URLhaus Database

You are currently viewing the URLhaus database entry for https://serenitykenya.co.ke/wiremu-kingi/eTrac/624039604382/eobr-91974/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:720170
URL: https://serenitykenya.co.ke/wiremu-kingi/eTrac/624039604382/eobr-91974/
URL Status:Offline
Host: serenitykenya.co.ke
Date added:2020-10-19 22:35:10 UTC
Last online:2020-10-22 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 22:36:34 UTC to abuse{at}nodeafrica[dot]com)
Takedown time:2 days, 12 hours, 41 minutes Poor (down since 2020-10-22 11:18:07 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-2100534884524.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21Invoice 473930.docdoc d9c9cdb661798fec5696237b21371f7bd3b1fdac360a68aa3fc3d863e1d6173aVirustotal results 32.26% Heodo
2020-10-21B79 invoicing.docdoc bce4a6fe31eb854ee0fc5fb9c17c81ee19922b93a2998de467fdd004aa3ddf37Virustotal results 34.04% Heodo
2020-10-217462395341UI.docdoc 7a71bbbd54d2b129ef434d1379aeaf528d643d1cabbbac8bde1666c9e5069994Virustotal results 33.96% Heodo
2020-10-21invoice #3009.docdoc 3c54fe2565b2e6ff66e9b1eb34fc93333f99d82c4c76d757292dd4e8c6af406aVirustotal results 32.08% Heodo
2020-10-21Form - Oct 21, 2020.docdoc 793296b35ebc61fce4acf584fba910b876bafb60877bdd657f2bf7839bc5d84dVirustotal results 32.69% Heodo
2020-10-21PO# 10212020.docdoc 3066b546570363fffc99b9c8264f2ec405df38fc02ee37fa0a3e7a69e3c24244Virustotal results 29.31%Heodo
2020-10-21Payment.docdoc 8cd445b93100d4a1d8b8d09b1829c4460f50271afb165768a5b263664916c0cfVirustotal results 30.77%Heodo
2020-10-21invoice.docdoc 23fb1844a3cad0f727d5bf74d8ed76b134681db7486450782109d760f792863eVirustotal results 26.67%Heodo
2020-10-21C7214307199PG.docdoc f41d3c54b63ec1671bd601f1800ff185f8c325398a4ae3e1747d7d2421a2bfe1Virustotal results 26.67%Heodo
2020-10-21Electronic form.docdoc d00125dd0f069c23c0ae5f95db081c57dfd23bc67fd5308053a4204ace382b4cVirustotal results 24.59%Heodo
2020-10-21Payment.docdoc eacff736f8b2dd566e31558748f6a61037203b68ec084fdb29476ece21c3c246Virustotal results 29.63%Heodo
2020-10-21Inv_6373.docdoc b1b68ff6e12d54572db4fa1a768108587786836e5e1c79f860f32d78e5f722e7Virustotal results 25.81%Heodo
2020-10-21INV_860821.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21invoices 874 & 0743.docdoc 7301eb52916c5b004b3f81ebf360c397e25aba900652108420b868313afce2aeVirustotal results 48.33%Heodo
2020-10-21Copy invoice #2321.docdoc a190cc4bd4d39b253f7e560cdf793dd829f74b0f816bbddc666525007a02412fVirustotal results 47.54%Heodo
2020-10-21Invoice.docdoc 19a709ff8ecb374af7e40714b3ff541cc7753c7e69a7f0250d797356cd4ccb59n/aHeodo
2020-10-21Invoice #271156.docdoc e3812e0aa164c68399e61ce76904450c3e6bc028111a3c4df2155e37ad5d01b1Virustotal results 44.44%Heodo
2020-10-21Payment.docdoc 58a681865ea454572eb661486c8e06854e90cc7cd2d5ab95ae331a724f5ce97dVirustotal results 45.90%Heodo
