URLhaus Database

You are currently viewing the URLhaus database entry for http://fayrewinds.org/j/6wRkZPVzVP7jnUtsm4yoQ4hE37ToWC4ho4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:972578
URL: http://fayrewinds.org/j/6wRkZPVzVP7jnUtsm4yoQ4hE37ToWC4ho4/
URL Status:Offline
Host: fayrewinds.org
Date added:2021-01-20 19:19:06 UTC
Last online:2021-03-01 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?):mail Yes (Ticket DCU003266574 created on 2021-01-20 19:20:06 UTC)
Takedown time:1 month, 9 days, 20 hours, 52 minutes Bad (down since 2021-03-01 16:13:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-21GTWAGLA5ENAB75MI.docdoc 3a0235b5137c1d8dffa67e97c6dbe13cfc7117e3c62dfee05d8897acdea83b5cVirustotal results 40.32%Heodo
2021-01-219U1WNAOS9HFC1VMY.docdoc 54385e84d22e522ecf660abd63e8cdc132b0ad766af8d7c589b13f7be5371c2dn/aHeodo
2021-01-21KFJ5RSLGG8.docdoc 920fac5b7032800366dc97b32e8ecde37c1432a99f3e2eac1d3d36ff62ad85f1n/aHeodo
2021-01-217T3CSJK8H3IFLV.docdoc c817fecaa0572cdffb222f4e40d2d2f64fed46d86c042e8cfd9cc3b597489912Virustotal results 38.71%Heodo
2021-01-21PMCQ642ELEPH.docdoc 7b84f2501e9b8aaa56422e3bbd5742f0e1ef38d318c28d689ed5662e85a65cfdVirustotal results 36.67%Heodo
2021-01-21GFZ3HSW2T1B7.docdoc 734760f1587fe2caa03e721fc7f70c74e90517fae7f02f75ca4cf60cfa2c947cVirustotal results 36.07%Heodo
2021-01-210KZOILK71M5EMH0.docdoc f19f01987b42d9be03048f6897f0ae6dd4265c93cf2b1e055b28e5354113a2d2n/aHeodo
2021-01-21IXQXNEPL3.docdoc b77758a7936af2b7c6b3df9fc45475ca411a9cfaae447bd97a2ab3b8d60aa160Virustotal results 41.38%Heodo
2021-01-21ZT0OAZ9CZGJV3IUS.docdoc 4142cfc2bb8a067a21c0439bef1d08e1742025b00b3cb1c9619ff7bf0a2b42d6n/aHeodo
2021-01-217T5QJT0ZSCVLB.docdoc 11e1780e215a952185315253632033b1e42e269f59252e80ccc002e7ed15c086n/aHeodo
2021-01-21B4WZK1TTIZL.docdoc 1fa18e851ad74226caf71eaca19ccba3ba2b1457521c4a4fbe6ba07fb3008333n/aHeodo
2021-01-21SK1WTY.docdoc 17420055c7c1b85137e8f5e78a7eab811ae1b4f00b33ce05590e19399286fe2fn/aHeodo
2021-01-21LU9BPTL7J.docdoc fef516c40db60794e220e323bd96e2a26f5808d97ac911e2bd4afc4b0cd756bcVirustotal results 37.70%Heodo
2021-01-21C4XMQOTK0EHG042G.docdoc efefc84243ccc08a0c004247847a2e7c55dc7559eaf302919c40085ff83f5c4cVirustotal results 37.10%Heodo
2021-01-21NZM530WPMA.docdoc 66840e0ecc45de6d60dfd40a9a510bc1664f4121d4e66b498fa33e3b1cf2ae31Virustotal results 37.10%Heodo
2021-01-210OAB5U847BRWA.docdoc f1b16a95d60e942f2ca4724096a5a078f74d16d045da8ebf4cbd11d1fcb25322Virustotal results 36.07%Heodo
2021-01-212Q0CPD2UG.docdoc 1ade51b62019cdf1df087f2ebf35d2d5fe4aa1bc5a03d76324ff346bfe5d7953Virustotal results 35.48%Heodo
2021-01-2139QR64Y.docdoc 4fbc5117af26fd60f03e2660f74b6b18cfb88d2badad4394939838a779bec2d7Virustotal results 35.48%Heodo
2021-01-21EU6YN5U6XNFS1F.docdoc b5b3fb90ae6803eaf1c36f587b978d687b19cc72399a51128388be7d421599b5n/a Heodo
2021-01-21B8FZ3ZKZHKA.docdoc 6666bd131bccf0a6bf3973a274445780cd1216aa9260c08d10a079c9ea58cd44Virustotal results 36.07%Heodo
2021-01-21LH3F7QC3AW5.docdoc 2a4e442727def25a8ce8ddc73ffa52be640dd1f1016dbc26e3157f361936aa88Virustotal results 34.43%Heodo
2021-01-21MGF91KI7PBVCBZ.docdoc a58be0e3ba5abd6441bef2a7efcdffa251f5f396685642160a2508363b75395fVirustotal results 35.48%Heodo
2021-01-21AK3T6HNZ4PBZHBO.docdoc 6696dcee2f90b0c3f0614d8197a15ce194e31f0940e923dd5f9bb95fb42fa479Virustotal results 34.43%Heodo
2021-01-21QVSRMWRNX.docdoc 8529a3bea5066aa6c825c3e7f27e7c014eccc2f265ac844787e13aa77048fc38Virustotal results 35.48%Heodo
