URLhaus Database

You are currently viewing the URLhaus database entry for http://www.albazai.com.sa/stats-json/aznk5c-b0x8y-979486/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432733
URL: http://www.albazai.com.sa/stats-json/aznk5c-b0x8y-979486/
URL Status:Offline
Host: www.albazai.com.sa
Date added:2020-08-14 00:58:56 UTC
Last online:2020-08-15 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-14 01:00:05 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 7 hours, 31 minutes Poor (down since 2020-08-15 08:31:24 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15INVOICEY284247670316.docdoc 5aad4e8411345827709d260128c9cbf52733442d4d87b24e452be806437803fbVirustotal results 41.38%Heodo
2020-08-15INVOICEIDF954253822266.docdoc bae86b6997572490c22ffc81ad1e24ecce68f3d2124066b202be498fbd9b7d72Virustotal results 41.38%Heodo
2020-08-15invoice_4_898678582.docdoc 903b4b0dbf79ba01b1c8a324c887cf2e6e7ddff21d2cb2091ab77cbc6c13b467Virustotal results 40.68%Heodo
2020-08-15Invoice JE709 983319629.docdoc 9fb657e14e9e9ddab626901b47606257774d5b8136e27be0be0fefc5ba702789Virustotal results 40.68%Heodo
2020-08-14INVOICE-4217-603712.docdoc 65531b466ac29ac2fbbdd69e1f6408eccbd82b4a998e13fe2ce4592ead35deffVirustotal results 35.59%Heodo
2020-08-14Invoice HGGP432 504367958.docdoc 5ac2b940e6a9bb518d04bcaa38e706d0604dd1c60691ebf2730c04e82aa11524Virustotal results 37.29%Heodo
2020-08-14Invoice-Q0728-1045754.docdoc b86c240ff73da180f757c89c445ffcabe432f5274d37075086d28f00b41871d4Virustotal results 37.93%Heodo
2020-08-14INVOICEKK577092612058.docdoc 284869d2f6bf8757c4361deba6f72989a57e8fc84c93be00e7d2e9be8b979d61Virustotal results 37.93%Heodo
2020-08-14INVOICE-BZL02-286742847.docdoc 7eb258707741948c75f55c0599568543ba813a784b43d4323049531b3d432caeVirustotal results 38.33%Heodo
2020-08-14Inv CX531 23788350.docdoc 4e4e13b049124c6db74594ed0351792442e0a91a82abc72f06601c9598c241c1Virustotal results 38.33%Heodo
2020-08-14INVOICE-FEG1-083874.docdoc 95cc5ce9259454f349e823d4c1e4c546a303dacfd17dd01c60af5f9dfb171cb6Virustotal results 36.21%Heodo
2020-08-14INVOICEJP28676321419.docdoc c2e044af01e5ba139d873400d8594ed2349fcb2f9005243a69c8476d0570b32aVirustotal results 37.29%Heodo
2020-08-14Invoice WA9490 6551405.docdoc 6b5f7ad9df134c6a4892ee11c2b9d5942174a02fa5e8f5f1b6e4e6c40c3583f6Virustotal results 38.33%Heodo
2020-08-14Inv_VQJ81_17954904.docdoc c129af5aef7d314993b58cc7c4a1df79f5550e97f3eb6b9f1d558defa38df88fVirustotal results 30.00%Heodo
2020-08-14INVOICEWJKH10693439.docdoc 806bed790ba4a1e803d17e03ff189d2bc6d9e7a4496ad174aa18124aa1714a82Virustotal results 30.51%Heodo
2020-08-14invoice-QEA12-709812536.docdoc 4b13402181491e81721d3129182c033f1ce4f14f4956c41426c51b2c92488d65Virustotal results 30.51%Heodo
2020-08-14Invoice_CMNQ521_795132798.docdoc 022cf3a8bcb181e5218ff3a6b7e759e94462df01ff93902560371dfa2ffc0950Virustotal results 28.81%Heodo
2020-08-14InvPLP58101419864.docdoc 47e583738beea94617d095118319318193630be4e2ddf5ae8ce66ebb131df7ffVirustotal results 27.87%Heodo
