URLhaus Database

You are currently viewing the URLhaus database entry for https://nill2bill.com/wp-includes/wW1A2bvtIF5ZqeL64ntG0v4dsCCw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:753718
URL: https://nill2bill.com/wp-includes/wW1A2bvtIF5ZqeL64ntG0v4dsCCw/
URL Status:Offline
Host: nill2bill.com
Date added:2020-10-26 23:08:06 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-26 23:10:06 UTC to report{at}parspack[dot]com)
Takedown time:2 days, 14 hours, 28 minutes Poor (down since 2020-10-29 13:38:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28LIST_81392832.docdoc b3668093571980e6141e4c77f24f479a07c6fb18caae250a7de4c697deb2fc03n/aHeodo
2020-10-28PBU_39064362804.docdoc ad112b9ed4b1078a7142b24121c402ec49a036e33bf0e514f8bdc5b720c216deVirustotal results 17.46%Heodo
2020-10-28Rep_LOD_100120_PNJ_102820.docdoc 54a04ad4747b88954b6501afd0c033a819bfd9e67df5354ed77031d04e8e23bcVirustotal results 18.33%Heodo
2020-10-28rep_PO_10282020EX.docdoc 78344d3e894155b6b6fa65119c449406b1ad08900e1cb58f68d7efba27947084Virustotal results 17.46%Heodo
2020-10-28LIST_JX6645727798YM.docdoc b1bc33186fb8cfcd82b5c2472804eb7ef43ae164d2879c71d0c38ddc5f9ecf61Virustotal results 17.46%Heodo
2020-10-28arc_7606294727309352.docdoc 4e256fda887b295d063575d800b9635067589e649f555a0ebdd65ae8841fe9a2Virustotal results 17.46%Heodo
2020-10-28184359143308842096197.docdoc 8652478eb9242db4bf576ba7b7c8e498fda8e22d0893ea27768915b17486bbccVirustotal results 17.46%Heodo
2020-10-28Attachments_RA3768310361SB.docdoc b2df21abd3019bad332f1f34211b5a7f809af8d92737bb020afff3e6f0147a37Virustotal results 18.33%Heodo
2020-10-28Arc_22705644.docdoc 7f6ef7fd6f76a1ef0eed201b10fd39944874e657f56271aee75d090d57672248Virustotal results 29.51%Heodo
2020-10-28File_EQ6569808108LD.docdoc 1d9d2d513d2906aa7b8400819aece2cd5e80976226792618b60a507a2daa906bn/aHeodo
2020-10-28ARC_PO_10282020EX.docdoc 302684a1df1b3b6bcf6995798581972d23b71888983b326ff3eed9bbcaf1c56bVirustotal results 23.81%Heodo
2020-10-28Attachment_PO_10282020EX.docdoc 193422b30b299a52450704ddbc93cc49c2bf39fb28b197b01d27bb4ed99c09e7Virustotal results 22.58%Heodo
2020-10-2860829385.docdoc b7312fdc4c91f8c69fffb94e5fa56602b4e6c79687993797647c26dd9a81e3bbVirustotal results 19.35%Heodo
2020-10-28X_PO_10282020EX.docdoc 67f89ed6526c25c2f57566767057b1cc2be2463adc0002791a3bfcdb25158029Virustotal results 17.46%Heodo
2020-10-28ARC_92072085557776.docdoc d137ecd544d81788f995e57831d42f753cb8010032c9983800aa8fb52799f2f7Virustotal results 19.05%Heodo
2020-10-28List_4FJW2HGAUEMNGD.docdoc 7123fe5464dfce65a1bbac28244f6a100c49c281f037ad8d6830275d85bddf44n/aHeodo
2020-10-28DOC_PO_10282020EX.docdoc c7a9fcbd5e7cf2f7c00c2ce737e5f37d79fca2af4840700fbec2812fe888df80Virustotal results 16.39%Heodo
2020-10-28List_3993017276340227.docdoc 0843e95e73e1d9c719d84439a7243f080d431179cc900f1d3744cadcb2d19d38Virustotal results 17.46%Heodo
