URLhaus Database

You are currently viewing the URLhaus database entry for http://www.plasdo.com/default/EN_en/Jul2018/Invoice/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:33202
URL: http://www.plasdo.com/default/EN_en/Jul2018/Invoice/
URL Status:Offline
Host: www.plasdo.com
Date added:2018-07-17 00:29:10 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-07-17 00:37:19 UTC to hm-changed{at}vnnic[dot]vn)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-18invoice-20180718-86488447.docdoc e7db2087ef7f0f80640c7f62a493da43eadb8db5f5af90ef1cb55e68a465696aVirustotal results 46.67% Heodo
2018-07-17inv-OBG-1995821.docdoc 660d4a7fbb3a9b2cda39dd9cf070b23487a150d7eaac569d1dcd5e658b5b3e73Virustotal results 22.41% Heodo
2018-07-17invoice-PSG-072257.docdoc 8d76ac27ea1fd6d873a7dca39c680e793c06545f17259d97cd39e5701b25b3ecVirustotal results 27.59% Heodo
2018-07-17invoice-03-RK-277123/07.docdoc cd4341a7f34a2e518627f65f97684bf899835ed2015aaa8c1528851d1499e76eVirustotal results 23.73% Heodo
2018-07-17invoice-2018-07-17.docdoc 1aab73556bab1809608aaf425a3fcedd78401d92a645c3956bdbcc62b91a60d8n/a Heodo
2018-07-17inv-2018-07-17.docdoc c7a19fe091f2feeb672b78d60ba8ca32f1b02558daf1ca43005bb10bb3ea3cb7Virustotal results 22.41% Heodo
2018-07-17invoice-2018-07-17.docdoc 5392f1f8bfb6e7028ce3867954cc096635188bb78c5f86506fbc6b4adfc274d8Virustotal results 20.34% Heodo
2018-07-17INV-08206886/42.docdoc 2a71584f4f847c10e89ebce5cf36443e7b479c540e2b20bf0e7d5fe0c4604c53Virustotal results 20.34% Heodo
2018-07-17inv-2018-07-17.docdoc 2670d65bc39dcae2b98b5e565a2e3085db9af28e3eb087870b0ce6c50ba72cf7Virustotal results 19.30% Heodo