URLhaus Database

You are currently viewing the URLhaus database entry for http://patriotpath.am/wp-includes/statement/yg058umz0u/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:601070
URL: http://patriotpath.am/wp-includes/statement/yg058umz0u/
URL Status:Offline
Host: patriotpath.am
Date added:2020-09-22 23:09:10 UTC
Last online:2020-09-24 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-22 23:10:05 UTC to network{at}abuse[dot]team)
Takedown time:1 day, 17 hours, 39 minutes Poor (down since 2020-09-24 16:49:52 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24ZJ_32839422.docdoc 35fdf71d1156a709edbfc6250568a61a62afb183218e5fc5ffc1249ab07bb4b3Virustotal results 25.81%Heodo
2020-09-248OP2807YSDU1.docdoc b56489389c1e6ac6a72a02bee6d40a243d9b77778e255686c8adaa77247a7cd8Virustotal results 25.81%Heodo
2020-09-24REP_39477036.docdoc 740ea2b635d60e6415d33b3efebb49934d260bae03b4e879ca4b78855680b019Virustotal results 22.58%Heodo
2020-09-24BAL_PJM_090120_RTC_092420.docdoc e5b9b4889b3cad8f0920a0d4153cab5517ce077683139476f36bc1bf91652725Virustotal results 21.31%Heodo
2020-09-24VOW_090120_BIV_092420.docdoc 7ff2463a4724eb9175138fd7ab47c19aa6fdfb7b5ccf1038ecf9a238be0683f0n/aHeodo
2020-09-24REP_08039309.docdoc e009e8425fa0d5b45b611b840745257948eb8d154a75046329e7bf699f3a60d9Virustotal results 21.31%Heodo
2020-09-24923516505994207213823453.docdoc 860994a6cb882e801a963f6e00a8bca34f28efaa71b690e5f77b8c2e644dafb6Virustotal results 21.31%Heodo
2020-09-24INV_PO_09242020EX.docdoc 54d6881837b3fcb6a0b3e639c58f6e159abb745d0862e1f5cabe6c7df3a3da12Virustotal results 19.67%Heodo
2020-09-24ZJAB_IP33QDIULYUZXI.docdoc 8b209e2d294b8c5b50bd83d9fd9184268ce21313f7d5876d74c7e10f48ac946eVirustotal results 20.97%Heodo
2020-09-23REP_BU3463066248VO.docdoc 1c5a69e8a8d964a5898cedf16872a9903fcf2ec9f08ce3ecd9510f8d4453c4b9Virustotal results 29.03%Heodo
2020-09-23FB8969996604YT.docdoc 313e8d2e8e5432e430d5fade511692fd225e588b5b619ddc500195e15e56d5e0Virustotal results 40.32%Heodo
2020-09-2378814873.docdoc 5d7354671a544c392039f3b512158f3505f576f34e4942109e8a7adf19bd07b0Virustotal results 35.48%Heodo
2020-09-23UCUYE2ZQGIK6B.docdoc ce373513080505fd4e582d2b84d8a670e7c84c18db398f74ddce4490adb67517Virustotal results 35.48%Heodo
2020-09-2313PE4U503O.docdoc 4d6009c18bae92b1e904d67ab192ace86b9375c14eeb4eb84401e3a363b403c1Virustotal results 36.07%Heodo
2020-09-238LKWZUYXRRXS.docdoc af30fde0408423890089732bcbfdcaceafef7e956d54f04df162a7bb72e7a673Virustotal results 34.43% Heodo
2020-09-23CCDF1BC.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1Virustotal results 35.48% Heodo
2020-09-23P_5798352202943033046487.docdoc 843b2da06ecf481cd70c1107d6a3ef2e8cf393019f8c6019d1105e0456fc3313Virustotal results 35.48%Heodo
2020-09-23G_03366359.docdoc 84d892d9a7fb0b13d3688390c0e4c1eda7945a7531348d664924f48b38e67cdfVirustotal results 33.87%Heodo
2020-09-23BAL_91940920.docdoc e8822b2b3f880e8a943b016c15c44664ac13696bcd6262ebb0563a68e77767f2Virustotal results 33.87%Heodo
2020-09-23REP_OUG_090120_ESV_092320.docdoc 275e74c921d4676893e049215cd0a40ade4ca28564af84272af361f86f62283aVirustotal results 33.87%Heodo
2020-09-23BAL_PO_09232020EX.docdoc 26614fe04700998a42fbb7c3d84cbce63bd4a32aa9de3efe130ee1366827c094n/aHeodo
2020-09-23IM8925499412YL.docdoc 22aa434e3a4d0f635bf148f1f870c5a5a3847bcf2517470e76299e86dd047320n/aHeodo
2020-09-23M_71NG2FVWZ3W9.docdoc 914b8769a89b16d3231958e8a03e2af289e32de76df9839de1c4ab3c2679f9f4Virustotal results 36.07%Heodo
