URLhaus Database

You are currently viewing the URLhaus database entry for http://noi.nu/Corporation/US/Invoices-Overdue which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:49114
URL: http://noi.nu/Corporation/US/Invoices-Overdue
URL Status:Offline
Host: noi.nu
Date added:2018-08-29 11:16:23 UTC
Last online:2018-09-09 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-08-29 11:20:04 UTC to abuse{at}oderland[dot]se)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-01n/aunknown 10cac5f93a39b30dc26ecbbcc5e8805c2ea93b8b39eddd451ce2a535269eef3cn/a 
2018-08-31Billing Invoice - Job # 696263.docdoc ecf07e9b72e5fa11612f40c33e1af2ef884f8b93c2ad317d982a2357d49db5fbVirustotal results 33.33% Heodo
2018-08-31Invoice Query.docdoc 54580f2ca416dd89565e0286ddb05c7aed1a5aceeca2766928aa6b90a63f4c34n/a Heodo
2018-08-31Statement as at 31.08.2018.docdoc 8f42e8029ea6ab00d08e940285fb29ab142f427f8354b9452eb6878fc0e0937dVirustotal results 39.34% Heodo
2018-08-31Inv. no. 15ZE8474.docdoc 3a2ce04a9398657962a31a6e53e5762b754fd7bfd675a34ed40bf5817c15964cVirustotal results 40.68% Heodo
2018-08-31Statement as at 31.08.2018.docdoc ddb199fccffb5e66dbe65054ee17ab0e9c1a4287707c8a781c666934e276f318n/a Heodo
2018-08-31Billing Invoice - Job # 065031.docdoc faf92cf99ada67ede9148966c47fd3482db2d4812555450a34f8cdb7906837e5n/a Heodo
2018-08-30Billing Invoice - Job # 797175.docdoc 92e27f0f1bdefda08f890d324e4a631f53f33096379d9bba32efb554a4834dbdVirustotal results 33.90% Heodo
2018-08-30Invoice as at 30/08/2018.docdoc e2aa8ae89ff4e8c23ef5cdeafc3c208b1ec2061735a855bd4694faa7a69e22b6n/a Heodo
2018-08-30Outstanding invoice.docdoc 2d3b8c2a662fd3a6f0693f5f010493c79f45a1edabfe16f8f22d5af3a56714c4Virustotal results 32.79% Heodo
2018-08-30Outstanding invoice.docdoc 499e366d052b2456375a48c68d71b5fab9013834be17ad8c4972b514d1f090d5Virustotal results 32.79% Heodo
2018-08-30Latest invoice - 137862.docdoc 2a0df4d0005fa84de6cd6ccbb337de5ec045e1e7a86bd79607089b3a2eb84723Virustotal results 31.67% Heodo
2018-08-30Inv. no. 59JI92726.docdoc b25f7a6d85c230a92f0849263c5e734f43a00da97acbf8fa3ab0fafeb4489c78Virustotal results 33.90% Heodo
2018-08-30Outstanding invoice.docdoc b1f78b1f323a98708f4b888cff40ab0ed3c86dd4b2ef7c43205ac95ad8cfc2b6Virustotal results 36.21% Heodo
2018-08-30Customer No 857152.docdoc 6acf75a4e27f2a8b0f505a991480274abffbfeb2a1b8e11f84189044dd589e31Virustotal results 33.90% Heodo
2018-08-30New invoice 0K9I88570.docdoc a03c8da2879d92c8c6e60751e769d09e8d6224d25f6752617f31684b6232240an/a Heodo
2018-08-30Customer No 311532.docdoc c030aaacd17be36d96cf691364799cf02a047b17e8969daa4a46425d67fabdecVirustotal results 31.67% Heodo
2018-08-30Billing Invoice - Job # 757905.docdoc a8eac895f09173e1d6714ed520f2544f0cb74a5067dfa565b574c2aff2efd400n/a 
2018-08-30Invoice.docdoc b310420513b142dbff7001fb48a391591d97ffc1ed7564805c978fe60a971c51Virustotal results 31.67% Heodo
2018-08-29Invoice.docdoc e70ba787217df3341c7994fdaadb339ad5cd53a1589f5e9342b4e7f95eaa97b0Virustotal results 31.67% 
2018-08-29Review invoice required.docdoc d4961b28370e9ec272f0385e23d6ffbc5d8abf0bd9e2bf22fd2c74f37a39da8an/a Heodo
2018-08-29Invoice # 61ZJ286809.docdoc ab2b31587d9870ddf948fb9fee4e74a229b99629557996ddd6edeffda0bb9da4Virustotal results 30.00% Heodo
2018-08-29Invoice Query.docdoc 5e1f4107b44b38183b61d8add19e9e5e9c74261c20f8cfafdafcfdbccfacb9daVirustotal results 30.00% Heodo
2018-08-29Inv. no. 957F07675.docdoc 3e388bc87e75de1174cef91afcef78aaffbc046c4fa49d6039b9bf01828519f2Virustotal results 30.00% Heodo
2018-08-29Billing Invoice - Job # 343927.docdoc ef851b781aa4e9497006f57d25bb7e83237742df2ca4c8003101fcb95b01c514Virustotal results 26.67% Heodo
2018-08-29Month notice.docdoc d97c8426af0f81a7f985a4ccf837afdd2e2bf3e5c9141d8b39307516a17f2663n/a Heodo