URLhaus Database

You are currently viewing the URLhaus database entry for http://nettmart.com/cgi-bin/jbGUot/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:420371
URL: http://nettmart.com/cgi-bin/jbGUot/
URL Status:Offline
Host: nettmart.com
Date added:2020-07-28 05:29:06 UTC
Last online:2020-07-31 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-28 05:30:03 UTC to abuse{at}turnkeyinternet[dot]net)
Takedown time:3 days, 16 hours, 14 minutes Bad (down since 2020-07-31 21:44:38 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-30Inv-MVWW815-98133471.docdoc eed8aa076d2b58e5ced3c900bcc72f67191b09fd9b11fb7be5afd3dc6e79591fVirustotal results 45.90%Heodo
2020-07-30Invoice QA3-90825316.docdoc aa6bbf739a15097060f35839f8bedf662f371e5d1f27dfacd0bd8863b46ab1dbVirustotal results 46.67% Heodo
2020-07-30INVOICE-GRZ3{:REGEX:.docdoc e4253aa05a6d37a3938d0a58becfa9533a305a661d68cefd0c7aa37561fa5c41n/a Heodo
2020-07-30Invoice9139_283776.docdoc 4f2ac897eb8a71c9f2e1fe0299c615ad0d8a0dbd7b9e08d89bd6e0dde86e1caaVirustotal results 45.90% Heodo
2020-07-30Inv51 62211187.docdoc 88b43a2266e4e59cd4da2bf956472fd54c2fd005863486c58ee81adcfa917b17Virustotal results 45.76% Heodo
2020-07-30Invoice-2 0275541.docdoc 446037ce81d186fd02bf65e0c330850203c818bce8a72d542cd61fb1f12c7467Virustotal results 45.90% Heodo
2020-07-30Inv-OZ95 29270866.docdoc 35dfa0b9a11dcd3a2920e7da86c66da6b2b94ab67c9aac6e3743e53bd3346f80Virustotal results 46.67% Heodo
2020-07-30Inv 832 3322805.docdoc edffc299063e343351d529e84129e771c7c6e2b1894d86ebc91c78d0bad815c8Virustotal results 45.16%Heodo
2020-07-30Inv 832 3322805.docdoc edffc299063e343351d529e84129e771c7c6e2b1894d86ebc91c78d0bad815c8Virustotal results 45.16%Heodo
2020-07-30Invoice-ZQ3{:REGEX:.docdoc df1063c155004f08777c7bf91d18f44c2529b0736a80bee492c957f99efb23bdVirustotal results 46.67% Heodo
2020-07-30Invoice_MKP3889-71135956.docdoc 55d0bd650e90d7bfb5b9af758688a4006db13679c53d8197e81f03701fbf52f1Virustotal results 45.16% Heodo
2020-07-30invoice YQ90-9317373.docdoc f1761ccaa75c38c0b7a7816b613688bcc01590af8717fef82dc50d9620ff7838Virustotal results 45.16% Heodo
2020-07-30invoiceRM49_797893054.docdoc 412fb57e72ba6ac81ae2808528e48e74eff28cccc8244172b6755b864b86b3fcVirustotal results 45.90% Heodo
2020-07-30invoice-MYM462-407996.docdoc 7688a4e7b3c2bb471069c2fe4c7fb3d3be6046d6e9d338972d3f586139f7e057Virustotal results 45.90% Heodo
2020-07-30INVOICEJKLG802_527405705.docdoc 299b8c34cfaa47a3f884d83e3b6ef10c75f0552bf3b16350d44d8ca86f89c8baVirustotal results 44.26% Heodo
2020-07-30Inv 2358{:REGEX:.docdoc 319e30186d7179092628802bacddda964b98aed017d182c3ca5ae6076f00c887Virustotal results 42.62% Heodo
2020-07-30Inv_XOV98{:REGEX:.docdoc eab321af153dbe945773bc32ab1028a0e475391cce0730a64a08b8c5f0ae9ec2Virustotal results 44.26% Heodo
2020-07-30INVOICE 357 19224072.docdoc 9682cb3fed20b168899452201908168de9b2c2d82530d7227a4474b8b2587eb8Virustotal results 43.55%Heodo
