URLhaus Database

You are currently viewing the URLhaus database entry for https://www.villanytt.no/wp-includes/Reporting/jorc6rg294iljf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:725747
URL: https://www.villanytt.no/wp-includes/Reporting/jorc6rg294iljf/
URL Status:Offline
Host: www.villanytt.no
Date added:2020-10-20 21:56:04 UTC
Last online:2020-10-27 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 21:58:05 UTC to abuse{at}nazwa[dot]pl)
Takedown time:6 days, 16 hours, 28 minutes Bad (down since 2020-10-27 14:26:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22REP_258439485732.docdoc 27a2f3fc365f4d0624325a33456e529aa149ccc2488338c41ebe8971c1bead0aVirustotal results 56.45%Heodo
2020-10-22FILE_UFBTKXIYC.docdoc aea5323b8ec31304c294e8225cddefa8aa8a5df30873dc0b5af266062972583fn/aHeodo
2020-10-22REP_0C2JGRA5GXDT.docdoc 98a7403f2284947cdcc0c179ba703329edb0e717b26a20be473a2c606a8abab6Virustotal results 49.12%Heodo
2020-10-22BAL_CYQ_100120_PZZ_102220.docdoc 8a2460eefaab1e7c970a1836dfc66aacd55610790f20f1074e9b30d4eeb71890Virustotal results 48.28%Heodo
2020-10-22W_1369228277575188.docdoc 7672ae3ab7ee30ee3ef086ec0b9ced8c85e56d045f12305531d826ba491237b2Virustotal results 48.39%Heodo
2020-10-2281034593923309958553.docdoc a1ca884c013a5f9d40fc0053aacfe172aaab646ac7a5f2c83ef7d3be8b0086a9Virustotal results 45.10%Heodo
2020-10-22H3TW6PTPF44MQ.docdoc 9c0cb6e2390b59f199cd4dfbca2d6eb2106969b29ec8df33e4987474b80344eaVirustotal results 43.33%Heodo
2020-10-22BAL_5184764822178057649.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 45.00%Heodo
2020-10-22REP_09T4NP27YR0.docdoc c41bcade49f3e2413b5d95ce09c2ecf30c21b43ab6b306206b9b737f1cd10450Virustotal results 42.62%Heodo
2020-10-22PO_10222020EX.docdoc c058f951575af5d038621ad4b811fb2b95ab8879a13e4ccc178cf15dea40a900Virustotal results 44.26%Heodo
2020-10-22T_42909420.docdoc b86c1f13c4ef248f41ef298808f6597bdda3ad15541943eb545deaee02f4b849Virustotal results 45.16%Heodo
2020-10-22LSB_ZXWH81WGZDHTW.docdoc a23a71fe2b845869e2dae7d48a5e35155dff172244d5ba0556d61d69255292b0Virustotal results 45.16%Heodo
2020-10-22BAL_470399911742136.docdoc 10fffc6d57e68b2224f5a7b35a28ed5e146334dff8d0f35d900451150058bb45n/aHeodo
2020-10-22FILE_PO_10222020EX.docdoc 84f4bb653bce1ba25b6a2fa6fd300f406fa8b0cfa812b07794f3cc657e327a3bn/aHeodo
2020-10-22163208248012.docdoc f3bdfdeda759d384ba2dfe4792bab80ad4aa7354badad324c69e0f4c095cdef2Virustotal results 45.16%Heodo
2020-10-22PO_10222020EX.docdoc c6aecc75fd2bfbcebf928e7f5f5ca0b04ec74d92bf6744f6c23ff7f2795eb263Virustotal results 45.16%Heodo
