URLhaus Database

You are currently viewing the URLhaus database entry for http://datawyse.net/graham/public/LSsmSBeKjb1EdF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:616772
URL: http://datawyse.net/graham/public/LSsmSBeKjb1EdF/
URL Status:Offline
Host: datawyse.net
Date added:2020-09-28 14:32:39 UTC
Last online:2020-09-28 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-28 14:34:15 UTC to abuse{at}eukhost[dot]com)
Takedown time:1 hour, 50 minutes Good (down since 2020-09-28 16:25:07 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-28REP 20200928 178173.docdoc 664c4ce1243076b36c5720a53d168819eaa761a111939bcaf3a619c3dcdf11caVirustotal results 31.15%Heodo
2020-09-28Untitled-20200928.docdoc 0d9c32dac753bdc7140072517298cbfc1f5ed0ddacd880c8a3551a897b2b0034Virustotal results 30.65%Heodo
2020-09-28List 2020_09_28 591.docdoc e50ac8ad752bf7efab075176be571435f15a55838626de091f726f12cf598590n/aHeodo
2020-09-28Doc 2020_09_28 86366.docdoc 90b5f100db7341b2495c748b065e22c02cb9851a35759168f09d015710ac2f1fVirustotal results 32.20%Heodo
2020-09-28inf-2020_09_28-0730.docdoc 152bad8f5895221655a0046abb81dcc4b47803101d8b929bfed1baa9d4e4bb94n/aHeodo
2020-09-28INF_2020_09_28_0524919.docdoc 05d211a76b7dfa7c4cdd3b5865e73248164464f5a97c5b3b51e0b6e06fc6fda9Virustotal results 30.65%Heodo