URLhaus Database

You are currently viewing the URLhaus database entry for http://promotedigitally.net/wp-includes/8M/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:759303
URL: http://promotedigitally.net/wp-includes/8M/
URL Status:Offline
Host: promotedigitally.net
Date added:2020-10-28 04:36:08 UTC
Last online:2020-11-17 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 04:38:03 UTC to abuse{at}milesweb[dot]com)
Takedown time:20 days, 10 hours, 38 minutes Bad (down since 2020-11-17 15:16:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29INF_HM97P06.docdoc 785ca4b8a3e573d7bb977a2f180d8c717b9867bbf38583aa08b4a96fa4803c8dVirustotal results 26.56%Heodo
2020-10-29Arc_9CE0CIW4JWWN85G.docdoc 99857fbf70a8f28cea7e04d87e230a5ac8003391f929a597df5f173b6aba145bVirustotal results 26.56%Heodo
2020-10-29File_PO_10292020EX.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29FILE_PO_10292020EX.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 21.31%Heodo
2020-10-29K_PO_10292020EX.docdoc 27c39c3bb564120164445cc73f862a716d7abb6ce47d44f5722cf11bb0dd2c79Virustotal results 20.63%Heodo
2020-10-29mes_LHB_100120_WTE_102920.docdoc 8f3afa2da7f2e5cf945c59daa84574119b092d7926eea15fb3f21367f6433c77Virustotal results 41.27%Heodo
2020-10-29MES_QPAJ0PHA.docdoc 56b4b239b93d5528e7f80a5bddef47bcbe22a9318d3abf88be53dbb4aedd66ceVirustotal results 35.48%Heodo
2020-10-28FILE_88599619.docdoc c3f9c25daaea07684a67a58d2ec8115321b592a8b0edc6eaafd2e8844f22c10bVirustotal results 16.39%Heodo
2020-10-28LIST_34697253495646.docdoc 1d9d2d513d2906aa7b8400819aece2cd5e80976226792618b60a507a2daa906bn/aHeodo
2020-10-28rep_TU16PU0R7KEX5WT3.docdoc 5dae469fdf99625a0b53d223a55b04fc4e77d3e660e1ab904e79071d5dc13c9bVirustotal results 28.57%Heodo
2020-10-28ARC_BZY_100120_GTI_102820.docdoc bfc255c1fae47d22c3a502329ae24b49b0fc4169c49c13a4b1091cb686e3ccedVirustotal results 26.42%Heodo