URLhaus Database

You are currently viewing the URLhaus database entry for http://smartcitiesatlas.com/wp-content/8499993409/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:609565
URL: http://smartcitiesatlas.com/wp-content/8499993409/
URL Status:Offline
Host: smartcitiesatlas.com
Date added:2020-09-24 08:27:17 UTC
Last online:2020-09-28 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 08:28:04 UTC to abuse{at}digitalocean[dot]com)
Takedown time:3 days, 17 hours, 19 minutes Bad (down since 2020-09-28 01:47:36 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-258NZQTCL6UQ827PQ6.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25VBNUI4J.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 27.87% Heodo
2020-09-253JR2UTJ.docdoc af8ff28fb4ea041b8cbe3e93a2c9984e483b0fbda6945bc0172d0946d5c1cb7dVirustotal results 22.58% Heodo
2020-09-25LNOO_284861803815458.docdoc fe3018c09ebbc1ba8e04839eafcb353384ffb23b0be6729808a820abc068b280n/aHeodo
2020-09-24GRNY2O3G3FAQ.docdoc 47e84b40c894119dda8c1abf4033b74ccdea7712d9ee871dde8360c87e7951baVirustotal results 20.97%Heodo
2020-09-24BT_59542460.docdoc 7732eb513243e6e3a764a526f3e87061885357e7adc6901e3ff647b039b4bda0Virustotal results 30.65%Heodo
2020-09-24INV_63842484.docdoc 356e4701cc94b7ffbf517afeef9f5c0bbe45782f861d51859f0bf099df96581bVirustotal results 32.26%Heodo
2020-09-24REP_67512244.docdoc 029de7c595a68b46233e28bbff65f065f8baf48178b6998928ebadafb8d3368cVirustotal results 32.79%Heodo
2020-09-2480134506.docdoc d0d83818424904de50c76c45ef3c2bde9e3d7a9527fa2ad35524721ab65f0f2bVirustotal results 23.33%Heodo
2020-09-24DOC_FZ6015685249YK.docdoc dcd26d0a6efa5d5e5d222fb2514b682c86ffb540ef7defc9f034278cc7857adan/aHeodo
2020-09-24BAL_PO_09252020EX.docdoc 7b5d921ddbc165e0f75ae5769137ef1546084f5d3fad75d9304b97495a5966a0n/aHeodo
2020-09-24PO_09252020EX.docdoc ff6440d9c01fb2fc8526c683c418271051ec21b1b730972f02ab6442bb0f83afn/aHeodo
2020-09-24OM3780898001UV.docdoc 2a3395e9459dc5f0fc72621c2299e98b4226e6b99cf6069d89004e3d430a219dn/aHeodo
2020-09-24INV_QXTF0IWWEV.docdoc 1fd6fc5f6c0b08fbefe966d1faab12454848f8bc73d826a7c6c843d8da75a16fVirustotal results 29.03%Heodo
2020-09-24PO_09242020EX.docdoc a72430246d4ff63a287ccdb3d3eb1eea24af39ec67b6452658454f115f5a146cn/aHeodo
2020-09-24REP_TD8545565531QB.docdoc 7ef0c540f3c535a1789981bcbe5e3dd3ba3809e8d6ef1a9745f00ccd018db031Virustotal results 29.03%Heodo
2020-09-24VUR_JTM_090120_JGQ_092420.docdoc 85c3fbc17a0daacdb938f7ea4b8dfa14ae9a099d59de1e9fef807b569c999acbVirustotal results 19.35%Heodo
2020-09-24PO_09242020EX.docdoc 85264b8b2a7f29ff8c64c3de97d3e17a58c4aa09c6a67460d5be96117461224bn/aHeodo
2020-09-24REP_1934398935582456876069415.docdoc 267834c0d23e344ce20d8814e0e5499c7f5bc32fbda08c9ebf721a3dcb2efe26Virustotal results 24.19%Heodo
2020-09-243GACDXESZDSGDK.docdoc f6f1cf12aa5337999c20c4cfd641254575e981ad7c463944cfe676ec92a23165n/aHeodo
2020-09-24CS0989791459ZU.docdoc 1e8a41d3b5b66bf2151302e128b041ae3994ea9a2a0a688a098fb691a692e222n/aHeodo
2020-09-24T_P1SDM3VWZX0R3LO.docdoc fe9b0b3adac87d1fe5b13863ff7ab54660757a7bc0b4996cfe241ff357c57b3dn/aHeodo
2020-09-24FILE_08671214.docdoc 8b90ba12e56de7cf064ee54d147a39175bea9149cef12b45b5fcc04b43808d9cn/aHeodo
2020-09-24DOC_PO_09242020EX.docdoc 7e78d353bf29cfd042c3741647fea216a70d735df0b286f87383bc7732e6ff23n/aHeodo
2020-09-24R_NO4461000303PE.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 26.67%Heodo
2020-09-24INV_858783546886467.docdoc cb1631d0c39aa43d0b8891aaca96d162c853b06f92e395beb682d5c520bc0d90Virustotal results 27.87%Heodo
2020-09-24DX4342089612OS.docdoc 14d3028b892573f0d8b812deb455b13424beb8580cd1d928cabdbe4c613a7e22Virustotal results 30.65%Heodo
2020-09-24VTNEBXIL84SK.docdoc dc23f6e5f31c7c3ce882dad5d90a145687e954e34019d5cfa3fcc72afe96bb52Virustotal results 28.33%Heodo
2020-09-24ZA_422058504.docdoc 673b66564bc293cc5e89a33f4b16692f12071b7984f57342f1e011ddd5cc96d0n/aHeodo
2020-09-24RS_IR6404470611WW.docdoc 7e5a42a73c29e93f48c97d924845eef4cce7d6a931dadaa19068f78f4bb83015Virustotal results 30.00%Heodo
2020-09-24FILE_RMR_090120_EGO_092420.docdoc 2272f7dfb66fc89d7009e57d66837d63d1e4296c78eed8333b156d7bc0eaee14Virustotal results 29.51%Heodo
2020-09-24DOC_XM7155245578AE.docdoc 94b624741c1f94566cdff34893b864991875391da2ac00168f15691c48043367Virustotal results 25.00%Heodo
2020-09-24FILE_JB5475293533IV.docdoc d6f4d312b2434777abc97c10e41bb86186836a8a9a2e08b5365e301afae8d0b3Virustotal results 23.81%Heodo
2020-09-24INV_18870419.docdoc 0c0a47166f8b2bd4ca8b24c44ebdc1729d7dd6a49d3ba2fb400812d5409b7648Virustotal results 21.31%Heodo
2020-09-24INV_LF3130145444MR.docdoc e4a782671d6a001f226fd064f2f6204cb368f6e4e82aad502a4d5cd56b65a78bVirustotal results 19.67%Heodo