URLhaus Database

You are currently viewing the URLhaus database entry for http://omegatravelandtour.com/wp-content/EeFBI710N4cQ6R3v1VgyPcCN0q9N/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:758152
URL: http://omegatravelandtour.com/wp-content/EeFBI710N4cQ6R3v1VgyPcCN0q9N/
URL Status:Offline
Host: omegatravelandtour.com
Date added:2020-10-27 21:40:05 UTC
Last online:2020-11-05 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003038096 created on 2020-10-27 21:42:05 UTC)
Takedown time:8 days, 17 hours, 3 minutes Bad (down since 2020-11-05 14:45:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29rep_21191787.docdoc 168c46a9b7c3c72ceb572a447f6317e5b66aca4735ea8e096bc92f0d03628879Virustotal results 34.92%Heodo
2020-10-29FILE_XNG_100120_QKB_103020.docdoc 6b500ff3f698821bbc747c834a188d81de0df053235788ca2ae36d8dd4cb80efVirustotal results 35.94%Heodo
2020-10-29mes_DIH_100120_VZM_102920.docdoc c61fca273223598ec29bcc70b0f716f3cb0ff9d9e293a02c8e0328dcf0011153Virustotal results 34.38%Heodo
2020-10-29Attachment_55544705.docdoc 41439f935c27535a7752ad0b7a778de41fa076af62cee2bf3ce8138567fd7060Virustotal results 35.48%Heodo
2020-10-29doc_28473522.docdoc 1aa45bfd6fa4890726daf11261b2aa4a7a23e9506d1845fc62edac1734669c26n/aHeodo
2020-10-29FILE_0786267584.docdoc 51657b8a72e7e81349ee2744529184125522759769f93b02aebc3a2d33fddc2bVirustotal results 27.87%Heodo
2020-10-29PZEJ_PO_10292020EX.docdoc aebaaa277983fed939f7025cfb03b61ff9a049ff8288077360593f4a3dbb8563Virustotal results 31.25% Heodo
2020-10-29DAT_584012248167589669228.docdoc 060a5c65a7cc6ecfa1290f84d608e94a147a447e1dd75ceedd3490ab079b6e74Virustotal results 31.25%Heodo
2020-10-29FILE_PO_10292020EX.docdoc 8767bc3debff2695a4cb7dbd39f82b3c021888d7e244ffdc79af9883ce6f3449Virustotal results 31.25%Heodo
2020-10-29Doc_80205423.docdoc c9bee872802f41154444cf83a87057e1caa72888e8b2c3901933201b9aa6312an/aHeodo
2020-10-29Attachment_WNI_100120_CSN_102920.docdoc a5d70f05d98720bd04c84440dd37092752ad5412805815ee92472cfc5c2aa1b7Virustotal results 32.81%Heodo
2020-10-29INF_02700979.docdoc 66f21ad9f94f3926c870736b3a33af58b00eea538ae8da9b7cd71ad1eb5614d6n/aHeodo
2020-10-29LIST_PO_10292020EX.docdoc 98de74a1b000e840bd188d7a4e35eb9150102a43f8c4fe5357bebae3ad586955Virustotal results 26.56%Heodo
2020-10-29Attachments_SC5391808922QZ.docdoc ccc94ba056101ead7adab466b9b4780b16a85dff204b246ae7094f9bbe79fdacVirustotal results 27.42%Heodo
2020-10-29Inf_46536097.docdoc e71176f87f966b10a6770fcfffe18e9e8ffd08139967c62d7ff50e63ece6b72fVirustotal results 22.81%Heodo
2020-10-29I_EXE_100120_OJJ_102920.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29644472768777588.docdoc d94ef71ba973986a34d34bc222026baa9954d1849b3fa74a609967ddf8e6af17Virustotal results 27.42%Heodo
2020-10-29FILE_97575975.docdoc 5ed767510e9b2630ac3c6ea38470821c0c85acaf712cb5f45eddd5f6e0fcdc17Virustotal results 26.98%Heodo
