URLhaus Database

You are currently viewing the URLhaus database entry for http://payagenebiotech.com/cgi-bin/q6jj-sdr-20/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429613
URL: http://payagenebiotech.com/cgi-bin/q6jj-sdr-20/
URL Status:Offline
Host: payagenebiotech.com
Date added:2020-08-11 18:21:11 UTC
Last online:2020-09-13 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 18:22:03 UTC to abuse{at}nrp-network[dot]com)
Takedown time:1 month, 2 days, 11 hours, 42 minutes Bad (down since 2020-09-13 06:04:35 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13invoice_AQBD796_3442220.docdoc ec3164f12afd712dfa77938012d6b35319bf8164e70d6e9face14cf5b0196fb6Virustotal results 36.67%Heodo
2020-08-13Inv_HC1_4557802.docdoc 1f57bfffafbbddf246e071774ef4975de31cc8a7e0fc15192cf360c0fe218174Virustotal results 36.67%Heodo
2020-08-13invoice-WXAP2529-58554256.docdoc 5912b8e3ef4983ff2a2edb2097d0149b2828a6d735e579fc964a0a938c0afac7Virustotal results 34.48%Heodo
2020-08-13invoice_DPOD61_585844.docdoc a430b79aa886bc228b8aedcfd295bfdd9f860f814ddfefd8839d8c2159e24049Virustotal results 33.33%Heodo
2020-08-13invoice-4-344705.docdoc 55260af4daec42317640803be79c9cb42f198db5c6194b7346c7c95c610f70f7Virustotal results 32.79%Heodo
2020-08-13Inv-0-916286.docdoc 56af09db56d209f8011606b414163770dd7581a225f2a5ea8c16eb6be6afd035Virustotal results 30.00%Heodo
2020-08-13Inv SWIS510 1035495.docdoc 53012447056c43d98e67bc063b1016fc1330216796dcc7c1eaed32a4aa02b45cVirustotal results 31.67%Heodo
2020-08-13Inv-TJGH727-8693781.docdoc bc8eae589f288288973220fbb7fa40b5ff4be240e0835dbbdce92b9f3bd02ac7Virustotal results 29.51%Heodo
2020-08-13InvoiceMXDP495730291910.docdoc 76149a3b59fe79492a16a9a3d94dc59e1759885a245cbb685d06de9a95f7278eVirustotal results 28.33%Heodo
2020-08-13Inv-QHO6-56560033.docdoc 592c4295c63e8c69b37668969da2d1a8514b387ad715eac7fcf7307b51a50a9bVirustotal results 27.12%Heodo
2020-08-13invoice_RG363_176972.docdoc 52c981dcee0a9c0bc80ec192b453e8af6b01ced6cb3187645687ad0fd1b13221Virustotal results 27.87%Heodo
2020-08-13Invoice_0333_410265.docdoc e9bc4332a3fd2de13d8f4d58aaf749131a93e652fd663f83005b1437936a715eVirustotal results 28.33%Heodo
2020-08-13Inv-SLY84-84324899.docdoc 7689a27b894cae744cbcc6233ee883c95f92853ce314becca2b0eb1428689c49Virustotal results 27.12%Heodo
2020-08-13Invoice-IRGH627-40166811.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13Invoice-P1733-05706845.docdoc b58536809fa841324f6ebd181e66c4e897843b4689a45987ba00691b7c99f35cVirustotal results 25.00%Heodo
2020-08-13Inv57930935.docdoc 780339401d94d888dd79a9d81b94ead083dc9070649cdf2e72eb3a6a78eb45d8Virustotal results 26.67%Heodo
2020-08-13invoice MJ53 8319539.docdoc c6448d3ae149d4be02cc47863725d1c6422455e424cc378cc755ada5109d76c7Virustotal results 26.67%Heodo
