URLhaus Database

You are currently viewing the URLhaus database entry for https://esfagrup.com/wp-content/xj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:761853
URL: https://esfagrup.com/wp-content/xj/
URL Status:Offline
Host: esfagrup.com
Date added:2020-10-28 17:47:11 UTC
Last online:2020-11-01 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 17:48:06 UTC to abuse{at}chronos[dot]com[dot]tr)
Takedown time:3 days, 23 hours, 15 minutes Bad (down since 2020-11-01 17:03:59 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30File_23755236.docdoc 1e363452c2a67d40f01390488a99f68ce6fab805b45eab93ee2db2469bf1b05fVirustotal results 22.22%Heodo
2020-10-30Rep_65853172.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30DOC_145719519300.docdoc 7419637ce4e2a7bf1c8503dd9f1878136c8bc0e38e88521f6500c7c717524be4Virustotal results 30.16%Heodo
2020-10-30Inf_EJ4156068845TM.docdoc 72cbfce2d1bb68f6583a651975d64056490779254d19bbf18636a754d88688c3Virustotal results 26.98%Heodo
2020-10-30list_QL3339056670AN.docdoc 12ef90a776bc1f4ae05962313e6b3711ec5211f8ba450527585d2da80c2d03b5Virustotal results 25.40%Heodo
2020-10-30Doc_DPW_100120_NOD_103020.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 26.56%Heodo
2020-10-30mes_520AWQ1I8ZXA72Z3.docdoc 07b3f8c72f07dca70496f6c792df7c12b6b782090056851ccfa67620fe7a27bbn/aHeodo
2020-10-30inf_95474469.docdoc 917a6b067e825cb71b0d60b4e428f283cdbf100bcec01e467503d18077125c4cn/aHeodo
2020-10-30UNTITLED_PO_10302020EX.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cn/aHeodo
2020-10-30DOC_968698475166439546597702.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30list_46421750363473718.docdoc f2ce2b3d2bf2f5d0f22eabb44f0b7c9183e0fea547e90ab926beae89d85cdf0en/aHeodo
2020-10-30PO_10302020EX.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-30arc_PO_10302020EX.docdoc 81f0a17e652679d94849f61bfd6679f35308909ce08fcbcfdfbf2d6c59d62ae0Virustotal results 40.98%Heodo
2020-10-30FILE_741869866278116472848957.docdoc 3619ca27723e87006b7061bd608e1e02d5087392ec513cfe82ecec069074fbd7n/aHeodo
2020-10-30rep_PO_10302020EX.docdoc f16118ebe3dbd05212ed3e350e3d509e02c403cacf34497532c50e1be09b7e16Virustotal results 39.68%Heodo
2020-10-30mes_TB7865866136YY.docdoc 6b88f01b98b04205fdeaca9ab7f387ea479efbb68e1e0a940c909d66e6ed092bn/aHeodo
2020-10-30mes_TB7865866136YY.docdoc 6b88f01b98b04205fdeaca9ab7f387ea479efbb68e1e0a940c909d66e6ed092bn/aHeodo
2020-10-30mes_397597640566943.docdoc 7bfa1640c072951be3fb17704054b151541525eaa8a22606d94fc2d037a6a663n/aHeodo
2020-10-30List_QKH_100120_QMS_103020.docdoc ceac47b63a26dc75f489b8882600b4a6ffee7b0c5b5dca3ef7732746cd3ec229Virustotal results 38.33%Heodo
2020-10-30328855046770.docdoc d938809af2f315ccb3059ebdb60f135d1a78267221ebe954f6ece48ad1c4851an/aHeodo
