URLhaus Database

You are currently viewing the URLhaus database entry for https://www.workex.jobs/blog/718017006/in70g-00089/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:726346
URL: https://www.workex.jobs/blog/718017006/in70g-00089/
URL Status:Offline
Host: www.workex.jobs
Date added:2020-10-21 00:46:06 UTC
Last online:2020-10-21 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 00:48:02 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:16 hours, 9 minutes Good (down since 2020-10-21 16:58:00 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-21Electronic form.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21Invoice #42802733.docdoc d9c9cdb661798fec5696237b21371f7bd3b1fdac360a68aa3fc3d863e1d6173aVirustotal results 32.26% Heodo
2020-10-21invoice #075378.docdoc e99ab9a43fda936582d3e49abcd562f045f62340fba2162f933fd97006ee5e17n/a Heodo
2020-10-210013630.docdoc 7a71bbbd54d2b129ef434d1379aeaf528d643d1cabbbac8bde1666c9e5069994Virustotal results 33.96% Heodo
2020-10-21invoice.docdoc 3c54fe2565b2e6ff66e9b1eb34fc93333f99d82c4c76d757292dd4e8c6af406aVirustotal results 32.08% Heodo
2020-10-21invoice #513103.docdoc 03e8290f5d44a7d129aa0e9614604b34b4b745f41c4dc8ca80db878cc82c26cdn/a Heodo
2020-10-21October invoice.docdoc ef59fe140a6b63b4aae9e7e31953441b4560e00bb76a3b2eef15fc04f5e1abb8Virustotal results 27.42%Heodo
2020-10-21X00859 invoicing.docdoc 326dc3efbb3c157a00369c8ec16b1c404b95a85458b0417cccc92282178a4496Virustotal results 29.79%Heodo
2020-10-21INV #0005 FOR PO #796667769997.docdoc cf275b27c9d9ff1afbbf89c46cd4546584c4a173ddc75405c48b7ead240f7b0bVirustotal results 30.43% Heodo
2020-10-21October invoice.docdoc e8da9916a2da1f9ce4081c005b241bb16bae33ac6774e8fdcfe0da0d155eddben/aHeodo
2020-10-21Form.docdoc 1c615910d79aa7763683cab844eb3542e60cdc0b9052bf2649a0fe8034ccaa51Virustotal results 26.23%Heodo
2020-10-21Invoice.docdoc e1443833e96642ff26e74d8b999dcf5aeea285a95e9ad1e70ad696f035a66518Virustotal results 26.23%Heodo
2020-10-21INV_722118.docdoc 8ec66231199f5f5fe7ec4b7165225152d2a2eaad0d4c868f01121d0398db1c27Virustotal results 25.00%Heodo
2020-10-21invoices 06957 & 52593.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21INV #082083 FOR PO #91304252.docdoc 7301eb52916c5b004b3f81ebf360c397e25aba900652108420b868313afce2aeVirustotal results 48.33%Heodo
2020-10-21OK-100120 BMMV-102120.docdoc a32b8fc89045749411368894b5eb70012518a8d9d1703b940bcbc966c0e40bdfVirustotal results 50.94%Heodo
2020-10-21invoices 48704 & 52461.docdoc b7b2d0ef7df5007d18a8a857ab7b35956aa9060aa4edfb1bd80e17299d53d9a7Virustotal results 50.82%Heodo
2020-10-21form.docdoc a9b5951976e5aebe82b1a18ef33e379ec5f3a36a04b89103649e54d7dc746aecVirustotal results 49.06%Heodo
2020-10-21INV_40795.docdoc e321ead5188a4d2e7abd2c7f2ca1bc74c905e875d34703bea49fa84c50cf4ed0Virustotal results 45.00%Heodo
2020-10-21Inv_903121.docdoc 58a681865ea454572eb661486c8e06854e90cc7cd2d5ab95ae331a724f5ce97dVirustotal results 45.90%Heodo
2020-10-21Inv_060846.docdoc 8d8971cd4eb8a2c26f5263e44299f9f468d43614dcccdcfae564420d264e0d29Virustotal results 41.07%Heodo
2020-10-2104874120159.docdoc f230273ae9e5eb57e36f98c374578e1a9856504dfbfbdcc7f815d20ba5974f2dVirustotal results 41.94%Heodo
2020-10-21Inv_611771.docdoc a4b9c8bd73e09cac4fa51d9601686766c566cc1afcba7986eb46da97f56449d5Virustotal results 40.00%Heodo
2020-10-21October Invoice.docdoc 663930eb12ff6afb8cd3d0410fcef8fa32edf4964504e10f0cd56af546b0ecb2Virustotal results 41.51%Heodo