URLhaus Database

You are currently viewing the URLhaus database entry for http://998awol.com/wp-admin/UK8S0SSNpZttBWu9hz6cYTjCX7Fzwk8YwVWkrdmUM95RWhH4vUD8UMO1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:957062
URL: http://998awol.com/wp-admin/UK8S0SSNpZttBWu9hz6cYTjCX7Fzwk8YwVWkrdmUM95RWhH4vUD8UMO1/
URL Status:Offline
Host: 998awol.com
Date added:2021-01-13 04:42:05 UTC
Last online:2021-01-14 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-13 04:44:16 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 12 hours, 31 minutes Poor (down since 2021-01-14 17:15:52 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-13Z71JGJK2AS2.docdoc 841f665e7fa0dafb08a148c375fc49b0594eecdf01d44cc9b7ea8e6c6b5fe024Virustotal results 41.94%Heodo
2021-01-13F2Q47AL.docdoc a5bb3ac2e78e042dd5e7f8a6297f4c6290d2249def0472bc9cc8b4e7ee8b44b4n/aHeodo
2021-01-13KRACGVO4B.docdoc 5dc4c3f58fab032df0417e80aff4b59576063bf6de4933fb9c726823e26bfd0an/aHeodo
2021-01-13ZEWU1AXVV.docdoc e15c02bbd3d290f0492a1d6b55ef31424f833b24c9466e30744fdbed4665363en/aHeodo
2021-01-13NBVKBO84X.docdoc f400967f088ce94383aa01857a6c797a4d0073813b29a8c1ccb0769342caa4c0Virustotal results 39.68%Heodo
2021-01-13IXLCKKLWDMNB.docdoc a26858d6b0bd3679cdb5420d9de0ad69b5831c30a833b72154fdf174b277c8faVirustotal results 39.34%Heodo
2021-01-13WMFD99OXS.docdoc e7fa2a17209d359c64add22c0de40f7f9189e8bd88e22d26aa7a441e2df65826n/aHeodo
2021-01-13YGY5NL.docdoc 91fefaa06a266ddd8ecf9b0bdc0233b9fc5ed2dc5890a9b3fb0b9d6d2484ec6fn/aHeodo
2021-01-13D6ZO5LBD.docdoc 5108bd26eac69910dba769ef8434a799db506304bd38e56cdf7cf180f046770cn/aHeodo
2021-01-13QQ54HSB.docdoc 3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfcn/aHeodo
2021-01-13XYCUSY.docdoc 3b34e75cce4b617fd876f0145c30b4ea5af865c2edb3b8cc89fdc268bb347b1aVirustotal results 38.33%Heodo
2021-01-13GAJN9IGE9QG1.docdoc 21fbf4fad1a3c433a33e1e70f775b52d7f6243128a4b3864e4ccc686bdd8948dVirustotal results 34.92%Heodo
2021-01-13BAFDD3UC0MD.docdoc 517e2cbde3c6477b3c5f844d987a09b94e880056661d2b5919444a00f6402fe9n/aHeodo