2020-07-29INVOICE_O7019{:REGEX:.docdoc 40a19219a853bbc60201d4cd4fc226bcdda0966f87f05dda562d113d65c8ce67Virustotal results 43.55% Heodo
2020-07-29INVOICE-UQUR8178{:REGEX:.docdoc fc906360a47dd69ee9bf7c722ebee494ae2f5a2182120bd98f7e809b16e951d2Virustotal results 44.26% Heodo
2020-07-29INVOICE_DWLH136-81096580.docdoc b6eb1c7760e06c0bf914bc6f8d26d4aa98a1d859d71fed9d6712db95af81f5f0Virustotal results 44.26% Heodo
2020-07-29Inv-2-9080961.docdoc 1bf7b884965fe118224269d25022bb33f7a4cd50fee399994fe4c1e7058ade39Virustotal results 35.48% Heodo
2020-07-29invoice_KX893-343731.docdoc 4e5402409bed2c6052e6cfb0cd998f3b88be85d561edff6ee16212a4df9d844aVirustotal results 34.92% Heodo
2020-07-29invoice H439 0113447.docdoc 0538723c17579616d35fe643f326b6b5b81319f1e5081079bef5cfc6cc2eefc3Virustotal results 36.07% Heodo
2020-07-29Inv-FZXE6-340233.docdoc 9a2096146b8ace7eb4e64e5a25cf48da7bfe891b37e48e83edd349cce12d5628Virustotal results 37.29% Heodo
2020-07-29INVOICE-FRCH2 308216.docdoc 99a504a30bece5a880e6faf4431f7bd547a33701313aa16a4a822fc0e33ce09bVirustotal results 36.07% Heodo
2020-07-29Inv LGPP7_8577294.docdoc 2a178649b3301b5f81622dac20cf41286c1a23d07f45e13eb923d9463304b9deVirustotal results 35.48% Heodo
2020-07-29invoice 458-1766098.docdoc c9908873e05408d13895e8545fd5b9e3eb95032f5e363086b19e6a14a8ed7075Virustotal results 35.48% Heodo
2020-07-29invoice-T5539-758193279.docdoc eedf761aed061fa63744aa541d5ddef3b7d53978fd00882cbf9fb0f88bd82550Virustotal results 36.07% Heodo
2020-07-29Invoice STD5_5270419.docdoc e71897829455d67c03b3f1a81795720974786866c4cbcdc3b93be5cd01c9071fVirustotal results 34.43% Heodo
2020-07-29Inv_14{:REGEX:.docdoc 38e80b0ed74809100ac711b189643d3ac91d40765de74775422214356f3aaa49Virustotal results 35.59% Heodo
2020-07-29Invoice C8721_7627563.docdoc 46b27d851f8ea31388578137b73c02cc59fbcec6f937c4a0689021ea674d3b1cn/a Heodo
2020-07-29invoice-AW6747-76984790.docdoc e73f2075610d9b2cdef2e9a0cd4cfb82d1be854382f0fd03f5f1f9b28707e914Virustotal results 36.07% Heodo
2020-07-29Invoice8649-13245612.docdoc 18b4fa83a6ab9f4a394a9642e954cf6b8184bd9b0597de0ff9fe3376db4a6c86n/a Heodo
2020-07-29invoice-0{:REGEX:.docdoc 016b416def5205972b6d2651f449b02216a8063c2d205249bc8e1d58ae914a99Virustotal results 35.48% Heodo
2020-07-29Invoice-AP56 322854.docdoc b2ca556e1d0de164c36bba96ec498649e08accf35389177ca6a72e4d49f3c7acVirustotal results 34.43% Heodo
2020-07-29invoice-H33-8289741.docdoc adeada9a8ec5d3994841de45aafd47a1bb4eedb7e8ff2e5ef2b31a7cfa7339cdVirustotal results 33.87%Heodo
2020-07-29invoice-OPNZ896-844196856.docdoc d38a56d36ace7f2adafd305ed44cdd1667c68209148e46187c616be8a00c379aVirustotal results 35.00% Heodo
2020-07-29Invoice-W354{:REGEX:.docdoc 6ecb72b433b635a49ee2f82737cec4103d08d18e988b42d36bd1b35d175ef612Virustotal results 33.87%Heodo
2020-07-29invoice_3_736673.docdoc 4c4eb4ee78767e5ef21bbc3ff9fd20cbc8824981980172c54aa2b5bef9c05f0en/aHeodo