2020-10-22REP_69879882.docdoc 0962178a6edd34473ee5ac0f0dcd4ebd1ab30286664db2bbe2782ddbc4f7477dVirustotal results 42.62%Heodo
2020-10-22FILE_FN4534179984IY.docdoc 0ed13bfe440f265ced87a03e27334e5bb59ad3d45b345e526577b6d168922975Virustotal results 43.55%Heodo
2020-10-22DLEU63WWF627A.docdoc f198753506a418351356905f69f2a5115696b8d66c2478e521fcb948c7f84d67n/aHeodo
2020-10-22FILE_10322769170533246.docdoc 922e702ad2045c14b3adf3b4718aaa0fcbe669f9bde3ba42e4fd05404c78747cVirustotal results 44.26%Heodo
2020-10-22REP_1CNARIB1SQ584F.docdoc 79eac1acb26ebc7de50c343fc40ea055096be22d66ee6769c4180cff5a20468fVirustotal results 51.67%Heodo
2020-10-22LOM_100120_TGD_102220.docdoc 0d59d407c6fca62823b5b9e4eacce7270e5b98640aa37b1852d5c298805319ddVirustotal results 50.00%Heodo
2020-10-22INV_265718689299304.docdoc 56126f16e90d28b3bc7e4a1460c71bd6ffb7763f79d17ecc274e8c6988c8531aVirustotal results 46.67%Heodo
2020-10-22GF7479770417HD.docdoc f4485fe8056305da48ac8453716ea0fa9c6633da1a1f87e01dae3908da1bbbe6Virustotal results 46.55%Heodo
2020-10-22BAL_85586615.docdoc 5216126689ce29d0ead65c0774e9b395ade4b5c2ce71e69d464f3a603a22bdb4Virustotal results 50.00%Heodo
2020-10-22DOC_PO_10222020EX.docdoc 24ca326ece108e2ec02346c32536bd5cd2a990364f8d8c9fa35b082ba4a68f2fVirustotal results 45.76%Heodo
2020-10-22YE_PO_10222020EX.docdoc 775be0a86b7a5d27adf04eb982cbd8f223f06ae88dc5f6a33a26774d707f7bcbVirustotal results 48.21%Heodo
2020-10-22W_AI4Z1TGFB6.docdoc 884d55db64ae38575a793fcfaf4f07a6b4f67a7ee84374571189cc4bdb485608Virustotal results 45.90%Heodo
2020-10-2226866781.docdoc a7b558ea557788c16a9c93a7aa0cac42b96b2fe92e02c26f4c5d17c1b1da0291Virustotal results 46.77%Heodo
2020-10-22II_PO_10222020EX.docdoc 9fe7e239b00579f78275ddcdb282bf2b112dad4d3a0bbc7f183e800244486bb9Virustotal results 48.00%Heodo
2020-10-22H_39214262.docdoc 4876b24f79e4db4a3df03efb480f32506ce94c7c60c1410d47b6722a66765552Virustotal results 45.00%Heodo
2020-10-22EIGG_HY9690939952VF.docdoc bffe543ff321cb95dc82dc8c8a96c283d019176537290a63c6bc86d7ae98fe57Virustotal results 46.15%Heodo
2020-10-22INV_IY0YVBS.docdoc dae6b8c95721c04d04a27385380dcf54fac171308904c972b9dd2d78235cc453Virustotal results 40.98%Heodo
2020-10-22DOC_SY4545164142CH.docdoc 95c62759d32e2a426433130be7fc1c17a3d3787359258f3af33f61760463eeeeVirustotal results 40.98%Heodo
2020-10-22INV_71403365.docdoc 476b69835ad34811317226c4b0d9c78525fbb9770f4dc6c649da167a65359582n/aHeodo
2020-10-21NK7876342135FB.docdoc 0ff220d90538db68f12796da43439ff4b8cfa6fe238bf19c8da81c8463f2c4ebVirustotal results 40.00%Heodo
