URLhaus Database

You are currently viewing the URLhaus database entry for http://dijkwitgoed.nl/wp-admin/INC/ePk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:719381
URL: http://dijkwitgoed.nl/wp-admin/INC/ePk/
URL Status:Offline
Host: dijkwitgoed.nl
Date added:2020-10-19 18:57:03 UTC
Last online:2020-10-20 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 18:58:04 UTC to abuse{at}totaaldomein[dot]nl)
Takedown time:13 hours, 2 minutes Good (down since 2020-10-20 08:00:47 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-20invoice #3571.docdoc 29b284995c7be9561c22f89c9c4d4ed2f4abad490ff34aafd2fb0cc7c0312b90Virustotal results 50.00% Heodo
2020-10-20Form.docdoc cfbd735346e1dd406313623ca27397cf3cf30e3197a1914b77a6f10f22f11633Virustotal results 50.00% Heodo
2020-10-20Inv_2924.docdoc abb1fa28c17964d8d4366e43c3fa606bb40eb59a69d128368a37c9ae5ba84544Virustotal results 46.77% Heodo
2020-10-20007396716005.docdoc 1dbba69603fe6866b9b3762959b8d745e12bd325c1a203a5160e547f7ac4997en/a Heodo
2020-10-19invoices 1103 & 1121.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 40.98%Heodo
2020-10-19Copy invoice #76520.docdoc cec6705193596102df72c60bd2d7fd7b8ab7d34cb2faf1beb4f83ea5dced6bb6Virustotal results 37.10% Heodo
2020-10-1906985550.docdoc 88dd95edc7f24c985b398873d6279279760db09de42abf2d8a2e5b24197fb41aVirustotal results 37.10% Heodo
2020-10-19INV_3392.docdoc 65d548a2c80c974c878eff21c34e9d94965ab43d7da72c2557d3e47f61484738Virustotal results 40.32% Heodo
2020-10-19Copy invoice #43675.docdoc 8e4896d7b05dfde0b51d0d29dfaa4f133ef855cd8755e446a2450656def56bc1Virustotal results 37.10% Heodo
2020-10-19October invoice.docdoc 32287e572df07a7450ca513789cb55b10900c74a408d0c698bdbbaa7d8013660n/a Heodo
2020-10-19075879571.docdoc 96d88d8f9d91defeac3ba252e0b4fd5d37a9d58d3eb583ab00c38e7d3900edd5Virustotal results 37.10% Heodo
2020-10-19441544.docdoc c2d708d7a95248e357a4b1ffbfade73c30676261a296acaddb1126e6cca85c7eVirustotal results 32.26% Heodo
2020-10-19Inv. 0066503451038.docdoc 6371b9c81b8a8117dc55e54aa59cd5e02a8b16a6da2854c1b4f60e79c16211e8Virustotal results 29.51% Heodo