URLhaus Database

You are currently viewing the URLhaus database entry for http://farahni.com/content/ys2So9G3NSVSj2JBB26ZreBsFIOpAZ9PCl7NrNggz5uakyv3Xamz5C7hseFMOo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:944558
URL: http://farahni.com/content/ys2So9G3NSVSj2JBB26ZreBsFIOpAZ9PCl7NrNggz5uakyv3Xamz5C7hseFMOo/
URL Status:Offline
Host: farahni.com
Date added:2020-12-29 13:29:05 UTC
Last online:2020-12-30 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-29 13:30:23 UTC to abuse{at}inmotionhosting[dot]com)
Takedown time:13 hours, 42 minutes Good (down since 2020-12-30 03:13:00 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-29PS8LXFCEY5XO.docdoc f63df71b55e2e7d9874fbfe9d3dc6fb6bcdaac70deec04341d0e98350e9b2687Virustotal results 38.10%Heodo
2020-12-293PTVE4KK5TQB.docdoc 918cb2c09e6657f0a17439dece6675085dd993189469c70ef4cd8b40166f11c4Virustotal results 33.87%Heodo
2020-12-297Z5F14QWARK372.docdoc 45d8bc6c35fbbb07e2a164434082d5659b1a53769f01d35cbae03741ddf981caVirustotal results 31.75%Heodo
2020-12-29W6ZIMIM516BFQSDY.docdoc e7aa0eb5fccd3ec9431579705895ea77dd13c91dba60786f3d17c80416e132feVirustotal results 31.67%Heodo
2020-12-29NLP25GLJJ.docdoc 534741cd011d3d7a34c5c3c0dee6f721faec6a7e6f81720011c3f0d54556b0e8Virustotal results 29.03%Heodo
2020-12-29W4936XTPLMZ1O5I.docdoc 9b2378158c03d2f3f066362e9348d3ee8431593fb903272a8958988b7207eefdn/aHeodo
2020-12-29RYF7XGN.docdoc 45fddeea6b53faa7488cf999a241a8bbf6f78a0a0db25a948d827090fa8054d5Virustotal results 26.98%Heodo
2020-12-293F140PXMOXTFM8.docdoc f33b20e1400427532444109d42136f647ba8105f48eaff34aff2ae464ded129dn/aHeodo
2020-12-29VUGF4YPWZNCTKM.docdoc 8bea8b92c1848323b875db63e41054c7f9c48e6af5a287a56b014f321822e717Virustotal results 25.40%Heodo