URLhaus Database

You are currently viewing the URLhaus database entry for http://dodirung.com/temp/invoice/256fh8j-000202/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:438048
URL: http://dodirung.com/temp/invoice/256fh8j-000202/
URL Status:Offline
Host: dodirung.com
Date added:2020-08-21 08:35:04 UTC
Last online:2020-08-21 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002879481 created on 2020-08-21 08:36:05 UTC)
Takedown time:9 hours, 19 minutes Good (down since 2020-08-21 17:55:18 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21007373721.docdoc 4ab72d91d0e85daec3f451ceb24b75e35a698aec75707fa853f10d780396df0dn/aHeodo
2020-08-21Invoice 00394673.docdoc fa793702b351ab1f22fa5ff1d20c7f6bf822bd6954f637389577767a163275bdVirustotal results 25.86%Heodo
2020-08-21August Invoice.docdoc b7e0ba8f8567d8ee7a59765814c534ba0c4b1044ae4dceca564f53124b45aa36Virustotal results 25.86%Heodo
2020-08-21IIP-080120 YIHE-082120.docdoc 78a36b1f41b0c09c31d6bc4665036ff311e872b98404bb726312e26f0d559803Virustotal results 24.56%Heodo
2020-08-21Inv. 0837865093.docdoc c6c8fb9bb0d155bb4fe8b4b7904de586efbf5c79f49877313b380b848ad12da1Virustotal results 27.12%Heodo
2020-08-213372006.docdoc fa73c7c4709f00943c0995e1c8b64edce7bd0443e3a2fa1c4940c978d35fa794Virustotal results 23.33%Heodo
2020-08-21invoice #6500.docdoc 224d0b30bfff0d484bbc3b3cf1f7a97443aaa5656865fa5af8a3d545b3d5048dn/aHeodo
2020-08-21invoices 66305 & 53633.docdoc 7bf19f22efc3105310b2bf37df600a6d3bb4d2136d4ae4c7e0454ffbdb3939aeVirustotal results 21.43%Heodo
2020-08-21783848.docdoc abedafc5e19de68937c53f7be30c1b392975062ba9a11d34a991ca703cd3c578n/aHeodo
2020-08-21Invoice 0066558.docdoc c50a12add2e3c75f860f563d042901761cb7ec0a2f4fa64ddc37c1dbbef8bbcan/aHeodo
2020-08-21INV #001246722 FOR PO #0195391135.docdoc 21d54929d53a038a86a56cb5069a4769a462b032d74d222eccef96a97e9d5a8dn/aHeodo
2020-08-21G-080120 OSFN-082120.docdoc eeee33ce9e2286f03410cca48f68b1eac155b167eb430f7cb01333cc359a4d4an/aHeodo
2020-08-21PO# 08212020.docdoc f31012ac78ab2a6de1fdb75aed9cee6eb69e6222f724303a66da51fe0c29cd0en/aHeodo
2020-08-21Invoice.docdoc b2c79cde6af53d39ae8ec8a5c9877900b803c94d70f8f7310ca1cf331d43ef15n/aHeodo
2020-08-21invoice #302624.docdoc 4da5e980866878da930be670800361fd6b9b6ec73983dd60cdba9eb29bd09ab6Virustotal results 20.34%Heodo