URLhaus Database

You are currently viewing the URLhaus database entry for http://buildingtoys.club/invoice/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:725908
URL: http://buildingtoys.club/invoice/
URL Status:Offline
Host: buildingtoys.club
Date added:2020-10-20 22:40:06 UTC
Last online:2020-10-30 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 22:42:03 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:10 days, 1 hours, 2 minutes Bad (down since 2020-10-30 23:44:18 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22DUG_100120_UNS_102220.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdn/aHeodo
2020-10-22KS_PO_10222020EX.docdoc b8ece70cf490f0972af7d834da13670c73176dc58bd1d22e254548ea64220df4Virustotal results 43.55%Heodo
2020-10-22R_NITKCB58Q.docdoc 40b52434db8fa8dea7ba146d6436e1cbdc7f4222cb63923387f11b941912e31fVirustotal results 40.74% Heodo
2020-10-22E_7QYY9XR.docdoc a479d5df4923cf3d9c170aa218de43da798baeda6247d5f044fe539826c58cdeVirustotal results 39.62%Heodo
2020-10-22DOC_QWN_100120_PWH_102220.docdoc 1fe29e28174521c55bb6e73db876f3e783ba9eb0905a51be0d2ee6254bb903e4Virustotal results 43.14% Heodo
2020-10-22DOC_21617540511961939434.docdoc a3a88e1d35a8217720e9e2f632e2cedf4d36418f73975906de221523e0755eccVirustotal results 38.46% Heodo
2020-10-22DOC_QL71QU06T4D.docdoc 925ed11830fec50e20b4c723d541a1fdb62509d4bae13118c400ed2bc76fca4fVirustotal results 41.94%Heodo
2020-10-22JHB_VI5U1FY7G3590A9N.docdoc 160feb6c0a83cf0dab3174f74683de6aa53315477d6679712d47415a2364dc2dVirustotal results 39.22%Heodo
2020-10-22FILE_SIQ90SYLB5JS7K0N.docdoc 28061fbdc60d3031a20e1c8f75d20d703307a03ba696fc87e507c3a356e0ae68Virustotal results 37.74%Heodo
2020-10-22INV_TBJ_100120_IJH_102220.docdoc 6e73ed5041166e3aa6f7ce070efab391259a868771d35fa7f6b8aa64d8a3065fVirustotal results 37.04%Heodo
2020-10-22MKPK_RS8351899934KB.docdoc fa80d9c5ac5a3d08f91d1d1a13ca9e8dc5bd6e9dc289fa203b6822c74a1dbab9Virustotal results 37.74%Heodo
2020-10-22DGY_PO_10222020EX.docdoc 6c1a970155c3756aaddd02ef3f1e5f266292a97f661fada4a11011b3eb8795c2Virustotal results 40.98%Heodo
2020-10-22FILE_KW33FFWH5XZHAND.docdoc 2e0fa43a2843fd83402b86b0ac90f8cb04e7397a167793ccb42d7fc69de3a987Virustotal results 38.89%Heodo
2020-10-22GMD3NEM2ZB7X8.docdoc 7bf5865edd1cf7fbc77de4691736ab60bb0d5163db0f3153bb804de1d88953feVirustotal results 38.18%Heodo
2020-10-22REP_06847010.docdoc 27a2f3fc365f4d0624325a33456e529aa149ccc2488338c41ebe8971c1bead0aVirustotal results 57.41%Heodo
2020-10-22DOC_84FVX8S.docdoc 5f797ffdf10fea5ee7b50bc74647cac73cfc4cef96e92d346c842e6cf3df339an/aHeodo
2020-10-22FILE_066752404038791.docdoc 1a6ddadc772f06b99c0286b4d3d96639582499d811601fa4b402619a7ffa4c80Virustotal results 50.00%Heodo
2020-10-22J_WC9477396476RG.docdoc 2c353218e1a20d8e435f57ae45682506c746562bae6f4761e2398d7caf09791bVirustotal results 49.18%Heodo
2020-10-22REP_26418187.docdoc 84571ac969ddfed387fb68ef51f1c23448f401e13f42b3cb3c54e42963682d9dVirustotal results 49.06%Heodo