2020-10-29Dat_CQW_100120_GDE_102920.docdoc 774059c5c371964d14cb4894f7a1699d2bb5b3ce2bcb1544bd9a6ef92e845547n/aHeodo
2020-10-29Mes_140050822246613719379.docdoc 9e8de88a3e7aabf6248a4a17e376f37501cb0437cf9127abda8283191eee760aVirustotal results 26.56%Heodo
2020-10-29Doc_XT5112751592UH.docdoc b97ef63f4cdcb7c82862e52763408c1c6e70b9e4282e940d30c71dee4630e8d3n/aHeodo
2020-10-29IRU_PB0894588321OG.docdoc 4a66929263cee2a8c48e07dbf1fb484199f5d51da94f42703fff35d3213235d9Virustotal results 24.59%Heodo
2020-10-29rep_YX9634870413GS.docdoc ac100d3e7a4985580d980cb7dc26527d01d4166b7bc89405dd21918ae03f7faen/aHeodo
2020-10-29dat_6749481289174833109.docdoc fa68a64196793116b8b029723e9a7fd7d6a7e5c8bbcc752be10b93c5575ebb03Virustotal results 20.31%Heodo
2020-10-29DOC_PO_10292020EX.docdoc 8b4afb8076a68f93b44032c82700252f8971b853903b31fd0eaf50671f7c3cd7Virustotal results 20.31%Heodo
2020-10-29Rep_LD1261563128AL.docdoc f679622b39b3a0f7e21e8cfad7010f742f0a5f0803d671fa01c2e01b8cbd01b2Virustotal results 20.97%Heodo
2020-10-29LIST_GNI_100120_ZSG_102920.docdoc b0144d3b84fcb16e6d521e31100944499659d0ed9065e7295eb557d60254be7bVirustotal results 20.31%Heodo
2020-10-29FILE_544771239721931802.docdoc 6b696b987488f5f9abee78f4d38565535d928adb645de9f48e95a99914bc5dc8Virustotal results 18.75%Heodo
2020-10-29DAT_SSU_100120_WWU_102920.docdoc 4105e48c905f55328aa0a89a608c302216a2d4b119573ef85d1e9902d0531119n/aHeodo
2020-10-29Attachments_66032687.docdoc 1ecf50c67d4c4bf7eba5ed050c6500f7ab6a2b63b66f12dd23748e22e9a34ce7n/aHeodo
2020-10-29Dat_45019710.docdoc ffa31d45d93161ab298442d4f9d83cf8b0bcead9e50e92a048b6b0900415b59cVirustotal results 41.27%Heodo
2020-10-29doc_5RHXZDRH9HOMX42.docdoc 6cff316da0b26621e5b1fc3d5a85c6931a68a90fde20acf702195a175fb4ce44n/aHeodo
2020-10-29ARC_2FDVDATPB2NM.docdoc 203c3fd643e932d50df0ccb5aa112bf49bbf44dd16e722b4bdc67551bf3fb133n/aHeodo
2020-10-29List_26648464.docdoc 2b8dfcf8783b72baca00a99f5e1caf12a714d64def58cc7aa262953c60fd6b85Virustotal results 41.94%Heodo
2020-10-29REP_79128520.docdoc 5d0b92f454b00f1679bc6b090749bf784d1fa854eac55bf453eec083b6aa2076Virustotal results 41.27%Heodo
2020-10-29FILE_1783354497664084703.docdoc 7161db36ab8dfa34e4ae1aefa3d4fd7923a2a89118835e1e8bc905216bbf70e8Virustotal results 38.10%Heodo
2020-10-29Attachment_PO_10292020EX.docdoc 1baeed811a902b926b7e18dca28f8eb0f73a98a4b06b396119ac5532f0a6d9edVirustotal results 38.10%Heodo
2020-10-29mes_RRD_100120_SNJ_102920.docdoc 6d8ce1a7fac9fd46d61f2fe0e3dff607971c0a6e830f3eac90a4b3145f06280aVirustotal results 38.10%Heodo
2020-10-29doc_RE7271225864FI.docdoc d41fde459d5a6605355b1daac05e7fe5ed46f2f70d564951027067566a049475Virustotal results 38.10%Heodo
2020-10-29dat_PO_10292020EX.docdoc ed5a9cf9f1dc54e472bd41658cb3f19ec7eafcb34da7257c6407697b879a0535n/aHeodo
2020-10-29L_PO_10292020EX.docdoc f54166916a8e40e0d024df928029c9f35e013fb4b7a39eeb0554e8dc2820dc9cVirustotal results 40.74%Heodo
