URLhaus Database

You are currently viewing the URLhaus database entry for https://obeidmachinery.com/wp-content/invoice/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:589188
URL: https://obeidmachinery.com/wp-content/invoice/
URL Status:Offline
Host: obeidmachinery.com
Date added:2020-09-21 19:57:34 UTC
Last online:2020-09-22 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 20:01:23 UTC to abuse{at}digitalocean[dot]com)
Takedown time:15 hours, 57 minutes Good (down since 2020-09-22 11:59:15 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-22A_12389821.docdoc 522a6a9648d423274df8aedbe2908eeb47d0b79b0d0a64387dc0ad6745235bd1n/aHeodo
2020-09-22REP_4137518279660084720733705.docdoc 8c8ed2cf7d7d8a0d30ef87d6e22f5278e645e36b1953664ce79c49a024364c1cn/aHeodo
2020-09-22E_PO_09222020EX.docdoc c2ab565abcbffa0a64129a761bc41abe273dd626c4dd8592441e07474a847532n/aHeodo
2020-09-22FILE_RFU_090120_JXQ_092220.docdoc 193194a1f2cec3953fba2121f846171524d92ef27569d72e891d3a175cafa647Virustotal results 49.18%Heodo
2020-09-22F_PO_09222020EX.docdoc 578e0149bfd762e04af50580b876ce1fe3662cf264dcbaef3707e2f3f0ac321aVirustotal results 50.00%Heodo
2020-09-22FILE_ZLC_090120_JFN_092220.docdoc a1f38fddcd55d65ac86443b8fa152a4c2ad770fa67b0170b30be1c8c967986d9Virustotal results 49.15%Heodo
2020-09-226077790978134838.docdoc 786c261badc6c7bf63d5d39f4777269b81a0e4b2df5040b22a912e8b86f5ed49Virustotal results 49.18%Heodo
2020-09-22BAL_36528094.docdoc 4cf44fec1d562df92879e4f30d039d271d3178069c2bf587a080f9f0ed11c097Virustotal results 49.15%Heodo
2020-09-22DOC_1R0P99CW.docdoc f7d185bc2085e44ced3ed36baa71b29f5a9264496d2a184762afbe0469d50448Virustotal results 49.18%Heodo
2020-09-22DOC_MOYSU0K6BLZH53.docdoc 9520ce496fa9afff4f1fcb5f994f1c8cc4c85506af12a2fe71358e164d6e385fn/aHeodo
2020-09-22DOC_YJ5441680326NG.docdoc 987e1a42f83efa603695557dfe5b08626aa7401f96e7987fb3d461eea7bb03adVirustotal results 48.33%Heodo
2020-09-22N_T4EUBXO.docdoc 0d687314c86f164f847a9ed881fa8f6cdf28b0a0cd340ab80e5a74473756659dVirustotal results 49.15%Heodo
2020-09-22500125639386749166625.docdoc 3e7b30f4a48f9c8e35cb2a878c36655b2fd98de59c8c7bf9c7e708918584f2fcVirustotal results 50.85%Heodo
2020-09-22INV_61497417.docdoc 8d49090e5ad1ca487645e8dad8b6e90d267b4a7f5d4cdf4d9c4441d969f088caVirustotal results 45.76%Heodo
2020-09-22J_6YXBWT91NX.docdoc 313348d434b780af86ba7a2d374246c8188545ba67cafdb86907a445c2052df6Virustotal results 43.33%Heodo
2020-09-22DOC_SE4363178870DY.docdoc fe1fbbade251f94508504fe8861a87b7c721755f8116854ec1497d79a8a84dc5n/aHeodo
2020-09-22PO_09222020EX.docdoc 49a1ffaa1b08021d92dd0139fad4b585e8b601c2ca7c74eca69ea9f3ff06ad79Virustotal results 40.98%Heodo
2020-09-2289104587235790.docdoc f574d141e50f5f004b6d5b2932ce746ef012404c5bf46933947ad0ce3b397665Virustotal results 40.98%Heodo
