URLhaus Database

You are currently viewing the URLhaus database entry for http://promservice-plast.com/vflncz4/invoice/4x1kqjemqe2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:436598
URL: http://promservice-plast.com/vflncz4/invoice/4x1kqjemqe2/
URL Status:Offline
Host: promservice-plast.com
Date added:2020-08-19 13:38:03 UTC
Last online:2020-08-20 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-19 13:40:04 UTC to network{at}abuse[dot]team)
Takedown time:21 hours, 15 minutes Good (down since 2020-08-20 10:55:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-20YGG_080120_GQD_082020.docdoc 7d25d64f715231e2df3f268734ba75f0b09e05794c9ebba4faac4020c883d770Virustotal results 20.34%Heodo
2020-08-20REP_CPKJ4FQOLMUY6FP.docdoc cc9254149ac0a5f25e859e00fd4ae509b05a23e42d49708d4c0a15e4628b1c66Virustotal results 20.69%Heodo
2020-08-2044788300.docdoc 0efd74cc9a3e2043ccf2d1aed8696b82a65a9c96293fe1ca3c6958f41c818543n/aHeodo
2020-08-20REP_4720388197099172461535103.docdoc 6e647b837da2262825372b4fb5ccf78f780e467cdcc593c348153bd1619dbf86Virustotal results 44.26%Heodo
2020-08-20LGA_L2YP91NG8EJ7.docdoc bbfbe727d8a5b53456c3b234d64899d7789a885517c719fb9c26c890e009318aVirustotal results 41.67%Heodo
2020-08-20BAL_YV0795874236NW.docdoc 69c2a1bce768da5d21eed415b83bc479973e4e65421f547162c172f4ec9c1953Virustotal results 38.33%Heodo
2020-08-20INV_PO_08202020EX.docdoc 7db98c5dd25366b108f368bf466ec5c8150e52fd5a135c50f7ed9db682fcf3acVirustotal results 40.68%Heodo
2020-08-20REP_9258881508557.docdoc a184a094e50174dc9dc8c5c22ac016c02f3605fd19c733c49ad1ebf02c493f65Virustotal results 40.00%Heodo
2020-08-20REP_41351932.docdoc 6caf84cf6a6cadcdf4aa5f45a9f87b63c16cdf6486f53279c0ce48676edfc142Virustotal results 41.67%Heodo
2020-08-20DOC_71106615289766763412670.docdoc c5efc23a6bc4da1660b4c6c3b4755581990f7c00591cfdce1350df652c03a3f6Virustotal results 40.68%Heodo
2020-08-20TMGV_HP0029990819ZY.docdoc b26d580deb9ff666c0dc35f4cc7c9d88038fe0f3c8bf48c4aacd56dfc05c4cabVirustotal results 40.68%Heodo
2020-08-208943822993.docdoc 29524d934f54a27deecaedd3e58de8a4490eddc04ac913bcb37c3ca1354c5b06n/aHeodo
2020-08-20MNP_03402081.docdoc 580ae2c3801f24f8be8cc24b136f1d795787ace030c75c837410f5d827ca02e5n/aHeodo
2020-08-207XLLYPU8WH3Z.docdoc eeb0a1417b5106cfb471ec4c6404b1acaeee3e4acfd04ae2748adee4ed69812dVirustotal results 37.29%Heodo
2020-08-20INV_32844040647.docdoc 275e276c98e61d33c2852f27d543c9cda4212aa16383e36b2e3651a28070a8fcn/aHeodo
2020-08-20PVX_40399188953577680.docdoc 60bb16533f938460519528657d8b785485622e3471330a87fa5894fed506eed8n/aHeodo
2020-08-20SWJ_080120_PPK_082020.docdoc d302615d23c61c639ad53db79f2e5e6e3aedb53e0404821c5c02064f7913910fVirustotal results 38.33%Heodo
2020-08-20FILE_1100876368399670355047495.docdoc b32f302c129728edd895136f299f0e68031f9554b42be4fd2dd35f80a9b2a750n/aHeodo
2020-08-20DOC_5307432595.docdoc be8b2b9dcb90fbaed4e7bc6186fd5dbad93c77fd80cee44717c88ac07641368an/aHeodo
2020-08-20SHQ_SM3077915538ES.docdoc 96f7d13cfc1edad4f9381ae98cab2336d39557b2230d88583c92284d6616b4e5Virustotal results 38.33%Heodo
2020-08-20DOC_6448777134624.docdoc f49f483de9c2f5fc441b529eaa889631aa5a272206dfdca519993427403f65e9n/aHeodo
2020-08-19L_09328005.docdoc a75897a4101123281bbe047444001acc874171e15cc5a6047baa32d5100d4237Virustotal results 35.00%Heodo