2020-10-29list_004320285066827811.docdoc 33922102764c4b2609240638de815d4e2ebbc1334d9cf6b1b9609c89bb8a9c0aVirustotal results 36.51%Heodo
2020-10-29Untitled_CFV_100120_RSL_102920.docdoc ddff5ab1d127fa30a0f2353857d3ac72c8b28191737e15516420dc25abaa6784Virustotal results 37.70%Heodo
2020-10-28U_PO_10292020EX.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7n/aHeodo
2020-10-28H_SNS_100120_KQI_102920.docdoc b693171616c84c6e6bf6f7a486ac2efef18cab45a608593d95def463549f2f74Virustotal results 25.40%Heodo
2020-10-28File_72475152.docdoc b453a71649f01fe941d53cdae60f24c08a2ef3294472d662be990ed0b961d3ccn/aHeodo
2020-10-28inf_HY4193515960OY.docdoc 92bad3b1416d1b7f759e20c2214cbfe1f31b2f334d818e67dd917cde8a72befcVirustotal results 24.19%Heodo
2020-10-28PO_10282020EX.docdoc a9003ab0c42daf42d53d1661cab1ee2ac09b3e58da393f79d593736cc30d6aafn/aHeodo
2020-10-28Attachments_48900704460.docdoc aa5e7414db596bbbac651408e85b19557a2415a2e42a4a2689cf37c1f3dc1c10Virustotal results 22.95%Heodo
2020-10-28dat_85525485281523657907.docdoc c2d24878a478d12f42849ded89565fe77905f7af790b6a7272ece4fc9db45fe2Virustotal results 19.05%Heodo
2020-10-28List_VR6550540868ZZ.docdoc 03cee0e4bd76ec300e6e09d41fb6cfc6e24346ed58c3aec95bc6a8dae7838a69n/aHeodo
2020-10-28file_BWT_100120_RGP_102820.docdoc ac9272ebdc022c3e93ef6dff217e30a0434094ccb3b6c5ab79cc97a94cf1825dVirustotal results 17.46%Heodo
2020-10-28INF_KZMC853UJFI.docdoc 6f587af9bf1d3fd4e20091fbeeff179d6280cc928c2e02857eb954aa37c7de98Virustotal results 17.74%Heodo
2020-10-28DOC_FH0824496991WU.docdoc b1bc33186fb8cfcd82b5c2472804eb7ef43ae164d2879c71d0c38ddc5f9ecf61Virustotal results 17.46%Heodo
2020-10-28ARC_0999712940756828363462.docdoc 7d38c4d98d05cd3a7a0fc6898c9d86ef1c29cd8dcfa3403d0222ff508843a325n/aHeodo
2020-10-28inf_TH2962490313BJ.docdoc 6ce35993d504db2336d3804f3ed1ec36aabe10a3386bd30aedfc0f4c149ef58bn/aHeodo
2020-10-28Rep_54603989.docdoc ddcf5630aefa8de831c95d68479b3d2b92bae966f6e994b16ff7c9821a227c21Virustotal results 18.03%Heodo
2020-10-28Rep_IS817HFQ2A6.docdoc f60c05abd97590b8b38e8fdebfbd9f6dc73dfef0a767d075be889c4646ad19d4Virustotal results 16.39%Heodo
2020-10-28MES_686870676262650143314261.docdoc 9727e61b54cb94d7ee0efb897b46e6090d7840219900592a82751723ad457649Virustotal results 25.81%Heodo
2020-10-28DAT_ZF7922831587QE.docdoc 1bb8a0d1e93744c80a39b6c4fbbcf82de0e0ad276098c7ef29a556daa1d0fa15n/aHeodo
2020-10-28Arc_IDUTMUQ406UCMW.docdoc 0285b11153063e88e38a1f507f0bc7da9d0cd443a93a28f5d029fb201910f212n/aHeodo
2020-10-28File_ERS_100120_YBV_102820.docdoc 3731935385f3f9940df18e1fe2a5efb5ff5dc256f1a9fd33882b58ba8b50589dVirustotal results 20.97%Heodo
2020-10-28arc_J0PJGXC.docdoc 92a3589e1b3fd70341f8bf112b36413666415cdd61c4c49564ec228ef12fb723n/aHeodo
2020-10-28MES_QXK_100120_MSQ_102820.docdoc dcbe02f1aa0077b9eb58a4e8a30c9c220fc240162ffcb1bb73376e967d6e7b62Virustotal results 17.74%Heodo
