URLhaus Database

You are currently viewing the URLhaus database entry for https://www.almata.cat/wp-includes/statement/8osfzy7ii9w5hb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:731402
URL: https://www.almata.cat/wp-includes/statement/8osfzy7ii9w5hb/
URL Status:Offline
Host: www.almata.cat
Date added:2020-10-21 22:30:08 UTC
Last online:2020-10-26 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 22:32:17 UTC to abuse{at}ovh[dot]net)
Takedown time:4 days, 10 hours, 16 minutes Bad (down since 2020-10-26 08:49:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22INV_62854547.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdn/aHeodo
2020-10-22INV_MUC_100120_NVP_102220.docdoc 40b52434db8fa8dea7ba146d6436e1cbdc7f4222cb63923387f11b941912e31fVirustotal results 40.74% Heodo
2020-10-22FILE_XJAT1ALGQ0S.docdoc dc0ef0bf48199eb407cb13b8506149dd5ecb392ee2682edc318b58f5d1dac769Virustotal results 43.33%Heodo
2020-10-22DOC_45974305.docdoc c5e2ca43cfaf08706098c33d599b0b3290e871331e604cc8ca58dc71794c8183Virustotal results 42.62% Heodo
2020-10-2210711585.docdoc e9d87e6f00f59e3b84a5389f77adc3ce03b38559a26aee1be20f6bf5c00e76feVirustotal results 39.62%Heodo
2020-10-22BAL_A0H6FVHEB6EE.docdoc 4cbf400ac380f9f7eacf85fc40e4445447d878ad4023e251f16769b44ff39a46n/aHeodo
2020-10-22DOC_JJAOGSY8NRJDSM.docdoc d2e5fecca0f50a65f669ec7b288a2dfc7058179d08831ede0a548433ed90eb88n/aHeodo
2020-10-22REP_PO_10222020EX.docdoc ac0f321bf0c06b4983efc4726ccb54b8e31995d53ffef62f095057770c240829Virustotal results 37.74%Heodo
2020-10-22Z_40657469.docdoc 57d9d932f3b8454a13cf0936d97745f31ce5d791ac52d8633d7e9ca8c505b574n/aHeodo
2020-10-22FILE_YK0617917364ZT.docdoc f363c98ddbab25e6cd5cf325704c8a4fab2dab557a3a263c4416f0b580127b89n/aHeodo
2020-10-22BAL_27337226.docdoc 016ee663cf0779e773c6fb5644bf4f69f509afe3733132a014cc9fb1c777dcdfVirustotal results 41.67%Heodo
2020-10-22REP_PO_10222020EX.docdoc 2337d245436dac2318a71b141e75aebfd4c1e83e960db9e0b032909fd991dc44Virustotal results 40.98%Heodo
2020-10-22BAL_PO_10222020EX.docdoc fe5ff5b44dde8df916f46992574027192d8a8bf4ab36091fcb25905c0afa6afbn/aHeodo
2020-10-22FILE_44187582.docdoc 1398dfcbea47214d59bb327957bac69b2db7c06a50da13399c63aa797fa5fa9bn/aHeodo
2020-10-22FILE_74248234725808884607.docdoc 27a2f3fc365f4d0624325a33456e529aa149ccc2488338c41ebe8971c1bead0aVirustotal results 57.41%Heodo
2020-10-22INV_7125466265293.docdoc b4461b5c2c529cceec7d5f7ca41dae1c6f767b6fb54c560269f4ddd7d64878eeVirustotal results 43.33%Heodo
2020-10-22AZWN_8MVXN5JQZCXWBL.docdoc d7aaad6773873f2f9419d99407b5160aef1799db14f54629f82d831d54c25806Virustotal results 52.83%Heodo
2020-10-22BAL_ZJUCAV57ADE.docdoc 23433b6ffc030c13d0f346dfb92144b3b2e92a4b5ae3c6e1d4d16e7a3e8ce48bVirustotal results 46.67%Heodo
2020-10-22R_KLV_100120_PQT_102220.docdoc a1ca884c013a5f9d40fc0053aacfe172aaab646ac7a5f2c83ef7d3be8b0086a9n/aHeodo
2020-10-22INV_BMT_100120_OVG_102220.docdoc 0270a190a68a88ef9a11d8bfb5a6d38256db6f38774772426cb5a578d2f981dan/aHeodo
2020-10-22KJ_769080370791311.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 45.00%Heodo
2020-10-22INV_490976838587699919574.docdoc c31dadd735bc89eb4e5095f048428ac07fc1dd62c0f8e3913611dec1ec2ebdc1n/aHeodo
