URLhaus Database

You are currently viewing the URLhaus database entry for http://feltbobs.com/Invoices-DOCS/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:18446
URL: http://feltbobs.com/Invoices-DOCS/
URL Status:Offline
Host: feltbobs.com
Date added:2018-06-13 10:57:03 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-06-13 11:00:54 UTC to abuse{at}bluehost[dot]com)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-06-13available-invoice-05683/39.docdoc e24e78ea350aa0b7e69bd40ac33c3bc4eb3dc8cdc17a5dc13ef98a14cbecb2abVirustotal results 20.34% Heodo
2018-06-13Payment-receipt-14062018-036-29706.docdoc cf49767f716f26529a1fdc7b664ecaebee90c5ac67d85e667096e3d693cbe048Virustotal results 21.67% Heodo
2018-06-13INV-document-076-83930.docdoc 502bb31e2269447e09b57b815a592c320506385c11824e13b75a5b4dc133161bVirustotal results 21.67% Heodo
2018-06-13outstanding-invoice-13-June-025-1531.docdoc b4d056e87cbbdf49baf4d87a0be32e1763bca314e21b085a7a4fea18a251b016Virustotal results 21.67% Heodo
2018-06-13Invoice-00-03880.docdoc 6c96679e3d8c7c3ff2ee7ac4a04abcdc28fba2aeb26b0e81cf6ed0da97741aa6n/a Heodo
2018-06-13Inv-097205/0.docdoc 5550971db878537f0294e66f915a89d2c338ec1375fd02684ad2c853b763093dVirustotal results 22.03% Heodo
2018-06-13outstanding-invoice-13-June-09/8011.docdoc fcf5d544ed0f8b73cdb8a26f2d606954eb61d98f2be24f16767473ba68f1c8d6Virustotal results 21.67% Heodo
2018-06-13past-due-invoice-June-009/270.docdoc 2dd851e8fea9fe3a6c7f74b9c2ecfef9a6be6a48a11c611d36fbeeba85c8e1d5Virustotal results 22.03% Heodo
2018-06-13corrections-099/4051.docdoc c851790870ea5cb67e69f5c8d4351ff364fd59d6ad4879ebdf52de54977e102fVirustotal results 20.00% Heodo
2018-06-13INVOICE-13-June-03/5363.docdoc 661718a1e51c8736756f46fd95aa55802560ac7c4750c055f70a49393f5cbb4fn/a Heodo
2018-06-13Invoice-attached-13-June-00/714.docdoc f0bfc0338ad07364d9c1fe3569e88f94a6d70feeed9304d1c92c55a4254b4cc4n/a Heodo
2018-06-13Invoice-doc-036/292.docdoc 89ad7f4daffda6221ce5d734af7d960ee5981ec7b4125a22906e2881c3fd3cafVirustotal results 20.00% Heodo