URLhaus Database

You are currently viewing the URLhaus database entry for https://viswatechsolutions.com/cgi-bin/invoice/9fnmncxfwk9u/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:519400
URL: https://viswatechsolutions.com/cgi-bin/invoice/9fnmncxfwk9u/
URL Status:Offline
Host: viswatechsolutions.com
Date added:2020-09-15 19:59:39 UTC
Last online:2020-09-16 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-15 20:00:35 UTC to abuse{at}amazonaws[dot]com)
Takedown time:17 hours, 23 minutes Good (down since 2020-09-16 13:23:57 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-16FILE_W7PHWN8HSS9Y4Q9K.docdoc 722e0b21752c8eb64fbb26fcf4ef9ab58f89050b3b690fa97b068eae6a0b522fVirustotal results 24.14%Heodo
2020-09-16EA4699280973WZ.docdoc 7cec88df6a841fbc1251142492e673c8a2cddc58f21d6fd402f8167ee96e194cVirustotal results 25.42%Heodo
2020-09-16INV_BMRT1Q2X58Y.docdoc 4d6b056c7bab909b0af3f0a3a24f5b7fbc4453e31746d29c0c3d60122def5705Virustotal results 25.42%Heodo
2020-09-16FILE_M9FL7G09QWX32D0.docdoc b0ee242bd63c84fc1dc0a0688e6c44566078121fa2b637d55dc0584e5952c27aVirustotal results 25.00%Heodo
2020-09-16FILE_ZW1195391597SV.docdoc e6f1e7b2859714d5a971f9bf49e595cd31bbf292fbda1b9e5928fa031cfc7275Virustotal results 25.86%Heodo
2020-09-16BAL_TPR_090120_JYZ_091620.docdoc 5184e08e6c595ddbb60b6ac4030286b2e70fa5ee7567cb0360b2a66ec04f8d89Virustotal results 25.86%Heodo
2020-09-16CKFZ_78134010.docdoc 9a29066aa3490e60be3e563dadcd9f7ef75e6eef752abd1bd40ab5323a57a83eVirustotal results 25.86%Heodo
2020-09-15REP_CRFU3OP0.docdoc 8869192957c4d226cae4679243a3a7ac5a193866a2e1048e37ca60f29d9af28aVirustotal results 26.32%Heodo
2020-09-15DOC_25629937496599653.docdoc 3a008e06592f52dd80d9010935d5c1600be581e27402f7b909fb7d66aca492cbn/aHeodo
2020-09-15B_KCT_090120_UJL_091620.docdoc b408d1437535aab5eb52b147d59272e8056375f2e90e2ccef71c062980e36b2fVirustotal results 30.51%Heodo
2020-09-15B_4552020103637372631138065.docdoc 5e96a02fb1ec1284bbdd4f122425a6f635312ee541211269b39acd5addd3dd5aVirustotal results 30.51%Heodo
2020-09-15DOC_PO_09162020EX.docdoc ade1729cdf53dd56b39ae9440ccb71670f42e5f8fd2b0a564f11aa404c2d427en/aHeodo
2020-09-15DOC_FDBSCX6QP5RDF.docdoc 350cf5c830bdf242f41ea336e2803b83af81ba91751cb13c418e5cff3674d95fVirustotal results 29.31%Heodo
2020-09-15BF4174628730IF.docdoc 6f04f539195c899715c54e7cc3db85949143180e021314c0e670e09722d2afacVirustotal results 24.14%Heodo
2020-09-1565861425.docdoc c22a92c3f9f72a3ac154573621c47a61ea04bc8df6fbd72a14f55b0ac858f385Virustotal results 25.42%Heodo
2020-09-15REP_OI4676923334GN.docdoc 7ed2061c4e694c21459db2c680fc101f2f2ed9bb6b8b8768a3bfc2b19ca14ef5Virustotal results 25.00%Heodo
2020-09-15PO_09162020EX.docdoc 1fdc71b89f5d3b5fce037341692415964a8c4141c9579be50045bf9d2e309afdn/aHeodo
2020-09-150PTIH11P.docdoc 231d8f32ef0ff8e1a2b69db9bf1bf6c665c0cdff42bb4e3407cf7fe579304994n/aHeodo
2020-09-15DOC_BU8213807513MC.docdoc 8803b647321791051baa9ae249b48b03143908965ed583a37b955bf28c6a1c77Virustotal results 25.86%Heodo
2020-09-15INV_PO_09152020EX.docdoc d413b9053b30e18ef4358645da23d5c4f74ab8d57d2d78a6e7d423103985b071n/aHeodo
2020-09-15REP_PO_09152020EX.docdoc a4161a1c0ab452048658bdf4e30fe550fe9da9f47ea4525fdb2858949f42887en/aHeodo
2020-09-15DOC_PO_09152020EX.docdoc 4f256d7af5ae891b5f196fd51cbed3f7ba7ac2b82d86e8dd998cec459949f00an/aHeodo