URLhaus Database

You are currently viewing the URLhaus database entry for http://www.willow-nettica.com/cache/FREQL2SBAY5FFZ/erbovr0/x52hi2pdrpoku/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:626529
URL: http://www.willow-nettica.com/cache/FREQL2SBAY5FFZ/erbovr0/x52hi2pdrpoku/
URL Status:Offline
Host: www.willow-nettica.com
Date added:2020-09-30 03:45:09 UTC
Last online:2021-09-20 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 06:06:33 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:11 months, 25 days, 2 hours, 28 minutes Bad (down since 2021-09-20 08:34:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30INV_HQ3XVHINW6KX.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30BVG_090120_ZMX_093020.docdoc 54f93880d0f4c65aaa29acd1dff0cb761aa8dc7388f96435e8c55ead32b30dfen/aHeodo
2020-09-30FILE_9GPDU4UTWR.docdoc 1d5daccb3ffdca9e417370c654eefb0f6a0b2c3de51d7ca751c676d623cd57bcn/aHeodo
2020-09-30BAL_200775346176633056.docdoc 08bda1ed5fe14e5198b9ac6497ef066c83189be44ff6fe663d6a708bdab3c8fbVirustotal results 21.67%Heodo
2020-09-30DOC_36903744293671400.docdoc e001efbf2686566c49c1a6428a0d6574deeae2c830622f40f5cf6fd46c6d8654n/aHeodo
2020-09-30K_07326354.docdoc 3e6e31b97b51015205df9e5043f01adddd0e5cd8248bac5bb0a7e7d75b5684bfVirustotal results 22.58%Heodo
2020-09-3067190504.docdoc dae3de0260b268fd89734a96196759e0a878835e38a868db1ec44194c212e1f0Virustotal results 22.58%Heodo
2020-09-30INV_PO_09302020EX.docdoc 19377355e91331d5f2438275b1af46c6f266bd250c9e6a421feb6deaa86f7cadn/aHeodo
2020-09-30J_97086272665.docdoc 8cc454cbd44284ac4a4b398e7fb7e8ef64466cb44537458d884f54fea7d6374dn/aHeodo
2020-09-3018095671729469.docdoc 7f4bb0819805fa0971334e3d8eca32699464c4fece26826d78d8df5a6441c071Virustotal results 21.31%Heodo
2020-09-30INV_PO_09302020EX.docdoc 605f71e5062dc6452e0f427294e6d436a184d7cebd4d4600c98d0a5542c30addVirustotal results 21.31%Heodo
2020-09-30FILE_MM3815001942BK.docdoc 7a824b0902c4e58a3bc225caede89cabfc440904f63680f791b4a6421f1500c8n/aHeodo