URLhaus Database

You are currently viewing the URLhaus database entry for https://prsaze.com/wp-admin/browse/ivmk2ewi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:608332
URL: https://prsaze.com/wp-admin/browse/ivmk2ewi/
URL Status:Offline
Host: prsaze.com
Date added:2020-09-24 02:14:34 UTC
Last online:2020-12-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 02:16:08 UTC to abuse{at}arvan[dot]ir)
Takedown time:2 months, 15 days, 5 hours, 57 minutes Bad (down since 2020-12-08 08:14:05 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-271LTXCE7.docdoc 72b9920e61919b7fc85e4427fa0bcad4d660a87904174a9f3bc2c7ae664ef434Virustotal results 67.86%Heodo
2020-09-24INV_PO_09252020EX.docdoc 3f84ac47fd385bddae0dd0a222cbc04e5dcc35aecd25d8d02f94f719237af3acn/aHeodo
2020-09-24Z_1501771613695413135870.docdoc b9211d9fdc8cf882f69237754fd387b887bd80a07f2abe12c2f687dd04ec3ad4Virustotal results 29.03%Heodo
2020-09-24DOC_PO_09252020EX.docdoc d25aed1074e6086a1e8ee4fb6885c8accddd96469d110e343f36d2e13aaebee2Virustotal results 29.03%Heodo
2020-09-24BMG_090120_OXV_092420.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41Virustotal results 29.03%Heodo
2020-09-24Z_VZ7013215995FL.docdoc b638a54fb8b1ae9d64723adeea13dfada5ef1ad4d4c606ed9a34370f4d216d09n/aHeodo
2020-09-24BAL_428192687984.docdoc 7ef0c540f3c535a1789981bcbe5e3dd3ba3809e8d6ef1a9745f00ccd018db031Virustotal results 29.03%Heodo
2020-09-24BAL_999949748116.docdoc 2c9f95721bca3535da3fda89ec8fe49002a06a7fe0aa92c9dee5ad34872c388eVirustotal results 19.35%Heodo
2020-09-2487935296.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bn/aHeodo
2020-09-24TAW_PO_09242020EX.docdoc 9c92b09435e053ed7b07f0d33360b840b95e0bbd64092e06bf09020307e84b9aVirustotal results 30.65%Heodo
2020-09-24O_PO_09242020EX.docdoc f6f1cf12aa5337999c20c4cfd641254575e981ad7c463944cfe676ec92a23165n/aHeodo
2020-09-24BAL_24646276755132479817.docdoc 2a383eeb24d148e1343c8ac61522fdc8b79c8fe8c0f5f1079009ca43cfed93bfVirustotal results 22.95%Heodo
2020-09-246038002217026.docdoc 29f8908fad78f532f3e53d23cd10d6289376b52c559e2398ab3a2ceb671ba1cbn/aHeodo
2020-09-24INV_YRMC8TNQ9542ZK4.docdoc 32bbcef052b442f62a2fbb0c5dad498dcb779148f31f2e51d4f7a38245024f8en/aHeodo
2020-09-24OAB_090120_RPT_092420.docdoc 60b9c51a988490875a152231c3217de228b7406a1378ab07263aea7f02ecd3ccn/aHeodo
2020-09-24BAL_82262331.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24DOC_KHTFIQCS.docdoc f1d7646cf6abe9a746a6dab251be541e66a294060a1f32665b7e1c5d54de17dcn/aHeodo
2020-09-24K_25674527.docdoc b8a9d5f54e75467b003cb37db317d9537fc49705aa3334531937929937b0eaaeVirustotal results 29.03%Heodo
2020-09-24VJ9554119281PJ.docdoc 93c0790b6cd535f144d4fa5ee875e3fbc326b0572a4cb139f83195f4761fc370n/aHeodo
2020-09-24DOC_02941686.docdoc 994f606a00cbfa00d23303bdaf545487afedc4d6fe4d580890a702d11411885cVirustotal results 28.33%Heodo
