URLhaus Database

You are currently viewing the URLhaus database entry for https://witdigi.com/wp-content/uploads/form/XOBvL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437493
URL: https://witdigi.com/wp-content/uploads/form/XOBvL/
URL Status:Offline
Host: witdigi.com
Date added:2020-08-20 21:22:04 UTC
Last online:2020-09-03 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-20 21:24:02 UTC to abuse{at}amazonaws[dot]com)
Takedown time:13 days, 15 hours, 26 minutes Bad (down since 2020-09-03 12:50:05 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22August invoice.docdoc 27e2a7ad7764b75f11753d945f9b7b087f89fa4b8b9bc1198bf7992c7c85d1e8Virustotal results 37.29%Heodo
2020-08-21Invoice.docdoc d09a4703239b8dd258d5174bc65647fa6b951cecfcb7c2f9c46a29a061a7a769Virustotal results 36.84%Heodo
2020-08-21August invoice.docdoc 1989fb17ff5d08477daaaa312869b7f56bccef29254a6657b1fc19e518bbf823Virustotal results 37.50%Heodo
2020-08-21Inv_7240.docdoc 546411a4e4d6a363c75dc53f0ce3df57a2b91ddcc70fc8cc78de89ea735c9290Virustotal results 34.48%Heodo
2020-08-21Invoice.docdoc f08a4bd810866942876f3fbc7edb2f0b9409f4fd7f0b6b36254450693dfd88f3Virustotal results 31.58%Heodo
2020-08-2189315.docdoc 5a6a9080591b012b2480611ffbc8fd5f09d771a50a7fcb3361f6a6ef04d2d8cbVirustotal results 32.76%Heodo
2020-08-21Payment.docdoc df8d09457a129b57c4740b237ac226b0e0245d035dc20930563bab681e98e8c9n/aHeodo
2020-08-21Payment.docdoc 43057d3c74a6fbe3be2660879e861ae3d0b2118866abb1e3fe8bc169c526d957Virustotal results 32.76%Heodo
2020-08-21Inv. 0033771918441.docdoc 214116ae52ad96af88fa41e0ea271fecb493e2afbc403bc3ca2c184ffd03d996Virustotal results 32.76%Heodo
2020-08-21INV_81011.docdoc d594bcea91f0259160c0122a56ad8ec4a7896173295fb3b2c197781cb1bbfddcn/aHeodo
2020-08-21PO# 08222020.docdoc 83e013279f45dc89d5efc3717634b746a611baee472756272e91e1673d8fc3efn/aHeodo
2020-08-210678385.docdoc b99da0701a16d0df2895790bf84db62ee0da6b42fa8ea0c2a5b103a131d98f13n/aHeodo
2020-08-21INV #01596 FOR PO #120755725.docdoc 5ad1d00e81e5e6bbc93829790980fabae6eab63a8638ed9bc024a27d083ffb87n/aHeodo
2020-08-21Invoice 000165823.docdoc 43638c344ac4a446af722c229682fee9a8434923ce1cf6dd1a19bd2a0fc78c21Virustotal results 25.86%Heodo
2020-08-21Invoice #041723.docdoc ed0a6eec86f44151f9815362fdc3c778a7f176378e582bfaf012098d9b98454cVirustotal results 25.86%Heodo
2020-08-21August Invoice.docdoc b76166d90236fcf6a548f8e77f55c56ee763ee2278a941d20f1c0a360fd63171Virustotal results 25.86%Heodo
2020-08-21invoice #96494.docdoc fa793702b351ab1f22fa5ff1d20c7f6bf822bd6954f637389577767a163275bdVirustotal results 25.86%Heodo
2020-08-21form.docdoc b7e0ba8f8567d8ee7a59765814c534ba0c4b1044ae4dceca564f53124b45aa36Virustotal results 25.86%Heodo
2020-08-21Invoice 707639.docdoc 337fac0cbc61c0f73258d843a4a64b68b825d45037b7339ca2ab659fe3e15912Virustotal results 25.00%Heodo
2020-08-2146495.docdoc c6c8fb9bb0d155bb4fe8b4b7904de586efbf5c79f49877313b380b848ad12da1Virustotal results 27.12%Heodo
2020-08-21Payment status.docdoc 49612d16c5034da0d220d8300787064bc2c03459f17a84b5eda167e9a2e50cfcVirustotal results 21.43%Heodo
2020-08-21invoices 73853 & 67001.docdoc ac7776c6da02640991e93e813cef246b2ec625dc7a53b7c726d71da39a0be6c5Virustotal results 22.03%Heodo