2020-10-28doc_IG5415618103DD.docdoc 6f09e12af88b8c2ae45c021409c707ca0afc0b65be38c119d8a7ecaa72355ac7Virustotal results 17.74%Heodo
2020-10-28dat_YZ01LX367.docdoc 3e87aaf3d279a35bccdc62f3e00e6655ddf9ecfd260ab20062a448d8ad551d22n/aHeodo
2020-10-28ARC_58167767101.docdoc bc7900d6b7db5d3d2e58d11e41e5684159552023773e43f3a2753efba476fa47Virustotal results 17.46%Heodo
2020-10-28file_AJ5406231323ER.docdoc 7b3bfb65935562f61ab84cd23b6c70e3d369e3478815bfdf6dc47740e25f7556Virustotal results 14.75%Heodo
2020-10-28J_59483549.docdoc 586ff0aded5422c4339495e0480f86f8454c8a813252983954522edc060f6e0en/aHeodo
2020-10-28dat_5224118596154931180.docdoc 328e64552392319bae85832b13d929359ac21842a9df53528cd720f0f06eea2eVirustotal results 28.57%Heodo
2020-10-28file_13344313.docdoc ada1b895d8a1af1461e0b32f2366bef386fa6b6d3235cf99f9838896ba16d2b5Virustotal results 29.51%Heodo
2020-10-28FILE_30136767990015424.docdoc 2ed9663048bfe1c969ee302588f17bbee321277d16204ebc6fcc3a626d03addbVirustotal results 28.57%Heodo
2020-10-28FILE_PO_10282020EX.docdoc a2b3de3e6d67d8b984e20da13e2338fb10bb97088378f08537ed93228f6850e1Virustotal results 28.57%Heodo
2020-10-28ARC_GAGFN96JTCB7CK5X.docdoc 971349194e2895c67d792f09a40990e6754e2ce4fa00b738c17c34cbb88cc6e2n/aHeodo
2020-10-28Arc_0QO3A4QM9TFRJ.docdoc 0fdb302c3db79d7ed89244d7adf4c56d5cc9e4643c3e5bac39c3e82cff3834e7n/aHeodo
2020-10-284813915333153895520175.docdoc 0e6d4b4fb5bd9daa6ac86ded3c620a00429f484e217542d2aada6c4635867df1n/a Heodo
2020-10-28File_BQCYQ0P35W2W5K7.docdoc 520ca27ad3a13618d306b397f83a91daf238997358520459895991c6285328e5n/aHeodo
2020-10-28UNTITLED_21408472.docdoc 969f5e0df23f888aebe6c8cd981961e3bb23f514d3d55148d8c56d0309a7532dVirustotal results 29.51%Heodo
2020-10-28file_2BSO6FB.docdoc 43f4b38dc2240818e174dc1351b7e7237a95f782d2f39578ed29bae1a18cf373Virustotal results 32.08%Heodo
2020-10-28FILE_PO_10282020EX.docdoc 21f741f58102f6494c54d7fc6830b266d1ab2f8afc85546d8e2a2d7b6d51c767n/aHeodo
2020-10-28REP_FV7415591032EJ.docdoc 96c1906f7dbb6cdf1beff4a38feeede08acd1e3c95112c076c1d4c7a6cd0adaaVirustotal results 28.57%Heodo
2020-10-28DOC_HCK_100120_VRS_102820.docdoc 923249c0d4dcc2113d70d2a97c0f28d9667690185c9e5a0d9161408d5277acf5Virustotal results 38.46%Heodo
2020-10-28inf_26872308.docdoc f605f4309f21e3797ba0f7b9440dbd45fb913a363be8a0e774040e92e05418fdVirustotal results 35.48%Heodo
2020-10-28REP_94128889.docdoc 9c509bf6c3b7824436cb299b2efffd013f3b0b156e9398a6975b71b50152cac3Virustotal results 40.74%Heodo
2020-10-28mes_22041996.docdoc 0b62b154422aa927a6906a75fdc8edfd4c143365e4b5e4a8ffd58badd6fdb0d4Virustotal results 38.89%Heodo
2020-10-28UNTITLED_UM7846481279BL.docdoc 2a46f3f595f2eea533b556a67f2558d85d955f1784d1d48cbe78b2e5fae35f34Virustotal results 28.57%Heodo
