URLhaus Database

You are currently viewing the URLhaus database entry for https://www.albazai.com.sa/stats-json/invoice/wr32ce5/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:428625
URL: https://www.albazai.com.sa/stats-json/invoice/wr32ce5/
URL Status:Offline
Host: www.albazai.com.sa
Date added:2020-08-10 18:14:05 UTC
Last online:2020-08-13 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 18:16:03 UTC to abuse{at}amazonaws[dot]com)
Takedown time:2 days, 23 hours, 37 minutes Poor (down since 2020-08-13 17:53:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13LM0101351878XJ.docdoc 80d13e5784bd9233b52f35165e2760d170f1603ab6ba1d2a634c62c34068e412Virustotal results 60.66%Heodo
2020-08-12ZGXR_TAP_080120_XMP_081220.docdoc 97feccf3c91f6d0275ecafdf2bb2d3a869dbd30f1ed7e87db533ac6a63678fb5Virustotal results 45.90%Heodo
2020-08-12Y_IAU_080120_SMO_081220.docdoc dd4525e6914fa0fd2f91bde41f2df30ef8857b9f08c19e0a106ec78098ab63c1Virustotal results 40.00%Heodo
2020-08-12DOC_LP2926748224LK.docdoc 0ccc815e047e5c8bc4824f7c3f963bc4757a6a6efed1eba12ebd366fd1fd4c09Virustotal results 36.67%Heodo
2020-08-120239079450439033857828.docdoc b87ff30cc3663efbc1f5415e7edd1849c8c42d44232ea54e2bf7849ad5fe122cVirustotal results 32.79%Heodo
2020-08-12DOC_GHM_080120_URD_081220.docdoc f7839e4820b80184243adc516719a06331ca2214d95f1f803b33f2884cc5cb22Virustotal results 28.33%Heodo
2020-08-12FILE_P7JKH71VHA.docdoc d7f3277a4a174d159d4069701a2857edd60b6aee23a19b4cd8df9964b9db6634Virustotal results 28.81%Heodo
2020-08-12PO_08122020EX.docdoc 555eec27e492447bbe5bb1313613ba7edda123de03e384227bf9440ec1965da9Virustotal results 30.00%Heodo
2020-08-12INV_77786023.docdoc d49ceafe59b20372032a83bee0b04f5ea7bc91c92258d386bac309f97206627cn/aHeodo
2020-08-12INV_NON_080120_SEV_081220.docdoc e6aff4596a71a4b0c501dd7850553e31385190366a94fd6dc636e0664665e131Virustotal results 27.87%Heodo
2020-08-1268797725.docdoc e9b11c739e5d0a771cb4efdc41e3d084460fa975e42a309294ab185eb2836728n/aHeodo
2020-08-12REP_IE0448377384DP.docdoc d4c552ce903e8455566a265fd7ba1a276db5bf2a88ad998b7c93e89989d1aeccVirustotal results 27.87%Heodo
2020-08-12FNLN201WUWQ.docdoc 9ec7ef1bc0701307cd1c1ddc9a252a989e724abc0705fec55d8bceefc7ffd087n/aHeodo
2020-08-12FILE_0368961387090.docdoc 265373b64df48b69c520486d767efa8c028ec29d4b7cfaba05e0459400ad0b2eVirustotal results 28.33%Heodo
2020-08-12DOC_QQJSWQRJ.docdoc 16d2a267cba033c59963d01757e9800048ac1fbcf7cb53595dad21ee5bb027c6Virustotal results 27.12%Heodo
2020-08-12IFO_080120_SLY_081220.docdoc 75ef3d95b4977d636664bda5c6cd5f0444ecc1ca7d0753f424bfe829474fa330Virustotal results 29.31%Heodo
2020-08-12INV_RO4241949330YN.docdoc 0d6aca5233bf958211fc44e3eaf4a6c88b1bbc68c716758cb805d62b93306b0cVirustotal results 27.12%Heodo
2020-08-12DOC_EQX_080120_XZT_081220.docdoc 214f91b9b3ab2ea28b14536241901516f9141df4e12fd3b2ce52088fef0a3734n/aHeodo
2020-08-12REP_VK8005863844WO.docdoc 121ffe67a99b7c122a7a9812f00830d7a5e9605d6e18ebd7d84e74f2c22a6670Virustotal results 28.33%Heodo
