URLhaus Database

You are currently viewing the URLhaus database entry for https://www.namaah.in/wp-admin/WTS66sYHT9Up6onbu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:768969
URL: https://www.namaah.in/wp-admin/WTS66sYHT9Up6onbu/
URL Status:Offline
Host: www.namaah.in
Date added:2020-10-30 10:23:06 UTC
Last online:2020-11-07 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 10:24:03 UTC to abuse[dot]support{at}h4g[dot]in)
Takedown time:7 days, 22 hours, 1 minutes Bad (down since 2020-11-07 08:25:49 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31arc_DYN_100120_KMW_103120.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31Doc_WWF5IU0Q.docdoc e75cb7602be15e3a44e77aacc557cb5ebaa487b2be7b8fce7f59a4e2c18e8794Virustotal results 57.81%Heodo
2020-10-31rep_007420413021618.docdoc 369deae0aea3bfa6e8367f494d149dffe4c9a5f821bd8270c06016f0e6923227Virustotal results 52.38%Heodo
2020-10-31FILE_03557491.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31Attachments_8014243345.docdoc 2cb36ff671181007c49a60cbbafe936340f4465bc46d3451c5ad6cb8086a4ebaVirustotal results 51.56%Heodo
2020-10-31P_PO_10312020EX.docdoc 03b477c67a30f1cc63aa897f954709c42c74cc2907d8639805398a4615cad1b6Virustotal results 52.38%Heodo
2020-10-31ARC_1416228325134356.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-31doc_01263840007935084002535.docdoc b104e5360f8f17268449e97ba36749b921cf7cdd797fdb8a28ffe20d8d9c59e4Virustotal results 54.69%Heodo
2020-10-31FILE_PO_10312020EX.docdoc a77843eba99adffde7cc22482865a6e64cd0217a4779ec035d11d060982996e7Virustotal results 53.12%Heodo
2020-10-31Attachment_0LBXMH4JRJI4.docdoc 41c1aacf38f4e4b127131377357db324852107ff972122bb57ec3ba8f894a7bdVirustotal results 53.12%Heodo
2020-10-31FILE_MXE4C3ZSWREU4Z.docdoc a914d86d2a97040bb1c91827828f9ec8e72e18d73ca90d884b5d385e4c9793f5Virustotal results 53.97%Heodo
2020-10-31mes_CY7396898928AA.docdoc 9210f9032280641d080e5abde6a49a3032839cec91f757f2469a4eeeb4080afcVirustotal results 54.69%Heodo
2020-10-31INF_EWQ_100120_QFY_103120.docdoc 4eabd4dcb81c28e86bbfd9ac62090d51aea5a733c96a8f3a7ad130a9841bce71Virustotal results 54.69%Heodo
2020-10-31dat_PO_10312020EX.docdoc e5cd96964e28663db382662eddfbd4bcd53693acaa9f14bf3c7382c61a16aff5Virustotal results 26.23%Heodo
2020-10-30Mes_4126523353288089809.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30mes_PCO_100120_JKI_103120.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30SY3217034913GO.docdoc 61aa32a570716ce0d7c579186cd0cc291148bdeb623f0709c3a0b0b3f3d4d384Virustotal results 23.44%Heodo
2020-10-30REP_MY7543486723AU.docdoc f2413a07e3362999d85fbab3f6c2fe8f228e4567eac899cd565ad65a2d0eede9Virustotal results 53.12%Heodo
2020-10-301DSYRXQ3SANU.docdoc d577446435b94d0af2a829f1160b594e95c8051f6b069400ff61fa38d151ba54Virustotal results 51.56%Heodo
2020-10-30Mes_PO_10312020EX.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo
2020-10-30Rep_85638815.docdoc 0df4e83145becd16b2074bb93563596b613e43856bbd653b98a316f5d92ab817Virustotal results 23.44%Heodo
2020-10-30Mes_2802650315689237276.docdoc 75ca20340c21dbd94ba3ec4c8eeb14f3a78e68a955701cbdc754c29163674a3aVirustotal results 33.87%Heodo
2020-10-30Dat_QJ5244140509RV.docdoc 5e23c65a02e9c39918c300cb0da11f39930067a62c86e780cf303e4ba995eb8dVirustotal results 35.48%Heodo
2020-10-30Doc_77128317.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabVirustotal results 23.44%Heodo
2020-10-30arc_447642077291643832096592.docdoc f2ce2b3d2bf2f5d0f22eabb44f0b7c9183e0fea547e90ab926beae89d85cdf0eVirustotal results 34.92%Heodo
2020-10-30MES_IX4684533182KG.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30inf_HL8597930435AH.docdoc 8cc9b34e2f5d86937d174dd238bb8b4e27adb981bb7b44078e619ad9a438d218n/aHeodo
2020-10-30INF_GJU_100120_ZLY_103020.docdoc eb5d0c08628c3ec2c081dc472157b78cff5ee705d96de5cd061c582c575bb7e9n/aHeodo
2020-10-30Doc_MA7HX6TNE2RKS.docdoc cd7af62b6cdbf35cdd60b11e87084e9e0c08ae9a790abe502c3a9d5a62c4e8d7n/aHeodo
2020-10-30Rep_39903047.docdoc 4e1fa1070d35befd506b61e5fcd7757c603c2289e9c09d657c6378bdfa6b8583Virustotal results 41.94%Heodo
2020-10-30Arc_YV7653543014VY.docdoc 6e473a77d345ee6f0f3c0371d26f9b187bf9e59a7d4dc18956b24db4f264fe49n/aHeodo
2020-10-30DAT_PO_10302020EX.docdoc f5d5f669e4157eb56a2bb064add77b64fbb96cb6ac4671c66e0be5b704030e0fVirustotal results 42.19%Heodo
2020-10-30MES_WVX_100120_TBI_103020.docdoc 005b9b3299e128a79fe21a998375eccf999a16aeee899a934ee2cdf578137d13Virustotal results 43.55%Heodo
2020-10-30F_PO_10302020EX.docdoc a2570aa79603bbd35dfcd783d2d6da489b713a3a5ddcabd93e0fed2713aef983Virustotal results 42.86%Heodo
2020-10-3082947876.docdoc 4d83643d4185e914cd18600bc21014c76abe93f9cdc0373b88e65461ee279b80Virustotal results 43.55%Heodo
2020-10-30file_63333795.docdoc c0b41e22e711cd0385c069a4c10ae102ca7dcc277460d218eecc4974cca8677dVirustotal results 42.86%Heodo
2020-10-30Arc_ZSPLDYGVQ.docdoc baedfb0e324fdac42c4f7b0d47f79d6473f669fa3282365dee1e4a86fc6f395aVirustotal results 40.62%Heodo
2020-10-30file_08768775.docdoc b86e09a5bdebde57bd67e1fa11ddbd3381e5972d091fdc61b68e34226fabf084Virustotal results 23.81%Heodo
2020-10-30H_SE7868333983DK.docdoc c21fd3f4bfb11db1fc709bca4079eb7f97b6001e5695a430566b61e5e630053dVirustotal results 29.69%Heodo
2020-10-30Dat_1847010109.docdoc 72cbfce2d1bb68f6583a651975d64056490779254d19bbf18636a754d88688c3n/aHeodo
2020-10-30Dat_SP9836606956VJ.docdoc 39991605b314bb39a573ea29a1b1cd2904615afe76292c0f3b6afac181a0d6d0n/aHeodo
2020-10-30FILE_5VQCZIWRU7.docdoc 665ca5b6b8e24008d94bd73e8fc3862a558d2074f35ab952eb016e2ecfb2c125Virustotal results 26.56%Heodo
2020-10-30Attachment_THYGREFN.docdoc 9918cf9fc52a9d19fe483b17d847fc7fa23d4fe150c5df91abb94e61e932cf1cn/aHeodo
2020-10-30LIST_41522590.docdoc e9b3a372797bd2c4b3b4a43d2d3920c52c30f35e2cee94a34ad17f16cb5c5eacn/aHeodo
2020-10-30arc_MSP_100120_DMR_103020.docdoc b79376701bfc97b082e9d8d61f6886b399692a2b154c6095559ab1da86e4c518n/aHeodo