URLhaus Database

You are currently viewing the URLhaus database entry for http://ammoideas.com/wp-admin/swift/qglocmb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:607599
URL: http://ammoideas.com/wp-admin/swift/qglocmb/
URL Status:Offline
Host: ammoideas.com
Date added:2020-09-23 22:57:07 UTC
Last online:2020-10-05 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-23 22:58:23 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:11 days, 17 hours, 28 minutes Bad (down since 2020-10-05 16:26:42 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25FILE_PO_09252020EX.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25REP_91924536.docdoc 32e608f5734fcb68970d54ede47ece4cf463eced4316ce2fd04fb7869d2072d3Virustotal results 29.51%Heodo
2020-09-25FILE_LL7991496157MD.docdoc 8737044355a98a9ffd49ece5bcd55b760fdd2e63b8b6b02d15028deb9d28ed36Virustotal results 24.59% Heodo
2020-09-25REP_OCG_090120_ZPB_092520.docdoc 802f04236dcc8416e167f809dda60e5623b54d39bd04e74dd1f1db148afca2d3n/aHeodo
2020-09-24BAL_USM_090120_QYC_092520.docdoc 47e84b40c894119dda8c1abf4033b74ccdea7712d9ee871dde8360c87e7951baVirustotal results 31.15%Heodo
2020-09-24DOC_412962453514828832736.docdoc 777b616a49cad6687f1706ed066ad7879d80844e9e4529a7a2416d6e0804f4e7Virustotal results 31.15%Heodo
2020-09-24BAL_62447386186793.docdoc 733d8b10af3308cfd8ebc53724d8bcc6b47a2a8652e46f3dd15d87ab5ef7f123n/aHeodo
2020-09-24REP_EL1895554169WP.docdoc 77f6b7421c9100bccb605c16d9c0135dadd0188ee14ef3d6bc11c157c91f9c81Virustotal results 32.26%Heodo
2020-09-24BAL_EM1647712568PV.docdoc b77cd70861b08e97e103e926c367d38fb18c9588b70cce776fab3c7b9888c31cn/aHeodo
2020-09-24DOC_11834979.docdoc 3f84ac47fd385bddae0dd0a222cbc04e5dcc35aecd25d8d02f94f719237af3acVirustotal results 29.51%Heodo
2020-09-24PO_09252020EX.docdoc dcffae4b2bca57b2e8b65609a127df9975ff71d81bc14a409f0058dba81ebb56Virustotal results 29.03%Heodo
2020-09-24ZG_NQN_090120_ZOY_092520.docdoc a57fc009ab0a20443a4b85deb2d976357ec107017cceda370de28f76897500a7Virustotal results 31.15%Heodo
2020-09-24DOC_UO2608703274IP.docdoc e8920178a654a05f4d58c417ab5df624d778f70deb69ef450e79c6511c72e55bVirustotal results 21.31%Heodo
2020-09-24E_77171847.docdoc 9f420a6781e129b0eb85adb6d30b0e390b5c9e7625a14eae99752e7a5ed0914dVirustotal results 20.97%Heodo
2020-09-2483987384.docdoc 85c3fbc17a0daacdb938f7ea4b8dfa14ae9a099d59de1e9fef807b569c999acbVirustotal results 19.35%Heodo
2020-09-24INV_GP4566521367UN.docdoc e065d7a8263671a9d5afd66e671dd1d8cb12ccadcde39686f63b37c411d977ddn/aHeodo
2020-09-24820618360.docdoc 00fbe37855be5d55bc265f0e5e3f284ede6342549349e4b33cf2511347b3fc13Virustotal results 29.03%Heodo
2020-09-24BAL_FH4698805348BM.docdoc f6f1cf12aa5337999c20c4cfd641254575e981ad7c463944cfe676ec92a23165n/aHeodo
2020-09-24BAL_VU9035272199TE.docdoc df802c906676713581817048e135afe20200029ac5ff1c840ba82b5bbcda75caVirustotal results 22.58%Heodo
2020-09-24MX9598104819KS.docdoc 60b9c51a988490875a152231c3217de228b7406a1378ab07263aea7f02ecd3ccVirustotal results 20.97%Heodo
2020-09-24BAL_65380493597430509523842.docdoc 8b90ba12e56de7cf064ee54d147a39175bea9149cef12b45b5fcc04b43808d9cn/aHeodo
2020-09-24DOC_41626079.docdoc a448553c9afd57c49a33c314f51f722d61923249e07fca42997522d63e4bfa9dVirustotal results 20.97%Heodo
