URLhaus Database

You are currently viewing the URLhaus database entry for http://hawkehealthsolutions.com/iwp_db/lm/1hr2otsdl-00791132/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:761826
URL: http://hawkehealthsolutions.com/iwp_db/lm/1hr2otsdl-00791132/
URL Status:Offline
Host: hawkehealthsolutions.com
Date added:2020-10-28 17:37:09 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 17:38:10 UTC to abuse{at}godaddy[dot]com)
Takedown time:19 hours, 36 minutes Good (down since 2020-10-29 13:15:09 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29INV_5595.docdoc 154471acb1707b19c1efb5b7bc06211dd35e28a69e0db7f663b983d8712d8727Virustotal results 26.98% Heodo
2020-10-29PO# 10292020.docdoc 918c89cb1f615bbe015743c772926158f3005c4316f7436e31b5a948ad79d064Virustotal results 23.81% Heodo
2020-10-29Payment.docdoc 9ee04def912bfe9d3a92492ff4f8aa8170dca54f97fb376a5c42bf5f3f2cda60Virustotal results 21.88% Heodo
2020-10-29625833.docdoc a42701700521d96c9a99dad1fda05a80c69a0c1c932387ec61873a2e242e5f42Virustotal results 22.58% Heodo
2020-10-29Payment status.docdoc f55e4dc1405e6f36ed1bce409f373ae6aa7e6080e506ee0b8e7afb30193dedd8Virustotal results 22.58% Heodo
2020-10-29Copy invoice #6344.docdoc 8200214bee8f21c170b9173814cac8166b9f605ebeee543870d9facdefa73d76Virustotal results 21.88% Heodo
2020-10-29Q-100120 RGYN-102920.docdoc 0f34d0527521d358b1ac6aad3fb49b422bb06378891bf93065188f0db702bfc6n/a Heodo
2020-10-29WZ2409878937CM.docdoc dbecc21fbfe21aadbb22f6de20f4868f7f4a5c16552ee9ff3cc5c590e0563a2fn/a Heodo
2020-10-29Inv. 0052241143.docdoc df634084d9cb08a06d2e82f00cc3fef1f64efc21da9ebd08ba86b684ee237863Virustotal results 19.05% Heodo
2020-10-29October invoice.docdoc 8b689836a9b1034619fdff9ed1e672a6c18d09887f73cfa9e3243ae5071badbfVirustotal results 17.74% Heodo
2020-10-29NCB-100120 ROLF-102920.docdoc 2c9ff8e37385daa5453c52ae127481515435d634effca3453e09a863943386abVirustotal results 19.05% Heodo
2020-10-290172485.docdoc ca414fa964639ee79c68a68f9bf79c027f92b5736df476ecc2fdbe4def2e8d69Virustotal results 19.05% Heodo
2020-10-29Invoice 00538841.docdoc 8744e383bf013444ed1f687f385d558ee1c4e2a153cdfe224250a02fd1eada2eVirustotal results 19.05% Heodo
2020-10-29PO# 10292020.docdoc 2dc19d1576e1d7e5d43a3e0cf6ed690d3b66634515389ca782f0af0198069e65Virustotal results 19.05% Heodo
2020-10-28October invoice.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo
2020-10-28invoices 7355 & 8988.docdoc 86864a725202d28c0714960226d68417581cd2a83ead755ce236d48a2884d1cdVirustotal results 28.57% Heodo
2020-10-28Form - Oct 29, 2020.docdoc 787571d575b3aca0bb534467c986460f8713e2c3168e8654d4dfd2543f1832a9Virustotal results 26.98% Heodo
2020-10-28Inv. 0170368905.docdoc 6c3c1280087fe50fd411676b26ffd9bf41044300aeef5d27ed6322cf365fcd99Virustotal results 26.23% Heodo
2020-10-28Form.docdoc ab327e3be9ef1ce4781f725c995feb6a13f6eaf1d1c31e894048e5be6b4e24aaVirustotal results 23.81% Heodo
2020-10-28B9427608458DV.docdoc 19f5c63fa8696a0eaab016bdd4d8d1bcfb5dd7f07d1da25caabaaedf0088dc23n/a Heodo
2020-10-2800407317.docdoc 2a87f25fe351249b33ffc8d24f6310b9d8e1e3907a6b53b06e324566027dcae0Virustotal results 22.22% Heodo
2020-10-28invoice.docdoc ceeeec1a0762510ef1333ebf615afbba2090908a722702a3e81a03f0e17f3a9eVirustotal results 21.31% Heodo
2020-10-28A0021376512CV.docdoc 3abc8e8f02edb4b173ddb0aa9e5b5db794486c769bd4aa8adcbe2da23ec8cee2n/a Heodo
2020-10-28invoice.docdoc 87ba8d2cd453427750317da53541442b62760f1757073b1b3a5fe0cbcc69ec14n/a Heodo
2020-10-28invoices 5189 & 4200.docdoc 6b556db13a6bc97a4628816c0d73e375e246ba9dcf0767a7ff38910b06976de6n/a Heodo
2020-10-28Invoice 0079290.docdoc 3e784298291a432cc1c053b0a50d2245977718a7f16e344559d0952260c96049Virustotal results 17.46% Heodo
2020-10-28Inv. 6748672.docdoc c6d94cabee4abe9dc14f1ccdfcec3f631453b9e19046806554808e77ddda2cf1Virustotal results 17.46%Heodo
2020-10-28Inv. 017404768009.docdoc 24fc98fb4608b0e6216b4bf1a61772268c565b9b40cf66c95011f32d64591333Virustotal results 17.74% Heodo
2020-10-28Payment.docdoc f29906f9be58bbaac385fc9925f35f8b4b79ff4bf5e4ce7f3d89d90435a784a2n/a Heodo
2020-10-28Electronic form.docdoc 0c858a0a134a998400efac616b99178e0b542e1229d9260362b329d56ab10b58n/a Heodo