2020-10-28mes_92769804.docdoc fe13971c49c4731ae4fdc32c49bbb6796383a27db3ca2340642ed9d0c1753880Virustotal results 28.81%Heodo
2020-10-28DAT_08639825.docdoc 3120df1e06f01820a9e9aaf64e33f5ff4b4e39647ef7552f6f98535a9c17e68dVirustotal results 31.48%Heodo
2020-10-28List_OCDW58YBGF03RPA.docdoc 7f286766434b67cb7ea25119d469c086c70807bf665e8e373acb472ec284a72eVirustotal results 31.48%Heodo
2020-10-28List_SDQ_100120_RQG_102820.docdoc f3caca68ae462481d5bac777996fa838a0dce95c7eb782713404fa5e3712a2abn/aHeodo
2020-10-28list_1NNDHWZA2FJTQIH.docdoc 25578de149cb4dddcde0db6ab49f1ef760faf659fee06a0b86d0fe095cc438e6Virustotal results 27.78%Heodo
2020-10-28LN_OW5964289893OD.docdoc e809029e144d585294881c1cc21836d527c1547b45b9f97446ca6bc9987c3ee8Virustotal results 28.30%Heodo
2020-10-28Arc_TZ6NTUDB92RR.docdoc bc8c74e5b69ba384b49d43f30b6707c6982c97d843cbc3771fe0027cc844869fVirustotal results 25.00%Heodo
2020-10-28Attachment_82223762.docdoc 09a4d7f3bbc95dc5b795441093b4f44943d384f0b9087a71ddaf1b55eda16ec6Virustotal results 26.67%Heodo
2020-10-28FILE_PO_10282020EX.docdoc 42437dded751c17d78164701713e5a181726b5fa47472556a1eaede5aac86c17n/aHeodo
2020-10-28LIST_LSY_100120_LXI_102820.docdoc 2474770e88e989b790cd585fe0e234558dc6ce20bc8ddaf5a4e1f5c0733bc09dVirustotal results 22.22%Heodo
2020-10-28file_80840728.docdoc a30d2b343e3646a2a05e98c5b7f976a1f67e12574ecb880a2a460bec35735f6fVirustotal results 27.78%Heodo
2020-10-28ARC_LGA_100120_YRP_102820.docdoc 0c874ea74e47b55d95a88c84aabb2e74dc3938824474937df34da0971b59f4c7Virustotal results 22.22%Heodo
2020-10-28Mes_5Y3SXEF0F5M.docdoc 5b5139dd7a1ffc7d31ef829c6f23afb23a459dc8aa0a8f900970875ecd254e39n/aHeodo
2020-10-27Doc_14246995.docdoc 9efa8997bf4ffcc29b996b1a0dd651e92bacb8e79143a0c008cf1eb4a8b41cbdVirustotal results 24.53%Heodo
2020-10-27File_5KKB5JOPXEJWG.docdoc bab42b7ee6d4b385f15274f7900f7f2a4d5d68d7f527d20b0bfac926752f9b3an/aHeodo
2020-10-27BC_BDG_100120_SLX_102820.docdoc 68578d1838025f246fa8743f767bcc85ea6ae45f38ec14610b54e8693960a3a0n/aHeodo
2020-10-27rep_FUY_100120_QPN_102820.docdoc 9e67927cc9cf11b38167386aa1974faf5516155e23095cb9b5a2daf9686957e6n/aHeodo
2020-10-27rep_0602624289341.docdoc cf37bc70aa99bf4d8ac44a3ded10f1d82deac713ad88ca9aa9f6f550ccf52f2cn/aHeodo
2020-10-27Attachment_EB5RRKMP3QS.docdoc 45130c5318fcc42b669d0caaf4357938d1f8ec66f9d5f96b8790e6f08f05e13dn/aHeodo
2020-10-27Mes_04166508.docdoc 444561d4fffc7ef6089bcd8ff849a9688f26c828917dc6f29ebc13ef1a813568n/aHeodo
2020-10-27Untitled_IFZ_100120_MXG_102820.docdoc a260910db0747bfef736fe491c9762f6651e7031b77914ab19fad50c63ef70fbVirustotal results 22.22%Heodo
2020-10-27Dat_75368435.docdoc 072432dff65efd13b9aff5f11e2110b10d7faec139153eecfc4d332e3e7413e9Virustotal results 19.05%Heodo
2020-10-27dat_ID4178104251QK.docdoc 19b2ef8602e3efffbd8cde11a0a67d41ccecaa61b565625a2fc3648e48842ac5n/aHeodo
