URLhaus Database

You are currently viewing the URLhaus database entry for https://hylman.com/wp-includes/BcLAs1iA8AWUFINJveOhp5X6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:753483
URL: https://hylman.com/wp-includes/BcLAs1iA8AWUFINJveOhp5X6/
URL Status:Offline
Host: hylman.com
Date added:2020-10-26 21:48:09 UTC
Last online:2020-10-27 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-26 21:50:24 UTC to abuse{at}digitalocean[dot]com)
Takedown time:12 hours, 2 minutes Good (down since 2020-10-27 09:53:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27List_73964271.docdoc 6f982a4cedde61a7a9acad8fb710c9fa556a72a5cd5a71b7efa3ee4500b6551dVirustotal results 34.62%Heodo
2020-10-27File_HIEQ2L7KZ.docdoc d08d1bc97690cb1259689a27c633a98ca69552fd2f3b80f940ce0c9b4a168364Virustotal results 32.79%Heodo
2020-10-27E_45833214.docdoc 99963b0cf4f0151b67a5c757087ce3893cc46b3878d1f16991e38fcc63a3fd56n/aHeodo
2020-10-27REP_24701205.docdoc 9585baa7e3cea40736c5c909141cab11285345fa112ea2ca8438dda57091a96dn/aHeodo
2020-10-27FILE_NFXNQA6MWLF.docdoc 0bce545acd6f37453246cb2ce9c6ef9e85b7c6c02676fed1a2bfd42934be9c03Virustotal results 40.74%Heodo
2020-10-27REP_UZO_100120_ZRE_102720.docdoc 58dd20d9c3e38a8115434572a1975f207290cb2340b203ffaa6d3b08fa95da9fVirustotal results 38.71%Heodo
2020-10-27O_28429637.docdoc d8a7b96945c681d9842b604e3ed507134aebfdea87bf2151fb72edbf2fcb9d6dn/aHeodo
2020-10-27E_10017569.docdoc 86b0701737b73d1713cc04f83dd9e1d5d8dcee914c007cca4d5a6a1870f7b067Virustotal results 41.67%Heodo
2020-10-27A_ERL_100120_CXU_102720.docdoc 402bcaa8f052d8cf5d7ebef47283ea79c68151fa78bfad0611e97530423d3b73Virustotal results 41.27%Heodo
2020-10-27MVT_100120_JTU_102720.docdoc dcac3f433bca625d1c831d29f00d254dcc6740ca1779ebf9f6483ab6fe431c21Virustotal results 40.98%Heodo
2020-10-27QBC_100120_UHH_102720.docdoc 1b90906d6146b886c419f1c0529e6a929d80d41ff661e6c9a5dcf28f6062a9e0n/aHeodo
2020-10-27REP_TW6343732738SO.docdoc 2015896f02bf0d7ea83f6b6c3e731cd5f4004677e58dd2a5f658a848cd1ff322Virustotal results 39.22%Heodo
2020-10-27FILE_ZOK_100120_TVG_102720.docdoc 4c22a2bdba84f5c8604dec8bb09846167e68b70dac6ec6b641a70fc41de2c1d5Virustotal results 39.62%Heodo
2020-10-27INV_PO_10272020EX.docdoc 2960dd68c371680d27dc0f404b13568b2274901eb683c0a4cfa8b74510d5a74eVirustotal results 50.94%Heodo
2020-10-27FILE_99890844.docdoc f83783eda067f6e1b71d589e230f6aa844b2410c42ce2f20a60f9b32960852a6Virustotal results 38.10%Heodo
2020-10-27INV_3658173890.docdoc e8caccd0e30b68aa3a338537f9164503821ec1089daf287db3acf97ec74e59f3Virustotal results 38.10%Heodo
2020-10-27REP_IBG_100120_RCK_102720.docdoc 175f70e42ab1da776d956a78b3813c139a60bc27bcc82d52b292184499905fb4Virustotal results 38.46%Heodo
2020-10-275222852862.docdoc 5015b3d571a67fc015e9ae62b064f6a8357b86db998aa2fc1eafe6bfd053ee44Virustotal results 39.66%Heodo
2020-10-27N_78924206.docdoc 9c6f43dcc3bd1778ac7082fcd98251f2ebbc67b02f5d6e41ab97c2e8924a4e17Virustotal results 38.89%Heodo
2020-10-27NEV_QKJ_100120_SBD_102720.docdoc eb65d8e85cc0adb029a282fca04eb78d8357cca6c390691c383a7e2bbf0e39c0Virustotal results 39.62%Heodo
2020-10-27FILE_L9STKSCESIHHF.docdoc 284ca49487afcbd5dc06144fd8a4b4ebaf8abc174a9c0c609a5073f4925ec19eVirustotal results 39.62%Heodo
2020-10-27E_XQ7312649516HF.docdoc 9a5ff2d10eb6a49a82083f2f52e3daba519399794197d526ab76a68dd6849e69Virustotal results 39.62%Heodo
2020-10-27DOC_PO_10272020EX.docdoc fc96bc46b69a1ec2ac6829d22a21628bae8d3b2f8b64e2d97ee087ccdce4de14Virustotal results 39.34%Heodo
2020-10-2740099580622053015484574.docdoc ada5eecfbbe470ecc1b1c434323530f141ac930ee6febd5c6e578dda073ccbecVirustotal results 38.89%Heodo
2020-10-26FILE_WCL_100120_EQB_102720.docdoc 99f4e6496067c7a7b9d8cd390470315cc63c4f3adb23c3d885b886f9d86786edVirustotal results 38.10% Heodo
2020-10-26A_WA2XUJR.docdoc cb03912b61593521af131c3ce32772bf24f99a30cda9985f1f8581ba6be8c285Virustotal results 39.62%Heodo
2020-10-26REP_JE3041204820OC.docdoc 0ab03990f76631ea9155550ab1ce403dbcebc068697d78958d1e6fbb587c2639Virustotal results 38.89%Heodo
2020-10-26PO_10272020EX.docdoc 5542c37ee5faeeea86b317db009b24a38f581860e468db0ae1d61b0850aa3463Virustotal results 35.48% Heodo
2020-10-26TWL_100120_WJO_102720.docdoc 1876ecab19ee6802dac2e8774dfd625dcb2d4e00fb61f446caeabd26db1405a4Virustotal results 37.04%Heodo
2020-10-26INV_27745295.docdoc ced763c7a4e419e5fe3cc06d5ef0e01adfdbc0837028a48fef7f0d26db8566d4Virustotal results 37.04% Heodo
2020-10-26INV_MV1292175387QR.docdoc 7e2498c2125b196f853bab661649d81424c604a5506801229b8b4128d3cf5a4bVirustotal results 41.82%Heodo
2020-10-26HV8719933553DS.docdoc cc341e2451041bcd6d9dedc66abe480900021abc803788e2d56b701edee7e044n/aHeodo