2020-07-29invoice-T7804-378303.docdoc 9e6e228740b8491e06fa21ebc02825a274d28765e6d5f03532d04723f27ea3c7Virustotal results 34.43% Heodo
2020-07-29Inv-USEG900-56021245.docdoc cfc4f08eac512749e059176dd3bd0dcaab3bbabbed46c9a54aec74e7b4d1c28cVirustotal results 34.43%Heodo
2020-07-29invoice OFT43-0495260.docdoc 98f17256c293c9d59235854b445eefe7587415563922d028dad64b7ea2732964n/a Heodo
2020-07-29INVOICE-Q65 34932645.docdoc e9c41a03b0a30df94da213516e68cb7f81634c2d04fde2f5fd4f4b72d0e58b79Virustotal results 34.43% Heodo
2020-07-29Inv56_885573.docdoc ecd6f0ecbe8a5736cbbd0ad4095e8d9197f31f8278a839928a6b1ff342310541Virustotal results 36.21% Heodo
2020-07-29Invoice ZXQ60 536321.docdoc 9f7b28a08045dbd6d625a5950b7bc9f7e84b95abdf7554296560433cb2055bc3n/a Heodo
2020-07-29INVOICE 0 826454.docdoc 17a4069c85045814878237711fcbc6f1a31c634acb4a0910251237f38d1fcde6Virustotal results 30.00% Heodo
2020-07-29invoice-OOT9-621718.docdoc 9b170d1513d2e3329d1d0175a661e0b646b9d374bb6cb73b7b32103438a80430Virustotal results 30.00% Heodo
2020-07-29invoice125-581238795.docdoc 5dc2988ac1400b5b41834fdd756973d29c974e2beb985cbff7b83833d0175243Virustotal results 28.33% Heodo
2020-07-29INVOICE_LQX2-982804.docdoc 48ff47bbbcb8b53f6fefa1fa1ca276d9cd1a82956cb00511b6718bdc6818d503Virustotal results 27.42% Heodo
2020-07-29INVOICEAS3376-058832.docdoc b55637e397616929dd5aa9a5dce20753de9ecf2de51cd00672d022fe335ee5c6Virustotal results 27.87% Heodo
2020-07-29Invoice 55-7323152.docdoc faf515ab474069ff648bbe291975efe9b7be1e0354b0e61b6c4fc9e91d0880fdVirustotal results 28.81% Heodo
2020-07-29Invoice-TD984 561963192.docdoc 048fa686a033e894b6ab66472e3add1b8e1d6bbcf6b2f3abe4be995f54c3e61eVirustotal results 27.87% Heodo
2020-07-29INVOICE_MAJP3489-96688892.docdoc 480b1b9545e5697bfb108b5b9a7a193a94820d63df524ad4b0105dfbc6d438b8Virustotal results 27.87% Heodo
2020-07-29Inv OSKC34-63295671.docdoc 5fcbe03e4955762c6e9a7a044fd8c38db1690593136411e0950ec994a9a97bd9Virustotal results 28.33% Heodo
2020-07-29Inv-XSU3983{:REGEX:.docdoc 807c329b869b5015208dd2bb380979f9312f9212b7b47d8d5e7eda640c1db95aVirustotal results 27.59% Heodo
2020-07-29Inv-U841{:REGEX:.docdoc 3daeb772677cc8ab74fe9d0653e77f06a05719179f03253b20e750d1c12fdd54Virustotal results 27.87% Heodo
2020-07-29Inv ZPWC1271{:REGEX:.docdoc 090d336a67c49c129bf93ab0702afbf497ee0a80868748614fe9c64e46694fceVirustotal results 27.12% Heodo
2020-07-29INVOICE_WW78-7841275.docdoc 1dd3b51b88f6a876b10aa6d26e1b57d269667e9e07fa0f1963212b4d168e9a2dVirustotal results 26.67% Heodo
2020-07-29Inv-OKM770_152482472.docdoc d41efd05126ece156ea180e4dba6af80f2a6104b49b797a54357dbf27d4ca526Virustotal results 26.67% Heodo
2020-07-29INVOICE N6-815182070.docdoc d31a643788c43fd2a0f0d66fcb001938e027d1fb9f10acc0ca2c6c4b0d3c2e71Virustotal results 27.12% Heodo
2020-07-29INVOICE-G21-5069528.docdoc 123ea8b8a89b841e5759cb544c07219b8593801ceb92438e9e69020d0cf29d9aVirustotal results 26.67% Heodo
