URLhaus Database

You are currently viewing the URLhaus database entry for https://agclassesedu.com/db/uhMGQ6h7Q9IyK0cls/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:753793
URL: https://agclassesedu.com/db/uhMGQ6h7Q9IyK0cls/
URL Status:Offline
Host: agclassesedu.com
Date added:2020-10-26 23:49:04 UTC
Last online:2020-10-27 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-26 23:50:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 27 minutes Good (down since 2020-10-27 02:17:23 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27INV_234739502305073146576.docdoc 5015b3d571a67fc015e9ae62b064f6a8357b86db998aa2fc1eafe6bfd053ee44Virustotal results 39.66%Heodo
2020-10-27C_69455539.docdoc f60367a56f63f15b4be7200e8bb78d410ba5408cd0615bf5fa390330b4aed1e6Virustotal results 38.10%Heodo
2020-10-27DOC_923290992796770777.docdoc e955daa4404b745ed6c72a2e99899af5ad6b133c5b24f5665d4649cdcff05fe2Virustotal results 38.89%Heodo
2020-10-27BAL_PO_10272020EX.docdoc c8b394c2d8b83573eba859ba30101e535e3795cc846b6f21a09c3653cae36981Virustotal results 38.89%Heodo
2020-10-27FILE_US8819746776SD.docdoc f5831fd5a2bd8c3eaf0bbd799764d684f1c3a2528d5583013b438e6f2b4f4843Virustotal results 39.62%Heodo
2020-10-27929433506698.docdoc 0779c9b1561c39e278910257e807a233b3545da40dd442a26906c0ffa6e199fbVirustotal results 36.07%Heodo
2020-10-27BAL_12664195.docdoc ada5eecfbbe470ecc1b1c434323530f141ac930ee6febd5c6e578dda073ccbecVirustotal results 38.89%Heodo
2020-10-27PO_10272020EX.docdoc ed7748045b321a2e819fdb922995edf21e8b02996994aaebf64df519509d669eVirustotal results 37.74%Heodo
2020-10-26CJ5796353213BZ.docdoc bf13f346fa99536c9e1b47d943ea6d9880b36d48bac4fb1ff12694a0bef6b01dVirustotal results 39.62% Heodo