URLhaus Database

You are currently viewing the URLhaus database entry for http://ysassilawfirm.com/wp-includes/7WLYPBPasSXXyeJdSAHGjyAwL4HOOwWYJuD/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:766462
URL: http://ysassilawfirm.com/wp-includes/7WLYPBPasSXXyeJdSAHGjyAwL4HOOwWYJuD/
URL Status:Offline
Host: ysassilawfirm.com
Date added:2020-10-29 19:00:05 UTC
Last online:2020-11-03 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 19:00:33 UTC to abuse{at}a2hosting[dot]com)
Takedown time:4 days, 23 hours, 2 minutes Bad (down since 2020-11-03 18:02:36 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30arc_160315208.docdoc de0a1c44011e636f13b7db8734adcc239d484bae417f118f5d1173ff7d708481Virustotal results 42.19%Heodo
2020-10-30868953883225121529528.docdoc 4564b298ffafe0649818274570c59d5cc447bc5e65675ddd962a1a5954082a09Virustotal results 42.86%Heodo
2020-10-30INF_JR0987461624HB.docdoc a2570aa79603bbd35dfcd783d2d6da489b713a3a5ddcabd93e0fed2713aef983Virustotal results 44.44%Heodo
2020-10-30rep_JEW4Z4S8PZ7150A.docdoc 59eb7f8b98e7601aab446fe4f84b586ecf0ff8b5f092b8144441e50eed459684Virustotal results 43.55%Heodo
2020-10-30LIST_PO_10302020EX.docdoc c0b41e22e711cd0385c069a4c10ae102ca7dcc277460d218eecc4974cca8677dVirustotal results 42.86%Heodo
2020-10-30Attachments_IPR_100120_LUS_103020.docdoc fd63dec89395fb5024155fdfa24256fc31add9f974f2870e11fef458790d425fVirustotal results 40.62%Heodo
2020-10-30rep_MQK8BYBL2.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 23.44%Heodo
2020-10-30MES_575609855910.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665n/aHeodo
2020-10-29Mes_PO_10302020EX.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 27.87%Heodo
2020-10-29FILE_LETYQ4HV.docdoc c685520233b6d670ab20445051b6688bac6affb5c8b99a71213937d99ac9e380Virustotal results 25.40%Heodo
2020-10-29File_24064133.docdoc 9f944d45d5e7d40e9f1fce8f48c7fae48a14b56666b6c149b9a2f028567d2019n/aHeodo
2020-10-29YG_PO_10292020EX.docdoc 32eb83b21811e1d39d4c68e15a5ff6a2b640161c0960cdfd4dea92a72f368a2eVirustotal results 31.25%Heodo