2020-09-2360784402.docdoc b1d1c08b520e22fcababa993c5280c6d4ee437f6b8d975b210780fe78530e581n/aHeodo
2020-09-23BAL_JD9371437319ZA.docdoc 8e5061f5e4e9ccedd7ff53ed54e71fd8aa5b7f0233554264714dd85d6554dd49Virustotal results 36.07%Heodo
2020-09-23UNM_27555950.docdoc b4d30637f602e11b142982fa161a7f10f1f9f2c0dc53c4b92c0a3b2d4cc51974Virustotal results 37.10%Heodo
2020-09-23MW0269159524LO.docdoc 48fb9960d4880303b9ac71ab8d6d52f5853ad6b0520aa8a6ebc470ddcbd3085fn/aHeodo
2020-09-23DOC_85780911.docdoc d3cf2b43d2a246e276c8ca88790a65e01e230e8c8c39127d094f43247e2f0175Virustotal results 33.87%Heodo
2020-09-23PO_09232020EX.docdoc 8f58229ee88c03984d543e38f3a6c941ade770afd39c50199efb29993357db30Virustotal results 33.87%Heodo
2020-09-23LMZ_26029936.docdoc 9bf3580debc9cca0d98daede5437d3f9d05589a97f8239278ba209805e8c0379Virustotal results 33.33%Heodo
2020-09-23PO_09232020EX.docdoc a367f82673d105dca478418602c9f38633a5347fc2b0f565e828cb4b52e89424Virustotal results 22.58%Heodo
2020-09-23BAL_PO_09232020EX.docdoc d83b4457e963cb82b3322d4ac94c492e4ee3c024573964d25ded75239d9623ebVirustotal results 31.15%Heodo
2020-09-23K6C5XXF7CZXM4A.docdoc 0d15d81842c24d36b2e24fc1f2d8eeca0cb46f6afaa26190d26a0fce7480a855Virustotal results 23.33%Heodo
2020-09-23FILE_LX1DYCTP2BUFH.docdoc 7928a27bbbae2f5305d56e27ed5ffc6858558e3829273fdc33307cf76f55eb93Virustotal results 29.03%Heodo
2020-09-23XEYE_D5KJ6LU.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23REP_7729756054324203957459348.docdoc 0e75f83d188cce264243b1d4f3674c4772e6aeb39415aeba5a32b20362127e33Virustotal results 35.48%Heodo
2020-09-23S_PO_09232020EX.docdoc c482b94b35c677f27e5911c44179f984768ceca5388c34e6b5bdafa23dac794bn/aHeodo
2020-09-23VCM_0324291846894570.docdoc 128899ba979bf0b5b07a74f82789e723583f279e2163a0e6b6cfb5de09c0f0d1Virustotal results 35.48%Heodo
2020-09-23REP_818719346301.docdoc 27a9009cd17248d4d19b35988974f0e755e69a439f1025ece6b2ffb357087846Virustotal results 36.07%Heodo
2020-09-23L_F1V5VSQVN.docdoc 29b732cb0e36fa5a789f66f7d4cb5ff8905ce6ac1b8e18e29d056b439e177cc3Virustotal results 30.65%Heodo
2020-09-23BAL_PO_09232020EX.docdoc 096e7d0d8016a7efe13a6bcfe45e2b78d115eb681a6f855b639a9ca3c8db22c4Virustotal results 35.48%Heodo
2020-09-23B_72484746.docdoc b84c54a1704a22ceac88f79804b5a23b2a64547cadf21d76291d01f84b0e77d6Virustotal results 31.15%Heodo
2020-09-23N_20149774.docdoc be8eff5238b1b4c55eaf6bf5399d71b18bc093dbf2344c41e86f192173e1a5efVirustotal results 33.87%Heodo
2020-09-23FILE_PO_09232020EX.docdoc c6e601d3f1268441a2518c331465ffd7acd22aae6e1526662ffcac834946f259Virustotal results 27.42%Heodo
2020-09-2393092262919073132423080.docdoc 96d1563a935b2b69580ef4ad19410bdb741917fc4d0aa8855e4eba258db0645fVirustotal results 27.87%Heodo
2020-09-23W_496084291132.docdoc a0b12fdc4f5929ad169ba50c79da1722abb70cdb418ce0cac2275aea75431d9dVirustotal results 27.42%Heodo
2020-09-23IIN_090120_YDX_092320.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.87%Heodo
2020-09-23DOC_BTU_090120_GHE_092320.docdoc 98f1a8a99449cb92a1d946e110ba5decc069079ddd01fe5ded4bc075313f3bd6Virustotal results 30.65%Heodo
2020-09-22REP_YWS_090120_QBZ_092320.docdoc 0bf81a6e813d1474fb8f3bc1b2071f479aa978b3e536a2c960d60226fd1ebaaeVirustotal results 30.65%Heodo
2020-09-22REP_97PHECUW8.docdoc c288a47cc4303a39755120a6450d469a858b7bb662f27fddf022bb2fad4553efVirustotal results 27.42%Heodo
2020-09-22INV_40816126.docdoc cc43bfd0ea39a3afc6283e4734d480bf62fbbb227016a5cb42d288a8f5f3c956Virustotal results 27.42%Heodo