URLhaus Database

You are currently viewing the URLhaus database entry for http://ezratisrael.org.il/cgi-bin/mxb2q2bj-4vi1-041/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:421632
URL: http://ezratisrael.org.il/cgi-bin/mxb2q2bj-4vi1-041/
URL Status:Offline
Host: ezratisrael.org.il
Date added:2020-07-29 19:20:05 UTC
Last online:2020-09-23 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-29 19:22:03 UTC to abuse{at}colocrossing[dot]com)
Takedown time:1 month, 25 days, 16 hours, 36 minutes Bad (down since 2020-09-23 11:58:27 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31Inv-H4-183237.docdoc d435dd55cb5ac574d2109b9052330650fb4c355ff4cb2533077281558e7d4de9Virustotal results 46.03%Heodo
2020-07-31INVOICE QO2440 472292.docdoc 56e8a51e917d57655dd5612da8b9618280c29273e601c8628c787029996d1823Virustotal results 48.33% Heodo
2020-07-31INVOICE_C9_44720598.docdoc b2671d67c068a833209094947cc1f15c6169a854e02006f116cd342528850f15Virustotal results 47.54% Heodo
2020-07-31InvoicePLO3705977850.docdoc 37524ad76f2f5b4eab6611654b6d4db507e547ccf9b0490f0a011d2900f7ceadVirustotal results 47.54% Heodo
2020-07-31invoice1466815227.docdoc 015ea078c5fd0a7e7358750b113536aa28746f179954e4c37e6185b99888c39dVirustotal results 46.77% Heodo
2020-07-31InvQ64648384.docdoc 541a2147a3dedf8a670a6f6db27757358e9762a15c2b2ab8f8aa7b384158cb76Virustotal results 47.54% Heodo
2020-07-31INVOICE_ZU516_5387565.docdoc 2793dc7590ad4da3c118e4aac6a771ee48f213454bea29f708b1d4590fcf2ba8Virustotal results 46.67% Heodo
2020-07-31invoice_HHGH5_640803.docdoc 286e883e3fd7042dd61a284aafd1bb8cf55e274a5a5cae78da6f6c2e8084a24bVirustotal results 45.76% Heodo
2020-07-31INVOICE-315-85603118.docdoc 991fefb51ab6ff987891d3156610be49073ac26a760411d94ff209425c7af854Virustotal results 47.54% Heodo
2020-07-31InvoiceJF2871594336.docdoc 5e3e4c0db013c193ec0fc613f3e0876bd36a6ba53ce477f2b989f8732f645dd7Virustotal results 46.67% Heodo
2020-07-31INVOICE WPQ0812 837745.docdoc 6157dbba4f741eefa74c0f002ed410a6117e719c2e626ea9dd8668d7452afa24n/a Heodo
2020-07-31Inv-BCE61-30482056.docdoc 4cb3ccb083a74daebfaa6b646b8294f70cebbba4515d8798b52a41cccde1c7a4Virustotal results 47.46% Heodo
2020-07-31Inv-IA970-38338746.docdoc 74ea191fd9dd8739f62ffc1cb8d3ba2aad0b198006c5e8aab604e362798cdd45Virustotal results 45.00% Heodo
2020-07-31Inv Q3 40201339.docdoc 8f73071e0edbc9813f45554df26b3414e3650b0982700c2ddae27bc950c10d08Virustotal results 45.00%Heodo
2020-07-31INVOICE_PUY4_810454288.docdoc eb06e5d66d21212c7eb73e44c67b0748a034545ff7a5127eba4ca016692e4786n/a Heodo
