URLhaus Database

You are currently viewing the URLhaus database entry for http://jimsautomotiveshop.com/F0xAutoConfig/report/ci494yy-000437/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:761076
URL: http://jimsautomotiveshop.com/F0xAutoConfig/report/ci494yy-000437/
URL Status:Offline
Host: jimsautomotiveshop.com
Date added:2020-10-28 13:37:04 UTC
Last online:2020-11-04 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 13:38:11 UTC to abuse{at}godaddy[dot]com)
Takedown time:6 days, 21 hours, 37 minutes Bad (down since 2020-11-04 11:16:04 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29Payment.docdoc 2efeab91d822ab76173df70e491b2cd6881d1435186ad6659da73c4e5c5214bfVirustotal results 34.38% Heodo
2020-10-29Invoice 082175.docdoc b646a2f2855c1348d2d8cbdf2d3f54747bcd727069000f64e1bd824991732442Virustotal results 34.38% Heodo
2020-10-29Invoice #15177.docdoc 824b555ab78a9670b9a6f46138f71620ac8a363dd7e6d8009bad404dcffca81fVirustotal results 34.38% Heodo
2020-10-29Invoice 621788.docdoc afc85b56b85dac897bde5ec6ba2471b1464001d0fed7be03f90041f07a622ff4Virustotal results 34.92% Heodo
2020-10-29October Invoice.docdoc a0fa698426cf3decea21c3e89fe324393fd7a7743da94068ba8be39c4ebf86b1n/a Heodo
2020-10-29O007 invoicing.docdoc 3af30f06e552ad3c513043c06c8cfdf4192cabadd585bbee5ab47c2c0e4ff1d5n/a Heodo
2020-10-29Invoice 00700275.docdoc 0cbe088f943a3e057dee956f6a8f7733c99c80fa67560ac3f6362862635e459eVirustotal results 34.38% Heodo
2020-10-29Invoice.docdoc 95ec936d873cb5dfc933cdcec29598333a215dcef39621afc666e44e98aa18c5Virustotal results 36.07% Heodo
2020-10-29Inv. 45070.docdoc 220c19f5b011876c257bc3e3e48c3b032be339e535a8e93b564bfbe65ea86610Virustotal results 33.33% Heodo
2020-10-29invoices 849 & 7733.docdoc 8e2894731109ed42fa23af531d8d86c1ee45431edf43f96a34f71f8294100e3dVirustotal results 33.33% Heodo
2020-10-29October invoice.docdoc e48485a5f02afb4fa932b38c41f278e6a4571911311828ff8fc0cae186be9be2n/a Heodo
2020-10-29INV_439323.docdoc 2a132f8eb55b91975634807a5dab592f5c50ac116fe5914adcf1cdf16f9a6fc6Virustotal results 33.33% Heodo
2020-10-29Electronic form.docdoc 683573224327e8cecc5d38f690c4598f52ece7bd878b05e7f279111680604d5bVirustotal results 31.25% Heodo
2020-10-29Invoice #026.docdoc 07b12baabc51749df13d78cc093496d641f03a1aed14ee0ecb867e2a4a2d70d5Virustotal results 30.16% Heodo
2020-10-29Invoice.docdoc e8eaf6545e2cb1bb8d2294dd179c60990c18eb6fd9f4fa804effa77b6a28ae50Virustotal results 26.98% Heodo
2020-10-29invoices 80531 & 81661.docdoc 9143453f9dd04d35a094a0332fdc37a1d517cc582db210673a79310a26505e65Virustotal results 28.12% Heodo
2020-10-29INV_191449.docdoc 5ffac4c27d8c1b1162ad2e686e5d3d3397df8684bd78be1ac2658f1bd0fc1b70Virustotal results 28.12% Heodo
2020-10-29Form.docdoc 6ea355604d5c6f335af929f8e6508e90e7d2f18e82267091c99d8fdebf945346Virustotal results 27.42% Heodo