2020-10-28List_C5ODTHNRB461GE.docdoc 8d7bfba7aa5d45dfacce4f1d01bd73c49ac08a57ca60560244f8e4d9220ca53en/aHeodo
2020-10-28FILE_65376836.docdoc 6059ce335049c1b4200290f042fabd903bf0081c4677138bf256636f82e81c9cn/aHeodo
2020-10-28Rep_PO_10282020EX.docdoc 3a80f65b200ea7247726fab9a6a422ee11db27f16b629823f536e69e6b534f76n/aHeodo
2020-10-28file_PO_10282020EX.docdoc a35f0fa4b2082b66755f87c30fdb12e922d177ae2a22ea0289e2e292042817edn/aHeodo
2020-10-28DAT_13838331151393527719649.docdoc 778c2b97449426c3f3827a8041a05fcbb0e648267612cde21370c9f152bcf255n/aHeodo
2020-10-28DAT_294073220524442.docdoc 852d88f248a132193134baba17eb75649f9aab9cb04fc39652d337149c5dfd87n/aHeodo
2020-10-28Inf_PO_10282020EX.docdoc cb10354a6aff051fe7ae1c2cfb38b40e5ed1c8fd1a4c4b1a35724efed4885995n/aHeodo
2020-10-28file_IAO_100120_ITW_102820.docdoc 0cf82bd2a650438c7818a19c6fe0732ac0c004c56b13d070417bb70bfe3b75ccVirustotal results 17.46%Heodo
2020-10-28KONK_76908217.docdoc b2a8f6bc160f4536d6be6a9e5ef41244a96a2bf0de49f9d088c5d68853f2d69dn/aHeodo
2020-10-28Attachment_0582233645456.docdoc f8ce9f330d0b10e66d01f784d66c98d45fb6dc902c622d65ab15dbe965cf36bdn/aHeodo
2020-10-28arc_HKCVL1G0.docdoc b2fd50c9b74180bf57162267feec075ce16b9d37ead25cca5f97840e44e61a1en/aHeodo
2020-10-28Inf_BLZFRRQ.docdoc 33c735ac2d43594d1fb25ef35adae90aef216e70c30065596ad24ffb5299de94n/aHeodo
2020-10-28mes_PO_10282020EX.docdoc 971349194e2895c67d792f09a40990e6754e2ce4fa00b738c17c34cbb88cc6e2n/aHeodo
2020-10-28List_I7OV0P5WA.docdoc 0fdb302c3db79d7ed89244d7adf4c56d5cc9e4643c3e5bac39c3e82cff3834e7n/aHeodo
2020-10-28doc_2LWZ15IT4LSYLYH.docdoc 0e6d4b4fb5bd9daa6ac86ded3c620a00429f484e217542d2aada6c4635867df1n/a Heodo
2020-10-28Attachments_75270191.docdoc 09bb49f2d31787be18b07e1a48fce7bd5bf1dba73e713ce8727645f0b8f740d2Virustotal results 28.57%Heodo
2020-10-288138971531605.docdoc 4a40f7f94b6987d15605eb7e6ccd22baede35a72d60278537f9aedbd6d7a909fVirustotal results 28.57%Heodo
2020-10-28dat_5747MN3NJJ.docdoc 95d0a6acc83d661cf2f495f1e9b4c465b64f5fcfdfa6a75c0ad72beac8e31b19Virustotal results 28.57%Heodo
2020-10-28FILE_ZS8413688410JT.docdoc a67871eaa10790dfc0459026fe390127f88e0e7ef794ca29ca3ef501bf0bbc98Virustotal results 28.57%Heodo
2020-10-2893661411.docdoc e2f58ed91009de4f156ecdfb6fb04401ce82b2281242941e3a80fa9fe451cfcdn/aHeodo
2020-10-28Dat_HH63IORET.docdoc 68cb170125b6d8fe85e4573f3324f27ca595e8a2a2f0d624742c817590b42765Virustotal results 27.42%Heodo
2020-10-28dat_RELOJQIX8WPZ3PR9.docdoc ae95832fb60bc0562205f82b20e87746681b63fd589abc9312ca650f0cde8507Virustotal results 39.22%Heodo
2020-10-28FILE_MR6YD2Q0.docdoc 101fcc93c33f4a28332bd09291db3501b3d13ef433719cbf7750e9f6a73b88f2n/aHeodo
2020-10-28MES_2103247646850550490365605.docdoc ed432b4a387becc419df96f24140626602c26a169999780c2309f0f5190a1321n/aHeodo
