URLhaus Database

You are currently viewing the URLhaus database entry for https://wshosting.co/cgi-bin/invoice/6z92xxm4a4-00047/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:445391
URL: https://wshosting.co/cgi-bin/invoice/6z92xxm4a4-00047/
URL Status:Offline
Host: wshosting.co
Date added:2020-08-27 19:07:36 UTC
Last online:2020-08-29 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-27 19:08:02 UTC to noc{at}whitesandshosting[dot]com)
Takedown time:1 day, 16 hours, 41 minutes Poor (down since 2020-08-29 11:49:33 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29August Invoice.docdoc 5df4f10d255d1733e9450ecf67d166c73f6f29bb36efe88d6093a31d31ce0ad4Virustotal results 45.45%Heodo
2020-08-29August Invoice.docdoc 5df4f10d255d1733e9450ecf67d166c73f6f29bb36efe88d6093a31d31ce0ad4Virustotal results 45.45%Heodo
2020-08-29Inv_024127.docdoc 867f6ccabf112c3105f544c490f65b90fc6e09b18681e1ed7eb9619045ad60f6Virustotal results 44.83%Heodo
2020-08-29August invoice.docdoc 4cc3b0434341ecff74a4c62206f91d15c075496a48829df0ab0f51b530dc9ed5n/aHeodo
2020-08-29Inv_023848.docdoc 3b5c4fffd6b0548d5d66842086b1b3762032be24a72ceb3154d72cc55cbb8d83Virustotal results 44.07%Heodo
2020-08-29Form - Aug 29, 2020.docdoc 3a8a42c319462b67597a9fefae7c60c0a3917018eef2b0bba8bb02980e6ffe02Virustotal results 44.83%Heodo
2020-08-29August Invoice.docdoc c20ac324613872bd6a01c7b872595002ebe2f3ff89da41d668aec7cb22ebe586n/aHeodo
2020-08-29CH-080120 OMLD-082920.docdoc 63b6721473e50f9b390f116cda2dc97aff00e66766293eae82b907ae7ce0c375n/aHeodo
2020-08-29Invoice 091604.docdoc 3b05f64f06873b3ad6438916c81c4f4139191b2d5a8324a632b2ef7fe4a82803Virustotal results 44.07%Heodo
2020-08-29invoices 1250 & 95026.docdoc 20d5c90c46b7747659e92efa4aa78da9e7404b82187e9e8605337918faad432fn/aHeodo
2020-08-29invoice #9606.docdoc b7a2a470b35a3cbf4a6501f45709fa7cc29d2a33c5cac4f00ac64b426b90929en/aHeodo
2020-08-290009729.docdoc b8029c0d90d1b4ff550cf1f13603ccb9b462e64c8b81afc2ac33252b86839931Virustotal results 35.59%Heodo
2020-08-29INV_5662.docdoc 1c37ef957c050e7a7373f775d0d82d817ee844735fe2cd1bc4f18b6a65638f6bVirustotal results 36.84%Heodo
2020-08-29INV_58574.docdoc 3859539d7b23160befaa0ee026d5fadadd14d18b595a63a1d2adb1c103a7092bVirustotal results 35.59%Heodo
2020-08-29X5598027131XZ.docdoc 0c962f3623896801e405c611fdc2b6cbbff5a1757ab32e43feaaa32ac76fd56an/aHeodo
2020-08-29Payment status.docdoc 939a22a6a05d99ab11db0eb510017c9c6729c96dc78051736fd36ec777fe7196Virustotal results 37.93%Heodo
2020-08-291485219459.docdoc a936fa77ef0be55ddc1bba6a24c65da623b7207d45356219d55b2475a4234b9cn/aHeodo
2020-08-29invoice #608738.docdoc 7a2ea6bf67afad967a724ca65954848493d2b3d60c68a583219c0d8acff06db4Virustotal results 32.76%Heodo
2020-08-29Copy invoice #4548.docdoc 8c3d2e0fd7d2cc86088185bf1acaf32d2d7e43124beba918f38856179ade8097Virustotal results 31.03%Heodo
