URLhaus Database

You are currently viewing the URLhaus database entry for http://www.superior.com.au/wp-snapshots/LEnxy3ZdW8u3/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945030
URL: http://www.superior.com.au/wp-snapshots/LEnxy3ZdW8u3/
URL Status:Offline
Host: www.superior.com.au
Date added:2020-12-29 22:10:06 UTC
Last online:2020-12-30 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2020-12-29 22:12:02 UTC to abuse{at}linode[dot]com)
Takedown time:23 hours, 14 minutes Good (down since 2020-12-30 21:26:18 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-30FT49MO.docdoc a586bd9284e08911b3ba6a021732d976be512698b16238e9ada5a5d08b477fbaVirustotal results 52.38%Heodo
2020-12-30SCXA7BT2NV2CG7.docdoc 20abb952582445a850b56426e396a5d2d9dc988dc5487945e69b656dec9fd94dVirustotal results 52.46%Heodo
2020-12-3019GISICUQ44.docdoc fc88d7102891698ce09ee38c1af90b8e225c496491ddaee1b739a12f1a2eaf33n/aHeodo
2020-12-30U4LQRM1QSPDPAHR.docdoc 6b44f18c20a7bb829c5d1e02c4b77128f29a7407068126e8ccbeb63006b77b75Virustotal results 57.63%Heodo
2020-12-30552OJF8.docdoc c0f2fe87220adb36dad5fca93cee589c0de457481655e1d64b220de2e89a11ben/aHeodo
2020-12-30K8W7QNBPF.docdoc 1f58ebb3c57f80d63f6039f66cf18dc1525f8bd71bcc78960456023520613e90Virustotal results 53.23%Heodo
2020-12-302SKI8K.docdoc 4a03b5e095f8e4303740cf67df82c3491eb1b3545de5256870aa1bcfffda1e54n/aHeodo
2020-12-30Z0ZT2415ZXSX7S.docdoc 6516e329e7d2f720e9cd95f5f61a9ebd0af6b0cf0f35e31e872a9eef210a2ed0Virustotal results 50.82%Heodo
2020-12-30LEKJSRF.docdoc add8349cc360e174c38c2d36277412b334744b3af808d91097b5b9e9c9834f3fVirustotal results 49.21%Heodo
2020-12-30PEV030FKES6V.docdoc fe615d9510f8a8a4f2392eb1dbaf75fee4054136fc2da4a69d52c6e1b8c696c9n/aHeodo
2020-12-30HG1DEYZWTW.docdoc b418b8729a429df3b5029222db61b762411c34971aa6c76b3fed3d12146a984dVirustotal results 50.79%Heodo
2020-12-30YRVCF9.docdoc 16a0fc95c6217d4542b0a02200d26987e08d41c709ba9c36b9830993b2b4c6c4Virustotal results 48.39%Heodo
2020-12-30FQ1I9UR.docdoc 0bd4e7dd4ab7c8f023e4df01d0012cb40b1ee9d7fb10353779eaf1fd47d53c04n/aHeodo
2020-12-30W5Y17I62LA.docdoc a3553d4da88c65554d145c8efde7312447904dd78f21dc173354ef0b3257e555n/aHeodo
2020-12-30XIW0MK.docdoc ee94018b625d16f7aa8fd8542511da49e0e15f19cf1ed9e231b85fc64985aaceVirustotal results 49.21%Heodo
2020-12-30PT071E2W5A99H.docdoc c1c222eea5baec06081295edddf806c2bbd101f35d5c554d3f3b63aabe8fb576n/aHeodo
2020-12-30L2RT0Y6KEH.docdoc b0286fc6b2b0354bf5bb297ad8f8f81577bb23a3568133181a5daa3eb75954c4Virustotal results 47.62%Heodo
2020-12-30MKTLGPAJRJDB.docdoc 4a5958fc2b8d147d9713f4c9ec880045218ae9c1e8251eac8a645e48545e2d11Virustotal results 47.62%Heodo
2020-12-30UW9ZDS.docdoc 270178887f55fd612338733257bcaa9750d9f7f1dd3ad0ecf1e55222c3f5d834n/aHeodo
2020-12-3083OZU34VOYCM9F.docdoc 968063350b11ebbfd467a30c92b38980fa20b0e4f588f89daa9687981e01f8c3n/aHeodo
2020-12-30N8T7WSUBRU1UF.docdoc 8034186046c4b68f988ed2c9589699ffd59443ce8573ebc96551cccc435a6723Virustotal results 47.62%Heodo
2020-12-30KYZ6E3CUMR6TXW87.docdoc fec3ad4118a479bcf4486c4612fc14f123d4cf677b8dd088bbf218be9d0497acVirustotal results 47.62%Heodo
2020-12-303KYHEJZRE4.docdoc 1af286a5a937026e62b7a7b6b972f03109862f815f785d9d9d3ba20346da0eeeVirustotal results 47.62%Heodo
2020-12-30KH7KFXG.docdoc 33483667c69c712c22eb8cd4c4d68c7405a8fd2ebb78aff4bdf518b997d17d4cn/aHeodo
2020-12-29UTD8AA54.docdoc d9790597cff0277c202cb25c47d5338d113df8912fe45a44d04f2d146901ca9eVirustotal results 47.62%Heodo
2020-12-295VIU7TYTRXQBB2.docdoc 2ac4c55baa15d3719031c845766adf59717598fe67e7434f595f28120c916528Virustotal results 47.62%Heodo
2020-12-29ZYHZ46W4XCHWZU.docdoc 3a005656eb3cb664023108b84291b3de03e68da06530c0c12118195a2a443e6eVirustotal results 47.62%Heodo
2020-12-29IZJBVP4U1AY.docdoc 2527707f508b47e4031c1bf43ad94b728ab6a4847c208dd3f7e592ed49d36f6eVirustotal results 47.62%Heodo
2020-12-29HH1LWUYYH0SC.docdoc cb5d63f90240367ececfe0c32a70c72082527a0040fe434a6f463bd4574d4157Virustotal results 47.62%Heodo
2020-12-292SZSVW52.docdoc 0eadb33ff312f9a52da6f3c043f2e183147ab94efbbfdc06bf2951c12d03aa5bVirustotal results 47.62%Heodo
2020-12-29ILG7QYSIKXHKZ0D.docdoc f7f4c153f0e9bf9a7093dc3fcf469f47c4c2bef873407f016dd746a5b78970e4Virustotal results 48.39%Heodo
2020-12-29DZ9BTACBP7DF4.docdoc 0e6bf2536adbd39d77a2239b62625e722197073713172655477b6aaa9cd3cbd5Virustotal results 47.62%Heodo
2020-12-29Q9ZSR22C.docdoc d6480e873d81be6637d3ba474138b40d9773c0d9294fc530019ed6f3d1fcb1d5Virustotal results 47.62%Heodo
2020-12-29KFVRVL.docdoc 59aad32717a18d6e1b19cc6e0d4db78f962799b91b0a7773875964f47ef0fd6eVirustotal results 46.77%Heodo