URLhaus Database

You are currently viewing the URLhaus database entry for http://sthlmtjejer.buzz/wp-includes/XMixb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:760241
URL: http://sthlmtjejer.buzz/wp-includes/XMixb/
URL Status:Offline
Host: sthlmtjejer.buzz
Date added:2020-10-28 09:35:11 UTC
Last online:2020-10-28 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 09:36:54 UTC to abuse{at}iws[dot]co)
Takedown time:7 hours, 40 minutes Good (down since 2020-10-28 17:17:31 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28DOC_43859570847724834040.docdoc b2df21abd3019bad332f1f34211b5a7f809af8d92737bb020afff3e6f0147a37n/aHeodo
2020-10-28Untitled_78734142.docdoc 302684a1df1b3b6bcf6995798581972d23b71888983b326ff3eed9bbcaf1c56bVirustotal results 23.81%Heodo
2020-10-28mes_OMD_100120_WXT_102820.docdoc 95dbd21a4a3f7bfb45ed46713d99b7881129368a675677e970e647b22cde6d05n/aHeodo
2020-10-28PO4535513577YY.docdoc 5c1a82068482e028454463db245bd38ae56212f951d1949f9d4dff5bf660f026n/aHeodo
2020-10-28List_PO_10282020EX.docdoc dcbe02f1aa0077b9eb58a4e8a30c9c220fc240162ffcb1bb73376e967d6e7b62Virustotal results 17.74%Heodo
2020-10-28inf_07HRMYAFYD1L1II.docdoc 8d7bfba7aa5d45dfacce4f1d01bd73c49ac08a57ca60560244f8e4d9220ca53en/aHeodo
2020-10-28list_TB4778112547CR.docdoc a2a1fb0e34755eda063fd82d7fe452eb979f87b8cf484cd8fa59a45df5adb29dVirustotal results 17.46%Heodo
2020-10-28rep_29544707.docdoc 0843e95e73e1d9c719d84439a7243f080d431179cc900f1d3744cadcb2d19d38n/aHeodo
2020-10-28PO_10282020EX.docdoc d424fcc461427fd257e6bd50b98d81df0efc3254426388661e5ec4d9a4815fe4n/aHeodo
2020-10-28doc_00544835.docdoc 778c2b97449426c3f3827a8041a05fcbb0e648267612cde21370c9f152bcf255n/aHeodo
2020-10-28Inf_HOLU0ER.docdoc 9c5f88a456da5cebbe774e127b1ab02cdb4769374bf745dca29d2e207f156ee8Virustotal results 18.03%Heodo
2020-10-28File_87727362.docdoc 0e2c0a0f94967cefdd4f1faa8e5d51a24a7d8c786970382aba5143ab4e0c98c4n/aHeodo
2020-10-28Arc_PO_10282020EX.docdoc 6a3681628d5e90051c68dd3bf6855abcdff9d8b6e25447bad58745cc5406d4e2Virustotal results 17.46%Heodo
2020-10-28ARC_KUQ_100120_QOE_102820.docdoc b2a8f6bc160f4536d6be6a9e5ef41244a96a2bf0de49f9d088c5d68853f2d69dVirustotal results 20.75%Heodo
2020-10-28LIST_914644725375382575663.docdoc 237787a670daf0b6ee3f6e85c75ca3501a3d0ed0c6761afb36b467a32d31c2fcn/aHeodo
2020-10-28REP_PO_10282020EX.docdoc b2fd50c9b74180bf57162267feec075ce16b9d37ead25cca5f97840e44e61a1en/aHeodo
2020-10-28mes_3438731419370460858.docdoc 3b2703a8136146bb26f76cf8aeb05e347c77170c548c652fdc716a1df532a920n/aHeodo
2020-10-28UNTITLED_U168ERXJRE31.docdoc 3c7adc03d47d4071a05f6829238a5d5e5e21389ae17cf278b8f88824cae02d83n/aHeodo
2020-10-28DOC_MGI_100120_YLU_102820.docdoc a8d759c3b4c570d5c7d196edd616d1816f0bf51f7d858bbbdcf8bb41f85242e9n/aHeodo