URLhaus Database

You are currently viewing the URLhaus database entry for http://mayaagroup.ir/wp-content/6ltu3/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949652
URL: http://mayaagroup.ir/wp-content/6ltu3/
URL Status:Offline
Host: mayaagroup.ir
Date added:2021-01-05 20:53:03 UTC
Last online:2021-01-11 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-05 20:54:12 UTC to abuse{at}arvan[dot]ir)
Takedown time:5 days, 23 hours, 0 minutes Bad (down since 2021-01-11 19:55:04 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-0687I7OIOSXYXZNC.docdoc 5cdeb766f37fabf36c2ba04b505360b64db16bba5291a143a43a631460461122n/aHeodo
2021-01-06OCCKYB.docdoc 58001f5ec36572e012d9fc92f1023b65d43d242a1149320dbe68809be7c31e42n/aHeodo
2021-01-06EBWRTAH7S5W.docdoc 1a2240a1b93c241221a8801762613ffcdbe8840b783abbbbf0de723ca86d4f95Virustotal results 55.56%Heodo
2021-01-06XPQ0SOA44HPEX.docdoc cf6b517dc42a9f9a8ea4a15a44a95fd6994ebc5ccb0f547be2ad41cf79fb9501Virustotal results 55.56%Heodo
2021-01-060P2U8YT9IEY35Y.docdoc 33106382c9cbe16b085ab858eb94c47939f8245ccad5701acb365a431743d249Virustotal results 55.56%Heodo
2021-01-06OAAA8SE.docdoc 1351078e3b8f61f970992d251978631ffe00132806d2a4eb152239ae111efb6fn/aHeodo
2021-01-06L1W0TL.docdoc 1090c1c45565f035052f990a44c78e9c8f1f64175646a9c18053300e09fbb120n/aHeodo
2021-01-067HNVI96OEVAD.docdoc dec66fdb96e83d1b75a5087a67d2763670ca3d818999e491bba2e95d60bc5a08Virustotal results 55.56%Heodo
2021-01-06CT8PSK71GXK.docdoc 67cabee2a3dcf8a53b1ea9310c6028996c8811e1e2c7f2411ed79f99e60a1341Virustotal results 55.56%Heodo
2021-01-061687WGAI7T.docdoc 212f20819f4e55f8230ff785b1831fc23c33751c2e0929626acfc1e3cd03dc99Virustotal results 55.56%Heodo
2021-01-06QCB6VT487RQI7V.docdoc d922d1004c4d02e73649e740bf4c84475c3b05792cf10ec60dc206e20e77b7fcn/aHeodo
2021-01-06L50FBUYIRPZ.docdoc 45092ba44beabdd777eed53aaa943751979444cea7c8a90369647ea9a4a60578n/aHeodo
2021-01-06W2XRWA0IZ6A.docdoc edfb5663c3d8b316db9b2d6de4d3574992ffeb5edbece97263d06b1dbc214da3Virustotal results 54.10%Heodo
2021-01-06ME12Q8JXVMM1.docdoc 1443a7c909d15c0a3c758084da3d2d857a651c23e4d2d26d19a32b4cdef1ea58n/aHeodo
2021-01-06RQY33MD8UQ.docdoc c8a4f97468b28e1e7f4ad04e7ac4365b8a2757221a76c69f73589006b1d3bab1Virustotal results 51.61%Heodo
2021-01-06ITSQ2S3NWUF.docdoc 175e4bbabdde9ab182f1a1fd05d8555266e32bdb390194288954124afaff6190n/aHeodo
2021-01-063BC2Y1KWV5X7.docdoc b2f7bab95f522e14c0955cbcacdc6111b00c7073cd8f24d2e9a0ec5c721a59cen/aHeodo
2021-01-06LGI324NB4U.docdoc 5430c5581818c043cc4d2ac4efc696aa1a929bfec0ed6f34bd278c09c6513a9eVirustotal results 53.23%Heodo
2021-01-06ODVNSVYT76.docdoc 71c0e91c6c3fe936f070d727b1881971d387e0989cb112e40619e0675dd46a45n/aHeodo
2021-01-06S77RJKSGJJ803G.docdoc b392aecb38d540460161813bc5340c54aaf5cf76ce23bd7fe1d384a3d4c9f14aVirustotal results 51.61%Heodo
2021-01-065TKZPU.docdoc c733ba160f91cbea84c70b9688bdad48b22318394bbdac64748b423dad327b94Virustotal results 52.38%Heodo