2020-08-13Invoice-F92-43390363.docdoc 6470a38736f61fd9858f811fe8ec7e2ea6d075e3d4bacc287ed9b0a746ddb5dcVirustotal results 26.67%Heodo
2020-08-13InvCXP87567204372.docdoc 0b9983bedd5702a9bf94c237a85fdcf11a637f0212b8ab32dc746da8a2a62148Virustotal results 25.00%Heodo
2020-08-13Inv-56-503629.docdoc f844331d28cf2533981a9e753d6df2e9677efadaeea9b2c014266991ae78280fVirustotal results 26.23%Heodo
2020-08-13Inv-AF86-21037306.docdoc 642f6238f4c26f7e8829b4739309809c5b2ec80f58e0beb4df4cbfdfd8ebe42aVirustotal results 25.42%Heodo
2020-08-13invoice LB06 209534017.docdoc f4a61d38b046342feb60ff3636428a04c4abbe221c9e1e27d473d87d6fd11208Virustotal results 26.23%Heodo
2020-08-13Inv MKS8 748422392.docdoc 8313a416feea74f1e4555d53dbb6e2c4e7a831c854f7fa38ea8b3815b3bd124aVirustotal results 24.56%Heodo
2020-08-13Inv_151_25143611.docdoc 701f6714acc1e2c42435c5ca1c3c5919ec11dcaaebe5791bbea60eab5c8327c5Virustotal results 54.24%Heodo
2020-08-13INVOICE-68-909751309.docdoc 9d5e7f3a395c601c7a59a17be627c464fedc1fdc055e67ef46499912224efac0n/aHeodo
2020-08-13INVOICE_043_454183927.docdoc cd0aaf460944efd580dcc39bc1dd0460f88f2c3c17e303694ffa1eae5020eab2Virustotal results 53.33%Heodo
2020-08-13invoiceBUOF84168748414.docdoc e1c720ebaa0f446a16ce18dac61a138b0d4c73a1e59236ae3c91c6cb73da5a1en/aHeodo
2020-08-13INVOICE-BC5-71209838.docdoc 90452e3bfaf3cae36b9bfcc2e98684fbabbc11074887533175a04b41b2a8734bVirustotal results 54.24%Heodo
2020-08-13Invoice-QAK6-957622202.docdoc fb04bcaffc6328a8a16308df4ecbcf2ab1099b8c1dd14c443590f8bbad856fb7Virustotal results 53.33%Heodo
2020-08-13INVOICE-X8-731404.docdoc e26bbe184e43c8251aee307aa6d392971f7facdda4ce50f9733a966dc7905ff2Virustotal results 50.00%Heodo
2020-08-12Inv_AX07_1039162.docdoc f0c882d52064e9965202bcad61de9663457c9564ab432b3a009de74238d21346Virustotal results 50.00%Heodo
2020-08-12Inv-6-195434.docdoc e412c6a1097b6fdf1492ad40805d0bbb1df005f870085f3fcb57d30552974cdbVirustotal results 48.33%Heodo
2020-08-12INVOICEHQYQ19649206.docdoc fb474008a44d536948b71f933bfc0289e7779352c43c4d62f0b3dff8f0ae478dVirustotal results 49.15%Heodo
2020-08-12InvoiceNGFI161730284.docdoc d60d130c4369c7d41edf041927897b2ceb6b845a66b97bfeb0cf7d60575fe399n/aHeodo
2020-08-12invoiceB49027570455.docdoc 24b41c6091602c0f9df9cc64905ce9dac977a04f700ae0607de467c101a093dcVirustotal results 49.15%Heodo
2020-08-12INVOICEO8132551.docdoc 0c7d085dc88b57e56819a0a9319e1aa089ad9851a0ea21137aab6309395ed039Virustotal results 49.15%Heodo
2020-08-12Invoice-378-334125.docdoc ff563f0125c05e1a24c111ca5306fc7394a4a705167d272704bb0c2067a96b4fn/aHeodo
2020-08-12INVOICE-OKN01-57366833.docdoc d1ce5170f24fdb09f187ca0e3e0f6e689fa2c73fc6953ff18ecc123bb8eed49cVirustotal results 50.00%Heodo
2020-08-12Inv_YEM9198_9901247.docdoc f5df26ec7fe3037db5f296b712b0248e403b8397931b5667a1f1e211778652a0Virustotal results 48.33%Heodo
