URLhaus Database

You are currently viewing the URLhaus database entry for http://www.tekfark.com/sites/US/Purchase/Invoice-677851730-071618 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:32945
URL: http://www.tekfark.com/sites/US/Purchase/Invoice-677851730-071618
URL Status:Offline
Host: www.tekfark.com
Date added:2018-07-16 17:13:55 UTC
Last online:2018-10-09 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-07-16 17:30:19 UTC to abuse{at}cizgi[dot]net[dot]tr)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-18CH59567675_2018_07_18.docdoc 60e2b1cba21fac8ef868fbf4cf7bab578ab94cec9180eb250ada8311ff09c98aVirustotal results 20.34% Heodo
2018-07-18inv-00672304/8.docdoc 3a1345bc72b9f4302bcaf3bab57fb37e1219e4e9a5b971c2d1943eea9dd08606Virustotal results 20.00% Heodo
2018-07-18invoice-07727034/1.docdoc e7db2087ef7f0f80640c7f62a493da43eadb8db5f5af90ef1cb55e68a465696an/a Heodo
2018-07-17INV-20180717-25132494.docdoc 5882597ea9a067f3d05f78112b8609127ba2260f603fcfa67bb19952d11c3a97Virustotal results 23.33% Heodo
2018-07-17invoice-FS-775424.docdoc d65c3a9f31386fa5d5fb59b1922757d788b2a22528db67bce13016ee93c3ebe7Virustotal results 27.59% Heodo
2018-07-17INV-07001993/8.docdoc 23e7ad296900a90726d4444131293ebfb9f1e4b85f76873869a282ec2b1eb435Virustotal results 22.03% Heodo
2018-07-17invoice-0712324/3.docdoc 1aab73556bab1809608aaf425a3fcedd78401d92a645c3956bdbcc62b91a60d8n/a Heodo
2018-07-17INV-XQ-9555203.docdoc 5392f1f8bfb6e7028ce3867954cc096635188bb78c5f86506fbc6b4adfc274d8Virustotal results 20.34% Heodo
2018-07-17inv-2018-07-17.docdoc 2a71584f4f847c10e89ebce5cf36443e7b479c540e2b20bf0e7d5fe0c4604c53Virustotal results 20.34% Heodo
2018-07-17invoice-2018-07-17.docdoc 16d90ae2f5746b49fb757329d6994a501dee047fa826419932ff604dfafe179aVirustotal results 18.64% Heodo
2018-07-16INVOICE-2018-07-17.docdoc 9fb6a5459ba34868a0db6d1c6aa8bdc6f63b1c1795b4d53dac8e7a6dfe766416Virustotal results 18.33% Heodo
2018-07-16invoice-VVG-313105.docdoc 375a43963fcaecaf7146227db1ee13a2b5e8baa6a61d35c32b74fda6bc8f7485Virustotal results 16.95% Heodo