2020-08-12FILE_3857820645469560763.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12REJ_50989198.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 53.33%Heodo
2020-08-12BAL_RK4289972725LB.docdoc 274183210ef39b2e9096bc782cf02e85e4101e18805e59ce55692d90bfc9a51bVirustotal results 53.33%Heodo
2020-08-12BAL_PO_08122020EX.docdoc 6f973501cc2dece992aa2f959f8e352e424e96f06abb300b4bed8bcf2ab4bf34Virustotal results 51.67%Heodo
2020-08-12Z_GCF_080120_OTM_081220.docdoc 035f407beebfa56f402f686f6bf72e0217cf4d4b06106b1dcb3877e1167fdfd7n/aHeodo
2020-08-12INV_50153043.docdoc f9f228e552c3971983d4b5909776c052df083b9b41f65f764ceba0dc9d6219e7Virustotal results 52.54%Heodo
2020-08-12FILE_44269813.docdoc 455f02233220edb99d4f99f02ec20a5ad8b3a157bacaeae2dcac14f707613869Virustotal results 53.33%Heodo
2020-08-12MF1801216955WN.docdoc 29a8f854081e5f20b6709851863472cd33a1863fbed4867153edf6fcc5e86dc8Virustotal results 51.67%Heodo
2020-08-12REP_ZK7471604509OX.docdoc cbb96bc7d3aebe42ae0bf197554d7224fd693a6e864fdc3bc2f7b5e466986485Virustotal results 53.33%Heodo
2020-08-12X_THETS53A5.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 54.24%Heodo
2020-08-12LVE_080120_XXP_081220.docdoc c1225a96e801b4de5bcedc55202f0c3d82b69ee6c31d748289803811a450cbb1n/aHeodo
2020-08-12INV_9608090757.docdoc b06fa4a03274712b0d1bea0d2a5d1afc2c71541acb80b1054d31b661b67514ean/aHeodo
2020-08-12021016312741.docdoc aa55d9773d502d754bc6b42490b47bfee92552e1929e24550aa6d73da03c9fecn/aHeodo
2020-08-11DOC_PM9672068299MQ.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0Virustotal results 50.88%Heodo
2020-08-113113118791355134583562.docdoc 896db11ae3dd47bbbdaef6de2e44964142461c89f1fd377015b96affcc75cf60Virustotal results 50.85%Heodo
2020-08-11PO_08122020EX.docdoc 6ef92d63f441bea978f148ae6b93fd26d8feb4716042101e28ebacd3101f6eb1Virustotal results 51.67%Heodo
2020-08-11INV_881366925830316155575.docdoc 9d0bac325fa1b829f25ab0696d273be2b1eb46da5d94f3837ed30ca9c495b4c7Virustotal results 51.72%Heodo
2020-08-1118338817.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-11PKY_080120_MFE_081220.docdoc 6c5380e193b725ec3ea512a3146d8c0925c7c489800dad57d1b4b2f940751d22Virustotal results 52.54%Heodo
2020-08-11FILE_N9VHIX9.docdoc ddcfa6beac3f79149c8786ca9af44062331f6222f46f5ccfb1429ff859308dacn/aHeodo
2020-08-11FILE_82216446386843.docdoc cbacf0f510ec4c1a5cacd10259c0e6075f65050b602e47fc67409aefcb6af60eVirustotal results 48.33%Heodo
2020-08-11DOC_PO_08112020EX.docdoc 597ed34e38d2b0c2313a9d95a421d70af23bd88d60c66de8e04f4127d425c6e3Virustotal results 50.00%Heodo
2020-08-11INV_XG1725380716GR.docdoc 544045a4220133bbe6fba0dc73c65a21782329649d1c4ab92cf883cc1dbae677n/aHeodo
2020-08-11CP_WXU_080120_JPX_081120.docdoc a2a62e03ec04c67483a2fb77ef3e3884f08feaf9688ab9c7105bff6fa93566c3Virustotal results 39.34%Heodo
2020-08-11DOC_99775847.docdoc 8e5f3490181127db4ae19a0c19a2aab3233016bcc64272ec836a68426ed0ae89n/aHeodo
2020-08-1188147457.docdoc 16004f742c9d51196b4a45e665c360f8eecec87448f703ca65f1ca9fd2748debn/aHeodo
2020-08-11TNK_080120_RJU_081120.docdoc 8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673n/aHeodo
