URLhaus Database

You are currently viewing the URLhaus database entry for http://www.campsbayviews.com/wp-snapshots/RAmarY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:432882
URL: http://www.campsbayviews.com/wp-snapshots/RAmarY/
URL Status:Offline
Host: www.campsbayviews.com
Date added:2020-08-14 05:56:07 UTC
Last online:2020-08-16 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-14 05:58:03 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:2 days, 0 hours, 13 minutes Poor (down since 2020-08-16 06:11:26 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15invoice_1_22176545.docdoc b9d2bc9624f1e81b007fd1d89170294eb6eb29c779f83f4e75576a0fa3fa421aVirustotal results 41.38%Heodo
2020-08-14INVOICEXI415263594.docdoc 1c003192f85b24a2ae87a7e10cfb8e6d8a5ec57373e726e383c58bf1815df0a4Virustotal results 38.33%Heodo
2020-08-14INVOICE_YV052_768214.docdoc a64e56f29cbceb33000518da46490dd4d3967f25677ff36977191a05df6653ceVirustotal results 38.60%Heodo
2020-08-14INVOICE-V608-78625979.docdoc 3ec841b0950e2c0eb69e5a965c2f23d9fedbf12065524648f6a4e8be7e5dfb78n/aHeodo
2020-08-14Invoice-91-8999200.docdoc 95cc5ce9259454f349e823d4c1e4c546a303dacfd17dd01c60af5f9dfb171cb6n/aHeodo
2020-08-14Inv REQT83 16645860.docdoc 9b4854075266029833675d652902a1baea75b0755d7ebcd141125072d0967b65Virustotal results 38.33%Heodo
2020-08-14INVOICE_DX0_428645002.docdoc 5dff91cf6d41a1afd397c3c21a5b5a401acbb9abf2dc6e09df6f45b8f8dd9af2Virustotal results 31.67%Heodo
2020-08-14InvV400255866.docdoc 506bf91a5c56c2502ae238260f819ef5f2ff03749d18b5514b62c651226de965Virustotal results 29.82%Heodo
2020-08-14INVOICE DBYH4 033211.docdoc 4b13402181491e81721d3129182c033f1ce4f14f4956c41426c51b2c92488d65n/aHeodo
2020-08-14invoice_874_023150.docdoc 47e583738beea94617d095118319318193630be4e2ddf5ae8ce66ebb131df7ffVirustotal results 27.87%Heodo
2020-08-14invoice-7187-359120906.docdoc 6969c9659df92d53fbfae853c8c208cb0e09fc6acf7dce23773cb66cd060294dVirustotal results 25.42%Heodo
2020-08-14invoice-R65-787831315.docdoc 78933fecf248691aab0f40469c0dcd29e03ea9922aaf89b7cdc830b802cfa8a9Virustotal results 25.00%Heodo
2020-08-14INVOICE-G0538-419828.docdoc 7358c63d00a9a687434f3915c70e05e268b5d414d08c19e063de5f08e84e92e3Virustotal results 23.33%Heodo
2020-08-14INVOICE 37 27308799.docdoc 30030c6895075670e825e0525914a4cd47352951eb3a2a04a2fab5e705f848cfVirustotal results 25.00%Heodo
2020-08-14InvZV65080654033.docdoc 46bbb2bd635097e18804f6d1f60b8705220eeaae2b5a4edc01f3d275e618cb21Virustotal results 24.59%Heodo
2020-08-14Invoice Y097 690344815.docdoc aa28e58569bb47d9128f73447dc7d28977c761f60f98ba329abaf02d7ead4985Virustotal results 23.73%Heodo
2020-08-14Inv_0_972192454.docdoc 27db24afe51c643a809e559c190b96146022ef6d3394b8e990c6eee4bb9846acVirustotal results 40.68%Heodo
2020-08-14InvoiceO407828767.docdoc 48b521df0053cf6d3e0a666218d6db914feccfad8513435589675afe66247870Virustotal results 41.67%Heodo
2020-08-14Invoice-IK9-069708.docdoc 80e6e0908f792afcb55167de39cc5901251efde54f1a4d8fcfd5f55a48537e5bVirustotal results 40.00%Heodo