URLhaus Database

You are currently viewing the URLhaus database entry for https://halalactivities.com/wp-admin/VOEgjfrc9qtfE0bMrSX1k2nc4FWPf4IIaSPGElzNFT/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:938211
URL: https://halalactivities.com/wp-admin/VOEgjfrc9qtfE0bMrSX1k2nc4FWPf4IIaSPGElzNFT/
URL Status:Offline
Host: halalactivities.com
Date added:2020-12-22 12:29:18 UTC
Last online:2020-12-22 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 12:30:45 UTC to abuse{at}godaddy[dot]com)
Takedown time:1 hour, 16 minutes Good (down since 2020-12-22 13:47:00 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-22KUZLD9CHISWRGDUI.docdoc d314d90e4d1d49a5c8c82aa438c7c5c4be663a4f68879244a87adfffe358f8b0Virustotal results 35.48%Heodo
2020-12-228E0PJR5.docdoc 6b865ef4ff2653d141429f88dc0b8e77f14d9315c583a24169804ef1a619dbd4Virustotal results 35.48%Heodo
2020-12-22E9DDYJVUYSPJU5R.docdoc 110c702523b61a449c85889be0f1f3a8b2c0375bc3de47eb9051189eabd03445Virustotal results 34.92%Heodo
2020-12-2244QT6POR657OB.docdoc 7ec200a834392208ae8521c4804d11ff669137b4265b732a17660527ccf3cf36Virustotal results 36.51%Heodo