2020-08-28Copy invoice #0298.docdoc acaee01eb81fad1793634836807c913a67f13ad7d260b9a1e51ef0994148734bVirustotal results 31.03%Heodo
2020-08-28Inv_501223.docdoc d39436c50b9667b5827c801070c34c0747f3ec1a8cb14b0602a317fe47c4331aVirustotal results 28.81%Heodo
2020-08-28Inv. 00415662.docdoc a457afd23063f580f5431f2118cc0936362067a7440f76d90eeb270da41508ecVirustotal results 28.81%Heodo
2020-08-28Electronic form.docdoc af205422f14b639b4df94286a2e75e65fd7522ea8c0ec60d23af74f197e9a02dVirustotal results 30.00%Heodo
2020-08-28Payment.docdoc 1af25f1feab8bab24a7f9f4531268d94b21a132eb001a1474213e7f92378cef5Virustotal results 28.81%Heodo
2020-08-28PO# 08292020.docdoc 83a4d7860de46ad541e0399824ba56d53f755c233914096fa08cdf1d966960b0n/aHeodo
2020-08-28August invoice.docdoc b89e478d217b03e8c0042bab248bd9431243f6fbe54c13d26d77b63b93c0c99cVirustotal results 28.81%Heodo
2020-08-28Payment status.docdoc c7042f61131d4a483d3b7433af94d39743944f2fd4e00abf795450a603c883fcVirustotal results 27.12%Heodo
2020-08-28Invoice #12040.docdoc 7c71cf265cc466bd5ebf00f951075806e8fa53e88af0e8c4f33a3cede8cd48e8n/aHeodo
2020-08-28INV_50961.docdoc c82756a3bd9fb3dda02e010f791ccb919aa02a98b6b4fc7d6646947584d80fb4Virustotal results 27.59%Heodo
2020-08-28Inv_883029.docdoc efddb6ce3f85a172356a95dfe3e262efff6d615be2339031c4ac5a68d7d2b2dfn/aHeodo
2020-08-289288796490PW.docdoc bbc0eae477256f89197e5444d0c56c9d942ef98593c60569ebc0c33dc28f6f21Virustotal results 45.00%Heodo
2020-08-28form.docdoc 8e0a43dba192a9953d51771fbb1935e32f67fe8ec37566325e406fecd46c36a6n/aHeodo
2020-08-28CKG-080120 VMSI-082820.docdoc ddf4b2916c52aac5c7ded567a35342d32e16955b622791d146f2c94f1070628dn/aHeodo
2020-08-28Invoice.docdoc 36745635813a270265d3e77f10090ceff5e939ae61f65aee431d9e14d555b808Virustotal results 36.21%Heodo
2020-08-28INV #930004 FOR PO #208354436.docdoc 47d6846e884d98db8852029fc3165f685f5dd03ab66b75531c54ba037275345cVirustotal results 36.84%Heodo
2020-08-28INV_59352.docdoc 67484a298833085645e58633dac097e76989a91be839c3c28d3e7253c04a37dfVirustotal results 36.21%Heodo
2020-08-28invoice #439284.docdoc 04db0fe3d77ca5cbbff1f31bd8c3a447d0064d2a0154116bbb03556dc330bb21Virustotal results 36.84%Heodo
2020-08-2844033.docdoc a4dffd6b5fa7d2449f47b1b478c27992a8065e03d8547d95b9a59fa01b3de4beVirustotal results 34.48%Heodo
2020-08-28form.docdoc 793c748b73456c41a779d39fd68f6e5575afe3e45b78bb91800b39bd3f5918a5Virustotal results 35.59%Heodo
2020-08-2802675243.docdoc eb2643323c03b0e4f951c27f3d3003dece58d31ade3490d2d2dba0c480c21695Virustotal results 35.59%Heodo
2020-08-28Invoice.docdoc fe67dad19921f5aa8094f795c7d533572b3d6d386e1d3b9d1490738b2150e066Virustotal results 37.29%Heodo
2020-08-28Payment.docdoc 56385c138dcd6e1f59be2fadd0cb3e78305d5a8b74de904c00ca85d68aa84809Virustotal results 31.03%Heodo
