URLhaus Database

You are currently viewing the URLhaus database entry for https://critical-thinking.fr/wp-includes/D337bsaxwgioijACjsxWokN/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:769910
URL: https://critical-thinking.fr/wp-includes/D337bsaxwgioijACjsxWokN/
URL Status:Offline
Host: critical-thinking.fr
Date added:2020-10-30 15:36:04 UTC
Last online:2020-10-31 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 15:38:13 UTC to abuse{at}online[dot]net)
Takedown time:18 hours, 2 minutes Good (down since 2020-10-31 09:40:28 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31TV_GI1VYL9.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31list_AY2509558406EM.docdoc 4ea3b44401112b07c8579bc245bb22ee9c40c153200538038bb8bc8d53f6b632n/aHeodo
2020-10-31P_01951626.docdoc 369deae0aea3bfa6e8367f494d149dffe4c9a5f821bd8270c06016f0e6923227Virustotal results 52.38%Heodo
2020-10-31Untitled_12866978213.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31List_XG9732670644IS.docdoc 2cb36ff671181007c49a60cbbafe936340f4465bc46d3451c5ad6cb8086a4ebaVirustotal results 51.56%Heodo
2020-10-31Attachment_NZ7165561857LV.docdoc 0ab261e8e21a48f3423dbe6d18512f5e2afbd09fd31af5d5c45d2814c2c709afVirustotal results 53.12%Heodo
2020-10-31REP_893210744602090.docdoc 96636e8803958a85be6974b0fc6c91e24526ae529a00c31dcfdbf3ed761c5304Virustotal results 53.12%Heodo
2020-10-31List_MH0063128301KR.docdoc 5f41c6d26db569d644da86fdc71dd2448e2850998f476944b09e1338411210f8Virustotal results 53.12%Heodo
2020-10-31MES_BYH_100120_PWD_103120.docdoc b104e5360f8f17268449e97ba36749b921cf7cdd797fdb8a28ffe20d8d9c59e4Virustotal results 54.69%Heodo
2020-10-31Untitled_NCS_100120_RDC_103120.docdoc 3f1565ba4e9c93cf71b5b5a3f3b16869e7c6a7d86a837a32db34f1f0105e3aaaVirustotal results 54.69%Heodo
2020-10-31FILE_93648194.docdoc a77843eba99adffde7cc22482865a6e64cd0217a4779ec035d11d060982996e7Virustotal results 53.12%Heodo
2020-10-31Untitled_88505654.docdoc d0173484a8073ed5336acc965770f3875b704785bf08f59a929f20c65512e1fbVirustotal results 54.69%Heodo
2020-10-31BTQ_100120_HBQ_103120.docdoc a914d86d2a97040bb1c91827828f9ec8e72e18d73ca90d884b5d385e4c9793f5Virustotal results 53.97%Heodo
2020-10-31doc_LEX_100120_RGI_103120.docdoc 9c96edb7b23fe316d7ea6705b137c283da2aba4f7dab4537a681e7e5d031b0eeVirustotal results 25.40%Heodo
2020-10-31Untitled_SXE_100120_QQM_103120.docdoc 4eabd4dcb81c28e86bbfd9ac62090d51aea5a733c96a8f3a7ad130a9841bce71Virustotal results 54.69%Heodo
2020-10-31Arc_27343618.docdoc 26b30e58ed2342d042367ba0487873439d5c9c28920ddd000bb94b3eac79d94dVirustotal results 54.69%Heodo
2020-10-30INF_56666460.docdoc 9918cf9fc52a9d19fe483b17d847fc7fa23d4fe150c5df91abb94e61e932cf1cVirustotal results 53.12%Heodo
2020-10-30Untitled_FON_100120_HRW_103120.docdoc 621f149c8fdf5abbc449baa3bc86423a799301ca3017950f0b173a6977033e88Virustotal results 54.69%Heodo
2020-10-30FILE_56322745.docdoc 22a4eae8735782a3f12e3f7ee5b6d0839cd7c4a8b91dce6ce27e2414b2e5f817Virustotal results 51.56%Heodo
2020-10-30Q_18028295.docdoc b79376701bfc97b082e9d8d61f6886b399692a2b154c6095559ab1da86e4c518Virustotal results 53.12%Heodo
2020-10-30Attachments_WCR_100120_VGD_103120.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30doc_PO_10312020EX.docdoc 20a348277c58a86bab1a218fd2dc97ea61811eeca81bbab000bf5f0afa562b36Virustotal results 51.61%Heodo
2020-10-30list_96784542303857290431.docdoc f2413a07e3362999d85fbab3f6c2fe8f228e4567eac899cd565ad65a2d0eede9Virustotal results 53.12%Heodo
2020-10-30inf_34843368.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo
2020-10-30Arc_169861396337583071442.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30Attachments_PUU_100120_XKP_103020.docdoc 5a995a547c20076ca1850fead69dba97ce8af344b544648dc463a9a18899da74Virustotal results 31.75%Heodo
2020-10-30Arc_CP4858631383JZ.docdoc 894961b5cd902ae1bd280ad4d906f510e47f2d02fba5fc278823a37eabedcc7fVirustotal results 33.33%Heodo
2020-10-30dat_48236999.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30Doc_PO_10302020EX.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30INF_PO_10302020EX.docdoc b0f3557b0ac948f3137f3cc926504dbe28038ea00d282c81a33fd46b93af1c25n/aHeodo
2020-10-30Attachments_PO_10302020EX.docdoc 023fdae311195c64889d2c87831a470d7c4826a755cd385729dc6bb02281c4e5n/aHeodo
2020-10-30Dat_75022399.docdoc 166f3880aa773ce0e75712aa20839d2b0f37315533364e3794401b389579ab2aVirustotal results 42.19%Heodo
2020-10-30DOC_780862517.docdoc b75935a097651bf38a480763eb4c9973e89974666e00bb021c25e21b7932c0eeVirustotal results 42.19%Heodo
2020-10-30Mes_76333071.docdoc 578a7143a40755b7d7601a1b0e3f660137971473556e817d2a0e2ca57bc91053Virustotal results 42.19%Heodo
2020-10-3053024471138848106813.docdoc 33478c951541dfc62cd1b974afa9e6be46b51b140a5228aa4f34f417a17b8a64Virustotal results 42.19%Heodo
2020-10-30File_OAB_100120_HOF_103020.docdoc 0b8a8e7a53d7fe5cfe16dbec4b9d21361ce7f6eb2f21c9ece0c5fdea89d09b74n/aHeodo
2020-10-30MES_IUA_100120_BFB_103020.docdoc 2c35c7c2a35e6c0d057d6a29697d6caeab76363a0040219edbed385309cb15f6Virustotal results 42.19%Heodo
2020-10-30arc_RQB_100120_NIE_103020.docdoc 9121a79689d2a88dad9bce32476217b48aa14ced73ea3ea2394760e2da314d15n/aHeodo