URLhaus Database

You are currently viewing the URLhaus database entry for https://www.physiowiese.ch/CEdb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:431664
URL: https://www.physiowiese.ch/CEdb/
URL Status:Offline
Host: www.physiowiese.ch
Date added:2020-08-13 07:33:11 UTC
Last online:2020-08-17 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-13 07:34:02 UTC to abuse{at}datawire[dot]ch)
Takedown time:4 days, 0 hours, 36 minutes Bad (down since 2020-08-17 08:10:51 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-14Inv-ZDSN8409-789677542.docdoc dd2524d80b806431cc0021f456fb7d4ad370b7e31652f050e26839e76255be51Virustotal results 37.29%Heodo
2020-08-14invoice1655354197.docdoc bf1f9a8d6a4fd1a6098bf33296299350f6077d3d3474d2155c90c5456e08aa98Virustotal results 38.71%Heodo
2020-08-14InvoiceOVZ071354306.docdoc ebc3ce7424f241c34d0b897445fc55726988bbbaf4974b1ef01809d0b3891b8cVirustotal results 32.20%Heodo
2020-08-14Inv E455 28800980.docdoc 806bed790ba4a1e803d17e03ff189d2bc6d9e7a4496ad174aa18124aa1714a82Virustotal results 30.51%Heodo
2020-08-14INVOICE-KGZ2926-64826790.docdoc 7547919d586a1ab27cf87b4e8b7031345a0ac4b24ac352d54627ede945055aa2Virustotal results 28.81%Heodo
2020-08-14Invoice-F7-067680.docdoc ec279b19633a13b9e90f6a0457ab350cb8396c1f88fb9d1275f29de7dd42cd86Virustotal results 29.51%Heodo
2020-08-14InvoiceTYS018306573556.docdoc a4a28205cafc8bad9f4887c857273508e7324991fb3b765e7019cef1f0192d4aVirustotal results 28.33%Heodo
2020-08-14Invoice RQTB8130 289515.docdoc 936f0b1c957e1480cdba3c5cefac63730008c19b570d825bd0d6c6de85ca38b2Virustotal results 27.87%Heodo
2020-08-14Invoice-DJSH0604-781656134.docdoc 8668a5aae3e7db513fdb925e16313049037536bc67a86ed756b682c98b7f6f09Virustotal results 25.86%Heodo
2020-08-14Invoice-OUY7-878929923.docdoc 104251c4ce5ddfa9732871b3478c81882c4e2544e2f2b615ee7e05a6c4c35b0cVirustotal results 26.67%Heodo
2020-08-14Inv BTPP3 6858706.docdoc 9f48ee817d634981b3bf2419fae553b17bbd85ae489e4d7efa83364c7b7b286bVirustotal results 25.42%Heodo
2020-08-14invoice-EH39-760977.docdoc 4828a6c7692c1ca3bee53f0c8dd1ff26f21faaf8cb2c66e0c4c460c6dc9f6dfaVirustotal results 25.00%Heodo
2020-08-14Invoice-WFS6670-6349814.docdoc 8ad36d2358be52766de37fdc1d96bdedf6f1fb28fed87cffd3cd8bf3c560eaf6Virustotal results 26.23%Heodo
2020-08-14INVOICE_ZBY80_461424308.docdoc 1f0758efb84f4b72c21377e581dab62287027cfd5b6a713fd6cfccbf0f153577Virustotal results 26.23%Heodo
2020-08-14invoice-L70-004623.docdoc 0bd1c09908f6c09ae5217b631f5041669b722d5961f9471365b074d51d9a7a36Virustotal results 23.73%Heodo
2020-08-14invoice-DSK34-36448830.docdoc 799b3f65b6c1c9cef2426765a3c0d3551a058285292161ddedf98b1bbd6020ddVirustotal results 23.73%Heodo
2020-08-14Invoice_BF5_682142.docdoc 3a05ceccd595d5635e66f16ae47e0a770f4e6f2569c7cd141676678cb7c61de5Virustotal results 25.00%Heodo
2020-08-14invoice RI281 88656830.docdoc 825617f8a3ad347433be07250c2c043f504c413cfbc31739029208f4af30fc57Virustotal results 25.00%Heodo