2020-10-22C5S7NL0VARO.docdoc a3a0cc50da6331891009253878be3d1a6525255acc59600fb3aedc6066c1f5e9Virustotal results 43.33%Heodo
2020-10-22ST9748846435TX.docdoc 9c4152b0286e58648f1b01752c6704efdcc9aeabbb9c46833ad401d48ff81decVirustotal results 45.16%Heodo
2020-10-22Y_35900262.docdoc 7cd6a76199b264747b5a649c770e2ba84a31960ae8ebf52b5bfceeac50a97676n/aHeodo
2020-10-22REP_PO_10222020EX.docdoc e59123120209e007bb80c178032c84791d47cc6ee629f80a0126521791ad3b41Virustotal results 43.55%Heodo
2020-10-22FILE_PO_10222020EX.docdoc f3bdfdeda759d384ba2dfe4792bab80ad4aa7354badad324c69e0f4c095cdef2n/aHeodo
2020-10-22BAL_WXO_100120_NYU_102220.docdoc 039488b9c71e2e766329be6f4168cfd722d20fff1317c35c048babc57fa500abVirustotal results 43.33%Heodo
2020-10-22DOC_YZ7490810194PO.docdoc 8d3f3a330ef15519bfb2e3f71de5f5893e321a5e1f09e7f0a7459bb2f27559ccVirustotal results 45.00%Heodo
2020-10-22FILE_79825839526455.docdoc 0962178a6edd34473ee5ac0f0dcd4ebd1ab30286664db2bbe2782ddbc4f7477dn/aHeodo
2020-10-22FILE_LER_100120_ENG_102220.docdoc f198753506a418351356905f69f2a5115696b8d66c2478e521fcb948c7f84d67n/aHeodo
2020-10-22INV_81003538.docdoc fe51fd4c0a680a852cd8d8b37f3edd5ab6f86cfa69f7ad9df4dc7cd82301a29an/aHeodo
2020-10-22B_58589641624538646423091.docdoc a0243a4563a80af248dbb0edb4edf460e9d05ee25685c8ab335a423379b7cbb9n/aHeodo
2020-10-22GID_100120_LOW_102220.docdoc 41206210b4b572edaab337c11752cdae50e5356ad52b67f276f1a0d53988d707n/aHeodo
2020-10-22BAL_72981014.docdoc 933160e989dc335e391fdfba72751039c4c1c68f1648aa634af269e0e0600ab6Virustotal results 50.94%Heodo
2020-10-22DOC_VOD_100120_RRJ_102220.docdoc 56126f16e90d28b3bc7e4a1460c71bd6ffb7763f79d17ecc274e8c6988c8531aVirustotal results 46.67%Heodo
2020-10-22DOC_586933738.docdoc f4485fe8056305da48ac8453716ea0fa9c6633da1a1f87e01dae3908da1bbbe6Virustotal results 46.55%Heodo
2020-10-224013526876911296539628553.docdoc 056f25e8944119ad3d9d651d77cc32cef6621c5cb3498b47161738be7aff416eVirustotal results 49.06%Heodo
2020-10-22QWD_100120_NYU_102220.docdoc 6f75f81099546304948463f0c2305a97be38e42d347794714ea76831f8f507f4Virustotal results 48.39%Heodo
2020-10-22DOC_62135935617036677869.docdoc bfcf012480833949d47a52c43762fccfd26a1785b134d1da9a84a2f91bca0778Virustotal results 49.02%Heodo
2020-10-22REP_3799282210.docdoc 00be3474f86c64b8ed871822ccfe02e7bdcbb4b5132682ee36915e8553952648Virustotal results 45.00%Heodo
2020-10-22FILE_PO_10222020EX.docdoc a7b558ea557788c16a9c93a7aa0cac42b96b2fe92e02c26f4c5d17c1b1da0291Virustotal results 46.77%Heodo
2020-10-22IMI23CO.docdoc a1430eef6f6acc51cfc4215bd06407ebfc4f5ac126d9f05c27b3cf359dbb816en/aHeodo
2020-10-22PO_10222020EX.docdoc d6a01afe9b81e65f663d1e158125f608fabf18a1b663d705398cf817f9a95c21n/aHeodo
2020-10-22BAL_26864524.docdoc 43bb166a848af96dd6944ca6c4c98a6bd872ec7e00fd4f4f271410401264e7c7n/aHeodo
2020-10-22FILE_PO_10222020EX.docdoc 95c62759d32e2a426433130be7fc1c17a3d3787359258f3af33f61760463eeeeVirustotal results 40.98%Heodo
2020-10-22Y_5880268456180324767547665.docdoc 2da1ed7b630f4a606c6c65a41dc9c852015d64174113023eff5a63c64f5eac0dn/aHeodo
2020-10-21BAL_XEP_100120_TPW_102220.docdoc 3af63f662ad3afb788f4f65538788a97811e2a45d869bf83d5ac6dfa9a2251e7Virustotal results 41.51%Heodo
2020-10-21L_89593356.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 41.51%Heodo