URLhaus Database

You are currently viewing the URLhaus database entry for http://maxreviews.xyz/wp-includes/cl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:698965
URL: http://maxreviews.xyz/wp-includes/cl/
URL Status:Offline
Host: maxreviews.xyz
Date added:2020-10-16 01:20:08 UTC
Last online:2020-10-17 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 01:22:14 UTC to abuse{at}webnx[dot]com)
Takedown time:1 day, 1 hours, 45 minutes Poor (down since 2020-10-17 03:07:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17PO_10172020EX.docdoc cc0b6720262ce77c846acb19ec1f31511f0f465f1bfd03bd5e8bfb3c6b3e9828Virustotal results 51.67%Heodo
2020-10-17F4S29MHZ52.docdoc 633038535cf6b514ee205b7588a2e775372f1fa0f6dbdc27aa417ad211f113faVirustotal results 50.00%Heodo
2020-10-17WNIRNL1N6T.docdoc 8d9046f3f3aef8eaa74dbcc4aa33811b0f06438b3c4fd36bda76c6190da4f669Virustotal results 50.00%Heodo
2020-10-17TZSP_VCO_100120_JZX_101720.docdoc 71c1be4d00ef4ec74c73abf05187dacf0335a393a145eff2b2efd68cbaa91b67Virustotal results 54.10%Heodo
2020-10-16INV_KKG_100120_SHF_101720.docdoc 3bae78182dad47ac43920171f44e275863e25a8cbdd07ac0b0279edb751dd12aVirustotal results 50.00%Heodo
2020-10-16BAL_NA5936365501HQ.docdoc 70c3e11a1960c379e6be0215b70999623bb37cad12e932cf4d222f70f078c6d2Virustotal results 50.00%Heodo
2020-10-16VT_PO_10172020EX.docdoc 6647111dcc98f3a01470eee7de5a3b93b579a08c585cd3553cbfbdf3d54db556Virustotal results 48.39%Heodo
2020-10-16REP_81I8DCK6WLX8UW.docdoc 39dced6aa4d3785efffcddc9b87bb1744c386d811cf509ac1baef383eb0c38ceVirustotal results 50.82%Heodo
2020-10-16FILE_710242999167491295086.docdoc dae05fe983f37d53c614de68c40f3da714bccb7dd377adecaf6a7592c31cdc4bVirustotal results 51.61%Heodo
2020-10-16INV_XC4873426548KR.docdoc 0e28ab1cfd540547e916442f60de01263eaf13058f99d4cd5d15a2cd5c078f1aVirustotal results 46.77%Heodo
2020-10-16INV_Q1QH6T945KESQAZV.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfeVirustotal results 50.00%Heodo
2020-10-16832911410695401.docdoc 80605d4761a1447fe034eb12aa555f3c47129991eb479b0d4da31493633ee464Virustotal results 49.18%Heodo
2020-10-16FILE_RT6445509857BX.docdoc 65e2d908e6ada4277630aa4113bdde311bd7e49c0e6e656f3102bbb4f61924e3Virustotal results 47.54%Heodo
2020-10-16JRO5LHHG.docdoc 8b5585bc3f128dd3a3ef10f180c3a5cd06e2f68e9894551fe177b09b5b1ee0c6n/aHeodo
2020-10-16INV_880715198.docdoc 11c67e93ede508aef0bb3d1c43fd0dcc4109fa2c3c93811c94f36094662b2c23Virustotal results 47.54%Heodo
2020-10-16FILE_3511711965912152139239.docdoc ebb3b2f3e028448f7177bbd45d2de8b72115e600efa71bc4f649ef66cb30e2ben/aHeodo
2020-10-16BAL_ZP3827061378FN.docdoc c1fd24a9deadc257d29b97063f9923762034a656723d87a0196f23b1cf899e53Virustotal results 46.77%Heodo
2020-10-16TGWDK8V.docdoc b790075cf1b5ae9592d7b61d5513b6b4ae15e0df4e08226b9152f878e0ef49b3Virustotal results 45.90%Heodo
