URLhaus Database

You are currently viewing the URLhaus database entry for http://alabamaallergy.azurewebsites.net/wp-admin/Pages/uwSSZmuxYmceuSyqq7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703084
URL: http://alabamaallergy.azurewebsites.net/wp-admin/Pages/uwSSZmuxYmceuSyqq7/
URL Status:Offline
Host: alabamaallergy.azurewebsites.net
Date added:2020-10-16 17:47:05 UTC
Last online:2020-11-04 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 17:48:09 UTC to abuse{at}microsoft[dot]com)
Takedown time:19 days, 3 hours, 17 minutes Bad (down since 2020-11-04 21:05:42 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17LIST_20201017_326925.docdoc 294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092Virustotal results 55.00%Heodo
2020-10-17Mes 20201017 10844.docdoc 0f4e937ecf4435c0d84956b70e83ca82c0cd15fe9184709e7616c8cc60512590n/aHeodo
2020-10-17Arc 20201017 64340.docdoc 73c8e321733773d7413efd1447245567bceaac2f4f85447e1196884a898cbea2Virustotal results 53.23%Heodo
2020-10-1716654-20201017-GF446.docdoc c8e0ee6566b5536ea46f25964313ce3c6d88ef6329133772236f4afe57bdacd4n/aHeodo
2020-10-17inf 2020_10_17 L7496.docdoc 560cbfa962587b928c5ba13f5cce70b94a0a90991ee4f4db32f2a6c6a3936237n/aHeodo
2020-10-17UNTITLED_2020_10_17_1504776.docdoc c8647133e45a641a9cefb6726994df00dcfc9fa481d38e667eab8f74f75c54b0n/aHeodo
2020-10-17rep 2020_10_17 784869.docdoc 8b3323767793829332133050855ac69ea1a0cd1b5a51441f1baf16d09f47e663n/aHeodo
2020-10-17Attachment 748169.docdoc 3fef345a1fa8f779f98589ca704dff21e59f8842175c3cdab8caeb16e5e61ad2Virustotal results 53.33%Heodo
2020-10-17Mes_754468.docdoc 6820620122b2210629007eaae85c11949f1d113edfa9e10c0a0678069bcefa83Virustotal results 53.23%Heodo
2020-10-17Rep-2020_10_17.docdoc fca525a70cdbc09d5adb7e320849a4e9958f5edb129e2accce15281a340edf54n/aHeodo
2020-10-17654059 830.docdoc 4d8d65bde63051b5066a4f7aa37942fbd309a54311e5b0903febd4d1277be363Virustotal results 51.61%Heodo
2020-10-17doc_WFD86634.docdoc c64264c7336d7e9f516999fa287be55be63b634b63f5ebbf1bab24e38ada5e8en/aHeodo
2020-10-16UNTITLED_2020_10_17_N6271.docdoc 64791e6b0eec05add1dc9e363173e850e7d26305d1f3940a7f966c42544b2147Virustotal results 51.61%Heodo
2020-10-16MES 2020_10_17 K266.docdoc e6c583d968049b133209f01abf2a46bfb3fdb4abd68b5f0ef3e74881c438d1c5Virustotal results 52.46%Heodo
2020-10-16Untitled-2020_10_17.docdoc 5ee53916c491a77206e7a09eb75c02983fae90474ddcb7d0099a47113b4675acVirustotal results 50.85%Heodo
2020-10-16Inf_20201017_830482.docdoc c5480c5bcd7c9b06e744ebfca49ef98e45da1200c5e3762d6b47d9825189f3eaVirustotal results 51.61%Heodo
2020-10-16arc 2020_10_17 39373.docdoc cecc7a6d54b23fac9722185d9674512f5b51840e9909978de84128d07172791bVirustotal results 51.61%Heodo
2020-10-16list UK147751.docdoc ee2a584f20b8fae9caa25baa3476b1dae0aac0d511a2a2584dde95eeb42c4d06Virustotal results 52.46%Heodo
2020-10-16rep_20201017_SCL706.docdoc d0b24fe52a88df1055812d9b2a79e7acee0b02add126d467c4054a93771b2ba5Virustotal results 51.61%Heodo
2020-10-16Inf.docdoc 38a11481f8db3eb3a204bc7199da74cf95b722b0b5ff283001ff594b5bde8dfdVirustotal results 52.46%Heodo
2020-10-16MES-20201016-ZE68704.docdoc 6db73d3f7fc4ac1265b81af31cd04fb1ef63de503ea603a20b93daa896e18c11n/aHeodo
2020-10-16Dat_16406.docdoc ec0b8068eb55934e5173fd8006c8cff634922830e46673abcd0c0a2e2e6d3b4fn/aHeodo
2020-10-16List-20201016-P662263.docdoc f4af9d4a8529e7b2cc1ffc59afc271f35f63fd2f0b043cecdc60553c2ff8259cn/aHeodo
2020-10-16arc 20201016 02219.docdoc 35359c56db6c6b554320c0f3f2f1ac6470ee849d0e7bdb20696c529df2a3336an/aHeodo
2020-10-16file_20201016_S6179.docdoc ff2225f50847fbfdff2af9e81b67fc82dc5a26f7c4a78edbe36d775f1c153c22Virustotal results 46.67%Heodo
2020-10-16doc_2020_10_16_959603.docdoc f57355bd1efba81163d91947723bf0beb7e259ecb320963ccec0c38d46cbbbedVirustotal results 48.39%Heodo
2020-10-16Mes-20201016-MNU966355.docdoc b443088167d74ff3bc8ef184ca3771959b274954d6adb5263830985dbad709a4n/aHeodo
2020-10-16dat.docdoc bddf126e79e9a62c235c0b9b763a594d8c49fc76d38f39400409262f43373d43Virustotal results 48.28%Heodo