2020-07-31INVOICE_T457_4191448.docdoc 26a1feed3df8164358b5997371f3ccad341b539859c7ed75914f15c59df315ddVirustotal results 44.07% Heodo
2020-07-31invoice09 776236959.docdoc 3d8ef147ca84e9943fdc850171e2de9c05b0db3472cd05901e4f109e7fbe07f1Virustotal results 50.85%Heodo
2020-07-31Invoice-IH40 559749.docdoc 24faef0a3c46f8fdf60a5fff6f323ebd01a0365dde63a55a242ecfa0455183baVirustotal results 50.82% Heodo
2020-07-31Invoice-B75 329156945.docdoc 31cc2ce5d46e87076266a3202b8fcf83047af212b47c84458caa5fa94d48e86cn/a Heodo
2020-07-31Inv205-466725.docdoc 5399417505ae67bdc2253943f273fe2b69fcdb71294530cbfe0cbe731a251b48Virustotal results 50.00% Heodo
2020-07-31invoice DBEE41{:REGEX:.docdoc e3b83c00a51a401c88f8ab7d52dbee1d71b7a843fdfe5c2a6f3b76464efd77b2Virustotal results 50.00% Heodo
2020-07-31INVOICE-TSP8_87960562.docdoc eae169c0ec808dcf097bfd419bae07e5c001b1157d781d90b037250ea07fd4bcVirustotal results 50.85% Heodo
2020-07-31INVOICE ZZTB779{:REGEX:.docdoc cb27bed9b173d425693fe6c19d0d7502d62645a8fff074790841a362952e9936Virustotal results 50.82% Heodo
2020-07-31INVOICEWZJ7448-603827685.docdoc 8e95611645644103d2ab67a6ecba315228abcad85d986852783b1af75477a63dn/a Heodo
2020-07-31Inv-BK4415 404082134.docdoc dcfb38249b589a264dd4ce2c25853335f1399685fcd68d68c337f308d110a793n/a Heodo
2020-07-31INVOICE-N6 347415163.docdoc ab9e17c09b7e6813c9ba6935c52b277e3af613ec3fee0ec44b8efe0ee7163e2bVirustotal results 50.85% Heodo
2020-07-31Inv_73 022069396.docdoc ea4ec66d739ec6c93a0e5890743a01a5283b804889147308ba45d35ee1f2247dVirustotal results 50.00% Heodo
2020-07-31InvoiceUCC4966_427389254.docdoc 2239e9dfea333b691ad7931b2f663ce27192aa0bfe9b4c7112e98eeddc00ae38n/a Heodo
2020-07-31Invoice_JSS3-441898292.docdoc 2789d1d3eea1e5dcb760faf9bbf395f267ec901bc7c52a67ae60133050897609Virustotal results 50.00% Heodo
2020-07-30Invoice_JFBQ7_37104418.docdoc 2e24bcec136a5b896e730820974bfa9162575d275b2ee669ece097f7b195e4f7n/aHeodo
2020-07-30Inv W2 600130.docdoc 45af81f39aadf17f34aa962cbd9f7c3abe4d49bc3a4ab2400d56c2fd90f50725n/a Heodo
2020-07-30invoiceBAI5_43425299.docdoc 5ae9df4be21b3400965fc280ee49768b7e00b21fde24a904ece809bfa5c19491Virustotal results 50.00% Heodo
2020-07-30Invoice-DKX8 5832020.docdoc e0b443d1ec09adbd575ba91a55e20070722fb169439c7eb5b7fc6acd97f96dd0Virustotal results 50.85% Heodo
2020-07-30INVOICE-BAVP669{:REGEX:.docdoc 1c8026d6bd75a1ea091d6a6676d3a7e3bcba3b17717e21607488b9fdb762fba7Virustotal results 49.18%Heodo
2020-07-30Invoice_XF7_272151.docdoc f299a2c4f0ecc2e57db212cd815c6cdc02bbf1b9d409abda624fd7c2cc80f314Virustotal results 47.54% Heodo
