URLhaus Database

You are currently viewing the URLhaus database entry for http://ahmadifoundation.com/wp-content/nwYi4ww0RV6LsZCCYh7i4cYWEtZT4ao624J7HX7kW7QoI/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:770901
URL: http://ahmadifoundation.com/wp-content/nwYi4ww0RV6LsZCCYh7i4cYWEtZT4ao624J7HX7kW7QoI/
URL Status:Offline
Host: ahmadifoundation.com
Date added:2020-10-30 21:33:08 UTC
Last online:2020-11-05 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 21:34:23 UTC to abuse{at}godaddy[dot]com)
Takedown time:5 days, 17 hours, 10 minutes Bad (down since 2020-11-05 14:45:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31UNTITLED_B4DJAI8MZ7E.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31File_EQ6744805581BN.docdoc 4ea3b44401112b07c8579bc245bb22ee9c40c153200538038bb8bc8d53f6b632n/aHeodo
2020-10-31List_GSLVFCNQTL.docdoc c0e896c6e7521d6431ca692ef69c30c605ab7e599336d9c027721e573d1b2161Virustotal results 58.73%Heodo
2020-10-31rep_PO_10312020EX.docdoc 2d3d4e0033829c37a82f24c6499a0786dc993903374e611aa94c4973a4066dfeVirustotal results 53.12%Heodo
2020-10-31Rep_TDS_100120_BQM_103120.docdoc 780ffddf2dd1fac9d6fc091c707c84751ea2180a253431c3b4700989bd3fc21cVirustotal results 54.84%Heodo
2020-10-31FILE_87675865.docdoc ad6530753d959ec1d3305730db8985d3f0fdf9e9ce893c2f8bd8873ab51f8fdcVirustotal results 52.46%Heodo
2020-10-31file_HNQT9LU.docdoc 96636e8803958a85be6974b0fc6c91e24526ae529a00c31dcfdbf3ed761c5304Virustotal results 53.12%Heodo
2020-10-31doc_GAY_100120_JGN_103120.docdoc 5f41c6d26db569d644da86fdc71dd2448e2850998f476944b09e1338411210f8Virustotal results 53.12%Heodo
2020-10-31PO_10312020EX.docdoc b104e5360f8f17268449e97ba36749b921cf7cdd797fdb8a28ffe20d8d9c59e4Virustotal results 54.69%Heodo
2020-10-31DAT_30R5VRYRZ0X0CO.docdoc a77843eba99adffde7cc22482865a6e64cd0217a4779ec035d11d060982996e7Virustotal results 53.12%Heodo
2020-10-31Inf_PO_10312020EX.docdoc 12ef90a776bc1f4ae05962313e6b3711ec5211f8ba450527585d2da80c2d03b5Virustotal results 51.61%Heodo
2020-10-31UNTITLED_X8WV4JTNGN.docdoc a914d86d2a97040bb1c91827828f9ec8e72e18d73ca90d884b5d385e4c9793f5Virustotal results 53.97%Heodo
2020-10-31LIST_LB97Y3BNT9C7OM.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 53.97%Heodo
2020-10-31Doc_93895274.docdoc bb6965f5fdad54288c857319fe4ff50575e4a48364ca671cfe950427aa235c9cVirustotal results 54.69%Heodo
2020-10-31rep_S4BX689.docdoc 26b30e58ed2342d042367ba0487873439d5c9c28920ddd000bb94b3eac79d94dVirustotal results 54.69%Heodo
2020-10-30Y_444LBLW4FPRLUK.docdoc 84f8bd87a1f8207da3a4722b9eee322be498919fed6323fe33c0ce60ef7aadcfVirustotal results 53.97%Heodo
2020-10-30Attachment_278037865236271445.docdoc 9918cf9fc52a9d19fe483b17d847fc7fa23d4fe150c5df91abb94e61e932cf1cVirustotal results 53.12%Heodo
2020-10-30PP_35189881421164164934.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30mes_PO_10312020EX.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30file_PO_10312020EX.docdoc b79376701bfc97b082e9d8d61f6886b399692a2b154c6095559ab1da86e4c518Virustotal results 53.12%Heodo
2020-10-30O_36188434.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30file_DMW_100120_NIY_103120.docdoc f2413a07e3362999d85fbab3f6c2fe8f228e4567eac899cd565ad65a2d0eede9Virustotal results 53.12%Heodo
2020-10-30LIST_WX2247556032GB.docdoc cc0614f4e21c1d63a80e1ddecfd591353e15aa849f754be9d8b709cc6e9841c9Virustotal results 53.12%Heodo
2020-10-30Attachment_67429332.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo