URLhaus Database

You are currently viewing the URLhaus database entry for http://swiftlogisticseg.com/wp-admin/esp/qawc68t/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:610596
URL: http://swiftlogisticseg.com/wp-admin/esp/qawc68t/
URL Status:Offline
Host: swiftlogisticseg.com
Date added:2020-09-24 19:50:06 UTC
Last online:2021-06-28 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 19:52:06 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:9 months, 6 days, 18 hours, 19 minutes Bad (down since 2021-06-28 14:12:04 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-2559358304.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25REP_CKR_090120_HEU_092520.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 27.87% Heodo
2020-09-2509894981.docdoc 8737044355a98a9ffd49ece5bcd55b760fdd2e63b8b6b02d15028deb9d28ed36Virustotal results 24.59% Heodo
2020-09-25BAL_VY5457658511FM.docdoc ddca7bd9923ea1a93f054a8ea4c749b80793daf20550c9ee2f4e63446572c400Virustotal results 22.58%Heodo
2020-09-240NFMFE5HSR.docdoc 30a0c59711e06c411f4e1a20c649f507a1ef69742192df4ede24d92289aee591n/aHeodo
2020-09-24UG5844201835RE.docdoc 7732eb513243e6e3a764a526f3e87061885357e7adc6901e3ff647b039b4bda0Virustotal results 30.65%Heodo
2020-09-24BAL_WUJ8SOP8C.docdoc cdd71002bc856432c4601d28ab82f21a59cc5dfd779119a556b6e353a3a9f5efn/aHeodo
2020-09-24PO_09252020EX.docdoc c8e1fe8c16784222fdc737735ed29812a5f1721e61b75f3386fa6ea802c9b525Virustotal results 21.31%Heodo
2020-09-24REP_PO_09252020EX.docdoc 46996b6a7e3fb5f718730ed86bbfa6e57792d961db1bd60352e17703af38134eVirustotal results 29.03%Heodo
2020-09-24G_IYJ1YM44.docdoc 7e1935fab86166df5d6770468bf12c57a50720c0b7ba90e21accf2ca8493ce15n/aHeodo
2020-09-2457253896.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 32.26%Heodo
2020-09-24FILE_64117400085814320382926.docdoc 96d9b3d02df7aea418bb5629677cc35f0eaee5ea68e2373e23a730378f5f5297Virustotal results 29.51%Heodo
2020-09-24FILE_45837559.docdoc 2a3395e9459dc5f0fc72621c2299e98b4226e6b99cf6069d89004e3d430a219dVirustotal results 29.03%Heodo
2020-09-24DOC_LR1100376755GM.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41n/aHeodo
2020-09-24F_3104QBD7CLCW0CN5.docdoc 5bbcb03cbdf0fa9eb5854ee7d5c7d3669e469fbde2dd1cfe0b6c4767dd19d138Virustotal results 29.51%Heodo
2020-09-24BAL_OP4335600601RU.docdoc 9f420a6781e129b0eb85adb6d30b0e390b5c9e7625a14eae99752e7a5ed0914dVirustotal results 20.97%Heodo
2020-09-24ZDP_22781181072305.docdoc ea20a59b71ee8c21c84eece43e58023ef1be9265e0198df81b95d6af3b4d38e9Virustotal results 29.03%Heodo
2020-09-24I_7630735543074232144665628.docdoc e065d7a8263671a9d5afd66e671dd1d8cb12ccadcde39686f63b37c411d977ddn/aHeodo