2020-07-30INVOICE_NSH0{:REGEX:.docdoc a4fbb0aaf18ce158238577166a697fa8d6376423a47673cb7ed648f5e75deafbn/a Heodo
2020-07-30Invoice-VTI4{:REGEX:.docdoc 9c1ed7eb18e0fdaae82bfd182321793cbead92d2d90ad01cc41fa34570a973baVirustotal results 47.54% Heodo
2020-07-30Invoice LNM6-315472855.docdoc 01663b94d847370d937c017344092fb204b3fef3bca2c0d26c9f49ebac946525n/a Heodo
2020-07-30InvPGFG9 21574613.docdoc a8ceaf730fe74e1c965d074614c433d6a9a494b5a56fb1ec5ca24e31dc5e8a7cVirustotal results 47.54% Heodo
2020-07-30Invoice-7484_4102567.docdoc bae2af6b9665e503d04df2d1ac30e8b31685c948f248a3aaecdeceabfa1ff9ceVirustotal results 47.54% Heodo
2020-07-30invoiceJEMU5832 9905200.docdoc 8bfad89deb0c7bc99a6838342f6f6044ecf0031ea21397874c52b3b2a616786eVirustotal results 47.54% Heodo
2020-07-30Inv_XBIR02{:REGEX:.docdoc cafd2c780bab54f0e196d1960af4f5ea207d883461efe818b373828eb21e92dfVirustotal results 47.54% Heodo
2020-07-30invoiceQEN755 138668.docdoc f2a8be2190fc82926a24c1d0bc6cd8f554949ebd1fba55ec585b40896ef68bbdn/a Heodo
2020-07-30invoice-GJEN3-8168267.docdoc d7ddeb76f38f0832acc1fc181ab104abb4c0e329c167f5f38a7b89a9947971fdn/a Heodo
2020-07-30Inv-WMSB0_6508177.docdoc 31401e4b72b7965c18197d19cd790dea36e6ff77e50a5f7410c7252228444c0dVirustotal results 43.33% Heodo
2020-07-30Inv24-516208.docdoc dbc64153efaed9d70d1daa4c4099f517617754890fa39854eeefd1fa0e595625Virustotal results 44.83% Heodo
2020-07-30Invoice-W8065_6950118.docdoc c80234a1aae152d166a2463362aac041e4dad5993185be3024f752b9232b2089n/a Heodo
2020-07-30Inv_0 56893855.docdoc 57cd3c6667afd66293fe85bc6632764caa8217677ecf64f34c72677367fd9472Virustotal results 46.67%Heodo
2020-07-30invoice_CRIM1{:REGEX:.docdoc a967428ac71da65c0b8688b11b4a347d2ef493f05efa01b4fe2d3221525486d4n/a Heodo
2020-07-30INVOICE ZEH888-1610978.docdoc 798c06d9311b388019b3f2fa77021d15d509f22c7e077fa45fe55089b901105aVirustotal results 44.07% Heodo
2020-07-30Invoice IYO63 381299.docdoc 94d0324718bb0a1ed17ac390c85e2c5a9447a07fea4a306c0c7e90ea3e12b76cn/aHeodo
2020-07-30Invoice097{:REGEX:.docdoc 8fa0505ff1b7a860ab423d947231b6b2e59abe2a4d99fd134688da5aecd4d8b5Virustotal results 41.67% Heodo
2020-07-30invoice-HU511-16995453.docdoc 5ca7df9652c174fa070ebdc2b1263f810337126a04456f83e8d07cb4e84cce8bVirustotal results 40.00% Heodo
2020-07-30invoice25-14807395.docdoc 4a0c2b7ffc018049812893fc6ba973b212567e436a794f9fde50207835be9d0cn/a Heodo
2020-07-30invoiceUVQC24-145669.docdoc 58c6a8e6e3a76f2f6eb9d5ba4fc17cca3947ef189398f696f10aa06120b711c5Virustotal results 40.00%Heodo
2020-07-30Inv IMVX0-45587036.docdoc 36cf8d664d59d9193e5db213e948b3aa6be4577b234635408c7d2b8f434f0257Virustotal results 41.38%Heodo
