URLhaus Database

You are currently viewing the URLhaus database entry for https://weneedyourhelpnow.org/wp-content/7802910/4a7exzmk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:609532
URL: https://weneedyourhelpnow.org/wp-content/7802910/4a7exzmk/
URL Status:Offline
Host: weneedyourhelpnow.org
Date added:2020-09-24 07:52:04 UTC
Last online:2020-10-18 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 07:54:05 UTC to abuse{at}liquidweb[dot]com)
Takedown time:23 days, 20 hours, 11 minutes Bad (down since 2020-10-18 04:05:42 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-299374525129784908971.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 67.74%Heodo
2020-09-24BAL_PO_09242020EX.docdoc dc23f6e5f31c7c3ce882dad5d90a145687e954e34019d5cfa3fcc72afe96bb52Virustotal results 28.33%Heodo
2020-09-24REP_PO_09242020EX.docdoc fc98a386a0e52834ae5dcb93beb5aa33305f3e71cd4183a2e47c7c38d9cfeb1cVirustotal results 22.95%Heodo
2020-09-24REP_H4TNKWF35QYV53.docdoc 7e5a42a73c29e93f48c97d924845eef4cce7d6a931dadaa19068f78f4bb83015n/aHeodo
2020-09-24BAL_75309410.docdoc 27dc3b44a37b8d1d2c9fb8be66fc68db20eddfd82efd9aec4a13681328129242n/aHeodo
2020-09-24BAL_63815510.docdoc b56489389c1e6ac6a72a02bee6d40a243d9b77778e255686c8adaa77247a7cd8Virustotal results 25.81%Heodo
2020-09-24FILE_COR_090120_TGE_092420.docdoc d6f4d312b2434777abc97c10e41bb86186836a8a9a2e08b5365e301afae8d0b3n/aHeodo
2020-09-24IO2245977015LR.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-24REP_PO_09242020EX.docdoc e4a782671d6a001f226fd064f2f6204cb368f6e4e82aad502a4d5cd56b65a78bVirustotal results 19.67%Heodo
2020-09-24REP_PO7770411460RL.docdoc e009e8425fa0d5b45b611b840745257948eb8d154a75046329e7bf699f3a60d9Virustotal results 21.31%Heodo