URLhaus Database

You are currently viewing the URLhaus database entry for http://healthyfood.news/wp-admin/XEX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:295739
URL: http://healthyfood.news/wp-admin/XEX/
URL Status:Offline
Host: healthyfood.news
Date added:2020-01-23 09:01:08 UTC
Last online:2020-01-25 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-23 09:02:04 UTC to abuse{at}sharktech[dot]net)
Takedown time:2 days, 5 hours, 40 minutes Poor (down since 2020-01-25 14:42:27 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-25invoice TCXE429_85172916.docdoc 983ddd1518361a6f16f1b4f4980f9f8e195ab46794ddb14935f83c5a93781f17Virustotal results 39.68%Heodo
2020-01-25Inv E9950_11054748.docdoc cc2a02b23102e898d67f5485ed9f922b40b4006521e1ff3d26aeb85195284f8bVirustotal results 38.71% Heodo
2020-01-24invoice XI3_7128690.docdoc 75014b9efcb14fb22591a986fdf636d6106b987d956ebbf793aa91c24dd67dc8Virustotal results 34.38%Heodo
2020-01-24INVOICE-S29_547148.docdoc 9298f239b41ba2312503b00f930f8bd5886e595b99527e2daefcb02ccb716e9fVirustotal results 33.87% Heodo
2020-01-24INVOICE A80_341110.docdoc f514a1b466096bf3207af00185674482d598f536c8bc2fb78216494aa14d3ce9Virustotal results 29.69% Heodo
2020-01-24Inv-XUE7880_997803.docdoc 4a0d57ca93ec40a53894682db9770e316749f4942d3fe1264994fb61968140feVirustotal results 30.16% 
2020-01-24invoice WMCL9401_414040.docdoc e44017a7deba31d2c40a8bd2519c68d30883e3590a03407929281ebd1a2d9390Virustotal results 31.67% Heodo
2020-01-24invoice WIMV0798_5403125.docdoc 3d77b72651e464a5eacd9ec09426f2ed186472e8cd379d628629a6b29be9bd05Virustotal results 29.03% Heodo
2020-01-24Invoice_WW3_718006.docdoc abbfd0b5d7417b224f96c7ed693c2f4cf8549db85c79eeb4fd9f03994ff3eae7Virustotal results 28.33% Heodo
2020-01-24invoice_I607_950742.docdoc 58f4a9350c2c4d061072015bf56382f773719d9d78ad3bba260cece6dce54e54Virustotal results 26.56% Heodo
2020-01-24Inv 9076_159733292.docdoc 7dd53825b5d2ade36c33feb1492c3e52cd0a331948cbdb102e2098dbe2811560Virustotal results 25.81% Heodo
2020-01-24invoice-61_243851.docdoc 91716865af6c80fca3ecac4d0d46ce403b4e7374fd8b651d19a1b98d4ae55b93Virustotal results 27.87% Heodo
2020-01-24Inv-S82_732859506.docdoc 9e7cdaa56cdc7f791acec407618bda0eed9992a0adfe090208b17f472aed4119Virustotal results 27.42% Heodo
2020-01-24INVOICE_T336_26901912.docdoc 0410a5d9885db43d1b91eb836ab2e33102eec96ec006db3ac01737fd6e10ca5dVirustotal results 29.03% Heodo
2020-01-24Invoice-MJL296_7363080.docdoc 2622b65b82b50b0bda3c379b3782aff1e989e1c9532e2cc2155ba123bcba3896Virustotal results 25.40% Heodo
2020-01-24invoice_HMDZ947_6482511.docdoc 7b4b6ac3d2e40c5b06c25952410b3768cba4bcb9400e50fca921115eaa1ab311Virustotal results 25.81% Heodo
2020-01-24Inv-GBPZ18_13474057.docdoc 829533600afafde7716701f0ea4bc0cb998fbd85124cda950547315d1c512adeVirustotal results 25.40% Heodo
2020-01-24INVOICE-LH1_019372334.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24INVOICE_LXME78_611965113.docdoc 4be1884210b27c4d55b524c41d8c65ccbbf4c086d2915007150cb0a4c8795386Virustotal results 48.39% Heodo
2020-01-24invoice SUK69_752138.docdoc 38acf820214e434a173d1eba8845b39d692b99bfae600380ea3ae1d2d61b171bVirustotal results 48.39% Heodo
2020-01-24INVOICE_OKXS792_411600.docdoc 8e96c8617604fd15ab39a4e48e257ad769bfc12440f857da0cb0b21ddcaa86ddVirustotal results 47.46% Heodo
2020-01-23INVOICE BLZ465_060658261.docdoc 4d65aa1d4d4356e59a68839a7e437a4e3d207e6bf481c90baf4ba6de5b9d0ed4Virustotal results 34.92% Heodo
2020-01-23INVOICE-NE12_93300781.docdoc 22646615c81cd95618060f1f31470c1769bc5d93dd7c7d38afca0b8cb96ff03fn/a Heodo
2020-01-23INVOICE-YU562_0761422.docdoc 15b199f8ba35174c6082d599128c694edaf953347bc41c55212437e09f16f741Virustotal results 32.26% Heodo
2020-01-23Invoice-GE116_079943.docdoc f1d7ec05895eaeda241064ec4901d67a5372659817cab6154477a414177feca1n/a 
2020-01-23invoice-OO0_924595.docdoc 93500a32e011f40c983cee5dd2d53b447421643672ec0823b81e5f7d5125a6eeVirustotal results 31.15% Heodo
2020-01-23Invoice_2299_121200.docdoc ab2546eb670ced89bcd1304b6c5477134265bbe2c08a37d2f7834597e74e9352n/a Heodo
2020-01-23Inv-JNO62_882056.docdoc f8a99bfbf6c324f6f76f07ae81630edabaf926a75bc2bc290abeb01d910b9a67Virustotal results 27.42% Heodo
2020-01-23Inv-SV21_58212956.docdoc 4b1fc8d62a7e490364bf85388322e779c0ff8a7adb39bfff5b386d7ba08eda1dn/a Heodo
2020-01-23Inv-06_13435511.docdoc d91ee6af9a42e6c4c90bcc0602f6ca687bf444b88a183867d943b365bf8a7db2Virustotal results 33.33% Heodo
2020-01-23INVOICE 94_414514.docdoc 3c8f1b91ec9081fe9a7f3a148e86f65019a450a87c13110116b93cfab2bd72efVirustotal results 26.56% Heodo
2020-01-23invoice_TE996_299696594.docdoc bcd78fb2ae376c31ea21a7d1b7d110e4dd0a49c9a8261bc5f68816e4d1091bbbVirustotal results 22.22% Heodo
2020-01-23Invoice_KB9_688314279.docdoc c74da02f26416e08059cd0a2375a2ad642e90016eaf0314d81f2aac3ca32e21fVirustotal results 22.22% Heodo