URLhaus Database

You are currently viewing the URLhaus database entry for http://student2.hhs-webdesign.com/wp-includes/5GybbBkJUX8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949065
URL: http://student2.hhs-webdesign.com/wp-includes/5GybbBkJUX8/
URL Status:Offline
Host: student2.hhs-webdesign.com
Date added:2021-01-04 21:54:05 UTC
Last online:2021-01-05 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-04 21:56:07 UTC to abuse{at}mediatemple[dot]net)
Takedown time:9 hours, 59 minutes Good (down since 2021-01-05 07:55:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-05X2DWGK2FVLQT.docdoc 44b5bc6f5c6c0c3821f5c1196971d8398ad15924739c4002fbb496522387ad16Virustotal results 33.33%Heodo
2021-01-05RV26PTWR1E6PWHDW.docdoc d67fe49fb7149fd2066f78aad02d737430236ddecb5374f6c7063dc3dc20b7c2Virustotal results 31.75%Heodo
2021-01-05SN5EY1L6UZ.docdoc 68f339174767db80cb1578578631e93ff0ca10f79e575271ced080937a3f3159n/aHeodo
2021-01-05WOZK6CC0LFHZQY2H.docdoc 555882aa0c70bf9f62ae71584a9e5e18353d6126de19390f8c2859c15693764cn/aHeodo
2021-01-05VETKJLCQR.docdoc 21d709c68afb83cfb7a5f69689f848528b42c0d08eec7f1d0a073ffa35285534Virustotal results 32.26%Heodo
2021-01-05T5W333FIUA05M.docdoc 805cc20cd0bc45430f2860141c12bdd16435560a0284cca1b833d12dda8bf8a0Virustotal results 33.33%Heodo
2021-01-05XQZUAXTDU.docdoc ed554fe56ab46d0e27c0febbe54663474540030391fb638542a4beead28f8ae8n/aHeodo
2021-01-05ULCXM91WOPGC97LM.docdoc ce77e9e1fe235b5bcda9dd1e3db5ed575bd397a7e5f96da2775491ee0c23639cVirustotal results 28.57%Heodo
2021-01-05C6MZ0KDYR4O.docdoc bc60a50738caeabfcd59cfc7f355ad5fcb5ac7d0b57afd7d96aef09e6eca8b0eVirustotal results 32.26%Heodo
2021-01-05652X4C5FJ2.docdoc 6aa8822f97a4b8c6f94cfea8ac81f0deffe57554498a897a22930d98366a5599Virustotal results 31.75%Heodo
2021-01-05UP6YSQD53UJI.docdoc 6f31db5bbdffcfd6869ca287c54ab7010c4bdacc510e86fb8fbebc7999d8cdf1n/aHeodo
2021-01-05ZJQS9X.docdoc 54496830b594a269cf3ec9c90a9358b797f967912c3e7ee8c6a8da7f31135f12Virustotal results 33.33%Heodo
2021-01-05RZUUJEHY97HG.docdoc c17d21ceb8f0d7793ea5c6f7cb0278569d96642bec9dad54cab3c249bb3d9fd4n/aHeodo
2021-01-05EBJ7T7WL6DU67.docdoc 2fce0e475493a78ec8132358305eaf611dad56e9f69186a6ba81488abe696ba6n/aHeodo
2021-01-058LIFIR4.docdoc 67b7c7f217354619c0ddaa92803967254a88e680d52aafbf813d0884bf2bcfd8Virustotal results 31.75%Heodo
2021-01-059FIOH803.docdoc 7887682da2923030750bdf6ca53e4310041971a95f501143d74ab1d7de80603bVirustotal results 33.33%Heodo
2021-01-05FFLPCD0XRV17MA1.docdoc 47045bd8084c3a6d54f452d66db9d55f9af7413a968bde9ef5c0967bd5acececVirustotal results 32.26%Heodo
2021-01-05P4F8JZ6KNI.docdoc f04733633102448629503a0b0df30e77c694298c6e2bac53b89099f796a4a04cVirustotal results 32.26%Heodo
2021-01-05MCZF5HHQ8.docdoc eedc56307590cb415b9388656d7287000bf530c10ab8c8c1f8bf4875321c2398n/aHeodo
2021-01-056BS7M58MY6L.docdoc 4523e13280b2e95775c068a634c776ccbaa8dc00f4de452f485321b48c178872n/aHeodo
2021-01-05A725ZBIJ5T011.docdoc ec2aca363bea5e10495d5682f2c50b4a46c9ca51236fb795e7d87e41109ce790Virustotal results 31.75%Heodo
2021-01-051UJFFQ4Y.docdoc 84050cc58a43aebd78c85392869761e0772f48740c414f586b2716f6c5a09b99Virustotal results 31.75%Heodo
