URLhaus Database

You are currently viewing the URLhaus database entry for http://itgastaldi.com/wp-includes/b5mzdpb-si-99862/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:421931
URL: http://itgastaldi.com/wp-includes/b5mzdpb-si-99862/
URL Status:Offline
Host: itgastaldi.com
Date added:2020-07-30 12:03:34 UTC
Last online:2020-08-29 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 12:04:02 UTC to abuse{at}staff[dot]aruba[dot]it)
Takedown time:1 month, 0 days, 7 hours, 35 minutes Bad (down since 2020-08-29 19:39:55 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01INVOICE_BYV68_148819301.docdoc 56916942bc59a1ae0cc030beaf907b54631390e0a5fa7d75bce1f120df88d843Virustotal results 47.54%Heodo
2020-08-01INVOICE_107_217965528.docdoc ec39e7db8df5d0c11991de7b6482accdc4ceb42d31613c528ed2529bcd6c7312Virustotal results 47.54% Heodo
2020-08-01invoice-816-31036130.docdoc edfc4402aa1edeb3963b39254898ba90853d7d534f422df002db968975306740Virustotal results 46.67% Heodo
2020-08-01Inv OZCE9 4841562.docdoc cc6c1f937278d090d1fdf3b960f92e0222e026d418899b9f64769304616277b9Virustotal results 47.54% Heodo
2020-08-01Invoice-IEN50-0174054.docdoc 3319161bd68eb25b4c036ad8cfeda6934ae3c38a12713c9f109818b03390c7acVirustotal results 46.67% Heodo
2020-08-01Inv-HQDO1606-9482382.docdoc 5501f723697b0f6c5eb89e873828133dc1b9f465321a797930c9a071d291fd18Virustotal results 46.67% Heodo
2020-08-01invoice_DAUT468_1292845.docdoc 56764b6f66de3b045860f5398b4fb8f24c11ca8d959231a6b0f63d82626f5a55Virustotal results 46.77% Heodo
2020-08-01Inv-031-9061510.docdoc 7525e9c3dc222fb7e0bc897856d98ec233aabda4ecff64336788e29ad6e2dec9Virustotal results 47.54% Heodo
2020-08-01invoice-8-640676537.docdoc f0f8fc1e5b217106feab3dd3060589f3f87760337747f52bef4de0cd6ddf298fVirustotal results 45.90% Heodo
2020-08-01invoiceBS131253616668.docdoc fe7b1ae9d99df37f1bc4e34b3cd8187924aee366b4e3470ff0a2466efa35a76cVirustotal results 47.54% Heodo
2020-07-31invoice_08_28426497.docdoc 58716951590c1341ba410dd9f789899240e75b017604d8fc2d49e86f843fb389Virustotal results 46.67% Heodo
2020-07-31invoice-10-6462636.docdoc 29a33547180f8a2c21bceb0424f9724b50dbdf57104000d4562a96c1c8a4f241Virustotal results 50.00% Heodo
2020-07-31INVOICE-2589-6420292.docdoc e272cd40c1e1f839d797cbdfd1574d19a1cf68c11f47c04172e944d06ce6f525Virustotal results 46.77% Heodo
2020-07-31INVOICEIVK4953838643.docdoc 69574cf913cfd357b51a19e616dee5e675a28e3a397826f7fc4ec4d9c8ef61d9Virustotal results 46.77% Heodo
2020-07-31InvoiceDW65116852375.docdoc 1489edcaeb77576b964e01c0afecd1d1d5ce35b05f335e4473be0fe3255e802fn/a Heodo
2020-07-31Inv 3 598014542.docdoc 7ad485f73ed801fe057ee89153970c59e3dd7331d317808f0f04c7a138d6aebcn/a Heodo
2020-07-31INVOICE-J3150-17935677.docdoc c13e46d1796c767f42fcb0b83df4e4e8775ff207b91c3cc649a3fe3f4690a89fVirustotal results 49.15%Heodo
2020-07-31INVOICE750815599.docdoc be9580ee19139809910c67fa4e0f35bf76001f0fe80e6923b8ac0a4c6365555bVirustotal results 46.77% Heodo
2020-07-31invoice-CSTA3723-013837.docdoc 604d8d4b25d82a9fa60525c21b4f7ff9f0edf0d00aea808ceef6bef8e9e4f4c5Virustotal results 49.18%Heodo
2020-07-31INVOICEWSII770781001.docdoc 9420fbed8bbf98010e41a960a8bf2314eadd6423e12163e88553e78439867a83Virustotal results 45.90% Heodo