2020-10-21Inv. 00691696082.docdoc b5ffec3587a49bc07b737c4a095b6822dfe32ab6f54062ab3720d31490849eaeVirustotal results 45.00%Heodo
2020-10-210173623.docdoc 15680f3d4397a2ea2191e960421dd8650642415c14be15b1495f859bc6b9d7cfVirustotal results 40.98%Heodo
2020-10-21Electronic form.docdoc df9211fe12de3974165e9b876ac971eb94c70c83d54a06ccc3028a91eb92c7f4Virustotal results 41.51%Heodo
2020-10-21Electronic form.docdoc 663930eb12ff6afb8cd3d0410fcef8fa32edf4964504e10f0cd56af546b0ecb2Virustotal results 41.51%Heodo
2020-10-21invoices 8314 & 8788.docdoc d590ed65aef80ecdc7f0a44755ee436937f30c0b05287ce6d177b654512940e8Virustotal results 40.98%Heodo
2020-10-20Inv_67258.docdoc f98b21e5ba36d3d933fdd95c54037c9a3412c52fd05700222580a7e4267608bdVirustotal results 41.51%Heodo
2020-10-20Invoice.docdoc b07a48ca7d09a730829f65f399a5f0496e4c14989705d83a73630dc2a67f80f0Virustotal results 40.98%Heodo
2020-10-20UH-100120 BMFS-102120.docdoc a85c57fa12d0087eb6da3bbeff4a027b351978d8b8073086c43d522366e5fe9eVirustotal results 39.34%Heodo
2020-10-20October invoice.docdoc aa207e703858f3b5b98f6dde826e16108e94a533e26cc478693b1d39a14c7135Virustotal results 37.10%Heodo
2020-10-20Payment.docdoc 864eeb47c83f4648f5c3a22de6c34559c24f871adfe7490af5c932ee7fbd52f4Virustotal results 32.26%Heodo
2020-10-20INV #87832 FOR PO #0865814879.docdoc f8918c22b7bf74403126907c7e3fd18cdba5c16dc3bef59652e99d67d57d8d62Virustotal results 33.96%Heodo
2020-10-20Form.docdoc 9c7f9441f61d7c2798707bc28069012911e4547e38374095bb23506fb1bbee2eVirustotal results 31.58%Heodo
2020-10-20invoice.docdoc 15e191fa2be80a5d0b1b3af67b1ed360c006e3634442bb6255e4cc0f901abcd3Virustotal results 32.26%Heodo
2020-10-20ODT-100120 LCKC-102020.docdoc 2edd7b8840ae58ec73ff6cbcb1977e99a4acd696f46234e98cd42e9d6f9df365Virustotal results 32.26% Heodo
2020-10-20form.docdoc 1fad7db33eae6c2158f57709f82ff40f10276a88a34414418c06ad738eb22299Virustotal results 32.26% Heodo
2020-10-20Invoice.docdoc 5de10aad274888c1ae2d0b13f1cc5199b0fbf596200f2f0d567aa2e2df2e2e22Virustotal results 32.20% Heodo
2020-10-20invoices 118 & 53053.docdoc 306d01912045e266a9fe2015a5ef474be9768263f196550ab49052a0c676cef5Virustotal results 33.96% Heodo
2020-10-20invoice #42716.docdoc 98bb25e6f42b7ed9cbaff96437ada2d6b17e0a4bb5a6d1d2e2a8636233ade5a5Virustotal results 32.26% Heodo
2020-10-20INV #15116 FOR PO #154280886732.docdoc 61835e08172767d73a9e6c5dfb1fcc8b904d60c3b9cd7b382bcfe43aeab5c2c0Virustotal results 30.00% Heodo
2020-10-20YF-100120 XKJU-102020.docdoc 5048d7b27c53cf32d071bbfbe3a208164d350d1d9ef8d2bcd423631b5d1b21dcVirustotal results 32.69% Heodo
2020-10-20form.docdoc f64d1d64e95cb52e8ac1e43c619b165f65e0a882fb8d0e8314f2e82271425089Virustotal results 32.79% Heodo
2020-10-20Form - Oct 20, 2020.docdoc c7bae32f76eebe4cb2fdbd687d6d09d30ea38d1c6751a1ae5cbee6c9bfb5b96dVirustotal results 30.00% Heodo
2020-10-20Inv_642790.docdoc 2578a0f788096c10b3bcb14ac8c024f44b035e361ca8e1af809c81fb4cdc6ad6Virustotal results 32.79% Heodo