2020-10-16XJJ_57476944.docdoc a9aceace56c828f6185a5d3c739ae2a2e43d825c4b884faf02f5acf460a6be5fVirustotal results 41.94%Heodo
2020-10-16BAL_PO_10162020EX.docdoc b8031f04cccc6be26a29ea7f8ce5296fcad48e7a2aa335b460b4c62015004cbeVirustotal results 49.18%Heodo
2020-10-16H_41792800.docdoc ee640ad9d020dedce3c3a18efe2a6a9a14ed4cf50ffa64ba27090765dfb3cc6bVirustotal results 47.54%Heodo
2020-10-16X_86556173.docdoc 4bead4acd3e94b0d94cb2d3be3f50f5d9b5dd425a0d5d5caf6af43b13539d717Virustotal results 47.54%Heodo
2020-10-16FILE_RKL_100120_RZM_101620.docdoc 03fbe322a6456e5d9dba965551b7e114ce5e60b069c859a2f86c9026f3b02ac7Virustotal results 45.90%Heodo
2020-10-16INV_536841053887352145133.docdoc 691f5cbe4e05b980ee84be377f07bf6659cb32cbb7011c4ea835b730c293891eVirustotal results 45.00%Heodo
2020-10-1606200176.docdoc 0e12f49796d6d8f40e96ccabd14b42ccbd1c2097b8e8419790c0d793c3226bd1Virustotal results 45.90%Heodo
2020-10-16INV_NQI_100120_JEL_101620.docdoc 84e8abea7d9cd4e2d9c01114ed11fb7e62c9ca8ee2b0f89c9d99430189e2b02fVirustotal results 37.10%Heodo
2020-10-164T2IB263STY7.docdoc e8cf2d2aeeef9972177572c05c58a7659515a991f2601167d7512ea389672c6en/aHeodo
2020-10-16SSY_100120_HXL_101620.docdoc c776db8d620c054dfc36df81dcd693dd59598cce84323f83c4677fec5fc8eb4eVirustotal results 37.50%Heodo
2020-10-16DOC_DPD_100120_UWC_101620.docdoc 7925fefb0bb1f5625a8189d9ee045b2f5f7ed06a22fc3a75a5c4cafe11f466e0n/aHeodo
2020-10-16YUS2DR4Z72LTSI15.docdoc 6b49daf4e6a634a2ec4e7248351acc7a4b7c2d573648d369b1ffbdcfaed49b30n/aHeodo
2020-10-16DOC_IWW_100120_HGO_101620.docdoc 31d6b7258df89266703cadb66afc3728ffbd629f68ca60c950bd3b27d4cae086n/aHeodo
2020-10-16DMJ_100120_TKU_101620.docdoc dcdafcf9ad3d06aef3a381823d42a40d517e4151a657d52a07b7f64f2cec9dddVirustotal results 37.70%Heodo
2020-10-16INV_PO_10162020EX.docdoc ebd9a7a7b9549c9d6181a8972c532d559d5495d9a7decad112cb1d13c8a6e664Virustotal results 30.65%Heodo
2020-10-16DOC_PO_10162020EX.docdoc 6c6034adf70bda77f3e897034b3889552be5d6627751cd9277767494db6218ddVirustotal results 34.43%Heodo
2020-10-16YZX_48920951.docdoc e740fc6270797a0066f81948906ef8e53161c3fce038be592daa80d3f8c92516Virustotal results 30.65%Heodo
2020-10-16FILE_PO_10162020EX.docdoc c9146e559eeaafb38494a657eb583b6833b2c35dd60eafe2140ee8bc22150c96Virustotal results 31.03%Heodo
2020-10-16EN_VI1890608851YJ.docdoc 6a0b601c431187f4680301122156322706726f05eedf22684295042c3277df8an/aHeodo
2020-10-16REP_PO_10162020EX.docdoc 06e060a5282c8d2f693c8ba4aefe1f43fbe3e421913e3c26acb895b10250a4caVirustotal results 32.26%Heodo
2020-10-16VJJN_25497436.docdoc 6e1929d0be05fef19f8c294a2323971b7e2127acf7000f5e02e0a1a6555abee0Virustotal results 32.79%Heodo
2020-10-16BAL_GI9034378761IP.docdoc 3550b173f084aabdd854dc658b31eeac18f28c421c23052d45d5e8a92f8a3e93Virustotal results 32.26%Heodo
2020-10-16KS3750351543HF.docdoc b1ebf8efae5ce8d163d465c5ed7b819bdcc16fdbe03f723da2d0b61114721d04Virustotal results 50.00%Heodo