URLhaus Database

You are currently viewing the URLhaus database entry for https://waspha.com/ALFA_DATA/MIlbzodE0mmJ9fvUpw0owVY7Pxi2qgZ8TLFBqfT2qbnp8SXcaIC7poV/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945818
URL: https://waspha.com/ALFA_DATA/MIlbzodE0mmJ9fvUpw0owVY7Pxi2qgZ8TLFBqfT2qbnp8SXcaIC7poV/
URL Status:Offline
Host: waspha.com
Date added:2020-12-30 20:26:05 UTC
Last online:2020-12-30 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003209275 created on 2020-12-30 20:28:06 UTC)
Takedown time:3 hours, 4 minutes Good (down since 2020-12-30 23:32:47 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-30G4P753LAHSGM.docdoc e561d015ba417615f931d69404149b840e6f30d937c6d1e8765462d08c33384eVirustotal results 30.65%Heodo
2020-12-300TAEY7P.docdoc 1945af426236644e59e05d740730d942c8b1f318aacf9f983a9f6e4bcbf55f37Virustotal results 44.26%Heodo
2020-12-30M3OZJPXVSMWT.docdoc 819ebcf8ac92646fe0337cfb241ea5ae4d5a04fcc9284cde8adad3f068c018b2Virustotal results 41.94%Heodo
2020-12-30XM3SFIQXA6T.docdoc 48242492ae400d1b2e95ed96ed2298bc76c87036b1f79e92d38a07e5cb14712bVirustotal results 41.67%Heodo
2020-12-301FCEFL.docdoc 12648728174c80a68b9992c8759df7e021f27fef6bbee5bed8af71b18a7fadd5Virustotal results 41.27%Heodo
2020-12-30IBQ591OROWGLK5JG.docdoc 14eef594729b6784626929323d1f4a040cf76e3774ad5b77a16c28449db182cfVirustotal results 43.55%Heodo
2020-12-30S9WOO3U5DN.docdoc d6704fdc1942538d16ddedbe3eff3c429e462d4378b33040597c5a218c0e852fVirustotal results 42.86%Heodo
2020-12-30SORJ2RZLCCCA.docdoc c531afa39691d1fec216f1c5c1016c155176f104b4b83189b1f4ca82efcdec60Virustotal results 40.98%Heodo
2020-12-300PJ72E.docdoc ef0d7361d6fb7364b837a9356bee96b95aafbc934ce3836f631f7a4683ce40e7Virustotal results 39.68%Heodo
2020-12-30ADPNVFTER.docdoc 214c118a6ea6243f11f97d6a83c14ce0efa696dcf534eb46de221d4199cb7c88Virustotal results 37.10%Heodo
2020-12-30NS0NWJLYGYY.docdoc ba426959bbcb861ba653335a7abd168e7d3ce8a426fb805f7e8748fcbdcc8de6Virustotal results 36.51%Heodo