2020-09-24REP_6I89AUBIQHOO2EC.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24HPR_090120_OHU_092420.docdoc cb1631d0c39aa43d0b8891aaca96d162c853b06f92e395beb682d5c520bc0d90Virustotal results 27.87%Heodo
2020-09-24DOC_30708926.docdoc 0ce47002a6074a859caf912c52447785977b4694c431ba468c48fc21843eba5dVirustotal results 29.03%Heodo
2020-09-24REP_ZII_090120_LZN_092420.docdoc 896f6e1b9eb9656cfc68db252241fc7087192661175a0604505742223f0ef016Virustotal results 29.03%Heodo
2020-09-24REP_DNNOSCOYG.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-24QK7389218002JA.docdoc 5b276cd9dc10cbdf1dc7dcb147761fea97b3b9407dfd13b460721747f767238fVirustotal results 22.95%Heodo
2020-09-24UT0789818044JV.docdoc 6e5bcd9db826f2b855f63e8a591e02ebb0bbd141387d2922e3e251fc8ddbcbb8Virustotal results 19.67%Heodo
2020-09-24FILE_705497685763507101.docdoc 9002b2aadfaa8b371cdf11d233531ba292b5dd90cc161bd7e132c3d49ce79fd2Virustotal results 20.97%Heodo
2020-09-24DOC_PO_09242020EX.docdoc 22d0afad8f9bf09478e526450db6e58a140ff80ce34be8b6cab70ec7b9ad475eVirustotal results 20.97%Heodo
2020-09-24PO_09242020EX.docdoc eb7751cd57d85eef7c674547d3a40c0eb9758d9b893fca13e639ac5fbf0fd39fVirustotal results 20.97%Heodo
2020-09-24FILE_PO_09242020EX.docdoc 60443647991cdcd0fb310b965e853672e8c5c83a64629a83d7ee568b23e44296n/aHeodo
2020-09-24SRGNQUU24.docdoc a92504d33c04f21f1e8bfc2322f66cf3d45f486ed7ebbf78f3ee270fb0d3e3a2Virustotal results 39.34%Heodo
2020-09-24F_541760253.docdoc 581091d124784af196ac242540f360f1ef2ab6e5e346ec9125a467b47e5e1f4fVirustotal results 37.10%Heodo
2020-09-24BAL_YA4444128001VO.docdoc 353903d7b90942b9e45059e7a1ea56eea91c412f5cf0864982870f55f9e61e98n/aHeodo
2020-09-24REP_SXA_090120_PHW_092420.docdoc 2ec5659b0eadb3f644298e5c297be25451dff898c0551365d0d757a4e5975556Virustotal results 35.48%Heodo
2020-09-2404495049.docdoc 109faa9ffefc2e21ff1a72efcf3e665b4be5820282f07f8fa54c14bc9f243803n/aHeodo
2020-09-24PO_09242020EX.docdoc 9d3a4dbf3d2bb53bc85aa8598f2eb220e74dd85928693e3fd6bca9c88e0571c2n/aHeodo
2020-09-24DOC_TDA_090120_FWU_092420.docdoc b427adb1ae5fd4b290ab65b93ea392c40c42f186b732f90768099681494d10caVirustotal results 35.48%Heodo
2020-09-24REP_59230445.docdoc fba080b64f42891f1ddec30a5a83c9881e8b8dc2e577226eb1575654caddc56fn/aHeodo
2020-09-24REP_FXC_090120_QYP_092420.docdoc 55d2d07c2dcaff03658304df8b3b1b80946d30f441ff14743dd2ea7130333746Virustotal results 35.48%Heodo
2020-09-24DOC_63115401.docdoc 0185c23ef468c062bc446ffc87e7af495c49e991d0a24c67634d8f0cd3d8bf8bVirustotal results 29.51%Heodo
2020-09-24KP_PO_09242020EX.docdoc 9ca8f66ca174af2d6d9944b2cfda4685bd8710217610c24b6332ae5436c52405Virustotal results 30.00%Heodo
2020-09-245A7WCV5Q7FI.docdoc a6bdea3758ccb519e3736628a467290a74b47562f8a489e89346642276c9f177n/aHeodo
2020-09-24REP_NJR_090120_JPW_092420.docdoc 3caf40ca5ad83988dcc46183de98c772464dd0447db89cb8ad5cbae02587039fVirustotal results 30.00%Heodo
2020-09-24INV_153094743846662210826066.docdoc a9654b509a80552021269008e33074d85ee269b8a579a23ef93bcc5aba20227cVirustotal results 29.03%Heodo
2020-09-23PO_09242020EX.docdoc a5cefc7eb57545e36ce9f959ac252dd0901cbac2b6d83bae4a92daaef93f383an/aHeodo
2020-09-23BAL_45251795.docdoc 1c5a69e8a8d964a5898cedf16872a9903fcf2ec9f08ce3ecd9510f8d4453c4b9n/aHeodo
2020-09-23INV_VDY_090120_TVX_092420.docdoc 928e299ed0670b544432d1c87854ef00421ee91e55581b623158ef13adabf501Virustotal results 27.42%Heodo