URLhaus Database

You are currently viewing the URLhaus database entry for https://cplt20live.com/wp-includes/264912100658866/uyjqJi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:731934
URL: https://cplt20live.com/wp-includes/264912100658866/uyjqJi/
URL Status:Offline
Host: cplt20live.com
Date added:2020-10-22 01:03:06 UTC
Last online:2020-10-27 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 01:04:07 UTC to abuse{at}hetzner[dot]com)
Takedown time:4 days, 23 hours, 57 minutes Bad (down since 2020-10-27 01:01:22 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22Invoice 08498647.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-2208129081.docdoc f9390045c0aecc111eb3b34d5a18ed0f8a5f639169463735528801c99fad0af7n/a Heodo
2020-10-22INV #870 FOR PO #00504459769657.docdoc 7e0233149682bb9be3e19f93517b3bbe9f5db41ce48dfa6ee88253a0a98bd678n/a Heodo
2020-10-22Payment.docdoc c62002794ed88e1776376cf0144fdaa74155895bd71f5a69b781acf83818f56cVirustotal results 40.48% Heodo
2020-10-22Electronic form.docdoc 980307d89e587b452b4070afed9ad8494e035481816544a310dec6a81a7aa8c2Virustotal results 39.62% Heodo
2020-10-22Payment.docdoc a1ef2e0555f7e14dc268a65a1b25f0961ee37a55170b424ba29ad8ebdd90db69n/a Heodo
2020-10-22October Invoice.docdoc 2beec2edda2346042fdfa829caaa7403e7842e786b9b9e89baaf4cd5e45d189an/aHeodo
2020-10-22Payment.docdoc 69ffe894394d85585f7b58a501710dd783a3cece15ba7964b4080f3c0de17353Virustotal results 39.34% Heodo
2020-10-22Invoice 00846068.docdoc f3164116b10a1f31343bf4f0c47e83711070cf2d2fa4558bc6b869a82bf26fcdVirustotal results 40.38% Heodo
2020-10-22October Invoice.docdoc 709d844ebb9040838314e0bb22f53af41eff662d3b322cfac5858710def23245n/a Heodo
2020-10-22Electronic form.docdoc 5825492e4acb3a6e36349f5fafef4745159e86616e9d38b4db2e2b4c212e3119n/a Heodo
2020-10-22Invoice.docdoc 2459b9b17512384884b1ce25972cc817c8e218cb87265480ce229d0470ade006Virustotal results 33.87% Heodo
2020-10-22Electronic form.docdoc 79736f48bc5bedb3ed839a65879732bd7302955da6defa742dbc590f04c2d043n/a Heodo
2020-10-22Inv. 02347814.docdoc 9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8Virustotal results 50.00% Heodo
2020-10-22October Invoice.docdoc d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4Virustotal results 51.61% Heodo
2020-10-22Invoice 0005035.docdoc 8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8bVirustotal results 50.00% Heodo
2020-10-226840953.docdoc 4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8Virustotal results 47.37% Heodo
2020-10-22invoice.docdoc e61b38e662adb534177ec713ebff6bb70aba8c3e9ba4bd47c6f06229f803c1d2Virustotal results 44.07% Heodo
2020-10-22PO# 10222020.docdoc df51e418e047ba848de075954ab841887fafe6e47c6b7b6d529222e3795ecb23Virustotal results 47.54% Heodo
2020-10-22Invoice #516.docdoc 3cea95fe241c36b02ffc90f1260df43c8fc77e7acde8d5804ba4a461203332d0n/a Heodo
2020-10-22invoices 8506 & 66761.docdoc 7132fddab8ccd72577838968f3e91a36c9ce64950fde88e34635e5e008be8a13Virustotal results 43.33% Heodo
2020-10-22Payment.docdoc 2bc5c1591569f6e8a480a530bf343df21867da564b7503824cb0e5193d3f8937Virustotal results 41.38% Heodo
2020-10-22invoice #90043.docdoc 3abe5cdbb82a1a48fb89ecf043e24351ffb466cb6112ea7316f6fb518244a289Virustotal results 47.06% Heodo
2020-10-22October Invoice.docdoc ab4a558e5f07f221ed6052698d5a9d1b3654ab56380486df8f091e1176d3af1en/a Heodo
2020-10-22Inv. 0089049.docdoc d6671f0d5ced27402e2985dc7eb1a0d85cb46f4ce6608a60930601b847030cb7Virustotal results 47.06%Heodo
2020-10-22Payment.docdoc b97b367766b6d02c9d56c0e849f894229c5eed891450c0a04794ec7124168c56Virustotal results 47.17% Heodo
2020-10-22Invoice #776169.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 51.85%Heodo