URLhaus Database

You are currently viewing the URLhaus database entry for http://www.qualityindustriesco.com/wp-admin/includes/swift/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:606787
URL: http://www.qualityindustriesco.com/wp-admin/includes/swift/
URL Status:Offline
Host: www.qualityindustriesco.com
Date added:2020-09-23 19:12:37 UTC
Last online:2020-09-24 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-23 19:14:06 UTC to abuse{at}publicdomainregistry[dot]com)
Takedown time:10 hours, 50 minutes Good (down since 2020-09-24 06:04:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-24FILE_PO_09242020EX.docdoc d0ef85eed2f1afb6cfdbb09ccad7eb677bb731e080ebd4975734a2e996f08581Virustotal results 38.71%Heodo
2020-09-2472233340.docdoc c1b41bcc38633ca3448055479dfc5bbca852649dbca3c9b90c0f8d884c9dd705Virustotal results 40.32%Heodo
2020-09-24CGW_090120_CPO_092420.docdoc 21d6462af9e28cac11c5b8bc20c9f07e953c7af99c15966175e8b8cfc8ee9363n/aHeodo
2020-09-24MSG_WEQ_090120_BOM_092420.docdoc b86aa2863a808be4474b2ee7285bb8642b67c9706f68b81925ae69c824defd8eVirustotal results 37.10%Heodo
2020-09-240447825382958.docdoc a48a197539aed2368c68f377ee4e1a8886412cabd39050e98b3fab282c089d39Virustotal results 37.10%Heodo
2020-09-24E_PIG_090120_WGT_092420.docdoc 109faa9ffefc2e21ff1a72efcf3e665b4be5820282f07f8fa54c14bc9f243803n/aHeodo
2020-09-24FILE_86534044.docdoc 3b95077a69ba1ee1226face3a5f83a78950357b93815180ebb6b6772cf8212e8Virustotal results 37.70%Heodo
2020-09-24DOC_IW0R40K7QLUN.docdoc 79a7d433152a96d54a0687fd65dae6aab97a6af26dd206692bf88636977729a1Virustotal results 34.92%Heodo
2020-09-24ADS_090120_GRF_092420.docdoc dd05de775c3c07e1c25cf767154016406cb4c3fc2b20a4824593c30830e79583Virustotal results 35.48%Heodo
2020-09-24FILE_QG1755441939BT.docdoc 80bbc6addbc3d97abecb341c4441b7963d70a2a863d25cf0d35137632a841fa4Virustotal results 32.26%Heodo
2020-09-24PO_09242020EX.docdoc 0185c23ef468c062bc446ffc87e7af495c49e991d0a24c67634d8f0cd3d8bf8bVirustotal results 32.08%Heodo
2020-09-24ZLHJ_27774441.docdoc 6e7ae3df631cfa3174a4e9e061f71a3453806fe930adca05896343d9e6f07ea4Virustotal results 29.03%Heodo
2020-09-24H_AGW_090120_JFI_092420.docdoc 299e08ed38b367c0db78b21b67f5fe0cd2c2d4505726b00e76e1e3da495f6a1bVirustotal results 31.15%Heodo
2020-09-24INV_BJ8901519618NP.docdoc 3caf40ca5ad83988dcc46183de98c772464dd0447db89cb8ad5cbae02587039fVirustotal results 30.00%Heodo
2020-09-24INV_09269222783139050187.docdoc a9654b509a80552021269008e33074d85ee269b8a579a23ef93bcc5aba20227cVirustotal results 29.03%Heodo
2020-09-23BAL_IMO_090120_CPF_092420.docdoc bad24e6bdf40e58be83bdeb717bcb1a09ae986e50f8c51fdc11ff8de777a4482Virustotal results 29.03%Heodo
2020-09-23JM9182240701IZ.docdoc 7340c303b5ff42ef74e8996ab95aa2b6b742e4efcc852b96349ea6085e592f37Virustotal results 29.03%Heodo
2020-09-23DOC_56151969.docdoc 843b2da06ecf481cd70c1107d6a3ef2e8cf393019f8c6019d1105e0456fc3313Virustotal results 35.48%Heodo
2020-09-23VSMG_0WK1ZJKU9C1NG2I.docdoc 84d892d9a7fb0b13d3688390c0e4c1eda7945a7531348d664924f48b38e67cdfVirustotal results 33.87%Heodo
2020-09-23PO_09232020EX.docdoc 6bb96965fcd7c4acb3b22a1c3f1459a042c13a92860c474997aadfb217a905bcVirustotal results 33.87%Heodo