2020-08-21Invoice #86890.docdoc a99b807165ca13d9f9b50acacbb5c81c8e155e9347c5ff01cee84f4f19806a22Virustotal results 22.41%Heodo
2020-08-21Inv. 0191944889.docdoc abedafc5e19de68937c53f7be30c1b392975062ba9a11d34a991ca703cd3c578n/aHeodo
2020-08-21Payment status.docdoc 3e4b8326cfd9bfaeb2956b955bf3644032eb675cfd32a6284f371b2d6f68a47bVirustotal results 22.81%Heodo
2020-08-21Payment status.docdoc 69eab92915bca8074c0e4c4a14a6d4532a6d4162923b7c51799ae872c647ee21Virustotal results 21.05%Heodo
2020-08-21invoices 9263 & 96003.docdoc 403c11dfcd14c01cf91b6fc45cb7ef0a55919e8e5e0292399e1cbe734bb9d2a3Virustotal results 20.69%Heodo
2020-08-21VX-080120 FTFG-082120.docdoc ba4bb5f049cb59a1eb23f083cf22fe726a7d87f12e9b577f2eb52102b55496bcn/aHeodo
2020-08-21INV_1939.docdoc ebf536cc3ab147667e77823b5feaa2f72da1042d653ad11a26298800a7a86d77n/aHeodo
2020-08-21Invoice #802.docdoc 4da5e980866878da930be670800361fd6b9b6ec73983dd60cdba9eb29bd09ab6Virustotal results 22.03%Heodo
2020-08-21INV_4208.docdoc 787b14bfeb8561a5053f8ef91cecff83bea99a6acf52f2aea33414fa780bc5deVirustotal results 20.69%Heodo
2020-08-21Form.docdoc bfa9030c4923b22a26ab343f17ace0c0b90cb5a79c02e635937d73b994c50b42Virustotal results 18.64%Heodo
2020-08-21INV_5282.docdoc 762a08ff51aabd7ee2cdcb6f27fe687ead902ab8f3b84925b013904d356cb622Virustotal results 18.33%Heodo
2020-08-21NH-080120 RBUS-082120.docdoc f7cb6f54ae784a6604e311c1983b5301965ffe405c021a40c231902a5f85315fVirustotal results 20.34%Heodo
2020-08-21form.docdoc 13d2079b2caabbd56dc776517810d9dbf355138869ff3030314e9f4905e68192Virustotal results 18.64%Heodo
2020-08-21Inv. 041913840392.docdoc da6cfd72a982796c23b85856bdad5e44b0a6b35b120440b1be740f5424b3dffen/aHeodo
2020-08-217317181703.docdoc e194c7cc8ffedeb69d1b752e312fd6605be5ae9f49e9b652a38246d0c865dab2Virustotal results 18.97%Heodo
2020-08-21INV_828867.docdoc 97b387cc7ac53574e95b7d09f100821989778d4fc076acebf7b546f24b500280Virustotal results 18.97%Heodo
2020-08-21Inv. 00793503.docdoc 9863cd177f065c8ae1efb649be3ccae73cbcfcf0ccfd4f7a1956bcdd5d599bcaVirustotal results 18.64%Heodo
2020-08-21invoices 5242 & 8939.docdoc 1956596f7ed909a0c2291a2a8b6ce38918255ae87ced9b557c898972bcce4d42n/aHeodo
2020-08-21invoice.docdoc 8bd0a1327645a9ae845837795dd708e65e529f2b0baf0c5dbc548ef787a20024n/aHeodo
2020-08-21Inv_007135.docdoc be0c986b37c30a192c9f2e62d6c85b635a3e25bc10cb8a8b4ddac390bbc93163Virustotal results 21.05%Heodo
2020-08-21invoice #0168.docdoc 43a46142f7621ade3d5201623975cdd2f46d750261c13be021a2069028076099Virustotal results 18.64%Heodo
2020-08-21invoice.docdoc eb65f89380e33a9b00ab3e9cbdd92770694c8174e055f420ae67d26718260e27Virustotal results 18.64%Heodo
2020-08-20T3977154285RI.docdoc ed8f3cd480b6fef9996f65e02cc1cb3d295447728fd009032ac3838d32e01f37Virustotal results 33.33%Heodo
2020-08-20041507.docdoc 9c2952185499dfb564607790c299bf8a01a0bd16d64484be1812bfc88c5f5a06n/aHeodo
2020-08-20August invoice.docdoc 7e65999218e740149ebaffa84725ce3f6f0cecd5b565bf4f0e3c5f546785513cVirustotal results 32.20%Heodo
2020-08-20PO# 08212020.docdoc beb2d3691a0096ad6f8d004ee7df158d8580aa530e57b2872c943df21d056b60Virustotal results 32.20%Heodo
2020-08-20INV #076222 FOR PO #35088880332.docdoc 02480931bf8a8b3e881ba422b102f207249b593518e41fe9d80cfc2260831d94n/aHeodo