2020-10-27INF_HQWJUDONTKQY.docdoc 12e68ae11d4760770f0cbbbff076d4433df71d8674e10d3875994fc1d749b1d6Virustotal results 22.22%Heodo
2020-10-27D_YBZGZ9IEQ40EWNH.docdoc 762bcc2c5112e9883cfccc6525ddfe0c7839a65c34bff3f40cc0cfa69d9384d2Virustotal results 41.94%Heodo
2020-10-27UNTITLED_PO_10272020EX.docdoc cb505678e0c2debe5c5b4647af5940e08ffbb2d7a1c73de09136d64560cc0696n/aHeodo
2020-10-27mes_VKK_100120_VVG_102720.docdoc ae384ef3ae1439be7fd5e225e356f5869d208e2bde0bce02a81e75d56239d985n/aHeodo
2020-10-27V_F9GSMRV2NMJU.docdoc 6f468d656d3c2f72a6daa3ca15a626683934bdfe57d65187f19aacec5e0f38f1n/a Heodo
2020-10-27File_JX5990727379NQ.docdoc 53dfce57e9c5c4d1fa5dbfde99dffd5cccf677f96b297a5a517d86f93cc81bbfn/aHeodo
2020-10-27B_BDJ_100120_OID_102720.docdoc 36f438d9f983ff13b0d9cd592093dc78f38fb115c966eefa01db80b01bbda192n/aHeodo
2020-10-27Rep_LV7867770529IW.docdoc e370ea4609a4c900d20fd7b455fa80fddc7c91996b6ee181eafa2b4a2f518202Virustotal results 44.44%Heodo
2020-10-27Untitled_Y2APH3P.docdoc 75642eb51b57507a5a4777048331da127ab8e0eac81c31e69d50e3372ce28dd9Virustotal results 50.94%Heodo
2020-10-27arc_29671759118447223.docdoc e2e08b8d13ee2f3b74b54ec4de5892a941e2a274e8c0117d86a7dda62c0dcdd8Virustotal results 45.16%Heodo
2020-10-27ARC_0519003752133047.docdoc 26334b62aa0e9ede3dbb964e4519bfd8864952e21555d976db4332851a0affa5Virustotal results 46.67%Heodo
2020-10-27FILE_3WD00IX37AO.docdoc 09244c423c3262527e5deda11a9ade5df8ec453d879c5fb6e6cb2afd3121ffccn/aHeodo
2020-10-2784713131.docdoc 1a085300939d5afedf7de966fc70593f8abdaefad80639cc2153cb93450e1014Virustotal results 40.74%Heodo
2020-10-27REP_803677882347976891.docdoc 962fbbf94c656f8adb7fbc7ea014c1d73a53e89da111f32496bdf5c1cd019738Virustotal results 37.04%Heodo
2020-10-27arc_5835391328432.docdoc a29d51416449dfcb6f6252e85b3931f87b7902906dbd91e184440024ad0d19a3Virustotal results 33.33%Heodo
2020-10-27REP_9609841215.docdoc 859b4eefcb2d29d6d47108ec6fe5463bf11a5345be824a956aaa125ac3bb6372n/a Heodo
2020-10-27Untitled_73213583705.docdoc 0ffd78abcbef3c3c9db246bde76dbdb1adfd04048d57b817b5a0036324136d97n/aHeodo
2020-10-27BXP_100120_HLI_102720.docdoc 39b408479c9b71f2255dbb68b69c160ba53dde08fdcf127f2ca2598fefa640ebn/aHeodo
2020-10-27rep_PO_10272020EX.docdoc 822b7150456ce4824d3136d2b173e2981a20870b8533b3379c2feb83f55288ban/aHeodo
2020-10-27MK_90320930183.docdoc f31140483a61bc5bd7a5d3040838aee934eefc7cc47842ef5b55881d29820b62n/aHeodo
2020-10-27DAT_802636262815.docdoc 39e60430550edba1fbe6da455accea7d2394d8a0b921d4747fdd365442519b76Virustotal results 33.87%Heodo
2020-10-27dat_65881676652040325803407.docdoc 71c73b1d88d50e2982f5f633cf03be4da68db518fcf131f2f22787aa0cd54650n/aHeodo
2020-10-27INF_DXT_100120_LOM_102720.docdoc 63b071aca88485607c94bfbc6f4afaf604a04cf316431cc9375016c853cb363an/aHeodo
2020-10-27H_AGF_100120_BVP_102720.docdoc 56c2cef0eede6803ac93b690989ddfe5728039f73ee3f2667128ff8812054a6an/aHeodo