2020-09-22BAL_71783778758383249359.docdoc 9607e3321e8b588ead936b5c46607981cf642a9a5abc9a7d1d0f7474dea3b6fan/aHeodo
2020-09-22K_WNR_090120_WNB_092220.docdoc 718113e004b811df9d311a7edec1092b2aab2d9173d762022544a74b5ba02657Virustotal results 32.79%Heodo
2020-09-2273047355.docdoc 58dca36db6814be3bc7016599693d84cc074f17451bebe7eb98baee99cef0ac9Virustotal results 32.79%Heodo
2020-09-227248632729368.docdoc 9e25ce36733cb087f13b4a1c744a28856f2e1e878782893ac18e682ad0f2e842Virustotal results 32.79%Heodo
2020-09-22BAL_VJ3691710294MC.docdoc d1083829516cf0b07a7ebf52d747d76ab73da99f9cb042d583f241687917a433Virustotal results 33.33%Heodo
2020-09-22FILE_ZTU_090120_EOL_092220.docdoc b47a1743a01e5885f50abb8a2bb9ad539a52c6b38e1fe97ace7c7165c384a523Virustotal results 34.43%Heodo
2020-09-22JPNT_EOTARASY.docdoc c74d9dd73470acf660bc458fed146e653197422214956ce6dc4abfaa8a8a1544Virustotal results 31.67%Heodo
2020-09-22DOC_887969347986.docdoc 9addba96a219cf69e04822cf43a65d6b7da0f848ac179d2276ef2a448ca362cbVirustotal results 34.43%Heodo
2020-09-22PO_09222020EX.docdoc 0489a6b94e2c6206bd2730cc32c8f873d1ac1af2ad02bdb69a77a8078460741cVirustotal results 32.20%Heodo
2020-09-22652331554460387998713.docdoc ce04dad796a1819d846a6a981c97426c43b0943deed734991bc6780eb54ba074Virustotal results 30.00%Heodo
2020-09-21REP_16178076.docdoc a09dd0e095d93b68eb0713e31e92eb9caee82983e99ddccdb71177216cc52f30Virustotal results 32.69%Heodo
2020-09-21TH2GT34YNR62AIZ.docdoc 0b406d237fa37888f1acd0ffc4b59577ffd5e45b792a835c2141483e2206ce9cVirustotal results 30.51%Heodo
2020-09-21FILE_PO_09222020EX.docdoc eed638e68fb63c08e3dbe230dc2a66544170ba12c92aacb9571a99fe355f0878Virustotal results 31.03% Heodo
2020-09-213785897572908520770863.docdoc 74c1fc2f43a4a426a9f4ffbc4738e6107d95009d67a202f0c8a2a1b80ef60937Virustotal results 31.03%Heodo
2020-09-21FILE_19060647.docdoc caefda78ff290b2ad9de3f8ee864f985144a3caeb6e307e034427b5f621184daVirustotal results 31.15%Heodo
2020-09-21INV_3244587396.docdoc b0c1e64b3b04df99668587d56d89c513ced13de50d8596e1d49a2eac66c96049n/aHeodo
2020-09-213HI2WZNLNJ.docdoc 469d40c989ee52a990ee653b38417a1fcd785b0a2179e5d997fc82843e0b47fdn/a Heodo
2020-09-21DOC_M7PTOFX.docdoc 778a7dec2a3a0d2021406e3186ff559dea78e4a07678dbf5619e3cd6d7d8217dn/a Heodo
2020-09-21FILE_DRK_090120_VKE_092220.docdoc 5f48ec62b70130e2ebbdf504c0de8057499f87bcf6bda3462f498f3d2e08c22bVirustotal results 28.33%Heodo
2020-09-21REP_42052280.docdoc 9959447fc9c87f2838c48ceecfcb5cb1eb094702dcdb553d798bfd513207e3aeVirustotal results 26.67% Heodo
2020-09-21J_90722023.docdoc e6573ea6cfe0bdb4f9b3d43b7b68207d18fb492c9ed35aaf6bee52d0d681a9ddn/aHeodo
2020-09-21KZ8010741549RE.docdoc 5af136d60a366d4fa170883a816b530f4ef2828bfd11eafe0204c4f202deb748Virustotal results 29.51%Heodo
2020-09-21CPB_090120_FYK_092120.docdoc 20c91a51721e21851a9378758513e3d0ec631985cab6f862b783627792f1f127n/aHeodo