URLhaus Database

You are currently viewing the URLhaus database entry for http://skia.com.ph/test/0b-y6-919/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422577
URL: http://skia.com.ph/test/0b-y6-919/
URL Status:Offline
Host: skia.com.ph
Date added:2020-07-31 07:01:10 UTC
Last online:2020-07-31 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-31 07:02:02 UTC to abuse{at}he[dot]net)
Takedown time:14 hours, 53 minutes Good (down since 2020-07-31 21:55:18 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31INVOICE 08 1416271.docdoc d9df9c11966105eb6d7c6e8755e2efb6ea5fd54974fff23d390396b8ee1c746fn/a Heodo
2020-07-31Invoice GD50 629595215.docdoc 604d8d4b25d82a9fa60525c21b4f7ff9f0edf0d00aea808ceef6bef8e9e4f4c5Virustotal results 49.18%Heodo
2020-07-31invoice-CN347-039285291.docdoc d435dd55cb5ac574d2109b9052330650fb4c355ff4cb2533077281558e7d4de9Virustotal results 46.03%Heodo
2020-07-31invoice-GTYJ6-087195044.docdoc 56e8a51e917d57655dd5612da8b9618280c29273e601c8628c787029996d1823Virustotal results 48.33% Heodo
2020-07-31INVOICE-4-5654675.docdoc f7188943259ba89e508eeffa4bd48ce022205b06f13e18944c59e419604dd722n/aHeodo
2020-07-31INVOICE-D893-469550.docdoc d4c0573790c2e02c30dc3ef6e219a26840751e18de0537fb023782af9db88116Virustotal results 47.54% Heodo
2020-07-31invoice-71-593453.docdoc 015ea078c5fd0a7e7358750b113536aa28746f179954e4c37e6185b99888c39dVirustotal results 46.77% Heodo
2020-07-31Inv_5508_179993.docdoc 8d668df833984a5c527237ca2ab0cafd0d9358925912ce0c64cfb8fb749d09f8Virustotal results 47.54% Heodo
2020-07-31InvoiceJF8494782925.docdoc 2793dc7590ad4da3c118e4aac6a771ee48f213454bea29f708b1d4590fcf2ba8Virustotal results 46.67% Heodo
2020-07-31InvoiceJF8494782925.docdoc 2793dc7590ad4da3c118e4aac6a771ee48f213454bea29f708b1d4590fcf2ba8Virustotal results 46.67% Heodo
2020-07-31INVOICE K4796 519192.docdoc 286e883e3fd7042dd61a284aafd1bb8cf55e274a5a5cae78da6f6c2e8084a24bVirustotal results 45.76% Heodo
2020-07-31INVOICE_8004_073665871.docdoc 946cd2d84da75bc5bec22111b5edc5dc80f8cdfbc8ab53dc8a71b23999fb4565Virustotal results 47.46% Heodo
2020-07-31Inv-UDEP3971-3333660.docdoc 5e3e4c0db013c193ec0fc613f3e0876bd36a6ba53ce477f2b989f8732f645dd7Virustotal results 46.67% Heodo
2020-07-31Inv-L0166-331833128.docdoc 1610113eacc5e61b5d26ffd007e56edd58fc824c44c0c235f6f8f434acc125deVirustotal results 47.54% Heodo
2020-07-31INVOICE_DXS899_40873396.docdoc f38d973c25ff2fc00109ee8ed445e3bdaf3fcaeff6db54b863ad025a9104ae24Virustotal results 49.15% Heodo
2020-07-31INVOICE-OC7-43747272.docdoc 7edd2fb2647b744d19d23b98e6d7a3153179747d89b67194968d70182b856e73Virustotal results 45.90% Heodo
2020-07-31InvoiceQC70399841563.docdoc 8f73071e0edbc9813f45554df26b3414e3650b0982700c2ddae27bc950c10d08Virustotal results 45.00%Heodo
2020-07-31Inv-4-9410011.docdoc 1e78d834b4871e8021b0bdbff55c32e9a28bbb0f6901965f9c2bfe6c2ee9eae7Virustotal results 45.76% Heodo
2020-07-31Invoice-2387-7970180.docdoc 26a1feed3df8164358b5997371f3ccad341b539859c7ed75914f15c59df315ddVirustotal results 44.07% Heodo
2020-07-31INVOICE-RB2-7135488.docdoc 3d8ef147ca84e9943fdc850171e2de9c05b0db3472cd05901e4f109e7fbe07f1Virustotal results 50.85%Heodo