2020-08-14Inv IFCG95 623581601.docdoc 8aa7b26f53f2ebc1a1678bb6f61704527478b875e9c4947c3193d966f0664efbVirustotal results 23.33%Heodo
2020-08-14Invoice19870662.docdoc 0c8f2829aa051a5e6c46de5538877492af65802d40d49435dccb05882ec52308Virustotal results 40.00%Heodo
2020-08-14INVOICE-CIWF39-1470335.docdoc e64e43f9549144dcb8e091b5d2140499702e699e14f019192575a50ce08d323eVirustotal results 41.07%Heodo
2020-08-14invoice_THZH6141_917425.docdoc 99dac5a117859eb23edb38d2da4b792d02b4a4d1fab2249bc171faf6bf1dfda9Virustotal results 40.00% Heodo
2020-08-14Invoice-JF817-2325046.docdoc 3132acbb0aa02f175f2e8bf589a53e732564cf73f1f003cb64c842ba52d3c889Virustotal results 41.67% Heodo
2020-08-14invoice YL26 3855143.docdoc c32ebf07a4f2324cc33cf6e7c975c375621c519fa654fc27303c9a812293fd7fVirustotal results 39.66%Heodo
2020-08-14invoice_662_5873496.docdoc dbc3f242e959a4c3398cc0676dacb940b4253a18f4a2be2d3a1aebb7c1f62d74Virustotal results 39.34%Heodo
2020-08-14Inv-F5883-692670.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14INVOICE-QYTS265-56380613.docdoc c257cd4e52104d35aad4c65319a54abf3cbea3929e1fd295bff5fe422409618eVirustotal results 38.98%Heodo
2020-08-14InvoiceKUDP86304002640.docdoc 2da551517d3d24f3485bb7c1edd4dc79031582d5cc3f4066169ecdbe26b4df18Virustotal results 36.67%Heodo
2020-08-14InvEG735675972.docdoc ebfd94ac1cb7510d9b3fe2de38c88bb88d64956d0c6eb93aceebee8ea83ac763Virustotal results 37.93%Heodo
2020-08-14invoice_QF9596_7944295.docdoc 3c0a2f5c58b9874a2167dd0d6cf544f4ebeaa0fac9dc4d375d41f80cb8dffc83Virustotal results 34.48%Heodo
2020-08-14InvoiceP1715624050.docdoc 60f8488fdb7df1654b540cffa5a6b15006c90ab03e4cfbc618d7594c813c252dVirustotal results 36.67%Heodo
2020-08-14Invoice-CHX258-65470835.docdoc 2879a9d705300779c0269f3a6847fb725a3564c7ae27f44226fe17f422474ca3Virustotal results 36.67%Heodo
2020-08-14INVOICE-QI29-182042750.docdoc 532d6be9513e3dea9cfb7040d4e2b0878429f90b84e8c3229ba775ff99dcfbbcVirustotal results 37.29%Heodo
2020-08-13INVOICE-KN621-210809.docdoc f9d386ef77ac7b75fa5d24fedcf07b054c6e35682826e1a38a6e908dc8c77e10Virustotal results 38.33%Heodo
2020-08-13Invoice-IMA96-0210889.docdoc 5f082300c48965f84f8c991027f6081c4397825021b74021b253c7fc7e9dd5b3Virustotal results 35.00%Heodo
2020-08-13INVOICE-GUEE37-107473.docdoc 2700c5a0f48e93d064b77b0179fc337d59ed7d100dcdfa5f29c2f1d035e03204Virustotal results 36.07%Heodo
2020-08-13invoice-GR0135-16740751.docdoc 345ad176e1abe5bab4a7665cb4b35fda3bac70a3cb1207f3b663d77550e197f6Virustotal results 35.59%Heodo
2020-08-13Invoice-BVS3794-853397.docdoc 653065e50db8318e4c980f45418849681df513e216b29c07cc7036442b0f9cfeVirustotal results 36.07%Heodo
2020-08-13INVOICEXP6646482511.docdoc ad919d299d8151242bb880dfd8e4f379ee644eb8a6eb799f7dd9608fdbaa84d2Virustotal results 37.93%Heodo
2020-08-13INVOICE_89_17979131.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo
2020-08-13Invoice_I22_30161093.docdoc 3423e50e3ca9d294abb9a295ac2ca4d7c44b5ff0e9642bf553ac9b6a5f44968aVirustotal results 35.59%Heodo
