URLhaus Database

You are currently viewing the URLhaus database entry for https://wynn838.com/wp-content/INC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:732282
URL: https://wynn838.com/wp-content/INC/
URL Status:Offline
Host: wynn838.com
Date added:2020-10-22 02:42:07 UTC
Last online:2020-10-23 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 02:42:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 day, 12 hours, 46 minutes Poor (down since 2020-10-23 15:28:40 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-23BAL_ZEK5ZZ0D7.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdVirustotal results 52.46%Heodo
2020-10-22M_GX0589002065TT.docdoc 2d750c754eeb0df583b0daf91ea2a674ecf074b4a8ae2a814169f7064f197621n/aHeodo
2020-10-22E_488811405829485890.docdoc b39c953e5621fd7b9af004e2d9195a7a37f9070b736007d74635c5d36d6ccd04Virustotal results 45.16%Heodo
2020-10-2254563016.docdoc 6f3d75a10a076e6b9a67b98deaedc8b08868717927822f5beb79aaf7fe7d1d6cn/aHeodo
2020-10-22FILE_UJ0351394530VS.docdoc ed5ed9c256dc24f5aeffc1b9b0e7dba316c5c13a1966b7243770318805567ec9n/aHeodo
2020-10-22WPC_100120_DLZ_102220.docdoc bad9235b37efab34f7e6cf91e6a80803fdcf8903e2c61d0d6c1f5f9d773da112Virustotal results 48.08%Heodo
2020-10-22FILE_QRB531CP63ZEMA99.docdoc fe8d90884de697451ea446a5dfd254041d252229a8a17175f11f77486dcdc4d4n/aHeodo
2020-10-22EG0821460501HI.docdoc 6f75f81099546304948463f0c2305a97be38e42d347794714ea76831f8f507f4Virustotal results 48.39%Heodo
2020-10-22REP_A6KYUNYR1M.docdoc 638d64989d1dd97fb0243d59735dcc9441f106f3eaa6288d3c6e18a2b11aaef7Virustotal results 49.06%Heodo
2020-10-22PO_10222020EX.docdoc fe681aba1adcf7e82fd0daedeb3af000c89d34693b1dd0022c273e936ed660cdVirustotal results 45.90%Heodo