2020-10-29T1 invoicing.docdoc 9bedff10d91854bee6daf53c351b6ab3254895e11c0b77a9ea5c6433021a04ddVirustotal results 26.56% Heodo
2020-10-29INV_87724.docdoc ed51269c3602786ff6ddef3a808d8178d26e4e5960f4ac7af765e4bd642128ddVirustotal results 27.42%Heodo
2020-10-295258571338.docdoc 0ff96480062e84aa44e93eb008a5937b1f317e5a0e222198658fb2a71dc4b952n/a Heodo
2020-10-29007827001.docdoc 92ac003fb233443b86d9985f85bb50a56d64b8017e15191e8b5739c537f16802Virustotal results 26.98% Heodo
2020-10-29invoice #5400.docdoc 02fafe24fe1eab419305d450f7fe2753711cf6b5b8c5013c75c814cfdddb8348n/a Heodo
2020-10-29Copy invoice #506643.docdoc d5d190f1fac46b962b459226f25c1e630715a1c7fb4bc14451c56817b4cce25dVirustotal results 21.88% Heodo
2020-10-29PO# 10292020.docdoc 7d41847fb131218d629e6bb8132dc6b2b1ce714b4090c01c3f531fa66ad7274aVirustotal results 21.88% Heodo
2020-10-29K06 invoicing.docdoc 9da8a687183313d2dec4f41ff6c4b5b6fda388b7d8d295b3071df72518fb318eVirustotal results 21.88% Heodo
2020-10-29invoices 664 & 94395.docdoc 26e0dedfbc389de133350f134455565f185e864b79466539b658dacc21fb1bb6Virustotal results 22.58% Heodo
2020-10-29Inv_223347.docdoc 95b4f0a791e9ffefe35972f8c4e1a90c115fe1c8976f779e44b5190d859b3eb0n/a Heodo
2020-10-29PO# 10292020.docdoc 1cd43381c5a8a1f576dd199f876253ca9e49dac62cd5615c5ea664295f5ba142Virustotal results 22.22% Heodo
2020-10-29invoice #2674.docdoc 3e84e096f2f889c271504b8dcfb1e9fb78a347087b984a219d7749a8a0839c31n/a Heodo
2020-10-29Inv_95824.docdoc df634084d9cb08a06d2e82f00cc3fef1f64efc21da9ebd08ba86b684ee237863Virustotal results 19.05% Heodo
2020-10-292663087267RS.docdoc 586002b2b5259558f6fdf99f8bfcf2e4292dbdf458258eb918efb751c35cef01Virustotal results 19.67% Heodo
2020-10-29INV #345 FOR PO #741569573017.docdoc d35618fba11f6c84539c7888912e7eb42799ab92025b7d9b15eb542b4b380d33Virustotal results 17.46% Heodo
2020-10-29Invoice 0054297.docdoc ca414fa964639ee79c68a68f9bf79c027f92b5736df476ecc2fdbe4def2e8d69Virustotal results 19.05% Heodo
2020-10-29KE-100120 BDSY-102920.docdoc 8744e383bf013444ed1f687f385d558ee1c4e2a153cdfe224250a02fd1eada2eVirustotal results 19.05% Heodo
2020-10-29invoice #08899.docdoc 2dc19d1576e1d7e5d43a3e0cf6ed690d3b66634515389ca782f0af0198069e65Virustotal results 19.05% Heodo
2020-10-29Electronic form.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 42.86% Heodo
2020-10-28PO# 10282020.docdoc f973018352488fe6ba623919161c5b4387f67d9aca131af19480684ae2740544Virustotal results 17.46% Heodo
2020-10-28C-100120 WCMQ-102820.docdoc e1a1c8b02de20858f2703c835ecd985f2b744816cd4f8757ca7e12af15d3af11Virustotal results 16.13% Heodo
2020-10-28October Invoice.docdoc 1f78558f3017d180e7ec6d453d46b87192b207476536447d4502b9f6ebb0a173Virustotal results 17.74% Heodo