2020-10-20Copy invoice #344942.docdoc 9a38f5de80aabc7bffe47ec6c557d18157418ea9a3d4fa365463c32f6e102abeVirustotal results 33.96% Heodo
2020-10-20INV #0824 FOR PO #005174424780.docdoc 6e81190ea76657504baff9bef3ee1e2b652f05d439d5d47cd39fe510ac240b26Virustotal results 50.00% Heodo
2020-10-20October Invoice.docdoc fcf66fd33f42c75abf852452c661e3ccc4f85c48a721dbc4471bd28332760145Virustotal results 51.61% Heodo
2020-10-20Form.docdoc 354fea5033e720e774f141b26f7606a4d844f9e990565c0c9ef51558c3581836Virustotal results 51.61% Heodo
2020-10-20KO00712 invoicing.docdoc 302086907da36d9af34abfae68ae96815cfd530e20bf3e4d40d520fd6816fe5aVirustotal results 51.85% Heodo
2020-10-20Copy invoice #3863.docdoc c31795e9d2a3b7bf6e19d054a2574f0ea3eef997e49bd9318316efd609cada94Virustotal results 50.00% Heodo
2020-10-20invoice.docdoc 79fe11a895e4e6d9945022d70da2ea0c06927b3b91d7947564e610377117ee72Virustotal results 48.33% Heodo
2020-10-20Electronic form.docdoc 03ed194d560f6e7b976f45dd5678707c7132079b5d6d1bf0366c7163e939cb1bVirustotal results 49.06% Heodo
2020-10-20J71 invoicing.docdoc 60ac2df8c0a56c198ce34633dc5af133c4fda800a85383a2ea9e6da298e77904Virustotal results 48.21% Heodo
2020-10-20Payment.docdoc aea562896196459f11e274751fcc92aad6234db3e78088c86bda7f2b31be9b4aVirustotal results 53.33% Heodo
2020-10-20Copy invoice #642366.docdoc a67d3d825a05eae828eb68703949b29ce211f2873a8c91c7875b89ea9577a817Virustotal results 49.06% Heodo
2020-10-200514370.docdoc f75ad4f83ba06b713679c42a55a1b4def77266dc5574330e418d629288877848Virustotal results 46.67% Heodo
2020-10-20Inv. 024540.docdoc 31f0b205c09b9d99e10c2626936588bd3b473116e313045031cfa6f9a8bf23c8Virustotal results 57.89% Heodo
2020-10-20Electronic form.docdoc 73f22ba33ef477380a8177c19532c0e6a7c993ac47333c22b3ad4b53544bade1Virustotal results 49.06% Heodo
2020-10-20Invoice #339.docdoc 544ff4b94e4f7afb43e2c47a07cffc8162ca9d60b804e0d7203ec85fc2ef81c5Virustotal results 49.06% Heodo
2020-10-20Electronic form.docdoc 7c78e9a0268425f2bff9e8fdf80e9bef5210401291ab9d1f251a97849f2711c7Virustotal results 49.06% Heodo
2020-10-20invoice #8577.docdoc a7a71a8db9345289a21c62edb7085cbff3e0dfcbaf3b66e6e17506a60af10fd2Virustotal results 51.61% Heodo
2020-10-20Payment status.docdoc 925df0de20c1970feff21e7c085d0c4ba2f3f2feedec51001b1f2410c2c31846Virustotal results 50.00% Heodo
2020-10-20Invoice 0686702.docdoc 351fcc4213634fcc050b1b9fa1b83edb1aa5b64736aaf801c2928e5deb5c35b4Virustotal results 50.00% Heodo
2020-10-2000828014421.docdoc cfbd735346e1dd406313623ca27397cf3cf30e3197a1914b77a6f10f22f11633Virustotal results 50.00% Heodo
2020-10-20Form - Oct 20, 2020.docdoc b53ae43743c6308bc894bdee9df0745d8c360217f26cf37ceda3a979b519969bVirustotal results 48.39% Heodo
2020-10-20Invoice 083161.docdoc bd3634b192d3a73ca432502cf51882a5b60ab2d2b5617b526cf8cb2431a31404Virustotal results 52.83% Heodo
2020-10-19Inv_218829.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 40.98%Heodo