URLhaus Database

You are currently viewing the URLhaus database entry for https://ssg-sy.com/wp-content/76376016/76376016/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:730848
URL: https://ssg-sy.com/wp-content/76376016/76376016/
URL Status:Offline
Host: ssg-sy.com
Date added:2020-10-21 19:53:07 UTC
Last online:2020-12-21 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003026432 created on 2020-10-21 19:54:05 UTC)
Takedown time:2 months, 0 days, 16 hours, 16 minutes Bad (down since 2020-12-21 12:10:34 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22X_60451114767859697355657.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdVirustotal results 42.00%Heodo
2020-10-22VGPP_GFZ_100120_RGC_102220.docdoc 0d59d407c6fca62823b5b9e4eacce7270e5b98640aa37b1852d5c298805319ddVirustotal results 48.33%Heodo
2020-10-22REP_GO7047735171SB.docdoc 56126f16e90d28b3bc7e4a1460c71bd6ffb7763f79d17ecc274e8c6988c8531aVirustotal results 45.90%Heodo
2020-10-22C_DE5108593100DO.docdoc ef3eda0a0ce827c44632df7b430f082bf54965ce02293734e942776bbfd2b1fcVirustotal results 50.00%Heodo
2020-10-22REP_OY7241302333XH.docdoc c343246a8b6df26e48dedc87a71762563be3e241ea28994ad1e2d0700b823f8dVirustotal results 51.92%Heodo
2020-10-226386855975392.docdoc 5216126689ce29d0ead65c0774e9b395ade4b5c2ce71e69d464f3a603a22bdb4Virustotal results 50.00%Heodo
2020-10-22FILE_3110917603426.docdoc 775be0a86b7a5d27adf04eb982cbd8f223f06ae88dc5f6a33a26774d707f7bcbVirustotal results 48.21%Heodo
2020-10-22UG6773988759SK.docdoc 0e04f78f02f0f9fcdb39483727feb5378dd09035b80679065c5a4b43687170b5Virustotal results 49.06%Heodo
2020-10-22BAL_PO_10222020EX.docdoc 00be3474f86c64b8ed871822ccfe02e7bdcbb4b5132682ee36915e8553952648Virustotal results 48.33%Heodo
2020-10-22BAL_56472957.docdoc 29747a11e9ffbd0668f9b880137f1051a27677c4f3bf0a17ead5299fb5857946Virustotal results 46.15%Heodo
2020-10-22BAL_JM1053183469BY.docdoc e755a943026d933b3c65c01bcec32fe70deb9880bcb9f436289a3ce00e15a435n/aHeodo
2020-10-22DOC_6ZWQJBB2SMN1.docdoc 0b25fca35bd60d2257616a1c1adbf89fefba07969c5a0fc3aa22d3f43ad7c2f4Virustotal results 45.00%Heodo
2020-10-22REP_47668089.docdoc 9c0aa6a67f05f22e0bf2889fef6bb38dbbc89fa9da70a8b6ac6cfe0b45f3b704Virustotal results 43.33%Heodo
2020-10-22DOC_YO1000421238FM.docdoc dd44fd55293b9113d93ec32356861c6813ad6c23d399625147eb4ad930d71f24Virustotal results 42.31%Heodo
2020-10-22UWL_RV4421485551YO.docdoc 2da1ed7b630f4a606c6c65a41dc9c852015d64174113023eff5a63c64f5eac0dn/aHeodo
2020-10-2201363642.docdoc c772e92b4aa5c7e34108bb1b418cc47bf1561c6ea5944d194eff1af7cefbe4e2Virustotal results 41.94%Heodo
2020-10-21SR7833253814VA.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 41.51%Heodo
2020-10-21WP_HNOIRH0.docdoc e5c6d836a7fa994928320dbfced86beeaa1fca7178acfcc05d083304f539cf88Virustotal results 38.33%Heodo