2020-07-30Invoice_9-847440.docdoc c9555544657e175bf5dffdf80f7243fd0d98daaaadb245105852b7ad94c52fd5Virustotal results 40.00% Heodo
2020-07-30Invoice_WAZG7146-3991206.docdoc eff2527b0d1491dcfc46be3cf12fb6a749988c8c869f06e9adadc236474b60adVirustotal results 40.00% Heodo
2020-07-30Inv_EJ26-00043390.docdoc 84f1793acc6d7c229aed03c0334fcb223eb89415c1d96b08822e988c1a5652afVirustotal results 45.90%Heodo
2020-07-30INVOICE_3 0647344.docdoc 12d1ea6204e341522115a4cd2fe28cfe7bdef98bfdc7acd4be32e011346efc60Virustotal results 45.16% Heodo
2020-07-30INVOICE 05-232212.docdoc c4ab3c41df5329c648d2f8ca0658720f2c624259d95b3246fd3d0ca1dfed9fdbn/a Heodo
2020-07-30InvoiceK62_606945675.docdoc c99f367eba08850d6a62e56f9957b44656cba498c67bd78b284d5fafa7bff959Virustotal results 45.16% Heodo
2020-07-30Invoice-VX458_2093614.docdoc eed8aa076d2b58e5ced3c900bcc72f67191b09fd9b11fb7be5afd3dc6e79591fVirustotal results 45.90%Heodo
2020-07-30Inv_LU067-58478741.docdoc 1bb56e849596fd788a8c9905d08684f8043a4cc4e72209d9978d78aa4f9f6f22Virustotal results 45.90%Heodo
2020-07-30invoice-H282-6582296.docdoc c61b78074e3167d135dac44d98e6a8e2f8e47a25735c3fd3ed83db197892f9b3Virustotal results 45.76%Heodo
2020-07-30INVOICE BR38{:REGEX:.docdoc 4f2ac897eb8a71c9f2e1fe0299c615ad0d8a0dbd7b9e08d89bd6e0dde86e1caaVirustotal results 45.90% Heodo
2020-07-30invoice KWN95_74241396.docdoc 410fc3586735016b4a85f730247561c37c51d8887f07200730fe831c5fd58324Virustotal results 46.67% Heodo
2020-07-30Invoice87-20203609.docdoc 446037ce81d186fd02bf65e0c330850203c818bce8a72d542cd61fb1f12c7467Virustotal results 45.90% Heodo
2020-07-30Invoice-W1-9999421.docdoc 88a8cc5f762749790bd0cf686c79950ba34466fad7753f87b86a7c94a4ea6e8cn/a Heodo
2020-07-30invoice-UJ368_30285696.docdoc edffc299063e343351d529e84129e771c7c6e2b1894d86ebc91c78d0bad815c8Virustotal results 45.16%Heodo
2020-07-30Inv-WK6 20212900.docdoc c9014beaea9142158349ccc46c86a73d289d55d17cfa3c02669b26b00aa9faa3n/a Heodo
2020-07-30InvoiceBK90-446213914.docdoc 55d0bd650e90d7bfb5b9af758688a4006db13679c53d8197e81f03701fbf52f1Virustotal results 45.16% Heodo
2020-07-30invoiceF917 171083717.docdoc 0cfa9d40b08e00ae686376bd8a2c6f038a0bdb6ad27e953b94f1b1643cf54d5bVirustotal results 45.90% Heodo
2020-07-30Inv904_370821.docdoc d5a5e07b856fa95bb954729db5a02b3415dd89b0be6048cc7d0e3f0a8afd89f7Virustotal results 46.67% Heodo
2020-07-30INVOICE 4056-16536429.docdoc d39ce67865da7efb2895401ef8d8f54bdd3a7d09784d012b1068d4b5ceaf44cfVirustotal results 45.16% Heodo
2020-07-30INVOICE WQVK5-5401513.docdoc b56bf0f5aef789b7a05528c971f8f709495c67e7b3025fb13dba152446d9c197Virustotal results 46.67% Heodo