2020-08-19DOC_PO_08202020EX.docdoc 36a290d9df91c6881e6f23de7e03e02206ef7ca2d8aac9d585308806b6e2b965n/aHeodo
2020-08-19N_PO_08202020EX.docdoc f0a83f24371ac4a144149c12aefa268138bf5a01f1c4d062a9e754b6995a1ecbn/aHeodo
2020-08-19Y_PO_08202020EX.docdoc 7ad5ea1233a7caa4360448569e2745679d1b0e3864b7f716284e3a7384c31462Virustotal results 26.67%Heodo
2020-08-1962LUGDU4H.docdoc 063b886950d14cfd765fafcd552629e1c87c3c1d0b03cc4a794e8c02dd34db42Virustotal results 16.95%Heodo
2020-08-19P_ZFB_080120_KPW_081920.docdoc 1a17af806d615019154f0985010aad3789bd90bdb40970f78cd0cda2bd722896n/aHeodo
2020-08-19PLO_080120_QCH_081920.docdoc 080538677c76d09277a58f1dc9be3e5df254a92d12fddc11326c1f896cd93a98Virustotal results 17.24%Heodo
2020-08-19BYB99M4B8CHRF7FD.docdoc c3f0d0d594a74f097907231612a0cd0da8c75160a2ae1064a3744ecdea407986Virustotal results 15.00%Heodo
2020-08-19DOC_MFI_080120_NWQ_081920.docdoc 7feab4f1f35adcc7433afdbf4448e5b79996fbe150dfe6e0f708a6c13ce86f7bVirustotal results 23.33%Heodo
2020-08-19INV_16349677.docdoc 8be59997575735dc3845990047094781b5e69f074f5b6569e6e1dcea50f08693Virustotal results 23.33%Heodo
2020-08-199060811226490727183.docdoc 6635eabce892d2b1dd62f9647fee70564a942d841995a10141d78bd8ad3ff732Virustotal results 23.73%Heodo
2020-08-19BAL_90270262.docdoc 39f8850f02b807a843447f461d3436d67191f0f08709c03d32958988964b5e9fn/aHeodo
2020-08-1901513203.docdoc d6d6d04fedae2537ae4cacad5ce33a5b5d5964d22f97c381def52cac01666902Virustotal results 22.03%Heodo
2020-08-19REP_PO_08192020EX.docdoc b4319c87f6557ca9768ff78abfa16c323c6ed7de149f3f741c390bfd70cfb22bn/aHeodo
2020-08-1922098120915.docdoc d1b8e4f438ccd7843bcc455b861f4c9233bcd76112c055b1ac51a72937d7455eVirustotal results 23.73%Heodo
2020-08-19DOC_PO_08192020EX.docdoc ed6f742fc6e103f092e9fd9301bf4ec786e88abca3ec1593661c4083f398616dn/aHeodo
2020-08-19HVH_080120_FOH_081920.docdoc d39c833a3b98e3b3b9e52621ec95c0ded900b865987a8e3fbccec144778f3ff6n/aHeodo
2020-08-19DOC_KP1065174207GD.docdoc f2d2558321c1b85c41505c190a6b4f309524c7eb7282f7a10ca8f832f539e42dn/aHeodo
2020-08-19TA_LE4AY6WUGT.docdoc 77834d629af8b45f85ec232e03fab3cf97e78e448b23fe48bc93ad6a391f3c90n/aHeodo
2020-08-19FILE_S9OEJJ71F3QW4RS.docdoc a47b7f6d9af6602b2dac196cb0faf5414e8a3d7f94604f937e2e66f19fd17b61n/aHeodo
2020-08-19BAL_7IDKKJPPPWUXBXVX.docdoc 40430817aac77bdfe251ec9275bd54f3f38e091508e5381af53292469132db78n/aHeodo
2020-08-19MAO_080120_VDD_081920.docdoc d3cea7588b6e664da8ef52bfb856e6fdc6e0df460f961066491aed88f4e29a03n/aHeodo
2020-08-19PO_08192020EX.docdoc dffce4f3af033dddc15747bb720fb0bd4358e29dffa6c674242ce4350b44af48n/aHeodo
2020-08-19REP_3CKPJZ9HWJOC54U.docdoc 5a216285239e2f997444c5eb15fd484fcfbb8a3d23acfea4b5d587768ba66063n/aHeodo
2020-08-19REP_SSTVEQD.docdoc d054c0a4a703726e52aaa5f6db946aefbc777af3e84c0bef5d5cfa5f7dbfe034n/aHeodo
2020-08-19INV_30055202.docdoc 1b110485a730140a1499cfb4e0313b280748117cd1f41699438e6e103af73ea7n/aHeodo
2020-08-19DOC_209580080028938736543.docdoc 74c2c54fc85691f5881aab90f9e3a678723c7e3b2e7a987c172eef23d4f275c4n/aHeodo
2020-08-19INV_5597713861484981073633017.docdoc c0cc9b7f9e29bd3365ffa10fc1fc152b67408939571c5f4e9ff97dc0246fe13dn/aHeodo
2020-08-19BAL_87688975.docdoc 75053be7f5d07337ba28d4d9fed63933fdd33feda824f8adb8587e4b4829caf5n/aHeodo
2020-08-19C_JQJ_080120_XEQ_081920.docdoc ccb2eeb74e4295cc786dee710d39ea735540fec1d56385abcd861a0cf3ed025en/aHeodo