URLhaus Database

You are currently viewing the URLhaus database entry for http://greenharvestrwanda.com/wp-includes/qKaxvr116lQfV8GbbGBTGs1r5mXUZYCTxbI5OzUs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:944784
URL: http://greenharvestrwanda.com/wp-includes/qKaxvr116lQfV8GbbGBTGs1r5mXUZYCTxbI5OzUs/
URL Status:Offline
Host: greenharvestrwanda.com
Date added:2020-12-29 18:17:05 UTC
Last online:2021-01-06 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-29 18:18:14 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:7 days, 5 hours, 51 minutes Bad (down since 2021-01-06 00:09:56 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-31KMIPTC3Z9DKP.docdoc 43af38ecd27585f00463abfee0ca7f492fb36fa862c8d215447d59be27652589Virustotal results 50.00%Heodo
2020-12-311RNHDA.docdoc 38bbd83de3da247dd96f8f463e73ebc76a9165bb783fc85432714e863675d87fVirustotal results 49.21%Heodo
2020-12-31TVZ4TMUBBDKF700.docdoc 9512958c1e2d4c75ccf1a1da8963bf39ecef83838203ec92036630265afedfa5n/aHeodo
2020-12-31PGHHUHM.docdoc c61912f98d4d7fdd3e6b5004bea7f430d33ab1d21d8c2c75f4b89aacbc79382aVirustotal results 49.21%Heodo
2020-12-31N6U68ZNMX.docdoc 53b44961d059f2aec41bccc4a14a60dfffc9b9ff1dd8da85603ad5afa540ae05n/aHeodo
2020-12-31Y5IWGSDO.docdoc f4ba2bce0a0fcc57183c73e46feb6f6fddfcac25d12032d47d93302aa9bb40b4n/aHeodo
2020-12-31N24LPHP1M6CI2JKK.docdoc 6c1e317361243614038a172a218b2050728fbcf3f6dc18937d02f92e1ff92354n/aHeodo
2020-12-314JISH3T8Y.docdoc 2af797939c0c67519484491cd884c884c2a345daa208a6d1ba67e3917edc04f6n/aHeodo
2020-12-31RZVOASM6U.docdoc 92f3ec8ddadbace9623d6af0c230b651775947b4da83ae9b5ab3ea42f866a62an/aHeodo
2020-12-315QOHSC.docdoc 91086dde82b6ff0a38dcc4ceafee71808d2af326520ab5e0f610f0c2fc6637e9Virustotal results 47.62%Heodo
2020-12-313ZN45N.docdoc 18bb61d704aea3eb9f1d69649f16dad532c1236486dbb9891c0bf5054c63aa16n/aHeodo
2020-12-31OSLNES.docdoc 22c9b454977f772e641fd2d5d4c08fb9e124cdc9ec47c69ed037fed87bbf1abbVirustotal results 44.26%Heodo
2020-12-31YUBOZYUCA.docdoc 12648728174c80a68b9992c8759df7e021f27fef6bbee5bed8af71b18a7fadd5Virustotal results 46.03%Heodo
2020-12-3114G2C8NVEN.docdoc 6b85d222fb12df6466d8b1dae31bb6e7706463ec73fd86f85e46ef7867183df1Virustotal results 43.55%Heodo
2020-12-31TMTSLY.docdoc 3bf59384c4c1a24eb5fef4453dd1fc63a75324f4aa6b86a62ba47de3393027a9Virustotal results 42.86%Heodo