2020-08-12Invoice_2256_072862542.docdoc 970ea46ba9ce5ac7bd86202e5806c5cff029066731de8902f4605e22d44e1a6aVirustotal results 45.00%Heodo
2020-08-12INVOICE_C8636_07512001.docdoc cd110e81c2ab80786c6b50fa2f567bd93e1471529d849677f100974715c14621n/aHeodo
2020-08-12INVOICE-455-3627102.docdoc 37a1c85950d3e91662ed4137488030ffcec13adad6f9b2f3eea1de01a756b260Virustotal results 41.67%Heodo
2020-08-12InvZEJJ83756069255.docdoc ae4e6ac684f5b88e2165adea2e0df977852b853b20d129fae3d53600eebeca8cVirustotal results 39.34%Heodo
2020-08-12invoice-4452-383526799.docdoc 8645a9d349e94770f0958cb44907bd33cb1415d75f840716bb7c69ad2f8cfaedVirustotal results 32.79%Heodo
2020-08-12invoice_41_114634.docdoc e4087c869b87de4fe50a6d1d4c6d428a215524b6f84b5a24e12b8571891764e5Virustotal results 31.67%Heodo
2020-08-12Invoice_VVK03_138730.docdoc 5acefebbcc9a92b556c6f81e212c7db449fe2692e8877039dd7b6a920f8e5172Virustotal results 31.67%Heodo
2020-08-12Inv KY869 97482971.docdoc 6f17ffc6e968596bcc7554237206467a43c24b88c81433a41add7c3c3b4d6803Virustotal results 30.51%Heodo
2020-08-12invoice-LTT1-33836106.docdoc f3390052891e7cf3c580921e2522e4a8fe5aec87e6c819a16e738ab283ff586bVirustotal results 28.81%Heodo
2020-08-12INVOICE_BP02_822591133.docdoc fa3f70a9c1aa89ccbcc4f9b467a6c1060910b03f83b9299bda9265e875fbc2ccn/aHeodo
2020-08-12invoice PN796 691245630.docdoc 6610beb62b2916d0194d87458804ec7ae2e18e6efd800866b9d65db7a6e6b361Virustotal results 30.00%Heodo
2020-08-12INVOICEGJFZ80119998466.docdoc a89386d411d6224956ba5504820bddc5adb335c6d058756cbd1bb7b5fc9dce36n/aHeodo
2020-08-12invoiceAZB7595648649.docdoc 5c7a94ddcac5463f2e4ac7a23c60db15d0e5afb75700a346058936c24b461ac2Virustotal results 30.00%Heodo
2020-08-12Invoice-ZBL1704-0622402.docdoc a9bae6fbce3ef6ebff32ad675adac80338a738edb330fdfd1e6dd09f7e35adf0Virustotal results 27.12%Heodo
2020-08-12invoice_N6_0732210.docdoc 92891d0665902ca174cc6ebf4cca8fec9d9486730b7796e2c4c63b5a2f29ab8aVirustotal results 26.67%Heodo
2020-08-12invoice_32_232360.docdoc b194bd3195976a8b5db818cd4081aed18283e76af0dc14637905fa3d1b92b67cVirustotal results 28.81%Heodo
2020-08-12Inv EWWH60 44210872.docdoc d9cd9ae614caa6ef65cb4d5cffc16164132b1192251d7e8e0e12b8e4fc5f7dfdVirustotal results 28.33%Heodo
2020-08-12INVOICEI20501797285.docdoc 663b1204334b2b1ac60e67c2d63281e3b0add6c72589beb51c0801934d1bb0e4Virustotal results 27.59%Heodo
2020-08-12INVOICEJTD15455010488.docdoc 57b46608e379e736e4b390fa8ed0d2fb63206d41d90f6342d0089272dfe846c0Virustotal results 26.67%Heodo
2020-08-12INVOICE-C2-193391510.docdoc 7dd439987c7b56a1968a7037a72c4d2474cb03e2dda132f07275fba3ca216685n/aHeodo
2020-08-12INVOICE-5987-804594688.docdoc 414fc538cb963c4536c7fb1f90c7b953d2481601dbbc6f17a9f97d9b85a4edd5Virustotal results 50.82% Heodo
