URLhaus Database

You are currently viewing the URLhaus database entry for https://ahmadifoundation.com/wp-content/nwYi4ww0RV6LsZCCYh7i4cYWEtZT4ao624J7HX7kW7QoI/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:770226
URL: https://ahmadifoundation.com/wp-content/nwYi4ww0RV6LsZCCYh7i4cYWEtZT4ao624J7HX7kW7QoI/
URL Status:Offline
Host: ahmadifoundation.com
Date added:2020-10-30 17:33:09 UTC
Last online:2020-11-05 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 17:34:22 UTC to abuse{at}godaddy[dot]com)
Takedown time:5 days, 20 hours, 27 minutes Bad (down since 2020-11-05 14:02:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31file_29707590.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31Mes_RB5342271464MM.docdoc 4bab596233b6ee4131996d95b9d863e6833d285d6f87dd2bd841f2682b6146a3n/aHeodo
2020-10-3105766852295656725.docdoc 396b664fbdde301d1ebedd54f4beacf4726ef9fe1d0807a86fe0b00e0a71772dn/aHeodo
2020-10-31UNTITLED_PO_10312020EX.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31Rep_TDS_100120_BQM_103120.docdoc 780ffddf2dd1fac9d6fc091c707c84751ea2180a253431c3b4700989bd3fc21cVirustotal results 54.84%Heodo
2020-10-31FILE_87675865.docdoc ad6530753d959ec1d3305730db8985d3f0fdf9e9ce893c2f8bd8873ab51f8fdcVirustotal results 52.46%Heodo
2020-10-31file_HNQT9LU.docdoc 96636e8803958a85be6974b0fc6c91e24526ae529a00c31dcfdbf3ed761c5304Virustotal results 53.12%Heodo
2020-10-31INF_ZXA_100120_NKE_103120.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-31REP_PO_10312020EX.docdoc d7c0fc3658da4a6040cab7aff29764849e26c699642492446759314c94586b6dVirustotal results 26.98%Heodo
2020-10-31DAT_30R5VRYRZ0X0CO.docdoc a77843eba99adffde7cc22482865a6e64cd0217a4779ec035d11d060982996e7Virustotal results 53.12%Heodo
2020-10-31Attachments_961787888274.docdoc d0173484a8073ed5336acc965770f3875b704785bf08f59a929f20c65512e1fbVirustotal results 54.69%Heodo
2020-10-31Dat_68113598.docdoc ffc63081ade619c07061526c15e53d5dd012da2e842f479fefc0c27f46ce2bebVirustotal results 55.56%Heodo
2020-10-31LIST_LB97Y3BNT9C7OM.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 53.97%Heodo
2020-10-31ZBHW_SYO_100120_RLS_103120.docdoc 4946591b7b99f626dafd98d333aa5c669ce9d3772e5ff1dc85e5d1cec281db99Virustotal results 26.98%Heodo
2020-10-30DAT_31HJSB4PVD29A4.docdoc 66f30f7d40ef0e230f042cd6abe51971e49af52617515c3d0d99f3f365a59e90Virustotal results 25.00%Heodo
2020-10-30PP_35189881421164164934.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30Dat_8564285280787.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30file_PO_10312020EX.docdoc b79376701bfc97b082e9d8d61f6886b399692a2b154c6095559ab1da86e4c518Virustotal results 53.12%Heodo
2020-10-30O_36188434.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30File_YO3350461590KK.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cVirustotal results 54.69%Heodo
2020-10-30LIST_WX2247556032GB.docdoc cc0614f4e21c1d63a80e1ddecfd591353e15aa849f754be9d8b709cc6e9841c9Virustotal results 53.12%Heodo
2020-10-30Attachment_67429332.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo
2020-10-30mes_044153358186602.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30Doc_PO_10302020EX.docdoc 2004d64ee603572e13a168eca558d2ade8169581208022e51896e0589e07116dVirustotal results 32.81%Heodo
2020-10-30Attachment_TCE_100120_ORB_103020.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabVirustotal results 23.44%Heodo
2020-10-30Untitled_UJM_100120_BNP_103020.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30rep_CXX_100120_IMT_103020.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30U_HE6899209263HV.docdoc fd3709987d90ec9e862505d3a6f65e06a16420f87fa87b9ee4d40edb9dd8f5e0Virustotal results 46.88%Heodo
2020-10-30Attachment_DH7842073727RE.docdoc 023fdae311195c64889d2c87831a470d7c4826a755cd385729dc6bb02281c4e5n/aHeodo
2020-10-30FILE_PO_10302020EX.docdoc f49b970c0f5c5e742a76964f8ac3473e2b6a8558589d75cb54c5f7978178af16Virustotal results 42.19%Heodo
2020-10-30doc_QP8665616900WT.docdoc b75935a097651bf38a480763eb4c9973e89974666e00bb021c25e21b7932c0eeVirustotal results 42.19%Heodo
2020-10-30DOC_PO_10302020EX.docdoc c3a3c4b5fe05e1cabea15022173fa5a6f9fb05c83f0cb2d70441f0d415fb9405Virustotal results 43.55%Heodo
2020-10-30FILE_0652567403370.docdoc 40688ed280f40248483c6bac4e362a918147bdf98ab4993db657a0f7eb6e6018Virustotal results 42.86%Heodo