URLhaus Database

You are currently viewing the URLhaus database entry for https://www.taxismaroc.com/wp-content/uploads/2020/10/eTrac/FYoYktZ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:760775
URL: https://www.taxismaroc.com/wp-content/uploads/2020/10/eTrac/FYoYktZ/
URL Status:Offline
Host: www.taxismaroc.com
Date added:2020-10-28 12:12:03 UTC
Last online:2020-10-31 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 12:14:03 UTC to abuse{at}ovh[dot]net)
Takedown time:2 days, 14 hours, 47 minutes Poor (down since 2020-10-31 03:01:57 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30invoice.docdoc 2efeab91d822ab76173df70e491b2cd6881d1435186ad6659da73c4e5c5214bfVirustotal results 40.00% Heodo
2020-10-29Payment.docdoc fb4e266871e925f780d416984177d01ccf3dd5a3ffb76d031a5cc3738a76a3bfVirustotal results 24.59% Heodo
2020-10-29invoice #57972.docdoc 26764d7b6af1da06529d54fec5970550d17c1bd19ecaf645e7219b2f59fd0171Virustotal results 26.98% Heodo
2020-10-29invoices 44958 & 8114.docdoc 32ffb1dec406a36a9e2bce688ed2c8219c952a6b479506a24aefd9dd0d7f9566Virustotal results 26.56% Heodo
2020-10-29Payment.docdoc 9ee04def912bfe9d3a92492ff4f8aa8170dca54f97fb376a5c42bf5f3f2cda60Virustotal results 21.88% Heodo
2020-10-29invoices 844 & 8608.docdoc 9eddbf9eaa4b753108631f0cdbef5ecc758378c188d216542bf2db06a4c4e7e5Virustotal results 22.22% Heodo
2020-10-29Invoice.docdoc 918aa2eb7333c6f0dfed50ccde760c827c26c5b2f3b2022f83c03a7d3c1f1464n/a Heodo
2020-10-29Invoice 002154582.docdoc 26e0dedfbc389de133350f134455565f185e864b79466539b658dacc21fb1bb6Virustotal results 22.58% Heodo
2020-10-29CE51 invoicing.docdoc 95b4f0a791e9ffefe35972f8c4e1a90c115fe1c8976f779e44b5190d859b3eb0Virustotal results 22.58% Heodo
2020-10-29Invoice.docdoc 176d883eced9c465d7391f935cbdb75d425c31d1d0d51771b6c730dee296a8d6Virustotal results 22.22% Heodo
2020-10-29Inv_4393.docdoc 25ae7bde6c2c46284a6756330d4c81e2307ea67967c9d9fce7ddf0841ccb3089Virustotal results 20.63% Heodo
2020-10-2900619261.docdoc 65a1c1b8cbaeaa9098df96d462c765ec20c8d6acad74e0a0ac60e895d9468c06Virustotal results 19.05% Heodo
2020-10-29Invoice.docdoc 36bc0b0a45b7b904804ec1e2efc5349ac69bbdd883633311f3c89eea32884799n/a Heodo
2020-10-29Copy invoice #36200.docdoc d35618fba11f6c84539c7888912e7eb42799ab92025b7d9b15eb542b4b380d33Virustotal results 17.46% Heodo
2020-10-29Invoice.docdoc 86784b37bc0a4c5ad8f488356ec333dbeda709272a5aa412aeff54fee3f9db46Virustotal results 17.46% Heodo
2020-10-29October invoice.docdoc 75c855710955e1f033276db4cbc83c798d238d4ca5cbf2e0fb9968d3944f0e79Virustotal results 19.05% Heodo
2020-10-29INV_0230.docdoc 92d834cc4eeb0c988360abd919fed33b6ff21d18e7fc4fbf17a443d56374ac19n/aHeodo
2020-10-28INV #00919589 FOR PO #005996880.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo
2020-10-28Invoice.docdoc 262b9ae34d1556927301b3a7e49f106e8a49724b527eaa327938fd5af61ec2ebn/a Heodo
2020-10-28PO# 10292020.docdoc 6398e25e380cf00aa433acf528e8f0245fd02007338aa75df4deb5bd9eeefbbbVirustotal results 26.98% Heodo
2020-10-28PO# 10292020.docdoc 6904c547286eda2ac977185bbe3705732db4ca6eebc33e340e9ee9540909d671Virustotal results 25.81% Heodo
