URLhaus Database

You are currently viewing the URLhaus database entry for https://thedrag99.com/wp-includes/VBEKzueaIX3Xg8PxajxRqWeddktOL5C86V7bjqSULcvJiwBXI8cZU2sUuu6cEBZ9qnfXAz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:937969
URL: https://thedrag99.com/wp-includes/VBEKzueaIX3Xg8PxajxRqWeddktOL5C86V7bjqSULcvJiwBXI8cZU2sUuu6cEBZ9qnfXAz/
URL Status:Offline
Host: thedrag99.com
Date added:2020-12-22 11:15:05 UTC
Last online:2020-12-22 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 11:16:04 UTC to abuse{at}contabo[dot]de)
Takedown time:3 hours, 7 minutes Good (down since 2020-12-22 14:23:07 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-2269G18SW.docdoc 87cad8283d151d96c90fd747887dabd30d0012320be4132f2143deeb69c9c4e0n/aHeodo
2020-12-22L93EQYKAC8ATIWME.docdoc b7bad120c0c3ba7ed2881c98fc26104cefee58148b7c5850ceb87b683595f2a8n/aHeodo
2020-12-22V36LKKQQ28M4SX.docdoc 86942bbcea50514ec00c4794847620c7ab3863657d7cc8119cf593ffb539cae7n/aHeodo
2020-12-22JRRRJIY7XU7NENEY.docdoc 6e80cf87bd4ef21287958848ca5250a78cf17cf17f09a9b1b11cd37a01a24202n/aHeodo
2020-12-224ZJDWPD.docdoc 595ca6b04ee946fd5dbbb58b280ad140ada9d2c4f5dff6309281887695c8d4ban/aHeodo
2020-12-22HDZ1A9J.docdoc 7ec200a834392208ae8521c4804d11ff669137b4265b732a17660527ccf3cf36Virustotal results 36.51%Heodo
2020-12-22A6VRAY1LP.docdoc f5d52678316f377c59a3f063b29a06a415106d5833d1786533d7abb7e27008ceVirustotal results 35.48%Heodo
2020-12-22HWRQFE7PK0K76IWO.docdoc 2eb890f47074a802abff73fabb722541ca607ff36a0139e4d236e875191e0078Virustotal results 36.51%Heodo
2020-12-22551OOXM343PI3WC.docdoc 5d45aae2fb42f515daf99e0df859fe8fb728ded811e109bb5221a8b34bcaaed4Virustotal results 36.51%Heodo
2020-12-227N4DGAUM6EM.docdoc 5859c620940889e8f706d72a664c360201c9ba13ef890968418d85e89488b940n/aHeodo