2020-12-31QF8HV81VAT.docdoc 0b9ad72f95097098c7273fc3e89e96d14537deadfe1570a2e36b8ec40bf241a7Virustotal results 41.94%Heodo
2020-12-31OQ5HH9R17L1.docdoc cd86c55218a19d3c739795e4da8c0c8b34a731b1d89fcc0685a5ceed2f3f8feeVirustotal results 38.10%Heodo
2020-12-31B8PJN6WA61Y.docdoc 24b9b439815155d6b338c75f2ae2d92deb41c580a893dac9153f5042abc8b702Virustotal results 32.79%Heodo
2020-12-30QZAEGM.docdoc 48cbbf0f9680ad78df8965f1b76d756f88912c653711968364b7f7eb3f5795b0Virustotal results 31.75%Heodo
2020-12-308J47GQLDN6YURE2.docdoc 643eeead31f1c79f2a2d191699189bd671ca0169fff0feeb3824ff0b57281e3bVirustotal results 31.75%Heodo
2020-12-30YGMIWK.docdoc d700110437e868378fd668cf27a7df7611da72d285f7b9d7edfd2d08475a47b5Virustotal results 30.65%Heodo
2020-12-30IUW5P1GZ12S6AP.docdoc 8c39bdef7f9491fc985afb40906aa1f0d4427bb9cb2299ebacd5511b442e9982Virustotal results 30.16%Heodo
2020-12-30RBBNZE7H.docdoc a2bee4290712595f0afb87e5a247cafe694d279fb7350e43bc163630e926aaa4Virustotal results 27.42%Heodo
2020-12-30OY5BZSBVME3HMKIM.docdoc b02db4eff71b9c4788273ae8bef5958210413d14e2f6704de106c437749aeeb3Virustotal results 29.51%Heodo
2020-12-3082KSHRS.docdoc 315dce173e7c32092cf4b83b7d27b520156225dc90d11322b56244ac2b61810eVirustotal results 41.27%Heodo
2020-12-30S4KYPW.docdoc 7dbe3e3f4d5e95b69111858fc5e96f73c1b7f8284276a1280486ab64139324a2Virustotal results 41.94%Heodo
2020-12-3029AUKG2TSE67G5.docdoc 6aac95dd3f2a6b9cdc5ddfbda6e548ab8d93a61f48640d3a0a98a312fad42e56Virustotal results 42.86%Heodo
2020-12-30XPI85RX.docdoc 48242492ae400d1b2e95ed96ed2298bc76c87036b1f79e92d38a07e5cb14712bVirustotal results 42.86%Heodo
2020-12-30GOZC49SX.docdoc 7a1dddc29a6b87ff807093d52c2c2ea7139641511f39fa0a834c101bd431baaaVirustotal results 42.86%Heodo
2020-12-307UKKAIB3.docdoc 214c118a6ea6243f11f97d6a83c14ce0efa696dcf534eb46de221d4199cb7c88Virustotal results 37.10%Heodo
2020-12-304MCXQ11Z.docdoc 399701ae00f1f4e019e97b788362403c8323b417cd0f72fef7f9a39dd4ad4436Virustotal results 38.10%Heodo
2020-12-30FPCQDET.docdoc 14b98f981681ea78e6511ba3a68c28a85fee9696158358876cd49a9ac1110bb2Virustotal results 33.87%Heodo
2020-12-30DAUCYDION.docdoc ebb494890c3756f3bd2d17fe15fea7443671ce48c7d22821b6f0e73920ab061bVirustotal results 32.26%Heodo
2020-12-300UMFBJH1NEBF.docdoc fa91406d32a92c06644f1089b3184110a7e7238b70dbbb86098e77f7ce82ff5en/aHeodo
2020-12-30W0G6BMNOEQBM.docdoc e561d015ba417615f931d69404149b840e6f30d937c6d1e8765462d08c33384eVirustotal results 30.65%Heodo
