URLhaus Database

You are currently viewing the URLhaus database entry for https://petlele.co.za/wp-admin/invoice/u5pvy8z43v-097462/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:719861
URL: https://petlele.co.za/wp-admin/invoice/u5pvy8z43v-097462/
URL Status:Offline
Host: petlele.co.za
Date added:2020-10-19 20:51:07 UTC
Last online:2021-03-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 20:52:34 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:5 months, 0 days, 1 hours, 13 minutes Bad (down since 2021-03-18 22:06:06 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-06DEJ-100120 NNYF-102020.docdoc c98b10dd0c1f3c8f5f8021a58fe80717e1b31b1cd2e86ca536e828b1a2ff3e91Virustotal results 69.84% Heodo
2020-10-20Copy invoice #6295.docdoc 2e687ca36b3132b0704c1da58bfd462aa6bf5272d6ecbc84616059abc2fab4f2Virustotal results 49.06% Heodo
2020-10-20October Invoice.docdoc a7a71a8db9345289a21c62edb7085cbff3e0dfcbaf3b66e6e17506a60af10fd2Virustotal results 51.61% Heodo
2020-10-20invoices 2744 & 7981.docdoc be3645a6416b42048d934a1330244b34134f64f504a20c92af99c1ecd301deecVirustotal results 51.61% Heodo
2020-10-20October invoice.docdoc 351fcc4213634fcc050b1b9fa1b83edb1aa5b64736aaf801c2928e5deb5c35b4Virustotal results 50.00% Heodo
2020-10-20Inv. 03107722.docdoc 0fc8e8b6e2bd46027ae6472ec944995b2976399582013b8a7ede625f362572f7n/a Heodo
2020-10-20CI6670060040QN.docdoc b53ae43743c6308bc894bdee9df0745d8c360217f26cf37ceda3a979b519969bVirustotal results 48.39% Heodo
2020-10-19Form.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 40.98%Heodo
2020-10-19invoice #272270.docdoc c22cff8c43e59c186145e91cc19bf98b0aa99956c6b462715d0b72959c3b71f8Virustotal results 30.00% Heodo
2020-10-19INV_82335.docdoc 7eb56f82b5ff2b35c514fe7d1a001246488a656499eeddd21b48279c27921affVirustotal results 37.10% Heodo
2020-10-19invoice.docdoc 88dd95edc7f24c985b398873d6279279760db09de42abf2d8a2e5b24197fb41aVirustotal results 37.10% Heodo
2020-10-19Inv. 003900876.docdoc ddfbd6543d93e79acd9b6bce15cb7003c2aacb76d77da7baefb6ff22d9b1bcc2Virustotal results 34.55% Heodo