URLhaus Database

You are currently viewing the URLhaus database entry for https://workex.jobs/mailer/esp/OxNTs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:720226
URL: https://workex.jobs/mailer/esp/OxNTs/
URL Status:Offline
Host: workex.jobs
Date added:2020-10-19 22:51:06 UTC
Last online:2020-10-20 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 22:52:30 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:11 hours, 23 minutes Good (down since 2020-10-20 10:15:56 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-20October Invoice.docdoc 9dead7615c9982a5935592ea257a1c754b61ee79c39b61345ce30c18e1756cb2Virustotal results 50.94% Heodo
2020-10-20invoice.docdoc 1d6ddacfa157c7a54a7f33fc1f1941a643a4a4f799268d4f2fdb333e4d6d49a4Virustotal results 49.06% Heodo
2020-10-20Invoice 071241.docdoc 45327af6d3d75a274f4c5d122adc41d42ddff44e520c7c02efb3df87adc64be0Virustotal results 50.82% Heodo
2020-10-20invoices 69942 & 8633.docdoc eea53beba6b9509581365a0a43ddf454f25bf59bb13e8549cf3eb66a5d832c92Virustotal results 50.94%Heodo
2020-10-20form.docdoc 7c78e9a0268425f2bff9e8fdf80e9bef5210401291ab9d1f251a97849f2711c7Virustotal results 49.06% Heodo
2020-10-20K066 invoicing.docdoc 925df0de20c1970feff21e7c085d0c4ba2f3f2feedec51001b1f2410c2c31846Virustotal results 50.00% Heodo
2020-10-20Payment status.docdoc be3645a6416b42048d934a1330244b34134f64f504a20c92af99c1ecd301deecVirustotal results 51.61% Heodo
2020-10-20Inv_83799.docdoc 351fcc4213634fcc050b1b9fa1b83edb1aa5b64736aaf801c2928e5deb5c35b4Virustotal results 50.00% Heodo
2020-10-20INV_498170.docdoc 942f47744db5e721c7c600c36f1c1af3455fdf7e3fbb76011c000c221e06b687Virustotal results 51.61% Heodo
2020-10-20NR-100120 NGHL-102020.docdoc 0fc8e8b6e2bd46027ae6472ec944995b2976399582013b8a7ede625f362572f7n/a Heodo
2020-10-20Payment.docdoc b5312cf7ec26b2e672e0e4278237dce985ba2317f88a387866f37ef8f820cbd2Virustotal results 47.27% Heodo
2020-10-20Inv_8905.docdoc 1dbba69603fe6866b9b3762959b8d745e12bd325c1a203a5160e547f7ac4997eVirustotal results 46.77% Heodo
2020-10-19invoice.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 40.98%Heodo