2020-10-21WBW_BTNXULLRDKE0E6S.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 39.34%Heodo
2020-10-21M_QNL_100120_PVS_102120.docdoc 140f99b8c86ce2cbf27556e78284f685e2cd53ff2e50838f444b115a6a04920bn/aHeodo
2020-10-21X_0LZ9CYDEYPYQ63.docdoc 33e33d42123328ea3e0a1826ed952a84ba6a0972e21c71d6f9b607b1d1fef8c5n/aHeodo
2020-10-21REP_145423494421814260720.docdoc 6ba57b23af759ecff46938a23b32591f453cbc4d14eadc9dd89d08ff1d38fdb1n/a Heodo
2020-10-21DOC_QSWNWHTV6N32.docdoc c3caf9f914df7b8d90ac3dd35fd1ad24ec34a4d1af94293e9002a9f8f943703eVirustotal results 33.96%Heodo
2020-10-21V_80356308351682646.docdoc 1cb0001d422c0b16aa106ca96ff8aa0db8fec461c49b8f80ac75b5ab4001803cVirustotal results 33.96%Heodo
2020-10-21FILE_PO_10212020EX.docdoc 7ea2564f31750ad752cc8d364cc4eeb167fcb8ff1bbb49f96e3926c95f82f715Virustotal results 30.19%Heodo
2020-10-21DOC_71456286.docdoc f32c2612be11b6cce6029b0f7b2b9396e61d7313b26fb513f79b5d416349f937n/aHeodo
2020-10-219540066223927444848.docdoc 25c71c161f7a916496cd76d407fc6a0863e2f36fa50e8b2cb886b5ca7b853dfan/aHeodo
2020-10-21W_FBA_100120_BFS_102120.docdoc d2a68a5159ea637fa9428d39a0d9469c6c2db0b16b2de2593070c17a0ad49520n/aHeodo
2020-10-21DOC_Y4C0APJVVCX1Y.docdoc bbc690ca2e25b1ae6cde7c2e084a18e48dd3ea9f2d4b51a27a9dccba0b03ecedVirustotal results 33.87%Heodo
2020-10-21Z_0944689778407466.docdoc 726fe6b07eb73d6068f54ed6a6d61d76252af6ae080d1e41194e36dba8106a4fn/aHeodo
2020-10-21DOC_UDD_100120_XEO_102120.docdoc 3870c4b69f68d86fe116181343d8d6d97a22d191a028b02f300f0e5d1e33eb60Virustotal results 32.69%Heodo
2020-10-21ZGG_PO_10212020EX.docdoc b77d2293e1769638ff23750ab476d2eae143a5bbf834e756d17505298ffc2776Virustotal results 29.51%Heodo
2020-10-21PO_10212020EX.docdoc 1ade5184899b623fc4bf9b7caacde819e06dcc9234a962622c056349092327c1Virustotal results 27.42%Heodo
2020-10-21N_ELVC4L3KCD5M.docdoc 9c9beac25f445712c09a5b1f4601068d13ec9a374405fdd9e37c07dd6d189201Virustotal results 28.33%Heodo
2020-10-21FILE_069240368411.docdoc 88c45b613e6367cbb58e012779f1cd95ff6a44efc175b2163185aa309e18573fn/aHeodo
2020-10-2146631179.docdoc e88388bec3164944678627db062b753e76b6f7f710a9fabc43dfe69e7df2f366Virustotal results 27.42%Heodo
2020-10-21DOC_PUH_100120_SLW_102120.docdoc a2ff9d64e27e7cf089d0bfa4d9bae935db0cc9881bf6767dd311ccf653fe64b6Virustotal results 28.33%Heodo
2020-10-21WEAKALCQMJ1RSAE.docdoc 3c7b26a013548adeebf30936453b373c34b920df67fb1b135775f0ea8ba32341Virustotal results 50.00%Heodo
2020-10-21044016606568.docdoc af36ad567085faaef5425d233641e227fdf842e426001e855103b942dde705efVirustotal results 46.55%Heodo