2020-10-22Q_05913310.docdoc 281fcb9e82a55c60840b10818420ddbe066733d18c4c275c38d01280d171c8b6Virustotal results 45.90%Heodo
2020-10-22CR2840674045OG.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 45.00%Heodo
2020-10-22C_EMM_100120_QSR_102220.docdoc 127353c7d341d225ae933e3004364c90041d7bac3b2117e33d648de2708447b5Virustotal results 45.16%Heodo
2020-10-22FILE_7991860124738564335.docdoc 4d47b00933264748db78cf195ca1f5e1c8b123664e286f42873e764ded7fcac4Virustotal results 45.16%Heodo
2020-10-22RTNQ_YS5195453690QY.docdoc d81f1279e2d1572d791d3ff982899b0ed675d4cacba86d94e48fba70001bf0fen/aHeodo
2020-10-2244289694.docdoc a0ac35ec0ee3a97f79ecb953f29c1dca13fa5661a5df78ba82012b16c5b291d4Virustotal results 44.64%Heodo
2020-10-22NEA_100120_TDE_102220.docdoc 17fd95244a412f93eb10c00778ef49fe927af9a1575cef0e9fdc05e81578a6f9n/aHeodo
2020-10-22AY_4DVHBNRGYFQSWT4.docdoc 756a41dbd5912d4c871d486b25958f188c2a32279f2b735e7ea9fb816fa13da8Virustotal results 45.16%Heodo
2020-10-22DOC_PO_10222020EX.docdoc 4f927bd188b87a47398f9e9fe9bc9d4ba4d56d813e1c3183c1b5818a82696076Virustotal results 45.16%Heodo
2020-10-22INV_WC7219029701WF.docdoc bb66afe308a4f9aac368840effb767d5fec62db675e7d03e6f7d4b9dc52fd30eVirustotal results 41.94%Heodo
2020-10-22REP_95092998.docdoc a831fd83cedec11f7394898f70d92d520fbdf5e562fc5299cf83e36ebacd3ffcVirustotal results 45.16%Heodo
2020-10-22Q_PO_10222020EX.docdoc 7ed5bd3871a470e5241772056e455c8274e3c5408f094d038a37c37eb251b4c5n/aHeodo
2020-10-22DOC_742XJ31Q1.docdoc 2ffe7b852b79d0dad7b92db063d08c5a5b858c5212431ebd0a46f5ffd266ed92Virustotal results 43.55%Heodo
2020-10-22REP_D9M1688KN2OTZ.docdoc 922e702ad2045c14b3adf3b4718aaa0fcbe669f9bde3ba42e4fd05404c78747cVirustotal results 44.26%Heodo
2020-10-227UN7MKARJ.docdoc a78a2682db9e96335294df8912a7cd0a843bc011ae898a7fc211f79aea919fa2Virustotal results 51.61%Heodo
2020-10-228895595596768804.docdoc bad9235b37efab34f7e6cf91e6a80803fdcf8903e2c61d0d6c1f5f9d773da112Virustotal results 48.08%Heodo
2020-10-22REP_85640515845.docdoc 2bfcddec3862fcbe053dd6a0d03d5987ccfa1942950e8c9bea56fa41f6fcaa5cn/aHeodo
2020-10-22DHB_100120_ULQ_102220.docdoc 056f25e8944119ad3d9d651d77cc32cef6621c5cb3498b47161738be7aff416eVirustotal results 50.00%Heodo
2020-10-221321295987735043336413529.docdoc 167054c6f6ef4e6f6ec2dce63809ab09b3a1f42218769f931cf0c07ebdb42fc4Virustotal results 48.33%Heodo
2020-10-22G_DDJ_100120_VUE_102220.docdoc ff7bc571e097d09b02234d6bef98da4468da5c7dfc197e2cb20f1a00eb85f61eVirustotal results 45.90%Heodo
2020-10-22FILE_47295567.docdoc 2622c411514e2ebeb404ff72a11abb8b36da194d0f09dcc95869802a01cf4a20Virustotal results 46.67%Heodo
2020-10-22INV_PO_10222020EX.docdoc a7b558ea557788c16a9c93a7aa0cac42b96b2fe92e02c26f4c5d17c1b1da0291Virustotal results 46.77%Heodo
2020-10-22DOC_PO_10222020EX.docdoc 7a9d24e23c3cd1701c2de8826db43aa1dc7d2b73c6c4fd50f491276725a2ad4bVirustotal results 46.77%Heodo
2020-10-220618670977739372.docdoc bffe543ff321cb95dc82dc8c8a96c283d019176537290a63c6bc86d7ae98fe57n/aHeodo
