URLhaus Database

You are currently viewing the URLhaus database entry for https://ppd-massagno.ch/wp-includes/48732423430809424/cw4av2zvr3/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:625354
URL: https://ppd-massagno.ch/wp-includes/48732423430809424/cw4av2zvr3/
URL Status:Offline
Host: ppd-massagno.ch
Date added:2020-09-29 22:28:34 UTC
Last online:2020-10-01 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 22:30:06 UTC to abuse{at}hostpoint[dot]ch)
Takedown time:1 day, 15 hours, 6 minutes Poor (down since 2020-10-01 13:36:50 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-01R_AFN_090120_MTY_093020.docdoc 0a2e10583a6c70298eb3c353e0a15ebd98c8a9ae09db8e6cc9cef513e39c95dcVirustotal results 47.54%Heodo
2020-09-30INV_PO_09302020EX.docdoc f8fb4db3104cc2c9f261f3b3b43acb4132f5759f8e485677651a52478610f5bcVirustotal results 20.97%Heodo
2020-09-30INV_XTW15D66MK064S.docdoc 5535272f513a3009b7bfb9a6614f96d6d4ed1c65fcfd7c416583ff2f35173267n/aHeodo
2020-09-30CP5617938912WM.docdoc 24e3ba16d86892e3c786b97123151b7a2294602a61bafd3c546475d0597a2a37Virustotal results 45.90%Heodo
2020-09-30INV_04259964.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081Virustotal results 44.26%Heodo
2020-09-30BAL_XP3MRDY32.docdoc c648f66670c65dcb17a1ec6a90617481190da0ff1eced41135b2435893b66c22Virustotal results 43.55%Heodo
2020-09-30DOC_4803800805625435905551.docdoc 16570616ac7a29eab86f3d418f18b67750c4deca1c01529454e5f1a591e6fc6dn/aHeodo
2020-09-30IX8913923785WH.docdoc a1cbbf8abb7c17079dd727968cf72dadead6f70a04ffc9f51b29860c9a8d4801n/aHeodo
2020-09-301616186086083613541207.docdoc 010d313ef5a6680acc6fcdaca0eed3e19f256a23cac861684466d6e7f7138030Virustotal results 41.94%Heodo
2020-09-30REP_RW0727708333GY.docdoc 42c1f3bb9e1fae138c02e1447a93ea34c9c4859fca0078bdd3ea01145c4ed12bVirustotal results 37.10%Heodo
2020-09-30Y6WH1I7Z78RKVI.docdoc d2effbe4f93f76b3ee990f84ec39bf4705e34ee0a3925f32097fa08db254e4ffVirustotal results 37.10%Heodo
2020-09-30ZDUC_8317317057535742967.docdoc 8c21463a0b127e2db497f399810180572cf5e4027f3942919aeeccabf1d3753bVirustotal results 37.10%Heodo
2020-09-30Q_24943742514773932234931.docdoc cf47fcf596bf3abee5508f311666cec1399ab7e9b1f1632056db94a3e3a54468n/aHeodo
2020-09-30L_59722169.docdoc 8649c9f23563646d5b0033bb729307388ddb4396da639cbf0385c08ec0a01cffn/aHeodo
2020-09-3083533328.docdoc d56585c6e4a0ede125061be754c5a0c9b45728232d4c61937ffbc047df3aae30n/aHeodo
2020-09-30INV_UQ6744596788SF.docdoc 5620011cd8bf0acd1f3ecc32958d26a9f38c982b191406bada41f3db5a9250e5n/aHeodo
2020-09-30BAL_PO_09302020EX.docdoc 5fce7635748a17b0553d34bb396757644f6ab211ed7865fcd3ecf8b5f1014b29Virustotal results 30.65%Heodo
2020-09-30XM5961594076QB.docdoc c7e94b09a7bf83d363a7949d7aef5bba5516bd5b0e0c149bbd1dc341b9cd5180Virustotal results 31.15%Heodo
2020-09-29PO_09302020EX.docdoc 5bc9314961b874f09854775cf9f6bce09cc9c8106200074edb961cd544efb675Virustotal results 30.65%Heodo
2020-09-29FILE_XNH_090120_RWT_093020.docdoc defbca721d5850239ce954155a629ed1728ce578781b3e387d8c6305144f0838Virustotal results 31.67%Heodo
2020-09-29QIF_090120_XFI_093020.docdoc a0269d67f007490795637a732bf26ce5976a2b4039df3d784930ef9109697365Virustotal results 27.42%Heodo
2020-09-2928976307.docdoc 91d4d101c3e8a665106bb48847dbee3791e2a9a04c0adb2f363ae7767e463337n/a Heodo
2020-09-2934164916.docdoc a7bac9b6662da2eb4c3fa6f12c10d790ab6b8ef1735241fcd2a4d35a152a8965Virustotal results 27.42%Heodo