URLhaus Database

You are currently viewing the URLhaus database entry for https://nysos.se/xppw/55859120351/47v8c8429r-8217/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437923
URL: https://nysos.se/xppw/55859120351/47v8c8429r-8217/
URL Status:Offline
Host: nysos.se
Date added:2020-08-21 05:41:33 UTC
Last online:2020-08-21 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-21 05:42:02 UTC to abuse{at}digitalocean[dot]com)
Takedown time:15 hours, 40 minutes Good (down since 2020-08-21 21:22:22 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21Invoice 00282726.docdoc b43df5c0df066a651a976b156ca480e58acf3b61caeb45c08fadfcdb82e46addVirustotal results 31.58%Heodo
2020-08-21Inv. 006159929.docdoc 5ad1d00e81e5e6bbc93829790980fabae6eab63a8638ed9bc024a27d083ffb87n/aHeodo
2020-08-21SK1730791805AF.docdoc 43638c344ac4a446af722c229682fee9a8434923ce1cf6dd1a19bd2a0fc78c21Virustotal results 25.86%Heodo
2020-08-21Payment.docdoc dfb4a0445bee97a362ee8ea96a3cb6444bc3ef4b7c96beaa5edf0508e6343c56Virustotal results 25.42%Heodo
2020-08-21Form - Aug 21, 2020.docdoc 4ab72d91d0e85daec3f451ceb24b75e35a698aec75707fa853f10d780396df0dn/aHeodo
2020-08-21Invoice #12729.docdoc fa793702b351ab1f22fa5ff1d20c7f6bf822bd6954f637389577767a163275bdVirustotal results 25.86%Heodo
2020-08-21Invoice 93066.docdoc b7e0ba8f8567d8ee7a59765814c534ba0c4b1044ae4dceca564f53124b45aa36Virustotal results 25.86%Heodo
2020-08-21form.docdoc 78a36b1f41b0c09c31d6bc4665036ff311e872b98404bb726312e26f0d559803n/aHeodo
2020-08-21invoice.docdoc c6c8fb9bb0d155bb4fe8b4b7904de586efbf5c79f49877313b380b848ad12da1Virustotal results 27.12%Heodo
2020-08-210405160.docdoc fa73c7c4709f00943c0995e1c8b64edce7bd0443e3a2fa1c4940c978d35fa794Virustotal results 23.33%Heodo
2020-08-21Invoice.docdoc 2ce951fdd23668dc604d3edaaa4e54fa607e9bdf62e6d471a60ec5671ac4b9a3Virustotal results 22.81%Heodo
2020-08-21August invoice.docdoc a99b807165ca13d9f9b50acacbb5c81c8e155e9347c5ff01cee84f4f19806a22Virustotal results 22.41%Heodo
2020-08-21Invoice #50587.docdoc abedafc5e19de68937c53f7be30c1b392975062ba9a11d34a991ca703cd3c578n/aHeodo
2020-08-21INV #0984 FOR PO #16250720933.docdoc 3e4b8326cfd9bfaeb2956b955bf3644032eb675cfd32a6284f371b2d6f68a47bn/aHeodo
2020-08-21Invoice.docdoc 69eab92915bca8074c0e4c4a14a6d4532a6d4162923b7c51799ae872c647ee21Virustotal results 21.05%Heodo
2020-08-21August Invoice.docdoc 403c11dfcd14c01cf91b6fc45cb7ef0a55919e8e5e0292399e1cbe734bb9d2a3Virustotal results 20.69%Heodo
2020-08-21INV #100 FOR PO #01535975032.docdoc ba4bb5f049cb59a1eb23f083cf22fe726a7d87f12e9b577f2eb52102b55496bcn/aHeodo
2020-08-21Invoice #044.docdoc ebf536cc3ab147667e77823b5feaa2f72da1042d653ad11a26298800a7a86d77n/aHeodo
2020-08-21Form - Aug 21, 2020.docdoc 4da5e980866878da930be670800361fd6b9b6ec73983dd60cdba9eb29bd09ab6Virustotal results 22.03%Heodo
2020-08-21Inv_9952.docdoc 9da9694a1d52b592d84be3c64b9cbccadfa602164ebe526c2a1223438384e7f7n/aHeodo
2020-08-21Invoice #97286217.docdoc d36a6c6b491f807acefa65d267627215dc919075551c5f10749fa44c5652de4an/aHeodo
2020-08-21Inv_71612.docdoc 7b92a86dabe99c11df1d176607cf155dba7ed15763592e1525e8c003d12a7e98n/aHeodo
2020-08-21INV_6691.docdoc 8ffb84f76b863917f3ef52c3c75dfa70bc77599b7deb86067b43c413c8ff681cn/aHeodo
2020-08-21Copy invoice #85258.docdoc 13d2079b2caabbd56dc776517810d9dbf355138869ff3030314e9f4905e68192n/aHeodo
2020-08-21invoice #52383.docdoc da6cfd72a982796c23b85856bdad5e44b0a6b35b120440b1be740f5424b3dffen/aHeodo
2020-08-21004370402.docdoc beb57be5d7b7a5323ead5a11721211e06b8ea9dc1318680473c33d71fa1a34dcVirustotal results 20.69%Heodo
2020-08-21Payment status.docdoc cfd868922c2dc3b7f2e0a5c8aaa795f3259cd4a3a02b0f695dca33dd2a84b31en/aHeodo