2020-08-13Invoice-1864-212345003.docdoc bb480394e0201866ae43a5b60c1ec371e3dd37a01e922a8dd5ff68d8cb325f3eVirustotal results 40.00%Heodo
2020-08-13INVOICE_1517_70635157.docdoc 914f075f63c72c28b526dd4ec4fe89554283220e19930bc7a071e25d5e0dd256Virustotal results 37.50%Heodo
2020-08-13invoiceJEH60988065.docdoc a430b79aa886bc228b8aedcfd295bfdd9f860f814ddfefd8839d8c2159e24049Virustotal results 33.33%Heodo
2020-08-13INVOICE_3624_936843867.docdoc 82b0468b8277859b0d4bff3af6eff0d446bbba4daa11cb4d96b62160bb22e3cfVirustotal results 33.33%Heodo
2020-08-13INVOICE-N7-7378425.docdoc 1344d4ea858a94b81b25c9c85ca54dabf55f7ac242bd4e4a9eaeb991ba75fc4dVirustotal results 31.67%Heodo
2020-08-13INVOICE_324_904310.docdoc fca1b080bd37f31310426e23e3d06dff66c14e54fdc049af8896fd4970ea29c5Virustotal results 31.67%Heodo
2020-08-13invoice SDK39 878263.docdoc 286f7949f545a67074545aa0830816a560a993143774c4468d041d5e656d2897Virustotal results 28.33%Heodo
2020-08-13invoice_YE2407_8890120.docdoc 440955936e72def67b0e6c0b2ff841aa2161c705b46cce961107a37535323337Virustotal results 28.81%Heodo
2020-08-13Inv-OILJ1678-1370697.docdoc 43911a79aeb74fd3a33a725d3ccbb05e5e86c849166f578f3404711fa0bf5b42n/aHeodo
2020-08-13Inv_8_811950.docdoc 5d894ef153180b84776667977d9af12006256fd8598c0ce0738c65ee160e190cVirustotal results 26.67%Heodo
2020-08-13Invoice_PG59_5945011.docdoc e9bc4332a3fd2de13d8f4d58aaf749131a93e652fd663f83005b1437936a715eVirustotal results 26.67%Heodo
2020-08-13INVOICEJ8242092170.docdoc eeb469414b6509fdd0d204f306b29d55021e2de94608991794b5f59c2add1e07Virustotal results 26.67%Heodo
2020-08-13invoice ZC214 913420928.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13Invoice-421-4370508.docdoc 267245def36dc107de0213044013ec67b837c68ed109267f13728319263b5664Virustotal results 25.00%Heodo
2020-08-13InvG6883101.docdoc 86c0cc8d6327a374689e50a0d8bc139919ce31d297cce113a4e93bd78b8cd8a0Virustotal results 26.67%Heodo
2020-08-13Inv 5 572096479.docdoc 776396c0aa0fac10eb849a713ca7927a00cd7aa654be032e870fa7cbe3076078Virustotal results 26.23%Heodo
2020-08-13Inv_RJJ0686_1156871.docdoc c6448d3ae149d4be02cc47863725d1c6422455e424cc378cc755ada5109d76c7Virustotal results 26.67%Heodo
2020-08-13INVOICE-7-7468875.docdoc 6470a38736f61fd9858f811fe8ec7e2ea6d075e3d4bacc287ed9b0a746ddb5dcn/aHeodo
2020-08-13INVOICE-399-9573664.docdoc 24fe0e4704e8906e4819aaf88915317509beef8a6bd0abc3c4933cd0d75b7084Virustotal results 26.67%Heodo
2020-08-13Invoice-VZO8-939680.docdoc 620d84fae4b584f528eb0044177ac950380d8c41d764dc1615871a80ecdc4ae7Virustotal results 25.00%Heodo
2020-08-13Inv_DTN84_87075013.docdoc 27d0c48e8224b8b6607cefeec92b1672e7d61628e58bf2574cb30f1fc9518d2fn/aHeodo
2020-08-13invoice NHQK4 93223596.docdoc 8313a416feea74f1e4555d53dbb6e2c4e7a831c854f7fa38ea8b3815b3bd124aVirustotal results 24.56%Heodo
2020-08-13InvoiceU3982401412.docdoc 6fc579c7370c196968942cfe9793372e0ab49fc5ff607b3c0df3a54033dce733Virustotal results 25.42%Heodo