URLhaus Database

You are currently viewing the URLhaus database entry for http://royasalamat.ir/wp-content/Reporting/616a0Ao3Jrr4njZtv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:704122
URL: http://royasalamat.ir/wp-content/Reporting/616a0Ao3Jrr4njZtv/
URL Status:Offline
Host: royasalamat.ir
Date added:2020-10-16 21:39:04 UTC
Last online:2020-10-17 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 21:40:05 UTC to abuse{at}ovh[dot]net)
Takedown time:10 hours, 33 minutes Good (down since 2020-10-17 08:13:23 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17file-20201017.docdoc 294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092Virustotal results 55.00%Heodo
2020-10-17DAT 20201017 OT41998.docdoc ea4cb3d56a4e049d8d0e7d1e30ff96c6b4fd216860a4c48ed248940702f3b7acn/aHeodo
2020-10-17doc 9210.docdoc 8763a9868e952dfb5be76162ed10b0d62fa00e1ba5baebe53f7cca486cb89542n/aHeodo
2020-10-17Untitled 20201017 88015.docdoc 2a71d0ad9193b9a5ec07c7040baf6aee1049bde63cdd81fdf346e9f295b95760n/aHeodo
2020-10-17File_1028482.docdoc ccad29eac2b2a4c03fc1c9a9ac36544345fb0a5f454746c05dbb5f02d4d53210n/aHeodo
2020-10-17Inf 20201017 M9570.docdoc 971e189c279099a876618c3226ef35e5afc62b91daf3b8bde466a424fdfaa063n/aHeodo
2020-10-17rep-2020_10_17-099400.docdoc 3fef345a1fa8f779f98589ca704dff21e59f8842175c3cdab8caeb16e5e61ad2Virustotal results 53.33%Heodo
2020-10-17473_2020_10_17_4828069.docdoc 78f2969b92269cd9a3e1cc7003b0949f47421d551c323dbeafa94ad0a836bf34n/aHeodo
2020-10-17arc_06616.docdoc 115b344de8011d635adae59417a4dab2f992101ce81619ffe1b1b0423d9df79an/aHeodo
2020-10-17inf.docdoc 49bfab81e7c83836e13d24a1c3e607ce00aa745e850f110ef848cf96ab0b5b30n/aHeodo
2020-10-17List_2020_10_17_9380529.docdoc c14604804cc32fb30b522dd9dff211839670ae27b989326efce1e69589bc9d36n/aHeodo
2020-10-17file 20201017.docdoc b5ea62943f3b8f07f8fc66e4e35a1d4d12022eae32ee901b016f48bf66fec06fn/aHeodo
2020-10-16837TBR-2020_10_17-360.docdoc ff58a7b1e34b5e2de40fa9fa020ecc46b3c1cf0eedd40653e719e2fba15ce05fVirustotal results 52.46%Heodo
2020-10-16list-2020_10_17.docdoc 528b63ef8c44d0a5b08974fb6ad9efa60e0021ce6993d25b30ef1b90c00df222Virustotal results 50.82%Heodo
2020-10-16LIST 20201017 6381993.docdoc 622c685b93473b545637dfeced3852e83ae18b3144058f11856f73eb76b5cdb3n/aHeodo
2020-10-16180E-2020_10_17-TUN294.docdoc 8959ae20797df624723d7bba61da21cc88ef3750df52dd083d9eefbc5d90c4dfn/aHeodo
2020-10-16dat-20201017-EW016077.docdoc 5c58c91ffdffd84690c6746f6afc2eaeacd03df2e4a83c6e662755624113cf5bVirustotal results 51.61%Heodo
2020-10-16ARC-20201017-YG621.docdoc 4773da38da0ba3154bbb3b813c803bd6e1f9ab3bad1888f1402f7b17073620ecn/aHeodo