2020-07-29INVOICE-MLFG8 52022421.docdoc b2eeddd5041eedee7e49fe10f67bbf0e658f7636ccfd952737bb3938777ba2aaVirustotal results 45.00% Heodo
2020-07-29INVOICE ZMC1543{:REGEX:.docdoc c5931de5c1ad9d16b235ff7ce7c0b8f4205dcd14a81baa2aa06fc7b9d2ebdcfbVirustotal results 44.26% Heodo
2020-07-29Inv-JH4-17393999.docdoc a4e941731ea6004cc9cf3198d9af9fe064ee77a13f1f9b78de69450a34d43722n/a Heodo
2020-07-29Invoice-Q1976-183985609.docdoc 222bf46d594a82b48fa24523c399709c4627bc67a0c18895083bd9aa591e24c1Virustotal results 41.67% Heodo
2020-07-29invoice 388_57260720.docdoc 3907087a305c59e991dc3d51ccf7fbd846bdf7218ff00d228ec92dcbf2fbfa3fVirustotal results 40.98% Heodo
2020-07-29Invoice UIMD974{:REGEX:.docdoc 2ab047336652c1132977d57b5c00963d4fad9b69c7d1f2744c3c55e22b34b437n/a Heodo
2020-07-29INVOICEGOZ948{:REGEX:.docdoc a83f5c38de7434458537ebcce51a2c5ba1ef42ba9bc0014c0d9b43034a28bf8eVirustotal results 40.98% Heodo
2020-07-29INVOICE 61-9488724.docdoc 0a570bb0ba7b3aded8c3f42f19cf86c85183b020e6a7708acda9e202673bbea7Virustotal results 41.67% Heodo
2020-07-29invoice_D238-5019855.docdoc 6fb8a90bd031c21d70ab8922bcd7854a8de25576c3cdd885e5137f8760acbad4n/a Heodo
2020-07-29Inv_328{:REGEX:.docdoc 7565e62a20329afafbb001d219a6f25605ec22de64e201630c91147b32f083e8Virustotal results 40.98% Heodo
2020-07-29invoice-FA6807 963085.docdoc ab70b9d9a0b0c05df3feeffcede8b732964d9ea5f11532cbb899380d17253baeVirustotal results 40.98% Heodo
2020-07-29invoice-TWS2-5459469.docdoc 0c8994f002b6ec33997f0a40220902be5b471b2317389458824ff10d7f16a2abn/a Heodo
2020-07-29Inv-E7286-187866124.docdoc 815aa5f259b212c8f4b86befb45a9905af2a91cab161e881bd4f79190c5e8065Virustotal results 40.98% Heodo
2020-07-28Invoice07-12839130.docdoc fe62423f33be199b51496af4f09ecb7879c085d3eaf6fd8be8d42eb75ee36fa6Virustotal results 40.98% Heodo
2020-07-28INVOICE_U255-8406591.docdoc 2500e2bf1ee4be15c6ba67badbce47df2e8c4910ae6d70956ea26631afd4bd8cn/a Heodo
2020-07-28Inv_HBU2_10894653.docdoc 6f68dc38bc62feb8249f3d517b07e708fadbb943da544e35fb76ca87d507a801Virustotal results 43.55% Heodo
2020-07-28invoice_G96 608823923.docdoc 5834fc35d5ef1821206dcbbc4028bcb4d87845aea1867c1fb0eeefe73876e405n/a Heodo
2020-07-28InvMX8437_2160343.docdoc 634c88b389947a3f0dc77ac4a1aa97cd174f88a3e2c8e83a9f99f39423a389d0n/a Heodo
2020-07-28Invoice_8-865037849.docdoc 29e2f677f97551f990f059365c39c79c340ddff4a9e19ea047d0427fb610a63eVirustotal results 45.00% Heodo
2020-07-28invoice YZE14 492408.docdoc a7cb247ce865d5321b064674340665d891fe0ac1beff43a1142bf4fa75d1f4eaVirustotal results 40.32% Heodo
2020-07-28invoice HZZF8523_391764878.docdoc c61820249fb8e9e6d4e20f466c9eb023334d37138f66b001e5b2221392fb7eedVirustotal results 40.32% Heodo
2020-07-28invoice-IJH16-805234436.docdoc a2c192131c94c238384e83d521ae6568774258c7267ff5e74a015255555ac4e6Virustotal results 42.86% Heodo
2020-07-28INVOICE-HFI8809_230051.docdoc d2c93f7df3610ee2f4cf3f2716e5b30b5cd23faf8aabcf2ff01a623923088cdfVirustotal results 40.98% Heodo