2020-09-24DOC_2119335304589883151.docdoc 0b102ec43b4bf3d7459491664e5c2f731286d92134e87e00967a144e59c28ad0n/aHeodo
2020-09-24BAL_954141156201147451504568.docdoc 5c7bfd1823b37a4f48ff0166d60e88e0be88ae562cf87c6bf393597da4fd835bVirustotal results 27.42%Heodo
2020-09-247142922518729390934336325.docdoc 251086a8d6a3f83e2b9ee3ee013730af40923e3ba194b89a3610e20becc05a1dn/aHeodo
2020-09-24REP_SY2153805075BU.docdoc 94b624741c1f94566cdff34893b864991875391da2ac00168f15691c48043367Virustotal results 25.00%Heodo
2020-09-24WINWIO1.docdoc d6f4d312b2434777abc97c10e41bb86186836a8a9a2e08b5365e301afae8d0b3n/aHeodo
2020-09-24FILE_01509600.docdoc 33c770f81db667213e95c2c605c64bbb8aaedd59dc212d411eee46171f3020a3Virustotal results 22.58%Heodo
2020-09-24MKH_090120_DDW_092420.docdoc cc6d1e1779c379b470c18ec2a37174c042c003b17425e7bddbd43876e7c8759dn/aHeodo
2020-09-24FILE_VED_090120_PEI_092420.docdoc 573cf8b0e537a825c17e7f74be98dc2516d0b509eb22cc7a259717e53d50ec53n/aHeodo
2020-09-24LQX_090120_KCG_092420.docdoc e009e8425fa0d5b45b611b840745257948eb8d154a75046329e7bf699f3a60d9Virustotal results 21.31%Heodo
2020-09-24REP_93233411.docdoc 8f268a0429aeffbf76fa1784b79923863ceec143025e3f54b2dacf965a988f7fn/aHeodo
2020-09-24DOC_PL3741636267WR.docdoc 22d0afad8f9bf09478e526450db6e58a140ff80ce34be8b6cab70ec7b9ad475eVirustotal results 20.97%Heodo
2020-09-24TPK_090120_WTJ_092420.docdoc eb7751cd57d85eef7c674547d3a40c0eb9758d9b893fca13e639ac5fbf0fd39fVirustotal results 20.97%Heodo
2020-09-24BAL_60048311.docdoc 60443647991cdcd0fb310b965e853672e8c5c83a64629a83d7ee568b23e44296Virustotal results 45.16%Heodo
2020-09-24GTK_090120_WTL_092420.docdoc a92504d33c04f21f1e8bfc2322f66cf3d45f486ed7ebbf78f3ee270fb0d3e3a2Virustotal results 39.34%Heodo
2020-09-24JEA_090120_SOP_092420.docdoc d0ef85eed2f1afb6cfdbb09ccad7eb677bb731e080ebd4975734a2e996f08581n/aHeodo
2020-09-24XLI_090120_IRH_092420.docdoc 3b2da1783943899a3e23e20477670990adbde1f6edb9bb2e2ec1aa640c601f3dVirustotal results 35.48%Heodo
2020-09-24GAL_090120_TCQ_092420.docdoc c157afe5eb9208b3fe20c864292c3f7a3c1eb02486f1a6b31fd8ef0349a9f3faVirustotal results 36.67%Heodo
2020-09-24REP_PO_09242020EX.docdoc 7aed739ebb48064d94fa17f51816a7d3f4414ec8d578a6bde0830e844055e971n/aHeodo
2020-09-24DOC_24222832.docdoc 8f054924ac0e3a72b2725a18206bf1e2faaa327460d2e7199b1152126241d054Virustotal results 35.48%Heodo
2020-09-24INV_QUC_090120_PZM_092420.docdoc 3e64351afeaa45724ba4e119f792781b8f1e311623e056e6c7f2f27f2ee9cc5aVirustotal results 35.48%Heodo
2020-09-24REP_ARR_090120_QTW_092420.docdoc fba080b64f42891f1ddec30a5a83c9881e8b8dc2e577226eb1575654caddc56fn/aHeodo
2020-09-24INV_HG9357497371IK.docdoc a5be49695d9d336e787b37a7a4955307a263c426f7cae3cecdd69d2bfe026585Virustotal results 32.26%Heodo