2020-07-30invoice_100_86323612.docdoc 35eca265c89361dfa2669720c5fe3ad75c2da020651d95c95782896fbf299c3dVirustotal results 45.00% Heodo
2020-07-30invoice-93 508021437.docdoc cf7363d569abe51412e602a505dbb2d3604aaf97ee7c71db42e66b09224dce54Virustotal results 44.26%Heodo
2020-07-30Invoice_XPZQ045_499580138.docdoc e4b250743b33a9f2c4d7d065280244cd367b366d401f781c2a99eb69eaad51a3n/a Heodo
2020-07-29InvoiceRZ9926 8687775.docdoc 9682cb3fed20b168899452201908168de9b2c2d82530d7227a4474b8b2587eb8Virustotal results 43.55%Heodo
2020-07-29Inv-MLTZ30 591328793.docdoc 40a19219a853bbc60201d4cd4fc226bcdda0966f87f05dda562d113d65c8ce67Virustotal results 43.55% Heodo
2020-07-29Inv-R193-900333.docdoc 81d3e8f15ad09342186fbe8b601f63c809fd415ee1c5cb4b739fb3ab7a47b99dVirustotal results 43.55% Heodo
2020-07-29Inv-DI1-084004359.docdoc b6eb1c7760e06c0bf914bc6f8d26d4aa98a1d859d71fed9d6712db95af81f5f0n/a Heodo
2020-07-29Invoice NWIS392{:REGEX:.docdoc bab24985fa20dca7f015976c0212909f59429d181ee874074692fa835b0f604cVirustotal results 36.67% Heodo
2020-07-29Inv_CGN820-487857653.docdoc b56882372e147eff336dc2f949fd0a17aff2966fac9c0f13c28a58e43e2d1aadVirustotal results 36.07% Heodo
2020-07-29INVOICE ZYO5431{:REGEX:.docdoc 0538723c17579616d35fe643f326b6b5b81319f1e5081079bef5cfc6cc2eefc3Virustotal results 36.07% Heodo
2020-07-29INVOICEMUL2-954545.docdoc 42d013d9cce79a7e86da79f6dd3d25b04f8460636e45c85ec23d1a962173f389Virustotal results 35.48% Heodo
2020-07-29Invoice TW937_665959779.docdoc 4ece79e02379040355a4ff12f9b622c675a9910c6f10d98c393b790dc0c9536bVirustotal results 36.67% Heodo
2020-07-29INVOICE-HCWV8 1652144.docdoc 9031e6db6e2296c8de8b8f71f6e03e3251e9b3497acb57e52ef2a1a1a6b646e1Virustotal results 36.07% Heodo
2020-07-29invoicePFQW6-59265459.docdoc c9908873e05408d13895e8545fd5b9e3eb95032f5e363086b19e6a14a8ed7075Virustotal results 35.48% Heodo
2020-07-29invoice-YZ15-06829689.docdoc eedf761aed061fa63744aa541d5ddef3b7d53978fd00882cbf9fb0f88bd82550Virustotal results 36.07% Heodo
2020-07-29InvSO9 136788343.docdoc cbf7197df6cd966772e966e4e8a67f74d1b090ade41e58f80f706a071ac64286Virustotal results 36.07% Heodo
2020-07-29Inv_DPWQ767 780819447.docdoc a19deec65bef4fe1030b463be94b414c4b4b1bad207acfc2fd8df6bb5bbbefdbVirustotal results 35.48%Heodo
2020-07-29INVOICEZ1 685722188.docdoc c65c81e1a76fdf4122271da9b47b9b45e0a45519719f468e7539eba8ab8f9d5fVirustotal results 35.00% Heodo
2020-07-29Invoice UD425-645249730.docdoc aebd20f5f33a243e226932532fcb08c7f948d679ac4c6df277aebcc4f0571894Virustotal results 36.07% Heodo