2020-10-30DAT_PO_10302020EX.docdoc 0b7f26dc76b83127cdf687f818e652f050a9b3726aa76bc30947f94e4e25ffd4Virustotal results 40.62%Heodo
2020-10-30file_EEB_100120_BNE_103020.docdoc e4c4aa874feb371209199ddd6b159ed4a677b94568dfe6b09351807263dbef9bn/aHeodo
2020-10-3002017845.docdoc b2f80aa2efc9abdf137f78f830f2366b29e5bba74409138f8db1ed6163e25819Virustotal results 35.94%Heodo
2020-10-30File_52VQPAG.docdoc a51d194ff7cccab7defe2f64127934a4ff3699de37c60019b40dd62d631baf04Virustotal results 34.92%Heodo
2020-10-30Inf_CFY_100120_BNV_103020.docdoc 3faba02f0eb970ef25a2a874736e4f758dd3424cdba2637795ada41385024679Virustotal results 31.25%Heodo
2020-10-301MPON44CAR8R1C.docdoc 7ae6e150fde20638c5cc89c0b4c088593eb3879f0f6567e9c4cc14069b9ae204Virustotal results 29.51%Heodo
2020-10-30rep_PO_10302020EX.docdoc c2d7ed25c4c34f44dc293833d3ea302d281d24981385c437e411a50ede35e72bn/aHeodo
2020-10-30Attachments_70030868.docdoc b3f4e1b87633e71363d9e97c4f845e09d36e833b8d170f184946c8764cfc8f12Virustotal results 30.16%Heodo
2020-10-30List_PO_10302020EX.docdoc 2bd445000ef12b82a7dbb15a89578a71ad17a82cf8b2f19239fa60afb2ba84f3Virustotal results 26.56%Heodo
2020-10-29O_26678877.docdoc eec673d1180b8765a6d45f7e7164e7e86024dce5cd09472669369e410fa5d161n/aHeodo
2020-10-29arc_3400307380935419279376.docdoc 5eb2cd7fd89bc000cab80454ba0da8cb954a960d3b415bc26039832a7f6f7544Virustotal results 25.81%Heodo
2020-10-29DAT_15133441.docdoc b716fa67c934451161c1be78e1587b3c68a53b5e219dc5452e9ea883d32a274cn/aHeodo
2020-10-29mes_PO_10302020EX.docdoc 80ddf54fac7a016a1cd9cb22825bd7d9001001893d2d425c8436093582939224Virustotal results 28.12%Heodo
2020-10-29UNTITLED_IPC_100120_YDY_103020.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 26.56%Heodo
2020-10-29FILE_YSJ0OR0.docdoc 168c46a9b7c3c72ceb572a447f6317e5b66aca4735ea8e096bc92f0d03628879Virustotal results 34.92%Heodo
2020-10-29DAT_VON_100120_RSR_103020.docdoc 30afb0ba6cad7d0adca2d6200ecc891e79a8901808aa35a78dc2e03b6b1b3feaVirustotal results 34.38%Heodo
2020-10-29MES_71425252.docdoc eb4e38eca100cc2ec56b63dcb64261e5267212ee4d3009b7a9bce98cd60bb50cn/aHeodo
2020-10-29AICF_VKW_100120_XLE_102920.docdoc 970feee22d30c517c525e36b3327903c843552de7138215c5fec184444b56e19n/aHeodo
2020-10-29mes_96951265.docdoc 6f9552836a90ddea2d599b100ecf6a8cda08714d1f8f7f848cf6684ab9ff6b78n/a Heodo
2020-10-29R5XCT4PMG14TD3I.docdoc 98a507399c617fc492438aae1e2f0f8c2f01dbb954b3055846dfc5c48e84c7eaVirustotal results 29.69%Heodo
2020-10-29rep_A2QODMHLF84W.docdoc 93d4fd3812d69eaa9afd23d9a5294b9c4544c60967cb63af240524552d0c10e1Virustotal results 31.75%Heodo
2020-10-29dat_EH1099688461LF.docdoc 0bec0186a4f6a768c04f1e871d8ea6c4ae69a5580342d2310e057acf518c7b00n/a Heodo
2020-10-29Dat_97939206.docdoc 72795d86c0dff6adb123dad6b3a9b9c23d725d275a28e5fc69d10b701169ce29n/aHeodo
