URLhaus Database

You are currently viewing the URLhaus database entry for https://wcn2020.org/templates/atomic/language/8nfl2-bv8-41/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:296553
URL: https://wcn2020.org/templates/atomic/language/8nfl2-bv8-41/
URL Status:Offline
Host: wcn2020.org
Date added:2020-01-24 01:14:05 UTC
Last online:2020-01-25 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-24 01:16:03 UTC to abuse{at}stuart[dot]be)
Takedown time:1 day, 0 hours, 11 minutes Poor (down since 2020-01-25 01:27:36 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-25INVOICE CLG319_6057800.docdoc cc2a02b23102e898d67f5485ed9f922b40b4006521e1ff3d26aeb85195284f8bVirustotal results 38.71% Heodo
2020-01-24invoice G9298_27938519.docdoc 75014b9efcb14fb22591a986fdf636d6106b987d956ebbf793aa91c24dd67dc8Virustotal results 34.38%Heodo
2020-01-24Inv-8_977597.docdoc 92e56c8d6f6630b9d9bbf2083ea377ae3f9600b6b452ae0740dc18902d49e2a3Virustotal results 32.81% Heodo
2020-01-24INVOICE_YKYP73_765651.docdoc 08dc77e69042d7af86f3dc5a4e4d3299c852b20b5b50091892ad7f0e1eebd7c8Virustotal results 35.59% 
2020-01-24invoice_QUYD861_94751824.docdoc f632cc29e85b046da247d72a74114c3d50dec27be7e5bae146b9622e2542e59aVirustotal results 29.69% Heodo
2020-01-24invoice-325_658252465.docdoc 4982421b347ca1f4b3ad1ffc6c6bbbef2ad9fb126ef18e2db576a1a5bdc39163Virustotal results 31.15% Heodo
2020-01-24invoice_VH8667_4817536.docdoc 1ed89eda4082db6a63f5763f3b955ebceb2851d10a358546c5f1f6b2145f3905Virustotal results 32.79% Heodo
2020-01-24Inv_JLY058_323532.docdoc 3d77b72651e464a5eacd9ec09426f2ed186472e8cd379d628629a6b29be9bd05Virustotal results 29.03% Heodo
2020-01-24INVOICE-Z7425_236285525.docdoc 1794021229640d080ec671b9c7262e9941c79cf43c48c22d1c4b5297212f0014Virustotal results 26.98% Heodo
2020-01-24Invoice BR831_0795315.docdoc 58f4a9350c2c4d061072015bf56382f773719d9d78ad3bba260cece6dce54e54Virustotal results 26.56% Heodo
2020-01-24INVOICE-KQIE5461_064509.docdoc 2d4faab5324229be37231e2fc6d6b430579e396fcdf4db46867cf7f7b04e90f5Virustotal results 26.98% Heodo
2020-01-24Invoice_WT70_613520710.docdoc 91716865af6c80fca3ecac4d0d46ce403b4e7374fd8b651d19a1b98d4ae55b93Virustotal results 27.87% Heodo
2020-01-24INVOICE D375_8841378.docdoc 863f355a4912ee86d8ce6aa0b98ad27034bc55650b9ad5b47e1a3ecc5cc4d90bVirustotal results 25.40% Heodo
2020-01-24Inv-EQ5652_680707357.docdoc 0410a5d9885db43d1b91eb836ab2e33102eec96ec006db3ac01737fd6e10ca5dVirustotal results 29.03% Heodo
2020-01-24Inv-QNTZ198_49186986.docdoc 21ed646e9c73d65b5355a50adb7b3a7b2f6d76b45d4248e2ad2480fd784ee8b5Virustotal results 25.40% Heodo
2020-01-24invoice-A60_1297160.docdoc ec33bf8f58aa91fab9e04fe9b8ff924c656ddb9921691b11dbf291dfb37afcd9n/a Heodo
2020-01-24invoice-W945_3661735.docdoc 829533600afafde7716701f0ea4bc0cb998fbd85124cda950547315d1c512adeVirustotal results 25.40% Heodo
2020-01-24invoice-G708_808839.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24INVOICE-701_39604757.docdoc 4be1884210b27c4d55b524c41d8c65ccbbf4c086d2915007150cb0a4c8795386Virustotal results 48.39% Heodo
2020-01-24Inv_5_95263503.docdoc 8e96c8617604fd15ab39a4e48e257ad769bfc12440f857da0cb0b21ddcaa86ddVirustotal results 47.46% Heodo
2020-01-24Inv 45_376373.docdoc 79bfe21092e5b5147666511c2d7755c35fd7698f9210bcdf49a44e5c9677534fVirustotal results 43.75% Heodo