URLhaus Database

You are currently viewing the URLhaus database entry for http://www.willow-nettica.com/cache/Overview/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:438449
URL: http://www.willow-nettica.com/cache/Overview/
URL Status:Offline
Host: www.willow-nettica.com
Date added:2020-08-21 18:44:13 UTC
Last online:2021-09-20 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-21 18:46:06 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 year, 1 month, 4 days, 14 hours, 28 minutes Bad (down since 2021-09-20 09:15:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-22INV_BO1A6QPJ1I85545G.docdoc 493fbab43b8eaf0772394866842fa9474e8e54a84894498828af06590dff1cbdVirustotal results 55.17%Heodo
2020-08-22FILE_B6DDDRKONXOXU.docdoc f8cac8302d04c68ac098a7199dad00350e89aea96d6c7bd016056461d9c49909Virustotal results 56.14%Heodo
2020-08-22FILE_71106153.docdoc 3655cdb051d4e200642ff9c6d6771c865cf10cf779c5253707a6c1939ff9967fVirustotal results 48.28%Heodo
2020-08-22D_20258624.docdoc 3add55012fa656f99ca3b86500d4948e3cc308b1394b2a208aa1b27bd8981e13n/aHeodo
2020-08-22CPVB_PO_08222020EX.docdoc 6c3fb369276b844233faf8e281f76433edfc72cf4474e44876f1d5869e35e533n/aHeodo
2020-08-22574734146536.docdoc 875e8c26386ff1c0c8b3678d2bb054d0883fa0eea3868af7f150390cb0ba6577n/aHeodo
2020-08-22BZS_080120_SHZ_082220.docdoc d22cd591ca782f3baf0951d51ef1240685529fa34c5600b9fd14b3a9f81a6ff4Virustotal results 49.15%Heodo
2020-08-227K7Y7O5KHZXE6XUV.docdoc 64ff3957fa2821e1e54fc9ae7986204b361b0ab5cea01e45f4582b9b61318de8Virustotal results 56.90%Heodo
2020-08-22INV_PO_08222020EX.docdoc 88e331f8a74773fcca5ff4bb66a3b171e894b1251e1b43936bb6b7f016d92ca7Virustotal results 49.15%Heodo
2020-08-22UE_67672893.docdoc 17a8abcd3a0ca286f3322bc0211554283f14c8d538bbc1cac2fa2ffd07dd10bcVirustotal results 45.76%Heodo
2020-08-22DOC_MP4071200060ZZ.docdoc 6c1c592a721270eee147407ae5433ab9874fc959d3a587c9b711accf6804bd1dn/aHeodo
2020-08-22EH8377373773CI.docdoc b8a94a9f62b6775a1344c2264595791ae3ea587929c28341e9423c9dea41c9c9Virustotal results 51.79%Heodo
2020-08-22INV_36491801.docdoc 69e8dd6df38ec2bdea7faaa0d97904804da845aebf646226f142eedb586b32een/aHeodo
2020-08-22FILE_RTJ_080120_NRF_082220.docdoc 2fd9392aa58c13ecda286bf33882e5a6ebd07633a6ab746f9f1b8c573f42a129Virustotal results 49.12%Heodo
2020-08-22VZ0839136948VR.docdoc d5967e0174137858c48cd8bbaa7f6935d1296347df3689f088e13c56cff70b40n/aHeodo
2020-08-22REP_431427846871885.docdoc 09a8b2355f1be6dde0ecc28e349a88dbfcdec61e7936a2ee93480e76b4b82ef8Virustotal results 47.37%Heodo
2020-08-22INV_PKZ_080120_FNO_082220.docdoc 5a8c3ebf749c6f220acb0540ed11bbfc458ffff16839e005442f07fdeb004137n/aHeodo
2020-08-22152163526793653610246804.docdoc b827ea89c0285f491b5d81e3db08938e1c2c1bca8c6187af15debc415b8ee65dVirustotal results 48.28%Heodo
2020-08-218XKVKWBJ9EB2I9T.docdoc 7383abe5bb7a8706585423285004b45c9ce4aac14b3653a45518d3778bc7beean/aHeodo