2020-10-2782392057.docdoc f08dcbd662346509dda32a750aef30760483bb319be71138d1973e4b3e98c98en/aHeodo
2020-10-27List_64420812211979977907.docdoc 738cae5e8c5b127eceb61ae86ded059ef5abab3d6c02649cb756cdbaa3470764n/aHeodo
2020-10-27Arc_11261614.docdoc 69bc04bfb442136b7df096af3fd2011e64b884f66fef4f039e6ed29827752c7cVirustotal results 33.33%Heodo
2020-10-27Mes_SW6635288784JZ.docdoc 433f0447ecd886dab9d0500836a543a9b9f91738d2f469629b197b11cb55d5dbVirustotal results 32.26%Heodo
2020-10-27Untitled_PO_10272020EX.docdoc 4d55ddffa3d513e115000683cfa2fb1e2b738298d58e3b6dfaa8f66feb1351dcVirustotal results 35.19%Heodo
2020-10-27ARC_UW9089822731GT.docdoc 99dcbef73f8e02416896cdc9204b4ee7249131cea8de9baae8bd7f40985c7d5bVirustotal results 31.75%Heodo
2020-10-27Arc_57475786.docdoc 3d3018783ee56f8fe4b38d613ee7b96aa6424bdf12d3bd7c3dc618c6bb38dcdan/aHeodo
2020-10-27DAT_WU8474969647UZ.docdoc 115c98911b958fcf8e3c9300eca7763548205c8fade900f66be4d241ed54c99fVirustotal results 31.75%Heodo
2020-10-27TX29DBT1ZSN745.docdoc 24766703c0713e30ba3b3667a3e220f3d909b86f5566ca06a66f97a7f181715cVirustotal results 35.19%Heodo
2020-10-27REP_JBTUBR1PSNU.docdoc 9585baa7e3cea40736c5c909141cab11285345fa112ea2ca8438dda57091a96dn/aHeodo
2020-10-27N_YO8192190070JT.docdoc cd0b23d03029fe913a9d2f52d14b0703f4a6f6a4cbda6744a455fca3373d3ca2n/aHeodo
2020-10-27MRC_100120_PPL_102720.docdoc a9670ebc9a9410fd8afc7de53381f501601ca3566f19e9177a79ba8a1b6b93e6Virustotal results 42.31%Heodo
2020-10-27IOQ_100120_QPR_102720.docdoc b54246f7e156e673583d27bac3eedf9c6e97db4635d316ac47c599ba5baa1266Virustotal results 39.34%Heodo
2020-10-2743153595.docdoc 402bcaa8f052d8cf5d7ebef47283ea79c68151fa78bfad0611e97530423d3b73Virustotal results 41.27%Heodo
2020-10-27REP_DZI_100120_IQD_102720.docdoc de751e95178762a5c0bbc3384a4b95002c87865e545df412b1334b52564fbb59Virustotal results 41.51%Heodo
2020-10-27REP_22472543965332301233720.docdoc 284ca49487afcbd5dc06144fd8a4b4ebaf8abc174a9c0c609a5073f4925ec19eVirustotal results 39.62%Heodo
2020-10-27WY0086071711ZI.docdoc 9a5ff2d10eb6a49a82083f2f52e3daba519399794197d526ab76a68dd6849e69Virustotal results 39.62%Heodo
2020-10-27UFH_XIB_100120_CDX_102720.docdoc 0779c9b1561c39e278910257e807a233b3545da40dd442a26906c0ffa6e199fbVirustotal results 36.07%Heodo
2020-10-27BAL_156063220896452.docdoc ada5eecfbbe470ecc1b1c434323530f141ac930ee6febd5c6e578dda073ccbecVirustotal results 38.89%Heodo
2020-10-26REP_PKA_100120_RXW_102720.docdoc 99f4e6496067c7a7b9d8cd390470315cc63c4f3adb23c3d885b886f9d86786edVirustotal results 38.10% Heodo
2020-10-26X_49776830.docdoc ac739c4d98aa46329d4ebe114bad66247375ddaf8d148446712f2a2b8006f300Virustotal results 38.46%Heodo
2020-10-26DOC_59939542209462414721558.docdoc 7569ec933b0114593361c66c86f8317cdb131aece55945e0634987155a0d0ddeVirustotal results 37.10%Heodo