2021-01-06V1DT9IQYH.docdoc 3e06dc8c8f2f5e98592e30b5274a5ebb10d1731511a9b4813bed1591f2cbf8bdn/aHeodo
2021-01-06CQY73Z2XG9I79M.docdoc 092750b8c97d95e7c116fa125e5446caec18da881b38a28c8f8d805647969a76n/aHeodo
2021-01-06P8FGLVBKJXI.docdoc a6fb2e9f5db8866a8f8dfaba2d23fe53d60df660b8d356624998ea59b0678313Virustotal results 52.38%Heodo
2021-01-06WSOIQU94.docdoc 52c171a58f4283f108cd5723f49e70bebfcec79db213c247a26e9c3e116f24eeVirustotal results 52.38%Heodo
2021-01-060QEB3XIYMOF.docdoc 70e7a665ef326f54b72079e76e6cfee377fca19b5265144ae446bb73e926ddc5n/aHeodo
2021-01-06MNNDXLFU58LDYWG.docdoc 4caba632ae9218e1820c95cc84d6d577243052781c50f304133a875481d13e08Virustotal results 50.79%Heodo
2021-01-06B4LFD223K414ABV.docdoc aa07e7bc9da1916a903106aafc34ae43dff4f658bbe653b655f5116a9e2ad990Virustotal results 52.38%Heodo
2021-01-06NK0FK97VIP.docdoc 21a6e4af3207ec97859c62198978cdce648c94f932b073bc3eb149418759e747n/aHeodo
2021-01-067YHYRK2ID9FUO.docdoc 3c0e7afadd6a40200977abf0c7e2f5cf594360ee0d6071e572493d7a175abbd8n/aHeodo
2021-01-06AJ7GCN88H.docdoc 91301283dc9ff2a660bc059ae18fd6d89374f0ce7cdcf84629aa9c2846925022Virustotal results 49.21%Heodo
2021-01-05NPJ84R6HZ0YZZ.docdoc 4a4dba86e713cf92f9e8e440b31d56e0682d4226deb7ddf638ae9489da1c7b3bVirustotal results 49.21%Heodo
2021-01-05BL12LA510.docdoc e2a4e1b38da2c7b66dba005e8a788dfde3a5906f24dabd9d5ffd2568a5ba5953Virustotal results 42.86%Heodo
2021-01-05MXJO8JK.docdoc 65eeebdecf737d2e67f9b8073fef6be3b6668f1541e8a19a12f869063b217ce9n/aHeodo
2021-01-05I9T2F6MPLLD611.docdoc 8b55e8ac93c6d98a00b5790b88263103586e05cb124ce6daac1b1061df4772abVirustotal results 48.39%Heodo
2021-01-05GY8BX84PWM.docdoc cff0307e84e8f6c3c45d3ac88aee9f8761a6f7a271dc07e5c6b1a2b4012b654an/aHeodo
2021-01-057IBN4Y7NSN.docdoc bb01889917b4085f76e0f2e8dcdcc048d628c18c0e800e6fe4bf8d8cb486f4dfVirustotal results 48.39%Heodo
2021-01-053DEH96LC.docdoc 9b923a7ee93d57dcdf0379cab89f9df5ac445c1f30b2881a9814b8d7260abe49n/aHeodo
2021-01-05TONMT6WY9O6BG0G.docdoc 0ced2d1f1bbe1d20a40898ae28082521bc69ecc51d16b81d636de77791f0ef7aVirustotal results 47.62%Heodo
2021-01-05LK7E9RMKUEVK5.docdoc 2668d532f53ad3bd92b9d0fb533d6feaf17a6a01a08ee85787667442e9c69e5bn/aHeodo
2021-01-052701FIHG.docdoc a03c9dc5727fee3968f4d2d8352258cfc56840dd972680704075d574c12dad5eVirustotal results 47.62%Heodo
2021-01-05RMLA6TWQ5P.docdoc aba67782417917b3d22447be393035e2d71c1237c51459a580d444c228dda781Virustotal results 44.26%Heodo
2021-01-05G5G89997.docdoc db13b0bb816476742e2920b6a33274082f378ab0538824d8027c8a2b9947d102Virustotal results 49.21%Heodo
2021-01-05NV35WMMU776ON6.docdoc 62e59eaea6957db1a93e77c39471b0610482dc77a76165a48b7e0de0db27aea6Virustotal results 45.31%Heodo
2021-01-057HU70IY1Z5FID8QG.docdoc 122c549f9e875116b46ecdbce80ee12845bb24c40a4c703be57b4270731f7f28Virustotal results 44.44%Heodo
2021-01-05XYFKJI1ZACWIPS2.docdoc 4e30a0c0d464a13919be9367c51ec2d36f2972e27861997410add5b113bceaban/aHeodo