2020-10-22INV_663791003.docdoc a087c45b5ed8a1c9d91f0b920d6f2510bd5d82d3813af9653757607709da9d87Virustotal results 45.00%Heodo
2020-10-2262806567.docdoc 95c62759d32e2a426433130be7fc1c17a3d3787359258f3af33f61760463eeeeVirustotal results 43.40%Heodo
2020-10-22QBC_100120_SHX_102220.docdoc 476b69835ad34811317226c4b0d9c78525fbb9770f4dc6c649da167a65359582n/aHeodo
2020-10-21DOC_20903890.docdoc c54cc066f4ec58fa457a0f6134fb83321e303ee18aa2e2f9e0e46187e2fb3a95Virustotal results 41.94%Heodo
2020-10-21PTU_100120_LSW_102120.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 41.51%Heodo
2020-10-21REP_20019934.docdoc 140f99b8c86ce2cbf27556e78284f685e2cd53ff2e50838f444b115a6a04920bn/aHeodo
2020-10-21PO_10212020EX.docdoc d9140a29ffca02355e8b885163a54d58bcc095fafb564a9d8a8689b4ffdfde4fn/aHeodo
2020-10-21OHA_100120_CLQ_102120.docdoc 5603b9a3314a6d1e9220de7c0d42d8fae17921bf022ea4a8be18d5615989848cVirustotal results 40.00%Heodo
2020-10-21RGQ_VHD_100120_EJB_102120.docdoc ee8ef9beac4202e018577996e293215dd2cc1e260bca0ac0a38f9abcdcd4fa2dVirustotal results 33.96%Heodo
2020-10-21FILE_14755259.docdoc 202d0af84b5b68cf2a54ce8f9afa3befc8f994b934e380cbc1dab9dfdbd11bccn/aHeodo
2020-10-21MEQ_TK3907136507SK.docdoc c92778df4ae556cc2ad66979e6fafa9256ce4c9c7d0457c6525711429def55feVirustotal results 26.67%Heodo
2020-10-2141407533.docdoc a25f6b18acb33e6fcd32f81d686d793d38c299f1b42e561612c3ea67679975d4Virustotal results 30.19%Heodo
2020-10-21BAL_PO_10212020EX.docdoc ab6539ae5c33961a6df3268df0a4473be52e6c8d99f87c1cab5aac53548749cdVirustotal results 26.23%Heodo
2020-10-21BAL_BEI_100120_UTP_102120.docdoc afaa3e615a4cdb709e0914026d5c1d07892391f9e7a2540e8f35da1b810515dan/aHeodo
2020-10-21PO_10212020EX.docdoc fe647619aa21d737e9f948fb92a9286a5f03bac06ab881535069fe060bfd622cVirustotal results 33.87%Heodo
2020-10-21FZNE_HW8968715683FU.docdoc 726fe6b07eb73d6068f54ed6a6d61d76252af6ae080d1e41194e36dba8106a4fn/aHeodo
2020-10-21BAL_77845584.docdoc a002bd15074effe4548ccc07946e51276be1d1ffbdbe1e474aa78b2f629a997cn/aHeodo
2020-10-21H_BISQZ714DRT.docdoc 0ef3eb571df8fcaa4ad2f23f3daabf1bcbc17ee41a42913f623eaaf788f5e04cVirustotal results 30.65%Heodo
2020-10-2105253382.docdoc ce72abdb386adab53d71d068388c21107144e7d9c1acfa2f898d0ce6d7b2acefVirustotal results 32.26%Heodo
2020-10-21INV_PO_10212020EX.docdoc 11c8cdc867668b0fe262189aaf49519ffbf3391fa8303856b0a08a52562cd611Virustotal results 25.81%Heodo
2020-10-21BAL_94179757.docdoc b27ba8b639475544466c43ebd426609308dcc0c1f4842f45627c564e96678335Virustotal results 32.69%Heodo
2020-10-21INV_PO_10212020EX.docdoc 0eb15f9cc8d10079ceed336ea5520f8255b60bf550f274a5015d33f720d907d1n/aHeodo
2020-10-21INV_0B3FTK840J.docdoc 88c45b613e6367cbb58e012779f1cd95ff6a44efc175b2163185aa309e18573fn/aHeodo
2020-10-21BAL_PO_10212020EX.docdoc 148588102731dd9742cd698c882b48c4b49cbfdd868647a83a15a0cbb1f0c8can/aHeodo
2020-10-210989268133.docdoc 58c9ea112ea67d4311a63c0cf87b4a97745c1e0f28e1a8a013047349d7d5bae4n/aHeodo
