URLhaus Database

You are currently viewing the URLhaus database entry for http://www.windo360.com/wp-content/invoice/6s413xp1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:289403
URL: http://www.windo360.com/wp-content/invoice/6s413xp1/
URL Status:Offline
Host: www.windo360.com
Date added:2020-01-15 21:27:02 UTC
Last online:2020-02-07 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?):mail Yes (Ticket DCU002250158 created on 2020-01-16 08:30:09 UTC)
Takedown time:22 days, 2 hours, 3 minutes Bad (down since 2020-02-07 10:33:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-17X_81905427.docdoc 8041f14a012edf51c262246dcd340bb206e3f6d9a3e19f7a157e1ea1cfb587b3Virustotal results 19.35% Heodo
2020-01-17ST_WRLN7LBE2A.docdoc b1f490485294ca464fb35ae4e0a2b54246838c77f58ce26d8ca8b1748148e64aVirustotal results 20.00% Heodo
2020-01-17RP_JA7193223736OC.docdoc 9d57eaf176b736bdb2735b8275044819ab843dcddc29231681c55ac9d67d2d84Virustotal results 23.73% Heodo
2020-01-17BAL_74740813085.docdoc 7b953fc4e073ab1ecd94bcae72a74fdcb4da744f0173b344ce967648632dc020Virustotal results 21.67% Heodo
2020-01-1764999310.docdoc 5adadeaaa1059838cc3e87dbe95d95cc37a4699a94fa1ebb2f4e85e67aae6d3fVirustotal results 20.97% Heodo
2020-01-17SW_OQ4614915617BO.docdoc 398c180bca3820858404f155f0050ec466519c6ad151414f5489e1e9f8395abbVirustotal results 22.95% Heodo
2020-01-17INV_ZD8090015096OK.docdoc 709515b23e5b747439017795a65815ee0b37983e8a39520cc541e85472a7095dVirustotal results 21.31% 
2020-01-17PAY_SYL_010120_FJM_011720.docdoc f1569c025b21d44c68867d142ebb944c3550240673430dceaed626e80acf386dVirustotal results 22.58% Heodo
2020-01-17PO_01172020EX.docdoc a70ed72d206dd0f5a883182346366f068e2ae5a9eaaaf6ded8c157e2a70341ebVirustotal results 20.00% Heodo
2020-01-17SW_IPX_010120_QTQ_011720.docdoc c09c7c6d5294ba3e6b09892d5972b1c7fc98cacc844c424632a73592e3cdbc03Virustotal results 20.00% Heodo
2020-01-17INV_05883702.docdoc 07eb461ea9aa9446ccfa96053f967790ce5075ef7b2190da2a04d08224f0e5d9Virustotal results 19.35% Heodo
2020-01-17ST_21V5MYR9T0PIPWT.docdoc 26ba3fe65926140305a8fa605d09b8bd2fb8251648eac9b3165fb884a506e837Virustotal results 18.64% Heodo
2020-01-17A_PO_01172020EX.docdoc 9f81a80998e1d5cfbe2d86ae82851ec2ad75ba32e627e1e95f803a72e7d6647aVirustotal results 19.35% Heodo
2020-01-17R_QTH_010120_ZTF_011720.docdoc b5b1a9c9342c9be2197fc3f9fc5c0a9138b052bfc06583f9719773397f567e34Virustotal results 43.55% Heodo
2020-01-17ST_9787075223696636.docdoc 9db035bd19c8d9db27e5c352d8e713cfdd13b9a155772e9266b18ec30d67fba7Virustotal results 41.67% Heodo
2020-01-17REP_40360759.docdoc 242bf1a0026fb7d1e3e4c0187c229aed599cacc94382f096f08f8ac65514ec7bVirustotal results 39.34% Heodo
2020-01-17INV_PO_01172020EX.docdoc ab93bc28a4a2dba3db6e1c25750476a6691de8988744db041f23d9d5c16e03a5Virustotal results 37.70% Heodo
2020-01-17KW_925805029067062561.docdoc 92a3580b826f0782e6129f8f2af74b5703662dcbc40d33467198c939dfc720e9Virustotal results 37.70% Heodo
2020-01-169971587236605726679.docdoc 228da1e8833b2deb4570eb45b4cb5ceff4c62dd963e802c3a5b769ca9d28ff42Virustotal results 36.07% Heodo
2020-01-16INV_112814208.docdoc be15c5dd69d542487117ad34caf1a12b6ceb4bd2ed1e02a3d6d39fb9a38f2f9dVirustotal results 37.10% Heodo
2020-01-16REP_622149093528.docdoc 1f3e3d25e4bf6b2abe937cad881f13233701da7dbd9a165f895856e56e0e0ee3Virustotal results 36.07% Heodo
2020-01-16PNB_010120_CLH_011620.docdoc 9176cd0d680c79dd17632cdfce8d13d2ee47e8841105a800dff4e233b9ed91f2Virustotal results 25.42% Heodo
2020-01-16FILE_IBC_010120_KUY_011620.docdoc 9aa8f08a047314cbf2c0a541131a486282da8e2657c69fd731624e2823ada6c2Virustotal results 27.87% Heodo
2020-01-16PO_01162020EX.docdoc e2c167148b62b9f2ef7c2268d7779b5fe217cb86b3295ced1829ffd5064df41dVirustotal results 26.23% Heodo
2020-01-16INV_03452253.docdoc 14aea8de9f3177801134498a4f81de17f490b3cd087fb826e8383a2b1f1e7049Virustotal results 26.67% Heodo
2020-01-16RP_OE4113446344XA.docdoc fe6f474786ca7ae00ef0969337551f4f2b639e640014ba936d413e532bd994cbVirustotal results 24.19% Heodo
2020-01-16REP_PO_01162020EX.docdoc 2fab2f5e3f28d6a81ba72956df8ac00de3d7dbea09496ae791fd20a7954fe1ecVirustotal results 26.67% Heodo
2020-01-16INV_58836408.docdoc cb14f2d0b46d275f3d060cb7b30c4818b33aa25ce6fef05b7aab90043c79039dVirustotal results 24.59% Heodo
2020-01-16ST_ZIAM1IJ0X1G852V.docdoc a8daa5abd8b28562b74c89b4eb926bba5e5bfddc7746e95a5d4055896680ea69Virustotal results 22.58% Heodo