2020-10-28ARC_PO_10282020EX.docdoc f605f4309f21e3797ba0f7b9440dbd45fb913a363be8a0e774040e92e05418fdn/aHeodo
2020-10-28KCS_100120_PZM_102820.docdoc 0b62b154422aa927a6906a75fdc8edfd4c143365e4b5e4a8ffd58badd6fdb0d4Virustotal results 38.89%Heodo
2020-10-28dat_912816477900.docdoc 553f438bc1486ee99b764c15bf3caa7e8fc1b49c48ace061dbd07220a7e56eb7Virustotal results 27.87%Heodo
2020-10-28DOC_IQS_100120_LQH_102820.docdoc fe13971c49c4731ae4fdc32c49bbb6796383a27db3ca2340642ed9d0c1753880Virustotal results 31.48%Heodo
2020-10-28List_BO9123965670RT.docdoc d3e4041b0325e0794fe6a1b0a78783b8c05b595f0631c24d7d8e11c53fa5e8e4n/aHeodo
2020-10-28Doc_CD5374936482QE.docdoc f3caca68ae462481d5bac777996fa838a0dce95c7eb782713404fa5e3712a2abn/aHeodo
2020-10-28REP_WH4758446524MZ.docdoc c3e8b7bf6e9c96cf2335ab8c491d537cf81a2c322e9b305fd0545d051c613a83Virustotal results 27.78%Heodo
2020-10-28inf_UKI_100120_KXP_102820.docdoc a9dab3a7ee17c4e9ebd90271c21ba1f27a69094147e4f37b14e8b584ef3bf74cn/aHeodo
2020-10-28YL5630616095NY.docdoc b7ee22f0341587e221b8a80c3caf8fe78b8d8ba06220d4cc28641f82d0d32bb0n/aHeodo
2020-10-28inf_IC0384783011MS.docdoc e809029e144d585294881c1cc21836d527c1547b45b9f97446ca6bc9987c3ee8Virustotal results 25.00%Heodo
2020-10-28List_IJ6Z77STG8.docdoc 5e692d0f6341638d540a0dd0458062a4852cdc65dd6551956aaa28c4d417416aVirustotal results 27.78%Heodo
2020-10-28dat_66265125175285452208556.docdoc 1fb4278069691dd947dc414fae8cd33f4b9309293ff8919ab9fdf39e30cda63an/aHeodo
2020-10-28EBLB_RI9208736557HL.docdoc b1667802a4201e50d756b921bd73789dabdc6e0ead93ccde248f9634cef63d6an/aHeodo
2020-10-28inf_H55W8E0CWUXE4.docdoc f6fd4d78eaf23a55319eb3b14344a592bfe7d542cf1f7e45a9ff6fb8ad9f90c7Virustotal results 22.22%Heodo
2020-10-28PO_10282020EX.docdoc 4d2065b87b5e9b6d1f4bc0bb53b3244c9d61eb3fd8c95d64757935758065ff29n/aHeodo
2020-10-28UNTITLED_45592397.docdoc 6310463115ebc704a66281738da24d3ddc5e2b7142db330ffc61d25899c74869n/aHeodo
2020-10-27list_1927899830761499909363.docdoc 9efa8997bf4ffcc29b996b1a0dd651e92bacb8e79143a0c008cf1eb4a8b41cbdn/aHeodo
2020-10-27Untitled_XX1405558191XG.docdoc bab42b7ee6d4b385f15274f7900f7f2a4d5d68d7f527d20b0bfac926752f9b3an/aHeodo
2020-10-27Inf_PAR_100120_PVL_102820.docdoc 51dc9e5a948487f714ef9600e3188b99aaebca09db45c0cd628d561945767476n/aHeodo
2020-10-27REP_157857763565966095412938.docdoc 8e85fc146f42da5ce9bd07ed3322d5b72df91418635f9d077b0de01c0fa30231Virustotal results 22.22%Heodo
2020-10-27REP_8O1YHO7CB5YC.docdoc 2f27b48d650ef99715eb8573c18974a7b90808b62939f37e64dab9ece30500f4n/aHeodo
2020-10-27inf_PO_10282020EX.docdoc 45130c5318fcc42b669d0caaf4357938d1f8ec66f9d5f96b8790e6f08f05e13dn/aHeodo
2020-10-27Attachments_RZF_100120_OFB_102820.docdoc 65a3d9acca772189823848387ec25a5bcbc6c05bf5acac4e213d3458f7c256e8n/aHeodo
2020-10-27doc_009262405139000.docdoc a260910db0747bfef736fe491c9762f6651e7031b77914ab19fad50c63ef70fbn/aHeodo