2020-10-213527189349455068911383.docdoc 442199396365c09418756cb80ff20ce46129c4a0cc2cfc6dabf5e8bb2cc42437n/aHeodo
2020-10-21BAL_PMH_100120_HNE_102120.docdoc 28d5bdccce4b904f522a8aeda9f16fd87ea3831634ef34c5a660e3ae21a0229fn/aHeodo
2020-10-21UFN_100120_FWK_102120.docdoc 0e7f06cdfc74e74e5e00123ac97222a4735cc7b8cb29ca8d7892df978f647a32n/aHeodo
2020-10-2145440481242652.docdoc 5b78a4ef32efd6eba54e53df8b14092631d475f672d60774c26f20dbe0ed5f7fVirustotal results 50.00%Heodo
2020-10-21BAL_J6G7JZ65DEHK.docdoc ffb659e12aeea991c1bca3702e7d3c01cb589251885cd53c4025994a5e3e1309Virustotal results 48.08%Heodo
2020-10-21K_88635507876692926886.docdoc a80ce02ffb9b50e4f3f2618142c2645bbc77ff5055edc8819536d483ff232eccn/aHeodo
2020-10-21INV_XIMD7U7NIG.docdoc 39a7385578321db9d477ff19e7087b03d3c57076ceca16fc2af049c087f72343Virustotal results 38.98%Heodo
2020-10-21INV_IRE1RUPM2ZIFYTWX.docdoc ec57f3677533e2cfecee42c14801e99d80ee3ef3bd8044c0b11040b1383fe435n/aHeodo
2020-10-21DOC_70708395.docdoc db6c107a7034688cf9fd3a069d7941ee4b8f606b102e3cb24e1dcab621a87304Virustotal results 48.33%Heodo
2020-10-21DOC_HM2YDCW6767BFV.docdoc fe1e5c66a4990cc515e5925db68def9f29f1893d9c6d3fa6b47e05f5c5f618ddVirustotal results 46.55%Heodo
2020-10-21INV_PBE_100120_SKE_102120.docdoc cd230affe2cef8dd5938e3ea670dbd706c65f93341c35d2eaecf1a5ae6d8203aVirustotal results 48.28%Heodo
2020-10-21GJ3335860399GI.docdoc d0337f9e3f826764678ff11fd7e2b49a84db21bd33615cd0cc63e6654c502d9an/aHeodo
2020-10-21INV_PO_10212020EX.docdoc 7e61ca1b65ed5f86ae7603431d7296593ded64f620465d59ad3a62e0f1bef5cfVirustotal results 45.16%Heodo
2020-10-21DOC_68145528629156199.docdoc 730dc7281140bb144e159ad27638ff4f4d3a021999727a26b7731250343a3f76n/aHeodo
2020-10-21Z_PO_10212020EX.docdoc 614bbd10017422522d46a734ed08de066834e449d5802b036b0231a39b0c043cVirustotal results 49.06%Heodo
2020-10-21BAL_CF6873350560MX.docdoc afcfe7ff49c2df7f47347c4c49d64ac3f027b1c79f5d090a0daf526fd65d859dn/aHeodo
2020-10-21L_EEPYD2SFIV.docdoc 89e10dbffeb48b429f49468630b9b93f988c4ca3e6a7de17367b398447309bfen/aHeodo
2020-10-21BAL_PO_10212020EX.docdoc 2465db836fb8ce33c72ba9c55528a00a290b770a2bb977ecaed539b453c1211bVirustotal results 40.38%Heodo
2020-10-21DOC_KKY_100120_WOB_102120.docdoc 92e4476fe9673fe19a33b4c306402a172f3b2124ad380f0782517a9e15fec347n/aHeodo
2020-10-21H_1327822268670547913157.docdoc a78451771b5a8e66fd912d10f9b621e52239473334785ec68755db5e60594ecbn/aHeodo
2020-10-21REP_PO_10212020EX.docdoc cd0c0ee5979ebfa7ed73a40ee1f879f2b65cc57ed38619fc4f7e186c15e54128Virustotal results 38.89% Heodo
2020-10-20BAL_56844700.docdoc a65e7b5a4d99582f1ec1c608eea4d21fd29d1c23bed2b8dd8ec8062f23d90e40Virustotal results 39.34%Heodo
2020-10-20L_8357250056720811922908271.docdoc bbd05af56a4dc95314278a40df6390cfc3ed9f3c4986801470aa7c753f4536fbVirustotal results 32.26%Heodo
2020-10-20INV_XLN_100120_DCC_102120.docdoc 8cadf5fc31643a1acc9b991d110e039e7e0520e94783c61d9caf5ccb2481915eVirustotal results 44.64%Heodo