2020-08-28Payment.docdoc f518586d760ddbf3ef58ae4e7f8bc570d1154c9756e793135770a886901385cdVirustotal results 30.51%Heodo
2020-08-28invoices 974 & 2193.docdoc c5a9757906c65f2a2961bd352aa8d42181b2b26e9cf2b82e01d6e824d94bc00aVirustotal results 31.03%Heodo
2020-08-28INV_787150.docdoc 642f14769b07ea8ab51a202c4f9b39fc9d7a2a6181baefed723a2d581d729a7aVirustotal results 31.58%Heodo
2020-08-28INV #992 FOR PO #00364069958625.docdoc cb74e6583da3957d6fc1c0e3335350497207614a8b8a39c78b13b5818d22af08Virustotal results 30.51%Heodo
2020-08-28X-080120 GRHP-082820.docdoc 56fb6984a9ed01d86453cc0169de84228a233ed18df4725be0c6bff8af193d2bVirustotal results 29.82%Heodo
2020-08-28Invoice 08938113.docdoc f54d6deaf0de0c28779afc333e940e4205cedfafd09a18bb1cc653cf3b2073d4Virustotal results 30.77%Heodo
2020-08-28Form - Aug 28, 2020.docdoc 8a2ccbf2fd45902471ea5dcc116d258ca0ff53b4e7499fe76f00349f029d0570n/aHeodo
2020-08-28M-080120 CQTR-082820.docdoc ba1bac226c7ba525e1b2706a7f0a7a0ddec1272db21044df1e28cfd777804a3fVirustotal results 31.03%Heodo
2020-08-28CW695 invoicing.docdoc a4e35918b2db5a325a398c79bb0cd310e6d1c70f405953dd8f0335f3c9cc8f2cVirustotal results 31.67%Heodo
2020-08-28INV_58261.docdoc 1d2b270375ae00907412647180a7dffae422dac066c42966c9cca4bd1dd8dfe2n/aHeodo
2020-08-28036248.docdoc 7e0d6fc8bc7a69d5e27e2130c83b434512af52a5337145098c2426f62abf97eeVirustotal results 33.33%Heodo
2020-08-27August Invoice.docdoc 4ce9df1e1264045ad777d99c61dddefe4fef6126a7fd8af26fddb734798a13c2Virustotal results 34.48%Heodo
2020-08-27invoices 243 & 3297.docdoc 3568c70e775ee5811a5b7e2469404ff40381661edfb5e3c269c431f4e0e77874Virustotal results 31.58%Heodo
2020-08-27Form - Aug 28, 2020.docdoc 907ddcc7b2dd5151f379c7897b9de25bfcf3e3f5a8a58043b3339a540ee5ab76Virustotal results 32.20%Heodo
2020-08-27Inv_752467.docdoc 97dfe06b3f4e9ebb2beb149355b82886fe468ce91c30adb82a16097ec15cbdfdVirustotal results 33.33%Heodo
2020-08-27OMI-080120 KRTM-082820.docdoc 55729022c3684fd899ee712d0d0d3dbfeb5161fa842b101cd28dfcf85ead1a74Virustotal results 32.20%Heodo
2020-08-27GI0075 invoicing.docdoc d7c4c7378b94661a714fe656b5ec74214db2780401d214fb0faa2d6d7b627199Virustotal results 32.76%Heodo
2020-08-27J0065 invoicing.docdoc 5f6d826b32b5b3fa5a3eb0346ccd94042e0ac9b22340f515557882cd1de63c73n/aHeodo
2020-08-27O0078 invoicing.docdoc 9293848a589af567094cd2bdce0ee80f984253bfc03742c8784009050f881b36n/aHeodo
2020-08-27Invoice.docdoc c5150498d85f37076366cb75c223d4c26b65ed7a7466ece0af3344c3e7189044Virustotal results 33.33%Heodo
2020-08-27invoices 85327 & 7866.docdoc 2d49046fc064b91ca9ac6b885536752ac075d5f370afc9d43148a0d79c4cfa51n/aHeodo
2020-08-27Form.docdoc 60b86e0c83cc8555eb3cba094d5fa6da5cbcb2bce3a7e846c0fd2becbbcc05e0Virustotal results 33.90%Heodo