URLhaus Database

You are currently viewing the URLhaus database entry for https://wecareofapex.com/backup/SD6OGI/BJF/WEOXL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:734340
URL: https://wecareofapex.com/backup/SD6OGI/BJF/WEOXL/
URL Status:Offline
Host: wecareofapex.com
Date added:2020-10-22 11:49:05 UTC
Last online:2020-10-23 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 11:50:20 UTC to abuse{at}hostinger[dot]com)
Takedown time:15 hours, 23 minutes Good (down since 2020-10-23 03:13:31 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22Payment.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22Inv_8548.docdoc 3f9db285b73fd517a1c511a147a4cae314a29a33332f7e8012700c086132b6c2n/a Heodo
2020-10-226818919161WI.docdoc c2111a834868da674751a51a03efd41985e59b78f037024440b8cb080e52da89Virustotal results 38.33% Heodo
2020-10-22Invoice 8550359.docdoc 67c1b651e75a7c189396cf60ba8461c90336f917091b09d97b042a0ca7ef70a2Virustotal results 38.33% Heodo
2020-10-22K056 invoicing.docdoc 8b5f6da01149406c0cd0e243ce84b34813ff8c9f09fcf645859516d085f9ae3bn/a Heodo
2020-10-22Payment status.docdoc 0ffde0e4b91dd4178cf8bb09de58e8de279118d242b1fe487ee1451627d0ddbfn/a Heodo
2020-10-22Inv. 59597018.docdoc 2beec2edda2346042fdfa829caaa7403e7842e786b9b9e89baaf4cd5e45d189aVirustotal results 36.54%Heodo
2020-10-22October Invoice.docdoc 67901eebf58c9cbbed2c00e87cb702c2e69cf959926247f3f99e59ba445a73f7n/a Heodo
2020-10-22October Invoice.docdoc d18c0e979f37984b270f0c13f5be14520443ccf55b445d68ffaf6c48b89cf5c6Virustotal results 39.62% Heodo
2020-10-22Invoice #322398746.docdoc 12a9d00947e3f08cb67e3d1a197fd116e29836a17845009e590d283eb80e960en/a Heodo
2020-10-22Inv. 00778339289.docdoc cd20ae1b00fceba422cc5bd5b2c7e42686f65e5ea4ef237340ffc7dd3e1a28f1n/a Heodo
2020-10-22014532.docdoc 9b918b3a0a118f50d3c8d4be4526b1fd8ec10563810c7dbb5088495e471f6b26Virustotal results 32.26% Heodo
2020-10-220029611.docdoc 749e0e405f25ff952f9ac9f879f50fcaac51258237b698562dc85c891bf323a8Virustotal results 35.19% Heodo
2020-10-22October Invoice.docdoc 01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5Virustotal results 49.06% Heodo
2020-10-22Payment status.docdoc d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4Virustotal results 51.61% Heodo
2020-10-22Inv. 5644733590.docdoc e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26an/a Heodo
2020-10-22Invoice 003918057.docdoc 8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8bVirustotal results 50.00% Heodo
2020-10-22October invoice.docdoc 711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550Virustotal results 49.09% Heodo
2020-10-22Form - Oct 22, 2020.docdoc fe69570cfe43c056f36d0a40929d53d4532cd181924613bda7436913979c33cbn/a Heodo
2020-10-22Inv. 0829197.docdoc a3a1b4f0a15ce75c9c492676dd9fa1570d6fc7b3296538bbae39f678d2b28bf7n/a Heodo
2020-10-22PO# 10222020.docdoc 495313b4809b48cfad065e665cb9bc04759262897b08b142734ff1f15316f5d9n/a Heodo
2020-10-22form.docdoc 4a44eb422716acd382deed2b165d37ce8de2d799d1c466a1aa2e1952f4b943eeVirustotal results 45.16% Heodo
2020-10-22Payment status.docdoc 5fb5309b154278b57d6a94d784dd5de602c441608e00557aa6c53c200ccbb3b1n/a Heodo
2020-10-22INV #0186 FOR PO #0140483186.docdoc 4c0eefb631af43ca75f18562817c8ac29361fdf7b5a528341efa855a8d1c6a6aVirustotal results 40.35% Heodo
2020-10-22HX43 invoicing.docdoc cfca456cd0b2f420fe799623f9e2bbf831e6463a73b754f9efd9f2eac8f9714cn/a Heodo
2020-10-22Payment status.docdoc 2964a315de69bb8d274293c5de39c877468fa8f5395e04639fb3029533bc4c45n/a Heodo
2020-10-22invoices 11053 & 4137.docdoc 2566d4cd03b1b31a54ee14af117d50f0d166a3500ac7b39df87cc69f567a862dn/a Heodo
2020-10-22INV #2626 FOR PO #008361446.docdoc 72da9c13652853256f7cab8762f533e63f52328ba4b06d4bf44d3dc0cd5fe2c5Virustotal results 46.30% Heodo