILE_35222563.docdoc 6bb96965fcd7c4acb3b22a1c3f1459a042c13a92860c474997aadfb217a905bcn/aHeodo
2020-09-2376263780.docdoc 22aa434e3a4d0f635bf148f1f870c5a5a3847bcf2517470e76299e86dd047320Virustotal results 34.92%Heodo
2020-09-23DOC_58678962138885687236188.docdoc 60c842c5f189f507fc85b61c2c4f51f02082609590c8b3e38580179f6d6c6657Virustotal results 36.07%Heodo
2020-09-23KK7007479573AG.docdoc 4b0e29a0d673d560b6df4e53351b808d2e1fc353ccf87d6488ab1a387056212eVirustotal results 37.70%Heodo
2020-09-23REP_PO_09232020EX.docdoc bbb6d73f3985fbf140b54d8d677505a103c94a9bb2c084c3fb92dc9c80e06a80Virustotal results 31.15%Heodo
2020-09-23X_WBR1RELV.docdoc 8e5061f5e4e9ccedd7ff53ed54e71fd8aa5b7f0233554264714dd85d6554dd49n/aHeodo
2020-09-23RKQF_46556090.docdoc bb8142568de9017ef615f6eb92b63a11795c3d48f30b36957efb191f225ee49bn/aHeodo
2020-09-23HWC_090120_GPC_092320.docdoc c48430dee3311969d79bb76efef383c593b2e197de026d6c9cdb9bb7e1681d78Virustotal results 35.59%Heodo
2020-09-23FILE_1D1U84Q6I2MNY.docdoc 952b656649c633a039c06ac4138ac005b789c82749170299de7fbb2a45f22a10Virustotal results 37.10%Heodo
2020-09-23BAL_JKCJK76CP.docdoc d3cf2b43d2a246e276c8ca88790a65e01e230e8c8c39127d094f43247e2f0175n/aHeodo
2020-09-23LX3416747254QP.docdoc 1cf04ce2088e4668862b236ff64c927dabb94b87783eacd8cb0818cdd35bd6b4Virustotal results 35.00%Heodo
2020-09-23SK7072426589LM.docdoc d4390cd40a3c73248ab3f9394b7f48d2856dcc08e7291ad0514634f0ce5cafa1Virustotal results 33.87%Heodo
2020-09-23FILE_KT6891024662DI.docdoc a367f82673d105dca478418602c9f38633a5347fc2b0f565e828cb4b52e89424Virustotal results 22.58%Heodo
2020-09-23DOC_KFU_090120_PUB_092320.docdoc d83b4457e963cb82b3322d4ac94c492e4ee3c024573964d25ded75239d9623ebVirustotal results 31.15%Heodo
2020-09-23INV_O5DUWJHJ.docdoc 0d29833748c1bbcd9a64f636739cd5318c8ac6bbb3f8b5eeff6f84bd0e171cb9Virustotal results 32.79%Heodo
2020-09-23DOC_LHY6HVA2W.docdoc 7928a27bbbae2f5305d56e27ed5ffc6858558e3829273fdc33307cf76f55eb93Virustotal results 29.03%Heodo
2020-09-23MU4674721306XH.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23FILE_JP54MXG.docdoc 93fddf6220e95dc443df2a8bea1bd77d75a502ca3d7ba4428a6f7eccdf3c659eVirustotal results 35.48%Heodo
2020-09-2319148417.docdoc c482b94b35c677f27e5911c44179f984768ceca5388c34e6b5bdafa23dac794bn/aHeodo
2020-09-2361276024.docdoc 128899ba979bf0b5b07a74f82789e723583f279e2163a0e6b6cfb5de09c0f0d1Virustotal results 35.48%Heodo
2020-09-23INV_JX5208557750JM.docdoc a306f78cac809e60ccf84e607470e4c43f0de4efe4dcd2f0e470786a5f672a35Virustotal results 29.03%Heodo
2020-09-23627799682399791717485.docdoc 1c64de03ffee1b612358e9f45424fa90efb35ee3f384839c5d48f8932bdb23a9Virustotal results 31.15%Heodo
2020-09-23EAH_090120_KJM_092320.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 26.23%Heodo
2020-09-22FILE_MJB_090120_MQL_092320.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efVirustotal results 27.42%Heodo
2020-09-22BAL_SGKQM0RXDQ3680K.docdoc cc43bfd0ea39a3afc6283e4734d480bf62fbbb227016a5cb42d288a8f5f3c956Virustotal results 27.42%Heodo
2020-09-22RP1383246123NO.docdoc eec6b346639f5aa9208c2fbc57161a281b1f72b3902a41ffdfe3a3a5b1ae3a3an/aHeodo
2020-09-22P_N8TGQRG.docdoc 096e7d0d8016a7efe13a6bcfe45e2b78d115eb681a6f855b639a9ca3c8db22c4Virustotal results 30.65%Heodo
2020-09-22YH_63420933.docdoc 53dde3ba3a9c47b693f01a8904d5d1c223cb25c08f0488ff97b08e05dbbc7be6n/aHeodo
2020-09-22TL4387351140MK.docdoc be8eff5238b1b4c55eaf6bf5399d71b18bc093dbf2344c41e86f192173e1a5efVirustotal results 27.42%Heodo
2020-09-22DOC_34422569.docdoc 8f8f1029e9909427e27aa6d225db5eb6d8767560af23836c44a0abff203eae4bVirustotal results 27.42%Heodo
2020-09-22FILE_07658040.docdoc b9230204a6b5bb648c78437d34a9350a40aa179243813ecef19402cd1f319b96n/aHeodo
2020-09-22DOC_53455124.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.42%Heodo
2020-09-22O_77165895.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405can/aHeodo
2020-09-22BAL_QXS_090120_TGF_092220.docdoc 65da347c17ea74a9ddd129c6a7d05a42b72f4d4588b3d53e70ce9e96a118cd69Virustotal results 27.42%Heodo