URLhaus Database

You are currently viewing the URLhaus database entry for https://southsudanconsulate.org/wp-includes/WZocXZeF6of69wqwfC1r6knXc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:759475
URL: https://southsudanconsulate.org/wp-includes/WZocXZeF6of69wqwfC1r6knXc/
URL Status:Offline
Host: southsudanconsulate.org
Date added:2020-10-28 05:35:05 UTC
Last online:2020-10-28 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 05:36:30 UTC to abuse{at}ovh[dot]net)
Takedown time:6 hours, 34 minutes Good (down since 2020-10-28 12:11:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28ARC_PO_10282020EX.docdoc c52d8de4c0df2d3039b4e550b081b8386bf713ff22749065c331fd9c03bfa88dVirustotal results 17.46%Heodo
2020-10-28File_PO_10282020EX.docdoc ca886c353a653f94a89591b19f4830ea563abdb93c949b8bd4872dbbb65bc02aVirustotal results 19.67%Heodo
2020-10-28doc_0950361395399351014.docdoc 1c6f1e8fd02e26528ffb033f8609b7ace904644afa906f2de75d4e2eb5ace245Virustotal results 16.67%Heodo
2020-10-28mes_9HIESTX7F5.docdoc 783e3178de387969ad58cadd83de2b88c6cffa406063d2f66e5ee8b67db11b4aVirustotal results 28.57%Heodo
2020-10-28doc_QD6GOOZ9.docdoc b5967d8f6f4eff72fd314911e828c2376081aa4d190afacbbbfa0fb390f13e4aVirustotal results 31.48%Heodo
2020-10-28Doc_DDE_100120_OIH_102820.docdoc b1de6df6c2b5ac15a030ee3b606165a808dd7fb78a4d22a267e304c2edad0fc1Virustotal results 28.57%Heodo
2020-10-28doc_KV6297944383CY.docdoc 86cdca7c9ac7ecd5defa0fb8c374cd773aad5df00d6678e7f5addc0268a097e3Virustotal results 28.57%Heodo
2020-10-28F_LRN_100120_HQG_102820.docdoc 34eea5e4f2e92b636f9fcade14a7aec223d0ef960f9c0f6c749b2b806096aeb5Virustotal results 31.15%Heodo
2020-10-28PO_10282020EX.docdoc 5dae469fdf99625a0b53d223a55b04fc4e77d3e660e1ab904e79071d5dc13c9bVirustotal results 28.57%Heodo
2020-10-28Rep_PO_10282020EX.docdoc ed432b4a387becc419df96f24140626602c26a169999780c2309f0f5190a1321n/aHeodo
2020-10-28PO_10282020EX.docdoc c81da9358cac9552a6d4005fa1c6ed570a70d9aaca86836e670acafe475cf882Virustotal results 32.08%Heodo