2020-07-28invoice-RFU0-535256381.docdoc ebbf992bb52224feb442a358f3221e0bf6f7fd0543cb8b2da195e8d4087b76b8Virustotal results 40.00% Heodo
2020-07-28Invoice 9296-8655381.docdoc fb5c853a6405f26b08c948c62839ca8b738c93cb82885c471d06199a5fc991edVirustotal results 41.67% Heodo
2020-07-28Invoice_WON17{:REGEX:.docdoc 2a0797bceea52cc3b7bd79304bf93f1d885be46c9e6003267059a23efab652b9Virustotal results 39.34% Heodo
2020-07-28INVOICE-PKKI314 5315697.docdoc 42cec717e6e1fd0b9a895f70073c7c41acdba3cfc000faa687bfdec03fcd0670Virustotal results 38.33% Heodo
2020-07-28Invoice64-58041256.docdoc 6a604ee31d3ad5b027844967a2c07fad16484e677e4deb36e797b98b6b959194Virustotal results 38.71% Heodo
2020-07-28INVOICE Q1730 205330.docdoc 54171a3ad4b125dc2795767c4e783e474bddf5f973b21bfaad94b3d15057b763Virustotal results 41.67% Heodo
2020-07-28Inv-X4{:REGEX:.docdoc 0034fc70978e5e2fbd485351d863a0f1f6eb072e56cf5eac63df39bd8aa5bf40n/a Heodo
2020-07-28Invoice WOOK7204_57275200.docdoc b72f8c2a69de87ac9abe79b1e167ed8622746bf5ec275ded3f6925190413caacVirustotal results 39.34% Heodo
2020-07-28INVOICE5_344288111.docdoc 66d8ecba1453aa8cb05ecc2f1e68de32bee30e7c4da041888c339b33032beae2Virustotal results 40.00% Heodo
2020-07-28INVOICE5_344288111.docdoc 66d8ecba1453aa8cb05ecc2f1e68de32bee30e7c4da041888c339b33032beae2Virustotal results 40.00% Heodo
2020-07-28invoice 328_056631021.docdoc 9b53e25c18550bb28f84e6697c4ad8a1024b50dd98073ba4d187c207aa3efacdVirustotal results 39.34% Heodo
2020-07-28Inv-S6120{:REGEX:.docdoc 28511f631bf376ca915a3a1e51bca9515ae3b6e4577ea494758204b95000007bn/a Heodo
2020-07-28INVOICE-LWY0288{:REGEX:.docdoc 6e260261305be197c26591f7e71682cf271d71bc346224fed0b99a334c6e8d2dVirustotal results 40.68% Heodo
2020-07-28invoice JTL1182{:REGEX:.docdoc 1fded3892f4fe5d626ac2db13e3fa102887a58570ff4e24394e6eff607f980a5n/aHeodo
2020-07-28Invoice KE879 864112.docdoc 6fe3e37f73020cc0143aa21d850a62b2df7af29a651c35246d41d463c7276d86Virustotal results 40.00% Heodo
2020-07-28INVOICE-NJM105-3493379.docdoc 540547029ff3e94f5a3c60f5f52d1bc9f1d90435c8b7a949f55fa3e50981ec76Virustotal results 39.34% Heodo
2020-07-28Inv SQTT27_741372930.docdoc 4fc696232ad4c1214d2b3d17bcf0f268ddab6901590133a86284fd475bffc038Virustotal results 37.10% Heodo
2020-07-28INVOICE-YYD1_720462055.docdoc edb34f3f03582b7ebd9fe77cf5826ccb2ca56872861c659b425b25910b9aad60Virustotal results 36.67% Heodo
2020-07-28INVOICE_GP0681_908265.docdoc 9850f2cd940043ac7adb6b01af7095aa95a510c7b363a69dbc6eaab8b44c2444Virustotal results 37.70% Heodo
2020-07-28invoice_PBIA979_251908533.docdoc a2e5b923d42791c22d503ed2dff4ff8fc815f0fd5c5d9012d505c7e140ff7f9dn/a Heodo
2020-07-28Inv 60_28447502.docdoc d652244433caaa17c36aac28e633467530b4f4405da4280dc2ce54de0cee1f96Virustotal results 44.07%Heodo
2020-07-28INVOICE-AXMD71_50533654.docdoc 61cecb239990d4f0f0c843530d05df9b42db812a57da7c725f4ab890a7b610deVirustotal results 41.94% Heodo