2020-08-11EX_LEP_080120_YXV_081120.docdoc f288fc67d607003c58bc277bf9c779e8d206ae43259b9cea64be737d4df22a7dVirustotal results 36.07%Heodo
2020-08-11DOC_PO_08112020EX.docdoc 819a2c8717a367ec5a69f4a0ddc0eed9f469fea2415f8b0e3defc94d21813f41n/aHeodo
2020-08-11BAL_883031213330752055.docdoc 45f394754ad1d39a4f259cf95a0c0802736f9419c5837a20e76585bfc8c23d12n/aHeodo
2020-08-11DOC_8012266043130620208146.docdoc 208687883ec482d8ef391621a964345892dc3af09bbb0797af59fb18935df319Virustotal results 32.20%Heodo
2020-08-11PO_08112020EX.docdoc 2cee94dcc3b71779bc2314dfd47fa9e17f89e3344ff4a3f00a21ab86f5bff9e1Virustotal results 31.15%Heodo
2020-08-11BAL_206769959034975465576757.docdoc 3cbbd9298f3b6d77456b687dba10ecf5f45614573ed3be647167c5e96ef16552Virustotal results 30.00%Heodo
2020-08-11FA4349989802CE.docdoc 8bfd3587537db9be73cc189509eab9796c40a95566b79753724b36ce7dce7c19n/aHeodo
2020-08-11DOC_OIZATZN8E4G0C6X0.docdoc e86b2beb2b36a9530c75a89e078c28b809fca63518cebdcd860f0135e899ae90n/aHeodo
2020-08-11INV_XAR_080120_YIF_081120.docdoc 2b773fc9f00dc3faefe05dca9697347ab80fb8224235bd96dec05698ea4139f8n/aHeodo
2020-08-11FILE_8121616853104094329419228.docdoc f266dfe6eca386777143d38c655e759b22fba117bcd9138c44354938222c1673Virustotal results 25.00%Heodo
2020-08-11FILE_WK1323098334PJ.docdoc 1455b3fed34c9f9524557c1681b4ea63f86ce164113c4c2c15bcf5e70d14b251Virustotal results 24.59%Heodo
2020-08-11CA_PO_08112020EX.docdoc c4c90085f1c458859b18e0503f5505debd672b4ad9c0b13a043b89a9e7bceb72Virustotal results 24.59%Heodo
2020-08-11PO_08112020EX.docdoc 159adf2257291ab010f4ab9a6518eca15f59b22b9dca9f3d52dee5f9fae80c00Virustotal results 24.59%Heodo
2020-08-11YES_080120_TRO_081120.docdoc 5a8d4ffcfdfbc1a6381d52664660dad53c880513959ca2ab2b0632aea4084347n/aHeodo
2020-08-11BAL_BC8679974930VO.docdoc 7bce19ab2ebbfd54b04f581b9e81b10e82557befdb1b22eb3d0fdabbc8826a5cn/aHeodo
2020-08-11PO_08112020EX.docdoc d0344a04dec8d322f179b4b71125fe49e20df1ccbf4580b250f77f49fe5c00den/aHeodo
2020-08-11VWH_080120_WRE_081120.docdoc f525a4c14fe2ed5ebc5a3b09a1a8ce10dac9f2df2449069c3b3f493878b20c03n/aHeodo
2020-08-11MR5843085168HC.docdoc 8fb11051f6a6f86033a5491a0ecaf31b9127f53878d2cda6b6adfd79a47ec79cn/aHeodo
2020-08-11S_PO_08112020EX.docdoc c767b2934e512dcdfb0c6efd95e7c7ba795fe9a09d27479585cbb066d145ef5bn/aHeodo
2020-08-11HJX_080120_FQG_081120.docdoc ff1106fde0971d8fcc68af9662bbb95aed36e07900ddb0fba6f66cf8bca98fben/aHeodo
2020-08-11REP_JHB_080120_RBI_081120.docdoc d89122b3343485f18e72909f9c77fca6203a619ab86c89f197dcf234b555785an/aHeodo
2020-08-11PO_08112020EX.docdoc a25d744b9ab5721fea6a8a803706464d349d67259f7c7f2c7188c52cb3ef7e9cn/aHeodo
2020-08-11MGG_07069365.docdoc 3810e0738ebf1de060cac1ead88d64aab4276ecca45fd1e751ce621e5ec084ebn/aHeodo
2020-08-11PIJ_XF9779333225YZ.docdoc 4a4a4dd5d1a19053ad3e765787b01d9dffb8b06be5faf5ce7a36efc5285df326Virustotal results 43.33%Heodo
2020-08-11INV_WG6202533052RS.docdoc a5231ddcc0dd60b8e592e26d19adc81ec13162c2ec100b3df902c514c88bc75cVirustotal results 43.33%Heodo
2020-08-11YF4807987360JN.docdoc 4d2029f90dd4666820163090c7717ea8b2166605108cf8e5292054e752213b86Virustotal results 45.00% Heodo