2020-08-12INVOICE ZVD1300 03967042.docdoc 2f20ed3e86d25bee2fc86cfef8577a1392ff6573b368c48c7611b7215f15323eVirustotal results 53.33%Heodo
2020-08-12invoice815202695.docdoc 49f84ff8599ef44db2d0ee39c6a82739d5a9d663c0b011960b67747dead85d57Virustotal results 51.67%Heodo
2020-08-12invoiceLID575134220.docdoc a2b1d13fc111d276dc837aa2c6e155e9aa2944ec66d9133932b1f183cbecad32Virustotal results 52.46%Heodo
2020-08-12invoiceE4988418002360.docdoc a9dd0c1dc51e0d6deadf4a1cbd8ad39e41c1ef2ff8f222bb877a3590bbd5439en/aHeodo
2020-08-12INVOICE KAK23 9414861.docdoc 25e3c7f92b7b6c4d2a0bf01c2e0375ff93d1547ce1ac973169615136f290835dVirustotal results 49.15%Heodo
2020-08-12INVOICE KQHF8 0810476.docdoc a3c27802860cdc8195b53a7a9a0308f67c631bec4c450329dc8421a206c65d08n/aHeodo
2020-08-12invoice CVWN0107 684673760.docdoc 843b812d3b7326a6483d4b0062efba730edd7b2b6880fd6f9126309d8d498ca5Virustotal results 53.45%Heodo
2020-08-12invoice_D06_3365016.docdoc 0af3f5b45bb78712c8ed836cb9c83c6799e36000f09c7c4ec285f36ad72b336bVirustotal results 52.54%Heodo
2020-08-12Inv-18-2372977.docdoc 252a44229413353042efc9846e4521a6c230832832d0d7efd0bb8b2677026afbVirustotal results 53.45%Heodo
2020-08-12invoice1163806.docdoc 6e41b649c8ada98464a320584e27c3a19b1f477ea48bc8fb2aa892867da6b1e3Virustotal results 52.54%Heodo
2020-08-12invoice_F1900_057001.docdoc c9a3637927d6c089d282b7e5f89be7e0269eb7fd1e823cefe8844e25153f2cd2Virustotal results 51.72%Heodo
2020-08-11INVOICECAVU7203975212.docdoc d1ada929c1d864f25ddf89d90029767d6c3b46a1bcd2f20cc967703c3d84bf5bVirustotal results 50.00%Heodo
2020-08-11Inv_2595_738527847.docdoc 96c6a329f0da6f8cb3e414f2bde2a0084912d8de0f46d04f69f613f061c0ccbcVirustotal results 50.85%Heodo
2020-08-11invoice-THG118-160820.docdoc cbf6ee8e987a618ed4bbc8efb689fab62d912808ce3d959106e7697637d3a217Virustotal results 50.82%Heodo
2020-08-11Inv_J219_3232852.docdoc 994db52aefaf0bc495521d0b5b29b59aa7e5c5aa4d6bc221e2808f21247cf19an/aHeodo
2020-08-11Invoice-UEOQ3451-327075.docdoc ba9a8497f8d62ce6e51e23f89f045998e57f187f7b8b9ff3168e5289d1758e80Virustotal results 50.00%Heodo
2020-08-11InvMSON8073183621.docdoc cbb857ef4e6a3fd6c97835111cd57faa9a633931718e00486d9d6ab47dbc88c0Virustotal results 51.72%Heodo
2020-08-11Invoice YLQR400 284629803.docdoc ac2f8161f18e49cc70bd086c7b48a73d377afa6960fb233a3d4751bca4309534Virustotal results 50.85%Heodo
2020-08-11INVOICE_VFWY72_982448336.docdoc a333fa244b433049bb35cd2d2b8a2ee2c904a26033a1f55f967159b4db8e49baVirustotal results 47.54%Heodo
2020-08-11InvEZC8626610206.docdoc 133c36faab6225fde45de931d230c67813de5edd5744f1a9aa826588b40e27d7n/aHeodo
2020-08-11Invoice-2807-5058989.docdoc cb5234b6061bbdf400ee2833eaeba7a4f39a5d883194f1c0bf3c317267799d27Virustotal results 45.00%Heodo
2020-08-11Inv-SEE0-139263.docdoc b7a6c4f36cbb15386a7d71029e3d1669a094865e7a15feb3ec239467192af24eVirustotal results 37.70%Heodo