URLhaus Database

You are currently viewing the URLhaus database entry for https://helpyfinder.com/wp-admin/docs/ahntm6kjmaj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:702049
URL: https://helpyfinder.com/wp-admin/docs/ahntm6kjmaj/
URL Status:Offline
Host: helpyfinder.com
Date added:2020-10-16 13:31:19 UTC
Last online:2020-10-19 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 13:32:31 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:3 days, 4 hours, 41 minutes Bad (down since 2020-10-19 18:14:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17C_PO_10172020EX.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-17INV_21746695600177.docdoc b61cc94625d0aec1674d3ffb90ade5b30575e1eb8a755f9944cfcb4d40378041Virustotal results 51.61%Heodo
2020-10-17G_AZ8521454728SL.docdoc 5ab2456a7a5d44a28ef32f5ac8c55e8eaf4b24802b2d326a29cd9aa4199e0b97Virustotal results 53.33%Heodo
2020-10-17DOC_EWL_100120_FRP_101720.docdoc 169fa4037e8c45a38a3b2e862d860e955fc810c63682c78155bbbd45820b83bfVirustotal results 54.84%Heodo
2020-10-17REP_YY9560639232NG.docdoc 5bc6a9797e0e1b206a0d2d341e88b730f01312279122e98e1dc2873f48b2102aVirustotal results 53.23%Heodo
2020-10-17M_3682244096073.docdoc 8eed16b7e0a64351cb06ea437eeae8f69b227cac04237187ed17cff470a3cb0dVirustotal results 58.18%Heodo
2020-10-17798379347265140.docdoc 67d27bed76861586613fbc785b6d089a2e01fd18bab5219bbe4df011e29f711fVirustotal results 53.23%Heodo
2020-10-17ON342DO81D8TFMR.docdoc 797ebeb27b3af7fa872d899601baf807800f85a84371fbee97e2232f841c4ae4n/aHeodo
2020-10-17REP_PO_10172020EX.docdoc bf7d2c74845e2e6006ed753d93f64d23813dba57c4f443be01f59915f96aaca4Virustotal results 53.23%Heodo
2020-10-17E8YGYOY63MVPCW.docdoc ea065a0dbc3ca645237d0c98e82887ca636451f3fa822c6c0a087a2fe98c230fVirustotal results 53.23%Heodo
2020-10-178596392788739679099139.docdoc 72e665a7d43027e4ad6206ba82bfb44f113e89c81b249b2c9ea29c45faf022ddn/aHeodo
2020-10-17FILE_S4DGYY48FY9XHJKZ.docdoc 7f7aaae8116f26c7d91c5c3d87ab7c7a752e628195c25563cc7c3074669e6c7an/aHeodo
2020-10-17BAL_ZX5674575514TE.docdoc 6d5ed047cba0f40a2bd108fdb285520a5590c29ac64b7a9d32a20719905f1e7cVirustotal results 53.23%Heodo
2020-10-17BAL_MA0207434704KI.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6n/aHeodo
2020-10-17GV66SUC6.docdoc ca5d768289c225dea34f82176591548fc03963cf653f0a8ea0b6e0f9f71ca3aaVirustotal results 54.84%Heodo
2020-10-17FILE_23995667.docdoc 0b6de51a7fc8020fa3be7dfd2c2b6665da9ebc357d07f70828653ef7191b9dd0n/aHeodo
2020-10-17RPI_YI4182319322ML.docdoc 8358ae3aef04560a786b84a17aa88a981d700993291a3b11aa001fab16829ad9Virustotal results 50.00%Heodo
2020-10-1727227448768168595528192.docdoc c85fe8825461de0503c8b9b612f01c88a1124e0c33ace58d20c22cf40c4bd03fVirustotal results 51.61%Heodo
2020-10-17BAL_QFO_100120_PSH_101720.docdoc cc0b6720262ce77c846acb19ec1f31511f0f465f1bfd03bd5e8bfb3c6b3e9828Virustotal results 51.67%Heodo
2020-10-17I_8M683J74YUBE1.docdoc bb96b8f7ca8418e8d16ada7ed78c33abe3bd24d7ca843033cc73e73e4c606fdaVirustotal results 51.61%Heodo
2020-10-17YIH_PO_10172020EX.docdoc db234da6bba5f671c8a6fad07cfc6ad7ce1b078a32f920e2edb4b142167e18dcn/aHeodo
2020-10-173850837044925819313848773.docdoc eb06448eea7b0d73132945671275ea572688e13de195a89974d8315900ff8cb7Virustotal results 52.46%Heodo
2020-10-17REP_13567247.docdoc 4f6043ed53481592c3b9db4608a157df568b466062cba2018b8e5c59bfb40563Virustotal results 52.46%Heodo
2020-10-17DC5446352172HE.docdoc 72bc6543f22de398e1374caed638e9a1d24ec0b37a5fa9b5ac10ade7559ab839Virustotal results 51.67%Heodo