2021-01-05G1DQ23BZM4HB.docdoc 2f410493048157fd2bccd80a02a83ad071a7b37038ab5fb6160ff9d6d1312522n/aHeodo
2021-01-05ZN9N8GFY46.docdoc e1ebbd14ee5b8c0e8f24ab2f32d70806cbad49852e703793b4235d8117dbf439Virustotal results 32.26%Heodo
2021-01-051498FCORB.docdoc acbb7afbd6807623f7b138be593f37aed6daf29c912342a71aa8b65fbb4a99f7n/aHeodo
2021-01-05MVW6LMN4BD3WL.docdoc 715302c7c5d571733456f11e19d6c7a066388ef318fb726b24578ae121f9bc20n/aHeodo
2021-01-05WU5UPUHXZ7V7S3.docdoc 6448368ab7df4127112976c2569ddb2ca562595979b6aa627afd33cac7b47d71Virustotal results 31.67%Heodo
2021-01-05DJFMUCHJRZLB.docdoc 6b284863c079141fa6e5caab9fd9228eb0503d2790fadc82360b8e3fcb2de684Virustotal results 31.67%Heodo
2021-01-05CEM89WH0XBB1.docdoc 7ab531ffdf05ec65c076a06ea4a7e92a3c02ccb479f866db344d9fc4abcad342Virustotal results 30.65% Heodo
2021-01-05YXZI311EQP0.docdoc 38d17dfd9fc5d7eb04a6ed019750022081fd13b253d0eb08d92fd9109815ec52n/aHeodo
2021-01-05PVOBR9K.docdoc 0dddfc149150477c5fae49dec6477c7936aaab52d827e85d522a6aca5217fcdan/aHeodo
2021-01-050EBFONSOD.docdoc 773a15b11264f83c09890cedbb7aedc943a30430f5b355d38e5625f2ebd3fb8fVirustotal results 31.75%Heodo
2021-01-053WGSTD71AZ7K.docdoc 269b7e9055041b22adcfd3f3d1d0a4711292eb08c8674a535071c2ccf27a31fdVirustotal results 31.75%Heodo
2021-01-05CX78RUKFEQD9J5.docdoc dc9236f8bdf3716d6ad5bd3fc91beab4505cfe0585682cc68064718e9680c53fVirustotal results 32.26%Heodo
2021-01-059IMOEMVNH.docdoc 63162fe833789ed99b85cf9524ce3254d7f676c2a187f7e2c2ecd23ad59ac5c0Virustotal results 33.87%Heodo
2021-01-055UT7R2Q18N8D.docdoc 9b5ceeadb9d26cc60561054e3ea318e82923f3b04a9e505aeb8750ef4b3d902cn/aHeodo
2021-01-05FGSNIOZHZS9GNOA.docdoc d4e6f646fefbec70addba05ff09663419b87f9639b77c91ed711cadebd38f1dan/aHeodo
2021-01-04XZJYSER1L.docdoc bf2f59ecb85a6029a908bdf90f5dae875e68196bf1987cf72959bd568355c702Virustotal results 31.75%Heodo
2021-01-04EY6K7YFQZYM.docdoc 7d5c8462f4e878f3bc69fd37546aa5db52e2eeecc72664ee9f9f56f9228fe853Virustotal results 31.75%Heodo
2021-01-04P2SKTOHWRJGGA1Q.docdoc c468614a769e571b1c2ca14280030b4c2ba662c84c293f1c8eba3013acedb1dcn/aHeodo
2021-01-0445Z8QEYLNS63.docdoc e2de08e5eefb901fdc1050f3870f4efc4d9853158f3a93a1db37b2f4b140459eVirustotal results 32.26%Heodo
2021-01-046QWSXIXZ1F6.docdoc 145466e49f1ebf4ed38896709a64733353a2389bd676b7ef055c79637f53c082Virustotal results 30.65%Heodo
2021-01-04AFSLW3IRP.docdoc bd71cb5216319d67b7163d101b227e46c1b8172480c96aee9172be8670c32fbfn/aHeodo
2021-01-04NECFPQ7D9O54A.docdoc a5510a203c4d4cc423b2e4a321e9e2fd2a9b9afa62195780841d60cda74614afVirustotal results 31.75%Heodo
2021-01-0421H6LQTN.docdoc 70364c0d02f4a1d61a76caf33b3c7b6349e382fc465685ce6ff04f6b1f422b1eVirustotal results 32.26%Heodo
2021-01-04FXRYB0V5U1LMVRDO.docdoc f5e030f99b3221f7b2d8b52bce2b0b913b2d183c3f7bd5016bd17ddbfe0be793Virustotal results 31.75%Heodo
2021-01-048FQZJN.docdoc d6f1b9a4e9318d759d02ae98959c6147f8779ef82f41bd3c1970a6f9dfe6c0d5Virustotal results 31.67%Heodo
2021-01-048RL02UON94L70NDC.docdoc 3d566983c8d1eebeb69ceafa423e493e04f3ca7fa686084e2c2e064a363a9d07Virustotal results 32.79%Heodo