URLhaus Database

You are currently viewing the URLhaus database entry for http://kelbrad.co.zw/wp-admin/nbl1Bm7g5eoLQMyIJawjWvxBgC5eh8hzPqwDt296z8SYEOTUaMx/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:756981
URL: http://kelbrad.co.zw/wp-admin/nbl1Bm7g5eoLQMyIJawjWvxBgC5eh8hzPqwDt296z8SYEOTUaMx/
URL Status:Offline
Host: kelbrad.co.zw
Date added:2020-10-27 15:57:05 UTC
Last online:2020-10-29 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 15:58:04 UTC to abuse{at}godaddy[dot]com)
Takedown time:1 day, 15 hours, 22 minutes Poor (down since 2020-10-29 07:20:29 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27FILE_SIDOH7KWD0MROXL.docdoc 786139fdf387d3068d18ba7eb1f55806ca956cd8834e1bbc350196ede6433fddn/aHeodo
2020-10-27ZWZ_100120_EKE_102820.docdoc 444561d4fffc7ef6089bcd8ff849a9688f26c828917dc6f29ebc13ef1a813568n/aHeodo
2020-10-27Inf_PO_10282020EX.docdoc a260910db0747bfef736fe491c9762f6651e7031b77914ab19fad50c63ef70fbn/aHeodo
2020-10-27LIST_PO_10282020EX.docdoc adaa6cfe6f38da277ca461fdc4d6c81d643d1c91babe46515180b90cd041fc15Virustotal results 19.67%Heodo
2020-10-27ARC_PO_10272020EX.docdoc ef29a8422b09e506af3affcef90be9236f769d51ce6a686df8fb8dfc6fcd1284n/aHeodo
2020-10-27ARC_DO8293660897LQ.docdoc cc6e22fb47f246a8619f5e98b3078e0e9d99026df12daa5dbe90bf64e9e3694fn/aHeodo
2020-10-27UOVH_RYC_100120_NHO_102720.docdoc affba7e7949c06840bb7887c8373003434c8755505fd274c8274210b5c8a2961n/aHeodo
2020-10-27FILE_7595192204807443755.docdoc cb505678e0c2debe5c5b4647af5940e08ffbb2d7a1c73de09136d64560cc0696Virustotal results 50.00%Heodo
2020-10-27INF_PO_10272020EX.docdoc 94bb2eb0f0b8a0f61ff20360dbf6e4b89188c5157bc940f9d38dd4cb68a4539an/aHeodo
2020-10-27Untitled_PO_10272020EX.docdoc f7496ff4899b8d1febae957c9f03aaaf262609fb62b4588471fd7b15dc107d1eVirustotal results 47.46%Heodo
2020-10-27UNTITLED_509191674.docdoc 69c66278b808dbebfd0dbcd3869f502a33b285251e49e1fa7f9fb6fc7deff266Virustotal results 50.00%Heodo
2020-10-27Arc_635243635691.docdoc 53dfce57e9c5c4d1fa5dbfde99dffd5cccf677f96b297a5a517d86f93cc81bbfn/aHeodo
2020-10-27Untitled_FM6540247691NH.docdoc 5ed7759274be901ba33c4f6edc3933a460141c8fd98a83304db9c6a344adecefVirustotal results 50.94%Heodo
2020-10-27MES_L74Z30KYEYLLSPJ0.docdoc 82e13c6c6c28efe1784b06b488b4ef8303c4c9ada6e9f8815a30bea58b19629en/aHeodo
2020-10-27DAT_45ZTLS5E1V4PX0HD.docdoc 8e2379ffe37bd31c9d501b4fea3ae2e28b59f933520d89a5fae9580c3bfe9368n/aHeodo
2020-10-27UNTITLED_PO_10272020EX.docdoc 46a3e3abecccb7dab19ff4c6940f0d2b503d409524a59b07bea431da55dac765n/aHeodo
2020-10-27PO_10272020EX.docdoc 04c4ec6ce334fcb141b92d6e0a177aa261d773d79e3c9a671db3fe228bc7fa7dn/aHeodo
2020-10-27EMK_100120_LZM_102720.docdoc beec80235ed74cc910936321b2be145f0ed3d43cb0a6f436d2e9414e2df55f6bVirustotal results 37.25%Heodo