URLhaus Database

You are currently viewing the URLhaus database entry for http://sunafricainsurance.co.za/wp/wp-admin/Reporting/8t32ex1-007103/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:718541
URL: http://sunafricainsurance.co.za/wp/wp-admin/Reporting/8t32ex1-007103/
URL Status:Offline
Host: sunafricainsurance.co.za
Date added:2020-10-19 15:49:06 UTC
Last online:2020-10-20 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 15:50:15 UTC to abuse{at}web4africa[dot]net)
Takedown time:14 hours, 47 minutes Good (down since 2020-10-20 06:38:03 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-20MF0029 invoicing.docdoc 1dbba69603fe6866b9b3762959b8d745e12bd325c1a203a5160e547f7ac4997eVirustotal results 46.77% Heodo
2020-10-19INV_33875.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 40.98%Heodo
2020-10-19041628.docdoc cec6705193596102df72c60bd2d7fd7b8ab7d34cb2faf1beb4f83ea5dced6bb6Virustotal results 37.10% Heodo
2020-10-19DWM-100120 TOCF-102020.docdoc 73dad1d397d938e42fabae3d24a45e398b1c46398d97d392d3c838ab93e6af97Virustotal results 39.34% Heodo
2020-10-19invoices 334 & 6742.docdoc 2ed83e0131c900f328a50a70183b38ac50328aae993c99efd75f27ff2855c2a7Virustotal results 38.71% Heodo
2020-10-1900319226905.docdoc a875775bc542120368ebd7420d0b376b0199f439e16c9adaa061d37b56aca8b3Virustotal results 37.10% Heodo
2020-10-19Invoice 001272396.docdoc 304bbcb8158e68732500faaf95dab2f8951a06a018127494a74ff705bcb9b60aVirustotal results 37.10% Heodo
2020-10-19invoice #8972.docdoc 5dfe515c467f0558e59491bf649865431e106a036fa24fd4be591d0ee6248887Virustotal results 28.33% Heodo
2020-10-192816321280NP.docdoc 2725334fb5f7d2ded56c9fd29eb4f35bed2440f9605815628c005bdb7f344296Virustotal results 38.71% Heodo
2020-10-19Form - Oct 19, 2020.docdoc 159b1dcd50701b604d7b54ca877818cf865ea30b51d029f649077d68265d7dbdVirustotal results 36.67% Heodo
2020-10-19Form.docdoc 6fdb21e6d0b448b9f4066af8ed1556b9e9706d0da50efbab8b9d91e961bee682Virustotal results 33.87% Heodo
2020-10-19PO# 10192020.docdoc 4aa74b49409e94ab976c378a624a8433b8b366a4ae90469b3b21d5f79c4accbcVirustotal results 29.03% Heodo
2020-10-19Form - Oct 19, 2020.docdoc f6331a9117aed819880d4d64c61c95084cd2f79b04b26bd7cf31028135367961Virustotal results 33.93% Heodo
2020-10-19Copy invoice #1315.docdoc f048adfc0ddc30161753c936fc8bdf8ebfe7ef196b91b6dc9d18512263d6647bVirustotal results 30.51%Heodo
2020-10-19invoices 37787 & 30320.docdoc 06d103badbe1a87c87e3a568e6fe33d87ed6bbcd81e3089f3c894dc9fbe0c93fVirustotal results 32.26% Heodo
2020-10-19BCO-100120 EJKZ-101920.docdoc f6fd3281268f9d9852dd943457df8c216e4bc14ea1038a0fe86333c4edca389cVirustotal results 30.65% Heodo