2020-10-29file_JDRK82BBXG0THEO.docdoc 32eb83b21811e1d39d4c68e15a5ff6a2b640161c0960cdfd4dea92a72f368a2en/aHeodo
2020-10-29Mes_NT4359800576LZ.docdoc 1cfbaf38e833a8dcab12a6f7a0c42e5b5033bc4f188f022607c0e3853f92a6eeVirustotal results 31.75%Heodo
2020-10-29rep_7707238530952994958.docdoc 5e49a64852901bd8057faf79a29c4014763a93bd4f8a0c448a58ab101da4fac7Virustotal results 29.69%Heodo
2020-10-29PO_10292020EX.docdoc e6a7e6b13c6bf9156c51ce46213a68a27ed5da4c01903cc86465ac63c073fd7dVirustotal results 26.98%Heodo
2020-10-29Untitled_TB3381298293DK.docdoc 5a586d16a655c4b142b0d419a75c12e385b6f96a2eb46e966663b8b820556f3an/aHeodo
2020-10-29MD_VII_100120_FYO_102920.docdoc e71176f87f966b10a6770fcfffe18e9e8ffd08139967c62d7ff50e63ece6b72fVirustotal results 22.81%Heodo
2020-10-29ARC_YID_100120_CCJ_102920.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29DAT_YR9813073344HR.docdoc 134e4b929d0e83768f3bad032abd87bd8d004dd2a7256fb9ff9d4bfa9f29e5fbVirustotal results 28.12%Heodo
2020-10-29Dat_PO_10292020EX.docdoc cd3fe863b543b7cff0caa09fe57459ed428b05158a34dd748438f0f7a671fabbVirustotal results 27.87%Heodo
2020-10-29LIST_35120214.docdoc 29808c9db3a80e9ed46d4aecbe478dd8e57089d7e2977c916421cba71b0d6c42Virustotal results 26.56%Heodo
2020-10-29ARC_25123972.docdoc 405fadefb4061d6af8c5857c120bb843c94b11edd508facc87ddc8c95c45081an/aHeodo
2020-10-29UNTITLED_60794964956.docdoc 3a2e90fab180e4802d87707829a02157b25a93f71da8a2a62796b59483d315c7Virustotal results 26.98%Heodo
2020-10-29AZZU_582473321028984702762544.docdoc e134359bfa4a04bffabf20a6522d2a4c8d807619578853ba0387aa395b6495c9n/aHeodo
2020-10-29doc_88989769.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 20.97%Heodo
2020-10-29MT8785465032RN.docdoc 12c570f649005ea1ae77c36167843e3e87252075b68b652c5f05b0d8e54b2ad0Virustotal results 20.31%Heodo
2020-10-29Rep_AIPARGZ063H.docdoc 3c06e83a34a8da9715ec0fb21f45160520d6058d9624263c4c2a585b04c7adb8Virustotal results 20.31%Heodo
2020-10-29DAT_880026355740247221526108.docdoc ae454b06f63308de7e1a613281feea2eef089041c67af45e72ceec804482b526Virustotal results 20.31%Heodo
2020-10-29List_PO_10292020EX.docdoc 0cacb466a5cd54765f2b551a75b8b0880cd991d16fd662402d00efc578060da7Virustotal results 20.31%Heodo
2020-10-29File_PO_10292020EX.docdoc 2427ee3cc0798fcee02c718a1fb58d735d9cf3b0ebd9bb10c14cb9326bb5e489Virustotal results 20.31%Heodo
2020-10-29DOC_KJIC8KP6QL2IP86.docdoc 371a442d56b47bd24ec601a710beb116a75f09be269d0a2e18b29d6fe0927bc1Virustotal results 20.00%Heodo
2020-10-29DAT_BKV91CZZLE.docdoc 1ecf50c67d4c4bf7eba5ed050c6500f7ab6a2b63b66f12dd23748e22e9a34ce7n/aHeodo
2020-10-29Attachments_KH0646608993RD.docdoc b9e189f0cb3064ede89dc2167eca309a64edc4ae42aeda9b8fab875c4906b5dbn/aHeodo
