URLhaus Database

You are currently viewing the URLhaus database entry for https://www.iqamglobal.com/wp-admin/b2SBKGLl2w7cf0BojDQcN2DyC9c6Ry58eZc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:974737
URL: https://www.iqamglobal.com/wp-admin/b2SBKGLl2w7cf0BojDQcN2DyC9c6Ry58eZc/
URL Status:Offline
Host: www.iqamglobal.com
Date added:2021-01-23 02:03:09 UTC
Last online:2021-02-12 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-23 02:04:07 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:20 days, 11 hours, 13 minutes Bad (down since 2021-02-12 13:17:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-230E1RVKZ.docdoc 526866190c8081698169b4be19a6b987d494604343fe874475126527841c83a7n/aHeodo
2021-01-23803ZD714Q.docdoc 57d7ff4664c6bffcb350211f1d9cbc272747c201c3c784fcfbab0f49c986f53en/aHeodo
2021-01-235E3162Z6VXNEM.docdoc b7190272083d33464adf0d65e56db3771b86d23c561526c21dcb5dc4755d7dden/aHeodo
2021-01-23S0THD5P.docdoc d748bb7a8d447b8bbcbea5a3d20a404351c3ea3dacc3f332a41f44f138be5320n/aHeodo
2021-01-23D83HFQDJGTK01.docdoc 28b78d04a0fa5ba6b6c3504f9d9a7664f16710d02d2e92be72e97f03ae3a690dn/aHeodo
2021-01-23AIK27FZ6Z8AX5V.docdoc e3a0c8c17306e77db4fca51970cd0372508a59234fb62ae5e0cc6656e1fa5595Virustotal results 52.38%Heodo
2021-01-23T0Z7EO5J86XZKOA.docdoc 10dc55d6131467b2ef53cc13475499dd9f34965a9c847672f707617fc6e2e6cdVirustotal results 51.67%Heodo
2021-01-23UM3JSZ.docdoc f44e4ec9321617fcdfcb91fa516a2c17f3d14fe21ba167f0db47e448fd37a0bbn/aHeodo
2021-01-2335AHM114TH.docdoc d25637cf316cb6635d17034fb9bfe5334c47f0ef16cc18b178f1a74a48c9b178Virustotal results 33.87%Heodo
2021-01-23E2WI2KGTX3W.docdoc 02e4aa3af6d4d0a6c3f5965922f7ec76cc4302e17b7ca1c2f28601ab53f76be9Virustotal results 53.23% Heodo
2021-01-234IIS533XW3LLHG11.docdoc 24093743cc1b5882bb6b43c3712d06a13dad73e41f2c95f44d71286d515a1120Virustotal results 52.46%Heodo
2021-01-23RE825B2NHMZ.docdoc 3c473745d772ab4e108f092726f7362a9e44fcd8bef2ccdffcba3363452dc927Virustotal results 52.38%Heodo
2021-01-23TVJURJI7HT.docdoc 3e2601aa7c53742f621bec3989a72e0c2db710586817cfc0067b9557e7346935Virustotal results 51.61%Heodo
2021-01-23YA7TCB70L.docdoc ac3a231f0035c95d710e53ec6dd86a4a915dc23b12238c4d118e7c2b656cad2fVirustotal results 50.79%Heodo
2021-01-234HIYAP.docdoc c8772e6f063119876caf953c8fd7fab91d44c31fae432266a35b9cb66233da92Virustotal results 30.51%Heodo
2021-01-23VODTTRKFLWR8O.docdoc a2d525c9bd8128160c64990fa84afc4da2bea8a72cfb4ca42f14cddac1343df2n/aHeodo
2021-01-23VSLQQ0.docdoc 0d95efeb799d69a27255270804aa8efa5e91cd71b55943e37e88e772c961bca2n/aHeodo
2021-01-23CR4LTF.docdoc cb4aaffb479ed567e1cca60bdb16fe0ede6ca520f16b1129e28eae589d6f37f6Virustotal results 51.61%Heodo
2021-01-23FWNOC8V4C9ML.docdoc d8ce6bc970178e61cab2dc65747d72cc90c005e63a058466f561d1348a1fa140Virustotal results 49.21%Heodo
2021-01-239WSKOKF1W0PJX.docdoc b5503af31ba54c8572f00098487768ecb885e8b321974aca44c71333d9db1a6bVirustotal results 44.44%Heodo
2021-01-23BOXZNG658OLWP.docdoc ac612e34cb415fcaf5c0ae462ed0e4efee5897879ee434b80354b39fe34e9317Virustotal results 50.00%Heodo
2021-01-23L6B28JMDIA.docdoc 3b8c1a7288a8940c4785141389d323f7949b9639ca7821ebad1fc2182a2acf58Virustotal results 48.39%Heodo
2021-01-23NINWLMQIYT.docdoc d926e60d6b78f6b07a61842aa31c25077849e0921bbb8c454900a6b1447427c0Virustotal results 34.92%Heodo
2021-01-23HEFNKXTKI.docdoc d24e032bf95e95b0c1325688cb50b3eab851e90b9350f1a031668dd2bbfac3b6n/aHeodo