2020-07-31Inv OUAM218 063769034.docdoc 25c12d4806108d86841e67f79d958093ac0ee1b28322cbeaae2e7527322b66f5Virustotal results 46.77%Heodo
2020-07-31Inv_KJY8_208046.docdoc b2671d67c068a833209094947cc1f15c6169a854e02006f116cd342528850f15Virustotal results 47.54% Heodo
2020-07-31InvEQHL1820091999221.docdoc 37524ad76f2f5b4eab6611654b6d4db507e547ccf9b0490f0a011d2900f7ceadVirustotal results 47.54% Heodo
2020-07-31Invoice-IQZB838-76139081.docdoc 7d45b681bf88eb9dbaa17bc604d6aa7df3cfc0c3bfaed371a08d5c1805df192cVirustotal results 49.18% Heodo
2020-07-31Invoice NSQD2 908414350.docdoc 72b6a8f04525307c44ce8cfe6b0fa344fb42d2273826c3406e7bad305b933afbVirustotal results 47.54% Heodo
2020-07-31invoice_8998_388412.docdoc 7215486425975ce0aa1c7e3e980b1c70b6bde41a872a7b946a2445fd733a3701Virustotal results 46.67% Heodo
2020-07-31Inv-W01-24532764.docdoc 2ffaeb1accf696b047193a4fb4a47238f2a3b582415a75cade2bfe9b69982a2eVirustotal results 47.46% Heodo
2020-07-31INVOICEOXF17866347.docdoc 1f67d01d996fcff5abb353bc5fbb354191d96c315d7341a680029f01573dac3fn/a Heodo
2020-07-31invoice-OYW65-6680937.docdoc 80b42f3e3f2aa0e14a13b15336be50853898ab711533f01420be367c69d9911bVirustotal results 47.46%Heodo
2020-07-31Inv-B6548-8248834.docdoc 6157dbba4f741eefa74c0f002ed410a6117e719c2e626ea9dd8668d7452afa24n/a Heodo
2020-07-31INVOICE BDJ174 336323766.docdoc 4cb3ccb083a74daebfaa6b646b8294f70cebbba4515d8798b52a41cccde1c7a4Virustotal results 47.46% Heodo
2020-07-31Invoice_POK02_834038.docdoc 99b43c6e14bfddc98c87cb9dc35cd89b59a2797e8893f5005eb0868226027f35Virustotal results 46.55% Heodo
2020-07-31invoice_RZK2360_320465.docdoc bdfb558047f777f0a0fb66e81bab1d2eefe9a0041a72d203b52456717f30a594Virustotal results 44.26% Heodo
2020-07-31InvLSN126439090.docdoc eb06e5d66d21212c7eb73e44c67b0748a034545ff7a5127eba4ca016692e4786n/a Heodo
2020-07-31invoice-DKJB196-7153494.docdoc b6437e7882339828ef75527bacda816301bc6b0ecbbcaaf400f830755039670fn/a Heodo
2020-07-31INVOICE-GJJX25{:REGEX:.docdoc 3d8ef147ca84e9943fdc850171e2de9c05b0db3472cd05901e4f109e7fbe07f1Virustotal results 50.85%Heodo
2020-07-31invoice_9741_514203880.docdoc 24faef0a3c46f8fdf60a5fff6f323ebd01a0365dde63a55a242ecfa0455183baVirustotal results 50.82% Heodo
2020-07-31Invoice_LHHZ7937 1174108.docdoc 0154af8049b8a7ec498151777f31d6e971c61bdfc439fe1a8150ad0f69c0e4f8Virustotal results 50.00% Heodo
2020-07-31invoice QEVJ7_58543380.docdoc 5399417505ae67bdc2253943f273fe2b69fcdb71294530cbfe0cbe731a251b48Virustotal results 50.00% Heodo
2020-07-31INVOICE SWU0{:REGEX:.docdoc c8586306addfc533e0c3ee2c72a3a19e28d38b0e41207d72632708e52ee965abn/a Heodo
2020-07-31Inv-V791 7080964.docdoc 36edfa2da0e0eae3557b74c315c7dd66eb25f209f7e207682647a475984eb47cVirustotal results 50.85% Heodo
2020-07-31INVOICE-X2134_545163843.docdoc b6ffa6767e3b7c53645dc329280108bc5145c28514aad30f28d9b628bb3bed9dn/a Heodo
2020-07-31INVOICE_82-62518023.docdoc 8e95611645644103d2ab67a6ecba315228abcad85d986852783b1af75477a63dn/a Heodo
2020-07-31Invoice-RF8987 0301018.docdoc dcfb38249b589a264dd4ce2c25853335f1399685fcd68d68c337f308d110a793Virustotal results 50.00% Heodo
2020-07-31Invoice-QGLK541_686712201.docdoc 105f7c3a68f898a8605a251f25363f508285b8d32b8d6fd1f1e00565dcb4e3fcVirustotal results 50.82% Heodo