2020-10-28October invoice.docdoc 651bf3fad674c19a145b70179dc88dcc06a5afee9923b348c400155e1f6b14a5Virustotal results 24.19% Heodo
2020-10-28Payment.docdoc ec428d84e9c1aebaf97ee36639823702c4cc91734d326acc91799ba2b3b40495Virustotal results 23.81% Heodo
2020-10-28Invoice #488528.docdoc 19f5c63fa8696a0eaab016bdd4d8d1bcfb5dd7f07d1da25caabaaedf0088dc23n/a Heodo
2020-10-2800216535.docdoc 1ffb519f7ee20c735692e941193543d406a780fa0756200654c9d442c5166fd4n/a Heodo
2020-10-28Invoice.docdoc 6c5d2dceb77aca3c35f72874bcb483c53950fd5f5aeb9dd9a66fed7341d3cd3aVirustotal results 20.63% Heodo
2020-10-28HMA-100120 FUHN-102820.docdoc 0402eac76e97d2bc47ed688412a18594674b7e981d4307bbe0b8491d8ba0268cn/a Heodo
2020-10-28Invoice 011555.docdoc 661694d6fc62c1af16ddbe2db10c54b471f5acb387cde760666a6a672635f16dn/a Heodo
2020-10-28Payment.docdoc 6b556db13a6bc97a4628816c0d73e375e246ba9dcf0767a7ff38910b06976de6Virustotal results 18.03% Heodo
2020-10-28October Invoice.docdoc 80e850612ec841dad3f42d1b091ae46c3ff53ecbfef5686250c19f256e88c323Virustotal results 17.31% Heodo
2020-10-28Form.docdoc 7e7bd61af07906f31a4efa5442f7cfda98c0047ef70e15f64e37c5d4882917b2Virustotal results 17.46%Heodo
2020-10-28TXO-100120 XWHG-102820.docdoc 0eb494d2627d56169bb2fa72f2ddae839751254dcb82ab597a9df1a75dba97ecn/a Heodo
2020-10-28Form - Oct 28, 2020.docdoc 08d832a1ff20d74ba37553d0ac28f94bc54d7463e392873c34faf6bb44d47afdVirustotal results 17.74% Heodo
2020-10-28Invoice #96191.docdoc 7cd5248f6eed960168d2898ffde985d947702c9dc04b50d021161ffbed128e95n/a Heodo
2020-10-28Electronic form.docdoc 35ea56863ec97fca389fd1138ca3a7aef03c68c4988c72ad389d4c4cbd211a63Virustotal results 17.46% Heodo
2020-10-28PO# 10282020.docdoc 0031e60e9810b98f42bf12765fba57f45b0b41b41dff5216823e74ec607fcd89n/a Heodo
2020-10-28invoices 22364 & 9313.docdoc 1803944ee4f9bc9077c04710e033b33e5ce91263d2b9f5409f742caee5f45fceVirustotal results 16.39% Heodo
2020-10-28invoice #224126.docdoc 9819d665344dae10323a62049a4b5193c88afbdd1792f6d8ad80b7df403b6c73n/a Heodo
2020-10-28Copy invoice #9319.docdoc 00be80b011b00e2de85e342852402bd4fb7b9bd28a03d3631202c6ab79baf9cfn/a Heodo
2020-10-28Payment.docdoc f104662c93957cb9de8b8b5db529dcd6dc40bd62d362d375d4894efba21b8c94n/a Heodo
2020-10-28K1 invoicing.docdoc e2e6b46ee6eafc1f980ec767666e1758535992fcb4757f374c0f01d555fada31n/a Heodo
2020-10-28Inv_50772.docdoc cf5066738d5862bead47940e22a0cab26d7236c22d450506b045f226bfbf624cn/a Heodo
2020-10-28invoices 97598 & 5437.docdoc 7b55e5dcf03999a440acbe690dddf943d03bd37fbfc7892d196708992044efdfVirustotal results 18.03% Heodo
2020-10-28Form - Oct 28, 2020.docdoc e1a1c8b02de20858f2703c835ecd985f2b744816cd4f8757ca7e12af15d3af11n/a Heodo
2020-10-28Invoice 032107.docdoc 1f78558f3017d180e7ec6d453d46b87192b207476536447d4502b9f6ebb0a173Virustotal results 17.74% Heodo
2020-10-28form.docdoc c941232a830436abd4969caa877cb7fdf70ceb9bfc8844e7dc75fd1f400cc897n/a Heodo
2020-10-28Form.docdoc 0139fb5de658c6d87c219098461614781b790461bb4d2f6fda39ecb9f80855b5n/a Heodo
2020-10-28Payment.docdoc 55555a045c8b3878af56c302aac860598d4216873247ce3332c110e236b11b69n/a Heodo