2020-12-302V2F6X6H.docdoc a3c7030635319611442140f4e775bd30cb0379b86a430e9b54df0ce366d7db30Virustotal results 29.03%Heodo
2020-12-30B0R2773ZJ5EXDNO1.docdoc 2247e8d912eac0fe04e0d232db8ed716ddb81a5a2f24f343b03041e267bf3d7fVirustotal results 35.48%Heodo
2020-12-30UUO4DXBL8Y9.docdoc ea32c0e98b96ac84d67ce92162c923944c124e335e920f9a4fa6d5c18fd732cfVirustotal results 31.75%Heodo
2020-12-305I2N3TY4GD0KX.docdoc b069777bc25c9afba5d6e9a7f25e8042c6de53dd0c82deff0df162c44c61a1a0Virustotal results 31.15%Heodo
2020-12-30GU47NLRMWD.docdoc bc7f4cd13c74dc42e2862078e4c814def5484f8cba7f2b61834770e2f0f0684cVirustotal results 30.00%Heodo
2020-12-30S12Y3VDF.docdoc 63a9349a502e7e3e7a78488b5fef1649c62dd1fca5e72c79dd92e0bd89327105Virustotal results 28.57%Heodo
2020-12-306ZE8DNC001HM470F.docdoc b5c06b0784cd3209d08f225a7d7d2386bbb90b93832bf6528d6c38904a5ce760Virustotal results 29.51%Heodo
2020-12-30V8YQI0QB4NYDE.docdoc 0d90ca158eabbf8ebd00e4093c2ccbd118833f31c3c6902dc7cc079b6ad27560Virustotal results 30.65%Heodo
2020-12-30DHW2CWRD.docdoc 84e47bd673a96f1f41735c34d4bbdf415b8f2c39e7a833fe5cac69d38b979f5fVirustotal results 28.57%Heodo
2020-12-30PHJJXU29R8B8ECJU.docdoc ff851095aca5969d1f70e5be1a645bf840e10b191b9037c50da8be304f5c01baVirustotal results 29.03%Heodo
2020-12-30JSHAOU4DS.docdoc 038ce32c78cddd37592b182971d0c98b8c1d4dc9b398b593a5d28aba6e947b2aVirustotal results 29.03%Heodo
2020-12-30UPFVTVUWMKWD.docdoc 62e5f85a3afbef81f4dd4d8281a0fe697d0dfdb6e714ade5175a0f2b68d40083Virustotal results 29.31%Heodo
2020-12-30J4OSYD9T0CRD7.docdoc 5e9e5d0c36a1395a73be5fc2a97167d451ceaf649ed3c72992238710edcf31eaVirustotal results 29.03%Heodo
2020-12-307EYRIMJWD1.docdoc ec3994399031e9c03729b9c51069c839dcfefc07707959021f85d8250286ff43n/aHeodo
2020-12-30TP8FV7F.docdoc bd913e9c89867c5d668cbc999e4044f62c9efac8f02e6be4066845c3bd2d7171n/aHeodo
2020-12-30LJDNFL2K0PQM.docdoc be2287f06352c21f4412b81411c76a2e3c23bc99bfd67a39549574e6f0143ec5Virustotal results 28.57%Heodo
2020-12-303KJAONRWGBL3VZ23.docdoc 39e24a73656d38c94f1c4abc67b93be532659af2fa07966c372424780e54cb24Virustotal results 27.42%Heodo
2020-12-30HJ10AHGWT.docdoc 74bf5ffc4f0fbbcfa4decbf40f781dcd4dbe1a409c1fdb581d1f92e368f251fbVirustotal results 29.03%Heodo
2020-12-307GW2XVHMGF.docdoc f986e45721d272af5712ecebae797be7ecd2410bc63161d05c9e899f6e107af4Virustotal results 30.00%Heodo
2020-12-30NA3JXHRFBG.docdoc 3c2ed9471901c2a6ecb559a6af4a9ae579b9e6e93ffd08595f002d8b0ea1afd9Virustotal results 28.57%Heodo
2020-12-30RXAWBS.docdoc d51c4a95eb3b358e31b75d0f3e4fbd9f4ac62785f48019f6552ef3fd40f75a6dn/aHeodo
2020-12-30Z1I7HZJPII.docdoc b819a59c6a40ff2d03eb14a692706aefd3ea6587a10d13fb8027ce1f57f3f95dVirustotal results 29.03%Heodo
2020-12-30VKUYQ7J9.docdoc c0081661fadf165b64870df68fca809bd6335c93f1038ddc339f88abef91d61cn/aHeodo
2020-12-308T9K56UPXMPS.docdoc 61b5de9bb6347eccd43cffef6ac55d594b32e785232e21ef49eac3c70f3cd582Virustotal results 26.98%Heodo
2020-12-300YJMUBIK1JK.docdoc 9c22bfd1ad2f398e3014c41d31582d8e2c886c6fd376836b72aa02dbb6c5ef71Virustotal results 26.98%Heodo
2020-12-3046B66AD1CM1QWFM.docdoc 5ff309e15ed409297bf10da249a2d68038b70b8032f305f43310e8930cc7d606n/aHeodo
2020-12-30YXDKP4G.docdoc e9a7000b6216e1cdd6280e0d3b11b52bfa0cfc1a49f3eb8488ebb26b6f0852c5Virustotal results 23.81%Heodo
2020-12-30KIIZ41FB79.docdoc 43def52a7d5d5aefd8b9f35b80d2fe898607d4ba78d92e44fa407571f78237d7Virustotal results 23.81%Heodo
2020-12-30W01GA5WZKPP4T.docdoc 6ea37605aea5591d5271248f640a3dbeb9edec2ae1fcef4954213d025a812d4eVirustotal results 22.58%Heodo
2020-12-30NDZ8XCXZV.docdoc 6afddcbf7a8a64702774f4bee529ef01e20567882777318dad0e184eadeb80c2Virustotal results 22.58%Heodo
2020-12-30JKBI1TSS6V2LB1QL.docdoc cbf2fe0231f079d952671879c0b8c938067f5c5dea8bbd0e17508a3855416c64Virustotal results 21.31%Heodo
2020-12-30U6KXRIMCPW.docdoc c67e6b627484a2883191b35e4db1994df75620dffa6ce55f960a11a2280be3e0Virustotal results 24.59%Heodo
2020-12-30ER3CV3EY7E6.docdoc 3f58aa984c9e26aa906d9f4371ea2d31b00ca6c6eecd9dac7fcf4dc2b19caae9n/aHeodo
2020-12-30JEQSCJ3ZN50H.docdoc 88c899df2c9e416f30c397ab61bb5a59f504445197488f4ee362c410fb0d9d76n/aHeodo
2020-12-30TCH0CW.docdoc 98434e35b67922ba13789c603c7e90797ae599f7458b281dae2823eb14389296n/aHeodo
2020-12-30TI8YSQOMZOMHD8H3.docdoc 2ed291cc9976df382951483bb2c77fe908b724d01b6360d1e61ee698f052ab11n/aHeodo
2020-12-30EXAJ2D9QJOGOX.docdoc 4b7778c74f084c7cbe57205e56c590730227816f7212231df1ac32dc21e18c71n/aHeodo
2020-12-30OX4YXDWT8V52MSWH.docdoc e799e58726ad5d72644487e2fc47f0ddd22bba379bd0552bbd015e94680c70b6n/aHeodo
2020-12-30VBJH9YZ.docdoc fa5aa91755a36f8142bfa74818a3aa61264edc65cf4aa9fb8d4bec28f6faadb0Virustotal results 53.23%Heodo
2020-12-30UD5XIKL96JE1.docdoc ef18f9ad5834b882d4554fdb6b709c4fa3782704b22dc9e7a535b40f2fb4ddb5n/aHeodo
2020-12-30H2WIVPZVO7M7UT90.docdoc 161c83286b69307edded6f1105481cfdc65bc36aab3773a365af1972dfabc3ffVirustotal results 52.38%Heodo
2020-12-30Z7NLB4K.docdoc b5f5bab1debd9fd60535f3a992c4f90f462f3c42896c05138b18e67c36d111edn/aHeodo
2020-12-301HO6U6RMSBRN.docdoc a015e402908723d20de5ce0e32b55d2dc47b10b36619d08893cf6212a5bf9957n/aHeodo
2020-12-30ZTBLDULL7AB.docdoc 9a9706902460c2e3ac9e44ed6aff62a001ce31641d96c49072c4750106c3de50n/aHeodo
2020-12-30OXZTR63X.docdoc 74f1385297f1e0abe566a9e2eedddb41b97279a2043c11a88b08c05304331390n/aHeodo
2020-12-303IRPZ5WO5V7QEA.docdoc e0ea0fe16907efa6fba0c7da966c01d5e9c2a7f4024db84c8113a51b22b3a110n/aHeodo
2020-12-30780NSI.docdoc fc88d7102891698ce09ee38c1af90b8e225c496491ddaee1b739a12f1a2eaf33n/aHeodo
2020-12-30IQARWV4OE9TNS3BK.docdoc 41e784f18168ae902f8bd265907c8e6e15b3cffde32a299bff675ee4b6902a03n/aHeodo
2020-12-304JO9DBO0J2.docdoc 59dd64819d5e4347530f69b1a854607289d93c950a746580535cc79d8ee373c7Virustotal results 50.79%Heodo
2020-12-30XU47DKA23S.docdoc 400265d4687c120a0f5ac2f335dfa97bdae5a45c2dab4f11ba4ea9309b55f550Virustotal results 56.45%Heodo
2020-12-30ZJYDCJ.docdoc 4a03b5e095f8e4303740cf67df82c3491eb1b3545de5256870aa1bcfffda1e54n/aHeodo
2020-12-30Q94TYILUT.docdoc c18cbfc2d84a1436acef501a8e605966ab35af260f8a6c86f24e5b459c87bc19Virustotal results 47.62%Heodo
2020-12-30ZBL2GQMKDQ309CK.docdoc add8349cc360e174c38c2d36277412b334744b3af808d91097b5b9e9c9834f3fVirustotal results 49.21%Heodo
2020-12-30AM0NLJ9XIU36ZVC.docdoc fe615d9510f8a8a4f2392eb1dbaf75fee4054136fc2da4a69d52c6e1b8c696c9Virustotal results 49.21%Heodo
2020-12-301BDK3VLF62C3Q8M.docdoc 16a0fc95c6217d4542b0a02200d26987e08d41c709ba9c36b9830993b2b4c6c4n/aHeodo
2020-12-30KXE104.docdoc 0bd4e7dd4ab7c8f023e4df01d0012cb40b1ee9d7fb10353779eaf1fd47d53c04n/aHeodo
2020-12-30AGU6BLCD1O44Z.docdoc a3553d4da88c65554d145c8efde7312447904dd78f21dc173354ef0b3257e555n/aHeodo
2020-12-308A4VZI.docdoc c1c222eea5baec06081295edddf806c2bbd101f35d5c554d3f3b63aabe8fb576n/aHeodo
2020-12-30UWPG76GP.docdoc b0286fc6b2b0354bf5bb297ad8f8f81577bb23a3568133181a5daa3eb75954c4Virustotal results 47.62%Heodo
2020-12-30JOJCX7.docdoc 270178887f55fd612338733257bcaa9750d9f7f1dd3ad0ecf1e55222c3f5d834n/aHeodo
2020-12-30TKOPQU3.docdoc fb536ddde6cab869be41f798e99515c6ee28c45eabaceabb3ac1ca568fcfd723Virustotal results 47.62%Heodo
2020-12-30SX2OBBQC.docdoc 8034186046c4b68f988ed2c9589699ffd59443ce8573ebc96551cccc435a6723Virustotal results 47.62%Heodo
2020-12-3066QAONQL.docdoc 59e6703b24b53065555efb55e63e6f368ebd67451d4ae4aeed9b1a59f04a9947Virustotal results 47.62%Heodo
2020-12-30GPB6Z4RR1N1K.docdoc 33483667c69c712c22eb8cd4c4d68c7405a8fd2ebb78aff4bdf518b997d17d4cn/aHeodo
2020-12-29L2B6YFY.docdoc 1b4a340a7d7925e5635152af5c56f1fd2e77b9088afb6fe33eba7a03009f5df9Virustotal results 47.62%Heodo
2020-12-29IC72I121LE.docdoc 2ac4c55baa15d3719031c845766adf59717598fe67e7434f595f28120c916528n/aHeodo
2020-12-29HOSY7D00.docdoc 487b15fce52676130b3320631eed9f16eeeffc6e11fff1aa6b6a4aa4f694315fVirustotal results 47.54%Heodo
2020-12-29W7ZQGY27.docdoc cb5d63f90240367ececfe0c32a70c72082527a0040fe434a6f463bd4574d4157Virustotal results 47.62%Heodo
2020-12-2903BT3P8MAFD.docdoc cf47feaaa13dd8578065c7ff33e3b1f716e4b71f679b8fe7d10fd33cf1ca8b70Virustotal results 48.39%Heodo
2020-12-2994WYY2L.docdoc 004ffe5fdd488817ced5a47937acb4d2e3130187329de56fdb5920a56d3118a2n/aHeodo
2020-12-292CPTQQN3JFRJ.docdoc 5ede6ac6d693be37c6eccad46485cb39e33d1cd99649329d0424215f3d404cc6Virustotal results 46.77%Heodo
2020-12-29343E6N.docdoc 59aad32717a18d6e1b19cc6e0d4db78f962799b91b0a7773875964f47ef0fd6eVirustotal results 46.77%Heodo
2020-12-29BLWZQOXA.docdoc b74063353bf2fccaa3e2072c2e02dec2c760ab480f73a069277bc389ecd4c929Virustotal results 46.77%Heodo
2020-12-29JDPJGF1XURM2A.docdoc 1efd0a1981dc07034aadfa6bdade3e26e49a389a09a617831eb51802201e5bc6Virustotal results 47.62%Heodo
2020-12-29FCD09V.docdoc c646ad33be355d18204f947f227e88997569facb081f5a09a9f0b82c5127dafcVirustotal results 47.62%Heodo
2020-12-29E9QBD74A.docdoc 59d3ff3d4c70d115ce2c6d6ee0b71174c04ffc9a3f483fe2590b91d2eaca4518Virustotal results 47.62%Heodo
2020-12-29P0HJYRGVG2.docdoc eb762ceff6eec6519ea345df6e5eff8b01a57f121c2a12ae7c3b8a379df36691Virustotal results 44.44%Heodo
2020-12-290BAGFYL7H87SU6X.docdoc d0cee85401b2a011867a851ba5d4fbb7c3242e1cb3476d2f78bdab764bbdc408Virustotal results 43.55%Heodo
2020-12-29C7S9PRDO.docdoc e96e98276e75a582f1e8d7624c1ba2bf9de1ca4b28ba1f7483a2c6a1114c2aacVirustotal results 41.27%Heodo
2020-12-29M3RBFANCBNI.docdoc 4ce448dc3c0b2a786f0f0de325a7955364c6b13783c5dd27f2f721496bc783ccVirustotal results 41.27%Heodo
2020-12-29S4H8YCYA.docdoc bebd8b69fdc463522ae3279b65b75959d443315eb96d862429b1aee2c217c8c0Virustotal results 40.32%Heodo
2020-12-293LPFF3VM8.docdoc abff62bfa148c0606f2b0f545934c0ddaf4b00cc13c5f3c051a22f8d53b089eeVirustotal results 41.27%Heodo