2021-01-216V1KTBJ.docdoc 17130511b6b91858676f6df0392ecb7db5aa7d5782038832dfdb68cdfb6717e2Virustotal results 35.48%Heodo
2021-01-216WQTBSF.docdoc cc9a98243c5e282cbde25cdda1b4510e22afc3a444e07d97c8c9ffef7ff45463Virustotal results 35.48%Heodo
2021-01-21WLVHZ4OT1IL8.docdoc ba3aa81154976cc9bdd719ecce4a925b513892f51cf40a1f511d77d1c180f1deVirustotal results 35.48%Heodo
2021-01-213P09QAG78AQVFS.docdoc 1849ce13b6b8587273a6ba9558bd63b59ccef9a7c8b25c01c14253a34da481c6n/aHeodo
2021-01-21DQRAQ2WZP.docdoc 465766cf4d4152c6b11a68b68646dfb8266ab7cdf4b9ce2660feab1aacd32294Virustotal results 36.07%Heodo
2021-01-2129SCBEKKR34O.docdoc 943f25050a280f1b3fc1154ce8740d31f30935391a7f7e9cd1cb0152f46ff099Virustotal results 35.48%Heodo
2021-01-21BN0GL0VZ7.docdoc 4ba19977d7051012b6f22a72868e1c909438f6eca3e725dde0816c11f5d7f262Virustotal results 35.48%Heodo
2021-01-21OWD5GOW272M.docdoc 9675b2f426b45cf771be7405a1b50bb1f2625f5be481848e4df2fa7419fc36acVirustotal results 37.10%Heodo
2021-01-20SHVQI6T1176KQY.docdoc 9005833203499e17fc8dc75a6082bd9762dc6acd404ae5dc6b0fba27fa9e1c7aVirustotal results 37.10%Heodo
2021-01-206FWKYD2CXHM.docdoc 019f04b6b435d65725a7fea600c318e96d64c945fbf8ad3ee2f67d05900a27cbVirustotal results 29.51%Heodo
2021-01-20T987138SFGNUL5.docdoc 4cadad6fe9f001e7d45a39b6a54af137aa2cc08f465010ecb7539156ed88d384Virustotal results 36.07%Heodo
2021-01-20H2JHFHAD6JXA.docdoc 3f5a613e83e83e91a8b9a8f676535284c8e0f817019b55845e157d8b436ac03aVirustotal results 35.48%Heodo
2021-01-203MOYSU0K6BL.docdoc 1c781faa1f4f2e3a4757766943a18d7b1c16ce4e695382b723a36dc9a52d8331Virustotal results 33.87%Heodo
2021-01-20UMTJAYT.docdoc 69c319f6ceb4941cc2152d633b509323f22dc33994ebf516db8304e2c5409a62Virustotal results 32.79%Heodo
2021-01-20TFC8LQWRYYXBM3.docdoc cfeb8617b6934ecd6b5a4bbdfa12bb62a323bedd9f43b8e11352618ecfa75b43n/aHeodo
2021-01-20BUSO45456R85FM.docdoc 96c0946b5c6a8d77fa253d70c944ac5e78a5a0cfc0e22ebbc27b44a8550cec6dVirustotal results 30.65%Heodo
2021-01-20ZLVLMVBREJDT0IJI.docdoc 5eb0bd0ee37f979306d609872b652c8d2ab52e48f95b37ec05fad18504277dben/aHeodo
2021-01-20YTE2UH.docdoc 462f5d61dfa9c9938d8d78f06e90df29e4037d7a20edbb20da7d9ed0d69a4b02Virustotal results 26.67%Heodo
2021-01-20VTO8D0NT4VDAC0W.docdoc 0f0061b80732fc11150a67c1807a75989ce897eb2be6e22d425c4b41f88f98eeVirustotal results 29.03%Heodo
2021-01-20IFT4V3.docdoc 25de934bcde3cc43d82f74d2bda58507044de10d1fb36d7b1fe4ed52fa26ac52n/aHeodo
2021-01-20DF17XR.docdoc 8c9e3c8b6589995ae77125707441a518cd80dcf62a2c59e0d4b53a2bbef0576bn/aHeodo
2021-01-2005183DEGMFH2N.docdoc 90512c0b5b5ffe54f12e39016dd9e8673631e0eecee9a8c44b2f3f9a90cc9b18Virustotal results 29.03%Heodo
2021-01-20INOYKF701P0NJE.docdoc 57c0a7e0c8c758419617cbb0493789572ffd9bad491e5e98ecb0754de052efe3Virustotal results 29.03%Heodo
2021-01-20YXVRJRHX9BU79T.docdoc aa07564ad9fe421b07c24a624f3fbf68f5f4080fd16a61bbbdccef53d89e138eVirustotal results 29.03%Heodo
2021-01-20GK2714.docdoc 020bceec2fdbd029d767e4d2714cdf30546debb93652c93fa9983cdbb2403cd0Virustotal results 24.59%Heodo
2021-01-2052KNM7NK9NY50BWA.docdoc 1f7731d9f90797c4d1695e3d3f5bed7e97def503fdacb0b9c2cbfc20a498b783n/a Heodo
2021-01-20WAI6PO22F.docdoc 4659e8da187165d0c0bc545ab6e23656959c48d800726ef5bd3565bcbca817ffVirustotal results 22.58% Heodo
2021-01-20WLHOR1AZKJ3SFXWK.docdoc 28c31a00bdaa62e11585da0208310e6dcd305ff79f6e305f9d26fce447cf97bdVirustotal results 21.31%Heodo