URLhaus Database

You are currently viewing the URLhaus database entry for http://oatodecomer.com/wp-includes/css/dist/swift/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:698375
URL: http://oatodecomer.com/wp-includes/css/dist/swift/
URL Status:Offline
Host: oatodecomer.com
Date added:2020-10-15 19:38:04 UTC
Last online:2020-11-18 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 19:40:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 month, 3 days, 6 hours, 55 minutes Bad (down since 2020-11-18 02:35:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-16FILE_TK0759061584KN.docdoc 1682a6f58a0d8fe8135a5c7fad215ef799e173618d1292fc89e2ea3fc99f7ed4Virustotal results 32.26%Heodo
2020-10-16NVC_100120_UBO_101620.docdoc 3550b173f084aabdd854dc658b31eeac18f28c421c23052d45d5e8a92f8a3e93Virustotal results 32.26%Heodo
2020-10-15G_PO_10162020EX.docdoc 2889aa2818bb6b697ece0258b29a039f5f46f85444792ecad4d3667806bb5610Virustotal results 50.00%Heodo
2020-10-1570203930.docdoc f3aecd021c57be4a051eb58488f96cd6183ea34153cf79876db7f699d5ce1032Virustotal results 48.21%Heodo
2020-10-15REP_IO0567575431YU.docdoc 590e91cfd2bc7164b8528b3e845e9d45e8328e9148b90c0836936e9d870ca895Virustotal results 50.00%Heodo
2020-10-15DOC_01209259897852420663804.docdoc 0ab272f979fa9aed2035beb2f578c7dd1b689f64452457def9e7aca2d1c91a3aVirustotal results 48.39%Heodo
2020-10-15R_238843357250441225823.docdoc 1d9754d306c2afe8fd501b6a7449ce2b31988935a52af20866fe321c5a5b0645Virustotal results 47.54%Heodo
2020-10-15INV_557631914.docdoc 63409e6742b521d02cfb6f833ee7484c6db70237e48675a06c28cc7c9920bfe5Virustotal results 46.77%Heodo
2020-10-15BAL_TB5654584596KP.docdoc dc7ade8fcae56fa5c268c86c9602ade9af26324733a73c86e60274a9f5b8e864Virustotal results 46.77%Heodo