2020-07-31invoice-UDLW116 617625.docdoc 468c03e5514c45db80f93d359506f99bcdc95812e5e37680b531dd2fd1cba7f2Virustotal results 50.85% Heodo
2020-07-31invoiceVMA9108-74786854.docdoc 2a378624ddc963eca6688d3c25bec4bc7637de2153e1f23f594622a03f6e600dVirustotal results 50.00% Heodo
2020-07-31INVOICE HDQO59{:REGEX:.docdoc 2789d1d3eea1e5dcb760faf9bbf395f267ec901bc7c52a67ae60133050897609Virustotal results 50.00% Heodo
2020-07-30invoice_MII27-9588176.docdoc e42656550ed8d746cb8b453d28e1ca374da03e76bdf6b65633f3b1bedd1e051cVirustotal results 50.82% Heodo
2020-07-30InvAV961-1696167.docdoc 213e581104ed3930497515d2be67c1c61a9ab1060474d3e43986aff52b418099Virustotal results 51.67% Heodo
2020-07-30invoice-RF3-691122739.docdoc 5ae9df4be21b3400965fc280ee49768b7e00b21fde24a904ece809bfa5c19491Virustotal results 50.00% Heodo
2020-07-30invoice_OLLU700-318568.docdoc f2bef647cf5f376c3807d6693d2fcf28cd42e71629fb0cd64847604a0e189081Virustotal results 51.67% Heodo
2020-07-30INVOICE_028{:REGEX:.docdoc 1c8026d6bd75a1ea091d6a6676d3a7e3bcba3b17717e21607488b9fdb762fba7Virustotal results 49.18%Heodo
2020-07-30Invoice ZA69 9692814.docdoc f299a2c4f0ecc2e57db212cd815c6cdc02bbf1b9d409abda624fd7c2cc80f314Virustotal results 48.33% Heodo
2020-07-30INVOICE 337-949123.docdoc 2ccfe3cb5c9044e383e930aa33fb0e74fed092845982048455384c26475e9149n/a Heodo
2020-07-30InvoiceSLB08-9737784.docdoc 9c1ed7eb18e0fdaae82bfd182321793cbead92d2d90ad01cc41fa34570a973baVirustotal results 47.54% Heodo
2020-07-30INVOICE OV616-210332636.docdoc 01663b94d847370d937c017344092fb204b3fef3bca2c0d26c9f49ebac946525n/a Heodo
2020-07-30INVOICE52_407971082.docdoc a8ceaf730fe74e1c965d074614c433d6a9a494b5a56fb1ec5ca24e31dc5e8a7cVirustotal results 47.54% Heodo
2020-07-30INVOICE TASX33{:REGEX:.docdoc bae2af6b9665e503d04df2d1ac30e8b31685c948f248a3aaecdeceabfa1ff9ceVirustotal results 47.54% Heodo
2020-07-30INVOICE 70 881141780.docdoc 1511e952c392ec9edc446fc09733a9942c3d5ca1be0b69035f348f159e7f5acbVirustotal results 48.33% Heodo
2020-07-30Invoice-SPEG132-0328248.docdoc 58c9d212e36aac17066b82d0856064919fdab691e2537e5f0ffdeb11df502d53Virustotal results 46.67% Heodo
2020-07-30Invoice_243-195363515.docdoc 0f6527f500737519f3c060a88954c4d36d6a1cfe65f609f09f334e5fcc8f6925Virustotal results 48.33% Heodo
2020-07-30Invoice130_18777554.docdoc 9806fdaf573ddea01044f37824909d64b348a8bcbe003bcde925954e14746627Virustotal results 43.10% Heodo
2020-07-30INVOICE T792{:REGEX:.docdoc d9bd2eb0111b6f7391edbb640b8dc6e6412e77d2fa3121149bded48f50d9e75cVirustotal results 44.26% Heodo
2020-07-30Invoice_146 9877506.docdoc 57bcd0ce642158f431bcd37dc2223f9c3186275eefa03ad35deff1fcc99de5abVirustotal results 45.00% Heodo
2020-07-30INVOICE-NXA9564_13161557.docdoc c80234a1aae152d166a2463362aac041e4dad5993185be3024f752b9232b2089Virustotal results 44.83% Heodo
2020-07-30Invoice-RVX336_03188403.docdoc 57cd3c6667afd66293fe85bc6632764caa8217677ecf64f34c72677367fd9472Virustotal results 46.67%Heodo
2020-07-30Inv-I17-947955.docdoc 1b6fd0e9210a891184b54f0482b18998204e81b7c6a03338edb3811eb2701fd3n/a Heodo
2020-07-30Inv_EMG611-62713871.docdoc bb327388685cb8ed44d6a6fd33dce9e815ff1f7614fb81e9d73abc59cf70a35cVirustotal results 40.00% Heodo