2020-08-11REP_EO2339862072MQ.docdoc 97a0a86caadf0c11a90388dcc018d2aae2496f377a0863a67aa05f261ce23436Virustotal results 44.26% Heodo
2020-08-11DP50PPIRN7I80WPA.docdoc b0276a23c508f3b994e893c4a51a5130674d5aebb945c3dbffcbbe22e7d62846Virustotal results 42.62% Heodo
2020-08-11REP_6V1A4EGBX1VA21.docdoc 456af69e338aa9d67ece10771794a069df53f57b268711c18606ef7d54f0feb8Virustotal results 44.83% Heodo
2020-08-11BAL_RMS_080120_JPO_081120.docdoc 106e9a3097680f7a8270ac6a6a5c75fdf983b6e2ce326e7c56403aefa0eff516Virustotal results 43.55% Heodo
2020-08-11FILE_38657713820045276342740.docdoc 889ecd4a0d88e23255c407382083120669b8a1f990af992b24abff79c22f5c0fn/a Heodo
2020-08-11DOC_LPQ_080120_TDO_081120.docdoc 82644a1bae0b178699086ebdc358f8997d57868dbc416ed2a247e1cd7e08a6ddn/a Heodo
2020-08-1131827890737674.docdoc 37f50253f8018bae34e45657de8074c1a59a940ae12792fc8a5cdc8c700bc5eeVirustotal results 44.26% Heodo
2020-08-11FXX_080120_NJQ_081120.docdoc 064158a46bd13da41d1381dd3e447f528af4e5fe9b2f287407f9ccdba0700b4eVirustotal results 45.00% Heodo
2020-08-11HC1181066022DF.docdoc 4d67767678a9079f097fa98392ca9191d4dd429a1da0506b2e60185b0ded8609n/a Heodo
2020-08-10FILE_MX2LEDPVVRRK2J.docdoc afc01353f45a47089f2b8d2ad7c8ca77d5096498c43b3dc07f66a2190c6d1751Virustotal results 41.67% Heodo
2020-08-10BAL_BR0656371131KL.docdoc a09d06d100d5eba226f9edb3218e903fa13d1068e2dced8b4479d7d961f3c892Virustotal results 40.32% Heodo
2020-08-10INV_PO_08112020EX.docdoc af547eb34804f006425dafe29de39e4bfef46ee54db5be9e20a1ee36b5cb922cVirustotal results 40.00% Heodo
2020-08-10BAL_MC7503750757PV.docdoc add109b87a469c3dfa35ae3c978d11c7a009a56f87ded73152008445468ef8dfn/a Heodo
2020-08-1016759610887054087.docdoc 55202eaa4d47d55d4a8a81a17bfdfe00081b47923d3ac1249c6d5a7fa90b81c1Virustotal results 40.68% Heodo
2020-08-10BAL_PX8Y69R8FEW.docdoc 1701cece68d9611b07097a1e331039dc38649b44d3ea02351e0b494b6bca4fe9n/aHeodo
2020-08-1097079541.docdoc 86d880778c34d007e381af34292b3d56a0072f66f6e07181798d26ec9a42e96dn/a Heodo
2020-08-10IP8512248506CA.docdoc d04235ea57172d8e82ab7ceea5c85b7a847adbc9d6e6b2fc5bbaeaeaf96d8661Virustotal results 41.67% Heodo
2020-08-10FILE_5R1X7D0H.docdoc 53185bdfd244573e26be311cc6a1ca4a638ee6956f3521605c10735b0f4200cbn/aHeodo
2020-08-10DOC_6250861046722613964465.docdoc 66cf04f23a74dd0317e267811bbabb028ba5c808e9fef37f056935e02d881ae9n/a Heodo
2020-08-10QRDZ_33103730.docdoc 33d40d4480617fb77d5d793051a847a5f4d09e1bd9845507308637ddf454e47aVirustotal results 40.98%Heodo
2020-08-1028141975.docdoc 872f1ff7038a5fd30b2cb3a77effae2365720dca363e5d86677a58776cf18ae6n/aHeodo
2020-08-10DOC_RI2990438103XF.docdoc fa0282385f733053712a3554624957b09fe274dea4427b8e7111e5bef7e1f64en/a Heodo
2020-08-10DOC_YJ5185476154QS.docdoc fe21493280e923306b2814e03a02fe978f4d0179c15049984f9205344b9015d1n/a Heodo
2020-08-10Z_13082618.docdoc 6bbff5c81508a235fc04fffce3bef5c637c819c9648e6f8302a2cddd4cf8df09Virustotal results 40.00% Heodo
2020-08-10A_MR0228605353GF.docdoc 032dec424282303830dba9c63ce3b322d1caf0e1b12d32935625b138adf01d17n/a Heodo