URLhaus Database

You are currently viewing the URLhaus database entry for https://www.d1zi.com/wp-content/ai1wm-backups/11KhYzHOPks3RkHqu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:765382
URL: https://www.d1zi.com/wp-content/ai1wm-backups/11KhYzHOPks3RkHqu/
URL Status:Offline
Host: www.d1zi.com
Date added:2020-10-29 13:35:05 UTC
Last online:2020-11-05 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 13:36:37 UTC to abuse{at}amazonaws[dot]com)
Takedown time:6 days, 23 hours, 12 minutes Bad (down since 2020-11-05 12:49:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29Arc_N8HHZN6XLMJV40SR.docdoc c0ed3a0650c71fa45b196ae3af361c4b91d38f00db69b912eaf14f2aeb543affVirustotal results 26.56%Heodo
2020-10-29Rep_AKM_100120_SYN_102920.docdoc 160b0b89551ebfd8cb3f4274dc5f8cdb203642886e8f1e95b493227e4b34ace7n/aHeodo
2020-10-29Doc_6U0SEM3F7V14F.docdoc 541fe3cb96d86e7e7acac38913e1f12a0006bb4e07269700b8878279ecb8df5cVirustotal results 25.00%Heodo
2020-10-29List_86599318.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29Attachments_SG0213664532MH.docdoc 62a00d40cc12aa508ac276663bcf8a77077e394977dd3682be09139582ac29c2Virustotal results 28.12%Heodo
2020-10-29FAY_EAF_100120_CTM_102920.docdoc cd3fe863b543b7cff0caa09fe57459ed428b05158a34dd748438f0f7a671fabbVirustotal results 27.87%Heodo
2020-10-29Attachments_US7542457096FS.docdoc dd1f36356c3a35bd4fa5c58dbc9798b01714e04d123539649c3932a8164288b8Virustotal results 26.98%Heodo
2020-10-29FILE_JYZEH1QODJ.docdoc 405fadefb4061d6af8c5857c120bb843c94b11edd508facc87ddc8c95c45081an/aHeodo
2020-10-29INF_QWZZIOAPQC.docdoc 3a2e90fab180e4802d87707829a02157b25a93f71da8a2a62796b59483d315c7Virustotal results 25.00%Heodo