URLhaus Database

You are currently viewing the URLhaus database entry for http://megirot.co.il/wp-admin/docs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:606786
URL: http://megirot.co.il/wp-admin/docs/
URL Status:Offline
Host: megirot.co.il
Date added:2020-09-23 19:12:10 UTC
Last online:2020-09-24 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-23 19:14:05 UTC to abuse{at}softlayer[dot]com)
Takedown time:5 hours, 2 minutes Good (down since 2020-09-24 00:17:01 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-23BAL_PO_09242020EX.docdoc 8c5a7c3909eb8fa754ea6c689f2063f553e1400cc12b30266c8f59479453ef0eVirustotal results 29.03%Heodo
2020-09-23DOC_77308157.docdoc 928e299ed0670b544432d1c87854ef00421ee91e55581b623158ef13adabf501Virustotal results 27.42%Heodo
2020-09-23INV_08046583765413970.docdoc 76435bca763f869f80daabd795435e20bd52e2cff25a5594ccc20c8be946a2e8Virustotal results 37.10%Heodo
2020-09-23FILE_44171678.docdoc f62ef7f415a25bbe326cecb39a15134327c963de9253795427a71974f8845b6fVirustotal results 34.43%Heodo
2020-09-2301252628.docdoc c9de56d138a927505138fdf267dafe6d598cdd4338db121b7d7b5f9a982a3a49n/aHeodo
2020-09-2347388023384288213962803.docdoc 0bab9cd9401d43739be303f2f040aa4559bdcfce229754a8c6f2758d3046b54cVirustotal results 35.48%Heodo
2020-09-23REP_JM3560359712VR.docdoc 17f28ba9ec3406178924435252e81db9e219bc21ccc0520d3c699ce0878dd738Virustotal results 33.87%Heodo
2020-09-23WM8684079522JB.docdoc 5d5e964840d2d7f401bae3568724b259b02c4485c211ccc7ec23c0273d11edd1n/a Heodo
2020-09-2369643482847798692724.docdoc 843b2da06ecf481cd70c1107d6a3ef2e8cf393019f8c6019d1105e0456fc3313n/aHeodo
2020-09-231389078124972631.docdoc b9b92fd2db926541ffe87cdb4d652394ddd2b33559d51db96c862ffe2e6c2e1dVirustotal results 33.87%Heodo
2020-09-23XWS_14030834.docdoc 6bb96965fcd7c4acb3b22a1c3f1459a042c13a92860c474997aadfb217a905bcVirustotal results 33.87%Heodo