URLhaus Database

You are currently viewing the URLhaus database entry for https://foodstyle.in/Back/eTrac/06674202578512/XO/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:734676
URL: https://foodstyle.in/Back/eTrac/06674202578512/XO/
URL Status:Offline
Host: foodstyle.in
Date added:2020-10-22 13:01:07 UTC
Last online:2020-10-27 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 13:02:04 UTC to admin{at}frantech[dot]ca,fdias{at}frantech[dot]ca)
Takedown time:5 days, 3 hours, 44 minutes Bad (down since 2020-10-27 16:46:44 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22October Invoice.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22Payment status.docdoc 7e0233149682bb9be3e19f93517b3bbe9f5db41ce48dfa6ee88253a0a98bd678n/a Heodo
2020-10-220001022.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70Virustotal results 38.71% Heodo
2020-10-22form.docdoc 8f46672fc4bd13f926555000c39b3ff624d7b96f41429e568aa2bad30431bbe8Virustotal results 39.34% Heodo
2020-10-22invoice.docdoc f78e345d35c9468fe53fa232310f2f1836c8f1dd99d632578360bb1904400b0cn/a Heodo
2020-10-22INV #014 FOR PO #00307178583.docdoc ee5fa6da862f50e1ac9babeca493ba621ca3bc57ab73fb88480bc716457e36f0Virustotal results 39.22% Heodo
2020-10-22Inv_9937.docdoc 621c80400686860afb16c417aa76f5068c7bcd642104a225644b805539b9e5c6Virustotal results 37.10% Heodo
2020-10-22Invoice.docdoc 6d023a0790cfa813258bb0b0457a718d4d55c93a65b0988444b19c6279f5c42en/a Heodo
2020-10-22G012 invoicing.docdoc 171b68003d3217f50e0238721e0957d775d8eb225067a0191f56f2a31b998629Virustotal results 37.50% Heodo
2020-10-22R707 invoicing.docdoc 5825492e4acb3a6e36349f5fafef4745159e86616e9d38b4db2e2b4c212e3119n/a Heodo
2020-10-22invoice #62088.docdoc a53f4bb796189439737207c506acde597330328109ac2d78b693d2d6a72e4ba8Virustotal results 32.79% Heodo
2020-10-2206108230.docdoc 14a549a41295bc3e3af038d8f83d8a36aea9e70fc7daeb206d189d3bfff44dbcn/a Heodo
2020-10-22Inv. 0078247598.docdoc 9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbcn/a Heodo
2020-10-22Invoice 0378269.docdoc d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4Virustotal results 51.61% Heodo
2020-10-22form.docdoc ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0n/a Heodo
2020-10-22INV #0826410 FOR PO #46535857.docdoc 4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8Virustotal results 47.37% Heodo
2020-10-22INV #07800 FOR PO #00614701713453.docdoc fe69570cfe43c056f36d0a40929d53d4532cd181924613bda7436913979c33cbn/a Heodo
2020-10-22Payment.docdoc 20cb9774c3025651dcd7afb95472891f1b6bdab40da18e17775e4ec56084d0a0n/a Heodo
2020-10-22VK2 invoicing.docdoc af5bddd9f46abad7cf836d9faf757a676ba5bf9a7ee90e04c3a5cecd22c7fbd6n/a Heodo
2020-10-22TEZ-100120 RJUW-102220.docdoc 3cea95fe241c36b02ffc90f1260df43c8fc77e7acde8d5804ba4a461203332d0n/a Heodo
2020-10-22Y-100120 ZPCB-102220.docdoc 973f68fa660b0ff4da0047bc9d942a6f2faf63713e745fe19eaf4cf5d29828ben/a Heodo
2020-10-22Invoice #22856761.docdoc c0cccadc44aaa5274573830ea82eef9cda6607a02db099ce12c138cf50bb267fVirustotal results 44.23% Heodo
2020-10-22INV_4913.docdoc 3abe5cdbb82a1a48fb89ecf043e24351ffb466cb6112ea7316f6fb518244a289Virustotal results 47.06% Heodo