2020-10-29AY5610830237MJ.docdoc 6cff316da0b26621e5b1fc3d5a85c6931a68a90fde20acf702195a175fb4ce44n/aHeodo
2020-10-29CK4793432118AA.docdoc 48f5efeee13fcdbe837223ddd4c1de97dd87be397e6f99bb95ebfd19af5aaf86n/aHeodo
2020-10-29DOC_PO_10292020EX.docdoc 6e9c088cbe83fb2b0f6c959df9f72eb6faa3316c7eaf8e1690f590a91e56974fVirustotal results 39.68%Heodo
2020-10-29arc_89905697.docdoc 6df480c2f89e67bd88a1ef3142106f925a45830756da26077582ef439dd4c5b8n/aHeodo
2020-10-29inf_FLJ_100120_KIF_102920.docdoc 4a64cdcef15cb3314d81486a5c6c1fc590e6579da756365b73c08c8adae77b95n/aHeodo
2020-10-29List_06610865.docdoc e3a96d2e3adca1fc3dfea0ac14af9b1d4cec3a20d9d7c6874edf1c6fec60d90bVirustotal results 38.10%Heodo
2020-10-29DAT_OYB_100120_VDK_102920.docdoc 6d8ce1a7fac9fd46d61f2fe0e3dff607971c0a6e830f3eac90a4b3145f06280aVirustotal results 38.10%Heodo
2020-10-29rep_PO_10292020EX.docdoc 40e1e0d4ba67280ae17c0050feb66bf13f27e271efd4fc91413f8553dcf12a09n/aHeodo
2020-10-29File_10284723.docdoc 2ce6ab8ee89411f1463ed6831f078e930f121aaa93880728734efa7d25503623n/aHeodo
2020-10-29I_83004456.docdoc 2ddd69d637bb813f74ae33be71c1cf20fd61be5a25f0bd5e69c296136a8d1813Virustotal results 39.34%Heodo
2020-10-29Mes_PO_10292020EX.docdoc 16593eef39e8c04fdbb6390954522fcbb430e3d131921c0b5f4e9477ebd794f9n/aHeodo
2020-10-29list_PO_10292020EX.docdoc ab7a59b346e75d68ff9a689f85a0d2a96833a3048478fab68af1e8f1bd4d5905Virustotal results 36.51%Heodo
2020-10-28inf_64006078.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28Attachments_IR9589777660WN.docdoc b004139f56a3790ffec0ba6852e8ead3947b000f2cbc61be1754b91a69633354Virustotal results 25.40%Heodo
2020-10-28QO4957632976EP.docdoc b453a71649f01fe941d53cdae60f24c08a2ef3294472d662be990ed0b961d3ccn/aHeodo
2020-10-28Untitled_QA4883377925BA.docdoc e3e7a1b889083b79940a1a6a5301bb6f79a18b0805272d7e08a3582511090eedVirustotal results 25.40%Heodo
2020-10-28FILE_OXL_100120_KMK_102820.docdoc c79ff6d2cb77b1d4e7bc6bea1ea1b05d78d536e72254e93dbaeb1122ff214d8en/aHeodo
2020-10-28DAT_NW0895783453SM.docdoc 7384af9684329dd3916fa070ae356428bfb6f43d3ca6aa725f92d696dea83f41n/aHeodo
2020-10-28DAT_418960962058899133.docdoc 9faf7ecca19101cc477bc73594fa79ead2d3224625802b67251f80a757242ae7Virustotal results 19.05%Heodo
2020-10-28list_XVETSQ1D680G.docdoc 03cee0e4bd76ec300e6e09d41fb6cfc6e24346ed58c3aec95bc6a8dae7838a69n/aHeodo
2020-10-28FILE_HPE_100120_ILW_102820.docdoc b37d06b7214bfe63791800e16b2589e81d2cebdd172b8d680fdf9e287f366674n/aHeodo
2020-10-28doc_SU7034585771VL.docdoc 3fe50d0556d64f8a7214fa4e311bb0075f31b6bb0ea009d852c70bbe51a1782an/aHeodo
2020-10-28list_BP1YUUCZHQOTN.docdoc 78344d3e894155b6b6fa65119c449406b1ad08900e1cb58f68d7efba27947084Virustotal results 17.46%Heodo
2020-10-28File_5U7QMD09R6TR.docdoc 7d38c4d98d05cd3a7a0fc6898c9d86ef1c29cd8dcfa3403d0222ff508843a325n/aHeodo