2020-10-21BAL_B81HKBLMBPZ.docdoc b7269623a45db722954c9aa554be08c14fb9b6cad622331bb2d5c35e17ca9be9Virustotal results 50.00%Heodo
2020-10-211R69FX009SN.docdoc 6a71e77723470c71b7481201af67c2a3fccef877d132370bdb2a3d8a705ce95dn/aHeodo
2020-10-21M_20163347.docdoc 389ad5d9d72b446e4ea03160b107fdc48402bcc7c9f664d73851ebe4d4c7b660n/aHeodo
2020-10-21K63D99M.docdoc c8b17ac2998849beb6bb8ea8fbb40c2457402574ec8c6768a54a0db63c8ecb8cn/aHeodo
2020-10-21617488049371.docdoc f63551b5b6a12a9fe329cae332d0d952a9e56640ed81da22996a4ee0efd379c1Virustotal results 41.94%Heodo
2020-10-21BAL_841568663982.docdoc 39a7385578321db9d477ff19e7087b03d3c57076ceca16fc2af049c087f72343Virustotal results 38.98%Heodo
2020-10-21FILE_VUJ_100120_QVT_102120.docdoc 85a0100950655dd48b3789ac075bbca0e9b4d1ba0e1a4fbc29ee363cc23da4f9n/aHeodo
2020-10-21DOC_70953072.docdoc 2b5fc5004d582d3716cad376c6d98b0c2da17ce59eb4b3d0ceaddfce0128a73an/aHeodo
2020-10-21REP_PO_10212020EX.docdoc ff560f270317afc9d31e1eae55c277c99bdd45f9fbd3a2dc44e8929a25ff065cn/aHeodo
2020-10-217281646317282862239224232.docdoc cd230affe2cef8dd5938e3ea670dbd706c65f93341c35d2eaecf1a5ae6d8203aVirustotal results 48.28%Heodo
2020-10-21REP_JMI_100120_XCI_102120.docdoc 230fc1531e7d113ebf83ea8dad03120965c293da08a2ae82305ac9cb61efe7b8Virustotal results 47.46%Heodo
2020-10-21BAL_KDA_100120_BKF_102120.docdoc a22d83a786eb7f5a04facaabb04117ecb5f8cdf09fcbb8405c0a70c97a51f225n/aHeodo
2020-10-21REP_132573338587.docdoc 25d12cabe3d39e681a0b8c9ac88206110f66071089e92667ee0fed7bc917e918Virustotal results 36.54%Heodo
2020-10-21X_RMGC8UZSQ6LYK.docdoc 1704417eb4662953f9c73cd7ef716872d3a364dd78aeb7418219a4960968a592n/aHeodo
2020-10-21X_PO_10212020EX.docdoc afcfe7ff49c2df7f47347c4c49d64ac3f027b1c79f5d090a0daf526fd65d859dVirustotal results 41.67%Heodo
2020-10-21BAL_67923837.docdoc b5f8485da1270855c2866456988ce8010f5c32c69fb19f324859d685e719fa3eVirustotal results 40.00%Heodo
2020-10-21REP_PO_10212020EX.docdoc 9a65518effade1bf32d7589d7f7a8a028f9fa7f1fca4491673680847d26d3f0aVirustotal results 38.89%Heodo
2020-10-21A_T3GQRS0M3G.docdoc 47fb7195961f2aef2f52452f43840ae416b6ef31d96ae1bd6a1a74fa7c5f7dddVirustotal results 38.71%Heodo
2020-10-21FILE_PO_10212020EX.docdoc fb83f2eec33aadc1229efe5c44276c92fbf59ce6dfab221071a61ca25c694a82n/aHeodo
2020-10-21U1UZH77FBM6WE.docdoc 17ac0ed02b6127efefaa0cc936604bc12947c394e902bb8bf88e37b6f0829d9fn/aHeodo
2020-10-20DOC_I1NYXBJXS6L97M.docdoc 681fa75f785a2b6eede8e0045ce0ba666fc0be736b8bba8d23f474b0bc400a7fVirustotal results 39.62%Heodo
2020-10-20INV_5762964578.docdoc 8cadf5fc31643a1acc9b991d110e039e7e0520e94783c61d9caf5ccb2481915eVirustotal results 44.64%Heodo