URLhaus Database

You are currently viewing the URLhaus database entry for https://ysassilawfirm.com/wp-includes/7WLYPBPasSXXyeJdSAHGjyAwL4HOOwWYJuD/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:762461
URL: https://ysassilawfirm.com/wp-includes/7WLYPBPasSXXyeJdSAHGjyAwL4HOOwWYJuD/
URL Status:Offline
Host: ysassilawfirm.com
Date added:2020-10-28 21:17:04 UTC
Last online:2020-11-03 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 21:18:05 UTC to abuse{at}a2hosting[dot]com)
Takedown time:5 days, 20 hours, 50 minutes Bad (down since 2020-11-03 18:08:48 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30arc_160315208.docdoc de0a1c44011e636f13b7db8734adcc239d484bae417f118f5d1173ff7d708481Virustotal results 42.62%Heodo
2020-10-30FILE_80655879.docdoc 005b9b3299e128a79fe21a998375eccf999a16aeee899a934ee2cdf578137d13Virustotal results 42.86%Heodo
2020-10-30INF_JR0987461624HB.docdoc a2570aa79603bbd35dfcd783d2d6da489b713a3a5ddcabd93e0fed2713aef983Virustotal results 44.44%Heodo
2020-10-30rep_JEW4Z4S8PZ7150A.docdoc 59eb7f8b98e7601aab446fe4f84b586ecf0ff8b5f092b8144441e50eed459684Virustotal results 43.55%Heodo
2020-10-30List_PO_10302020EX.docdoc 17d5bfb8d831eb1b5f2defabb4f6b29c2c2f65bc90c0b310d7e0867ac11c125fVirustotal results 42.86%Heodo
2020-10-30Arc_KL9970405066ZK.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638Virustotal results 43.33%Heodo
2020-10-30rep_MQK8BYBL2.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7n/aHeodo
2020-10-30file_PO_10302020EX.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-29Mes_PO_10302020EX.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 26.56%Heodo
2020-10-29File_24064133.docdoc 9f944d45d5e7d40e9f1fce8f48c7fae48a14b56666b6c149b9a2f028567d2019n/aHeodo
2020-10-29YG_PO_10292020EX.docdoc 32eb83b21811e1d39d4c68e15a5ff6a2b640161c0960cdfd4dea92a72f368a2eVirustotal results 31.25%Heodo
2020-10-29DOC_164960146403145.docdoc af09d9b10580277dc290b458dfb6b85501ce39d6e430f87ee3fd349c3f672860Virustotal results 31.25%Heodo
2020-10-29PUJ_100120_ZBU_102920.docdoc 3af2330541725b01e66ab71bd1ebd82228c7332702710047e77658bcec52c8f3Virustotal results 30.16%Heodo
2020-10-29ARC_PO_10292020EX.docdoc 44fd0e531f131ec3393dcbb90c1ac8baee6d5c4438afa02d458e67436af9a1b9Virustotal results 28.12%Heodo
2020-10-29GVMD_36219877.docdoc 97c76ac78999951c70f47dc20b137d6a5f843fbd9597f8a62e977d4b463e2c79n/aHeodo
2020-10-29Mes_291211396.docdoc 98de74a1b000e840bd188d7a4e35eb9150102a43f8c4fe5357bebae3ad586955Virustotal results 26.98%Heodo
2020-10-29PUDV666CS5ZR8ST.docdoc e71176f87f966b10a6770fcfffe18e9e8ffd08139967c62d7ff50e63ece6b72fn/aHeodo
2020-10-29Attachments_027243614.docdoc e134359bfa4a04bffabf20a6522d2a4c8d807619578853ba0387aa395b6495c9Virustotal results 27.42%Heodo
2020-10-29inf_KZQUUSBIZ06.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 20.97%Heodo
2020-10-29Arc_4JRURV570.docdoc 5caf4fac63b4007116c090e6db0db81ad250d822e1fc251885c10d80d24b861eVirustotal results 21.31%Heodo
2020-10-29LIST_PO_10292020EX.docdoc 585ab6cc0502c04dedbca9318f5d7d278050dcfbeb477a09e8fee5b66916e38fVirustotal results 42.86%Heodo
2020-10-29file_59167526.docdoc b9e189f0cb3064ede89dc2167eca309a64edc4ae42aeda9b8fab875c4906b5dbn/aHeodo
2020-10-29UNTITLED_2696672498745654.docdoc a94691d74d543c82cfb7a293d0de416bec72dbaa2a2776d2ffa9b176b28cc12an/aHeodo
2020-10-29File_59188436030177360.docdoc 67bf175be626fe3ee59387c2c162c6fe009315964e0d4de581dc1a94daab51c5Virustotal results 37.04%Heodo
2020-10-29JGD_100120_GER_102920.docdoc ae137af1fbae2ee2d0faeba97b97b4b52536f2b6d962c08608fc792f211d3405Virustotal results 38.10%Heodo
2020-10-29UNTITLED_XC8251039552EM.docdoc 384a86ce03971610e03d72c4c46dd311c1719b3264e1f8724c6314a5f724b5ccn/aHeodo
2020-10-29inf_QPU7IRM.docdoc 2bdfb721e168f6ffb5c4608463d3426b3637d3e4af4dc8716ac401e7ab3f4efbn/aHeodo
2020-10-29PFN_04302257.docdoc 17d6d17702d158eda616b2096600e47fe0808914ae353ec5009763a5de5fffe7Virustotal results 36.51%Heodo
2020-10-28FILE_29081892.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 26.98%Heodo
2020-10-28UNTITLED_EYN6WV5S6TI2Y.docdoc b004139f56a3790ffec0ba6852e8ead3947b000f2cbc61be1754b91a69633354Virustotal results 25.40%Heodo