URLhaus Database

You are currently viewing the URLhaus database entry for http://serviceshelpdesk.online/wp-includes/report/hgUF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:735762
URL: http://serviceshelpdesk.online/wp-includes/report/hgUF/
URL Status:Offline
Host: serviceshelpdesk.online
Date added:2020-10-22 17:33:04 UTC
Last online:2020-10-23 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003028446 created on 2020-10-22 17:34:06 UTC)
Takedown time:1 day, 2 hours, 8 minutes Poor (down since 2020-10-23 19:42:23 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22Payment.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22Electronic form.docdoc eedc1f3d57d4274cbfc97e09ca0975f97fff204e89fe92574f9e3964a569c9d7Virustotal results 38.71% Heodo
2020-10-22INV_259950.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70Virustotal results 38.71% Heodo
2020-10-22Y001 invoicing.docdoc f95869656ea95b50cdc0dcdc93991a0bff0a1c265541f45bf204766fb5870736n/a Heodo
2020-10-22invoice.docdoc 0ffde0e4b91dd4178cf8bb09de58e8de279118d242b1fe487ee1451627d0ddbfn/a Heodo
2020-10-22Invoice.docdoc d9e9ce342586063f33aaaaf408ee47cc54b990cacbaab0383bbacc0852320faaVirustotal results 39.62% Heodo
2020-10-22081031.docdoc 3735f679e476203802d9f194df12715cf31c7784072d4140c6630dea9184ce26Virustotal results 37.10% Heodo
2020-10-22Electronic form.docdoc 8ce84cc08c61ef8da560dab9863109bab6dac208bdb030c9d513aa71dc7b3492Virustotal results 39.62% Heodo
2020-10-22Copy invoice #2069.docdoc b26afd4f57733b395060db7410557428c784d504c43a18c1a150ead1f77b3ba1n/a Heodo
2020-10-22Inv. 0086259832.docdoc cd20ae1b00fceba422cc5bd5b2c7e42686f65e5ea4ef237340ffc7dd3e1a28f1n/a Heodo
2020-10-22Invoice #9813.docdoc 9b918b3a0a118f50d3c8d4be4526b1fd8ec10563810c7dbb5088495e471f6b26Virustotal results 32.26% Heodo
2020-10-22Form - Oct 22, 2020.docdoc 2f11fb391c4e5106c86f7af02261b1ce605f84877b62af40538177fc258c9e05n/a Heodo
2020-10-2203925925.docdoc 9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbcn/a Heodo