URLhaus Database

You are currently viewing the URLhaus database entry for http://www.ydhlube.com/default/US/Client/Invoices/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:32675
URL: http://www.ydhlube.com/default/US/Client/Invoices/
URL Status:Offline
Host: www.ydhlube.com
Date added:2018-07-16 10:18:03 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?):No
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-17INV-20180717-00636405.docdoc a7e6fd9fe71f1da2a815d18ac456e62116babca2b9df0cb2cd9bb49fb1304aa3Virustotal results 22.41% Heodo
2018-07-17invoice-02-JY-105633/73.docdoc 8d76ac27ea1fd6d873a7dca39c680e793c06545f17259d97cd39e5701b25b3ecn/a Heodo
2018-07-17invoice-07258031/8.docdoc 0380cb94e636087acd3eba567cf4224ac52e5e00d2d999a32267dc9c78623f9en/a Heodo
2018-07-17invoice-20180717-26447738.docdoc cd4341a7f34a2e518627f65f97684bf899835ed2015aaa8c1528851d1499e76eVirustotal results 23.73% Heodo
2018-07-17INVOICE-063-OK-0744193/734.docdoc 0c11d763ea8d33e6b884d57eecb08d754b0465314eab8f787dc7cf4e10d80868n/a Heodo
2018-07-17INVOICE-02-HGP-2223256/01.docdoc 1aab73556bab1809608aaf425a3fcedd78401d92a645c3956bdbcc62b91a60d8n/a Heodo
2018-07-17INVOICE-20180717-9181155.docdoc c7a19fe091f2feeb672b78d60ba8ca32f1b02558daf1ca43005bb10bb3ea3cb7Virustotal results 22.41% Heodo
2018-07-17inv-2018-07-17.docdoc d12be5ad757cda0b161d7092be269ded5e05250ceedea0c0698ed6842656775fVirustotal results 19.30% Heodo
2018-07-17INVOICE-2018-07-17.docdoc 5392f1f8bfb6e7028ce3867954cc096635188bb78c5f86506fbc6b4adfc274d8Virustotal results 20.34% Heodo
2018-07-17INVOICE-003-R-0191681/044.docdoc a4c7d8e6eec7d4ebe9f100987d663dd1bfa89876395a933694d11c92b826ae3an/a Heodo
2018-07-17inv-FR-5317542.docdoc 2670d65bc39dcae2b98b5e565a2e3085db9af28e3eb087870b0ce6c50ba72cf7n/a Heodo
2018-07-16INVOICE-2018-07-17.docdoc c12fb578a2c229837178e9b4bc146c191c8de1f6fc67134769ab435784766b68Virustotal results 20.69% Heodo
2018-07-16inv-015-N-7205729/03.docdoc 9fb6a5459ba34868a0db6d1c6aa8bdc6f63b1c1795b4d53dac8e7a6dfe766416Virustotal results 18.33% Heodo
2018-07-16inv-09948095/5.docdoc aae156aa1d279c88fd4e871eeaa35ddc85289b610e1bcb04d3cdf99976f932eaVirustotal results 15.52% Heodo
2018-07-16invoice-20180716-334864.docdoc 0ae85a8fe55998abbd8d98ccac55b87907a329211824819f6a66e04035039017Virustotal results 17.24% Heodo
2018-07-16invoice-JCS-3447734.docdoc 7a5e8ca813e42f7d34a93100187b6a04ff62b6e6d8db3fada03301a8d6141199n/a Heodo
2018-07-16inv-CQ-406297.docdoc 6b88ca3992062aac0ee5f3d40314026f9d2346b15aed94af064406bc9748e03bVirustotal results 18.97% Heodo
2018-07-16INVOICE-0218039/1.docdoc d891867e2e2b7a4c54449dc18ed5b4b9cd67142b354860266cf688f024eb9529Virustotal results 16.95% Heodo
2018-07-16INVOICE-039-NSC-8881461/626.docdoc e28a7f2ed1ad35603d69b32b20ac5acc50f8f1c0fa480df7a4fe68922e390ca5Virustotal results 15.52% Heodo
2018-07-16INVOICE-NAR-480165.docdoc 1794b759a416da60fef53cb4a6b87acc853dab144c6018bd5b17c52c99ff92c1Virustotal results 16.67% Heodo
2018-07-16INVOICE-LG-9555285.docdoc e597f59d141fc082e10c70621223840c96177316ed68d2e0efcaf0712b3d7b09Virustotal results 15.00% Heodo
2018-07-16invoice-20180716-558483.docdoc d4c6fa8eeddea533a089af038add3b7c9543075b3ab0eb1a6b9d3abe20941cffVirustotal results 22.41% Heodo