URLhaus Database

You are currently viewing the URLhaus database entry for http://viswatechsolutions.com/cgi-bin/invoice/9fnmncxfwk9u/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:519916
URL: http://viswatechsolutions.com/cgi-bin/invoice/9fnmncxfwk9u/
URL Status:Offline
Host: viswatechsolutions.com
Date added:2020-09-15 20:45:19 UTC
Last online:2020-09-16 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-15 20:46:16 UTC to abuse{at}amazonaws[dot]com)
Takedown time:16 hours, 46 minutes Good (down since 2020-09-16 13:33:07 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-16FILE_W7PHWN8HSS9Y4Q9K.docdoc 722e0b21752c8eb64fbb26fcf4ef9ab58f89050b3b690fa97b068eae6a0b522fVirustotal results 24.14%Heodo
2020-09-16REP_876941107324816973.docdoc c8c52e1ff627d998a9a7ab47afecc546bab7e768dddab4862fb9f2d0b25fc070Virustotal results 25.00%Heodo
2020-09-16INV_BMRT1Q2X58Y.docdoc 4d6b056c7bab909b0af3f0a3a24f5b7fbc4453e31746d29c0c3d60122def5705Virustotal results 25.42%Heodo
2020-09-16FILE_M9FL7G09QWX32D0.docdoc b0ee242bd63c84fc1dc0a0688e6c44566078121fa2b637d55dc0584e5952c27aVirustotal results 25.00%Heodo
2020-09-16FILE_ZW1195391597SV.docdoc e6f1e7b2859714d5a971f9bf49e595cd31bbf292fbda1b9e5928fa031cfc7275Virustotal results 25.86%Heodo
2020-09-1606735895.docdoc 607bf68103d9158e576beb6c3a4b287bc5f5283c5871075a532d44efa448b9a0Virustotal results 25.86%Heodo
2020-09-16FILE_PO_09162020EX.docdoc f8a35f4ee5b56117d206ece5cd25afb33aba58cbfb3c32748018d4424f212bddVirustotal results 25.42%Heodo
2020-09-15DOC_PO_09162020EX.docdoc d2939ee7042da0a88a76cc4e60e5a8cfbc83e5b4fad03c547ffb13bb006a2c5fVirustotal results 24.14%Heodo
2020-09-15X_PO_09162020EX.docdoc aee8c2cd0f5858f9d9f402974a799cfa4ba52786593ce6681014c289e75f58c8Virustotal results 27.12%Heodo
2020-09-15Z_WQA_090120_LHD_091620.docdoc 20843d0cdd4530871779caa7abdd86286747cf5422074a5f981d499aed8d19d3n/aHeodo
2020-09-15B_4552020103637372631138065.docdoc 5e96a02fb1ec1284bbdd4f122425a6f635312ee541211269b39acd5addd3dd5aVirustotal results 30.51%Heodo
2020-09-15FILE_KF8789545391ZI.docdoc 4d66e8cc8f45638b711778d7d1b698c5b793f452d0a58eb0a71bb5a365729c96Virustotal results 25.42%Heodo
2020-09-15DOC_FDBSCX6QP5RDF.docdoc 350cf5c830bdf242f41ea336e2803b83af81ba91751cb13c418e5cff3674d95fVirustotal results 29.31%Heodo
2020-09-15Y_15803901.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360Virustotal results 27.12%Heodo
2020-09-15UL8129241701HQ.docdoc 57f88105c170f6a9c0718d37fc98fc60ebc7eecbd83b74780b5284d5412ff8adVirustotal results 25.42%Heodo
2020-09-15FILE_SX2415911754KX.docdoc 7cec88df6a841fbc1251142492e673c8a2cddc58f21d6fd402f8167ee96e194cVirustotal results 25.42%Heodo
2020-09-15FILE_PO_09162020EX.docdoc 3b610a0aa4890a007dcf6df33178a042c25d7ae68a3fdff4d368a5728f811a78n/aHeodo
2020-09-15REP_US4760420836DC.docdoc 8c88e1e8081c3c1795039fb19de72e17b4e0a72076d49470327bd62bf090909dVirustotal results 25.42%Heodo
2020-09-15DOC_BU8213807513MC.docdoc 8803b647321791051baa9ae249b48b03143908965ed583a37b955bf28c6a1c77n/aHeodo