2020-10-17DOC_05601702.docdoc c40e490d1149a43b982a7c65d5f04d36117a86623374f75bf8d47f31090f8b18n/aHeodo
2020-10-17N84D8CK00NS3DN3.docdoc 71c1be4d00ef4ec74c73abf05187dacf0335a393a145eff2b2efd68cbaa91b67Virustotal results 50.00%Heodo
2020-10-16346728417309.docdoc 8e0082cbc47e4f5638313b20400e4874bb6371c424ee7ba8eb29009692653676n/aHeodo
2020-10-16GVG_100120_YBZ_101720.docdoc 53467ef76cb2d0f4cc9404439089220dd6d34680c167f2f062307713724ee9bbVirustotal results 50.00%Heodo
2020-10-16DOC_FK2507559125LX.docdoc 6647111dcc98f3a01470eee7de5a3b93b579a08c585cd3553cbfbdf3d54db556Virustotal results 48.39%Heodo
2020-10-16BAL_67780278.docdoc 9ff9f9b081c0332ad86c6bfa7b467c8084c4531de62f4d64cb0ea17f73ab4c0dVirustotal results 51.61%Heodo
2020-10-16BAL_PO_10172020EX.docdoc 23600bb2ceb80154b049764a263e10cc02148048a332d10edf6458fc4b2cc34cVirustotal results 46.77%Heodo
2020-10-16VRL_100120_DFF_101720.docdoc 0e28ab1cfd540547e916442f60de01263eaf13058f99d4cd5d15a2cd5c078f1aVirustotal results 46.77%Heodo
2020-10-16PO_10172020EX.docdoc f8b980774cc06cbfa822245a47e48d9bd3280bf6cf2bd96628d02e54c84baf3an/aHeodo
2020-10-16REP_WXOXBA77.docdoc 2fbf73e1a8260214e5654186383efb89efb8590b71bcb92848290ffb06b90c8cn/aHeodo
2020-10-16PO_10172020EX.docdoc 66c7e2fbf3c8c1188e708104ba2e10cb445c38f0aba80cf91527d2d1a36f2be9Virustotal results 45.90%Heodo
2020-10-16FILE_PO_10162020EX.docdoc 0592df728f9353ff5f892eba34b3e4a89511bebcf05071738614f9c16c4c640aVirustotal results 46.77%Heodo
2020-10-16DOC_IIG_100120_DDZ_101620.docdoc 9051dea430fb5eea96e34f2c938f3eaa2e672eeb73fa5d8ee44680ec0b906f26Virustotal results 46.77%Heodo
2020-10-16BAL_G55V9RMJZ.docdoc 8cca5e7fe35ef9fbd67206c7b0e279dd5678cd3c578d93c0091733df4fb01445Virustotal results 50.00%Heodo
2020-10-16VL_PO_10162020EX.docdoc 457b10f1fc21e30d9630120fbbd7f0d7681e7ae38d1a3738cc07621995830543Virustotal results 43.86%Heodo
2020-10-16QW4761193325XI.docdoc ff7745162ab7aecdeb231cda2d76517de7ae72899440a735aebd316676e2bf63Virustotal results 46.77%Heodo
2020-10-16REP_SX2608211638YP.docdoc e653173c042df6edb7802c5c38e576729a0985b1c2b6483c7e7709b928f5992eVirustotal results 45.90%Heodo
2020-10-16YFDS_BK1179229361YB.docdoc 77cdfff917a2408f0ee9abbc0f607fe7cb8967b25ea422571c36ad69debc73e2Virustotal results 46.77%Heodo
2020-10-16RA2094407257WB.docdoc b8031f04cccc6be26a29ea7f8ce5296fcad48e7a2aa335b460b4c62015004cbeVirustotal results 40.32%Heodo
2020-10-16JPY_100120_PDN_101620.docdoc 519e99b2b51817d9c3a57f04c52948b561d6735932cc19d0359d4ddc24f06ef5Virustotal results 47.54%Heodo
2020-10-16F_PO_10162020EX.docdoc 055c0768feaa5f21bc4c430d586190b390dfcb0f18a8c908bf9dc4fa01bc99d0Virustotal results 37.10%Heodo
2020-10-16K700DX7B5S0O.docdoc 7dc98dbcc601ceca44a529dc8b1f2aae3ad1479e17974321024e0c584914bf42Virustotal results 39.34%Heodo
2020-10-16FILE_GW8FNZ70Z2E0VKU.docdoc 0e12f49796d6d8f40e96ccabd14b42ccbd1c2097b8e8419790c0d793c3226bd1Virustotal results 45.90%Heodo
2020-10-16H_73659807.docdoc 9c709e26cab4a752ef535629ca0789fa9454436ac24b8d5577c2cb420c60b20bVirustotal results 41.94%Heodo
2020-10-16FILE_4747906972690293.docdoc 41b726329c763a097034a2dfa26775648a8594cba8ea2c6604391618c5798a2eVirustotal results 41.94%Heodo
2020-10-16DF8656243915EK.docdoc 9c52e949c6c2ca01cb5bf09538ef75451e8aaabf492927bbc8a9f6253007a31bn/aHeodo
2020-10-161984688480573386.docdoc aaa0b201b6ecd9225b9f151fef9ab72ef2b37f5b2a35ae38b130f2b9b7cc5e8bVirustotal results 40.32%Heodo