2020-08-14Invoice ZB49 36087693.docdoc fe1022c544c49d969befa506673e1f2df484914f36500d16548ab07d4c073528Virustotal results 27.59%Heodo
2020-08-14Inv-ASR1-0274601.docdoc 6ab6bfb1af92d80a1d6d41f52257d7e1c85a2a18ccb782596f37d426ee600c24Virustotal results 25.00%Heodo
2020-08-14Invoice-TD4-6009300.docdoc e2cffa9c1e66e3003856353fe23b15c19d73a4ff926b8a993dd19e0eb5748f56Virustotal results 26.67%Heodo
2020-08-14invoice-633-03570053.docdoc 70049b47e793898f9cc10a57a806abafbbedf86cadadd299a051e8bd78f955a7Virustotal results 26.23%Heodo
2020-08-14InvERSV9641164915.docdoc 7fd083f3133fd46bf7f6a70c043bcd84de058c8b12d8fc72e503b95851fcc20bVirustotal results 26.23%Heodo
2020-08-14invoice-PK1-2136098.docdoc 82a5a61ce9f0067569a614f6db871dd79f0722e3a2f7c899175d63b2237d3559Virustotal results 25.00%Heodo
2020-08-14Invoice_MWMX369_912975.docdoc 16551fc9c14cdf382cc5649b29fe015c8fade29c8165b9216226636d69bb2e22Virustotal results 25.00%Heodo
2020-08-14Invoice_LZOE513_622078317.docdoc 0bd1c09908f6c09ae5217b631f5041669b722d5961f9471365b074d51d9a7a36Virustotal results 23.73%Heodo
2020-08-14InvoiceAJCJ79226081753.docdoc 0aeb7a7ccd5f0a664f6955eaf500b29020c82c40acd8b9d14cff49c6a9377f72Virustotal results 25.00%Heodo
2020-08-14Invoice-VNH881-560046.docdoc 4af3cc1ac4ee4610fa7671fdc8b02ad17ad4e71433250d2ab04291fc1f5e657cn/aHeodo
2020-08-14INVOICE-HXI8394-8521146.docdoc 07b144dd0033cf31233b85369f90ddc087ecdf0c5ae378612e504252db7c3f32Virustotal results 23.33%Heodo
2020-08-14INVOICE_QDLN7275_15474196.docdoc 46bbb2bd635097e18804f6d1f60b8705220eeaae2b5a4edc01f3d275e618cb21Virustotal results 24.59%Heodo
2020-08-14INVOICE_LKTG28_2033740.docdoc 99db7baf30cee72146c4791d36d158ca3ed62a58dd3bd57b7bfa60d0f13b08d9Virustotal results 24.59%Heodo
2020-08-14Invoice YU4 08924753.docdoc 538aec1c87a88d78a75a417c253579be5fa18cefce592109122505cf70f2eea9Virustotal results 40.68%Heodo
2020-08-14invoice_9_5639454.docdoc 57fb3ca3dbdd2ae95d6f78eaa993bebc8011a01ffcbcdf2ef5398996e781d532Virustotal results 40.68%Heodo
2020-08-14Invoice-R77-8273389.docdoc 3132acbb0aa02f175f2e8bf589a53e732564cf73f1f003cb64c842ba52d3c889n/a Heodo
2020-08-14invoice-U10-642618.docdoc c32ebf07a4f2324cc33cf6e7c975c375621c519fa654fc27303c9a812293fd7fVirustotal results 39.66%Heodo
2020-08-14INVOICE-7-423881682.docdoc dbc3f242e959a4c3398cc0676dacb940b4253a18f4a2be2d3a1aebb7c1f62d74Virustotal results 38.33%Heodo
2020-08-14INVOICE-SKU7007-2446854.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14INVOICE-K644-95034924.docdoc 8b725e5a090dcb30815c5df978e72af9a04372b9fda6729678004e9bdd617ce6Virustotal results 38.33%Heodo
2020-08-14INVOICE EY7 670978.docdoc 167459762dfa748a07ae8e4d2479e9733ad4d66e0d833453daa2038e833efa29Virustotal results 38.33%Heodo
2020-08-14invoice-814-97157042.docdoc ebfd94ac1cb7510d9b3fe2de38c88bb88d64956d0c6eb93aceebee8ea83ac763Virustotal results 37.93%Heodo
2020-08-14invoiceIKS5544548639921.docdoc 0b134d91d537beab9f4e700b126eb1b43b69c80126818592cef4697fce08263bVirustotal results 37.70%Heodo