URLhaus Database

You are currently viewing the URLhaus database entry for http://bravoconsultancy.com/wp-snapshots/invoice/1742625659625128/hzqQ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:762499
URL: http://bravoconsultancy.com/wp-snapshots/invoice/1742625659625128/hzqQ/
URL Status:Offline
Host: bravoconsultancy.com
Date added:2020-10-28 21:27:03 UTC
Last online:2020-11-02 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 21:28:02 UTC to abuse{at}godaddy[dot]com)
Takedown time:4 days, 21 hours, 37 minutes Bad (down since 2020-11-02 19:05:32 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29INV_10715.docdoc 2efeab91d822ab76173df70e491b2cd6881d1435186ad6659da73c4e5c5214bfVirustotal results 34.38% Heodo
2020-10-29Inv_252554.docdoc b646a2f2855c1348d2d8cbdf2d3f54747bcd727069000f64e1bd824991732442Virustotal results 34.38% Heodo
2020-10-29Inv. 077780741125.docdoc 2176a02ebbadceedea35c2a83fcce17fd40120ff2cc4390a9f210fc26b40a310Virustotal results 34.38% Heodo
2020-10-29invoice.docdoc afc85b56b85dac897bde5ec6ba2471b1464001d0fed7be03f90041f07a622ff4Virustotal results 34.92% Heodo
2020-10-295962219645TW.docdoc a0fa698426cf3decea21c3e89fe324393fd7a7743da94068ba8be39c4ebf86b1Virustotal results 35.48% Heodo
2020-10-29October Invoice.docdoc 12a1ded61ef91e5e79c4009234b54a7f4c391d254585bd931987c8289841abb8Virustotal results 34.38% Heodo
2020-10-29October Invoice.docdoc e82d122d0f3a727259860d1596b6a7a81984dddc13f13d4c77f719808c996915Virustotal results 34.92% Heodo
2020-10-29Invoice #740.docdoc 64176cb24145e182cb8783aecc0c2b5ceca0e851c932775b5a44431abee2a611Virustotal results 34.38% Heodo
2020-10-29Payment status.docdoc 092adc3e63864e36764ee209d07e652c3b37b55e0f433d9ae5c69a1619a482a5Virustotal results 34.92% Heodo
2020-10-29P02 invoicing.docdoc 8912ed633b4518995c5cf68b1037b5f3755e2573d19b35873884074daab8e1f0Virustotal results 32.81% Heodo
2020-10-29Payment status.docdoc 67adcb665e495bdce7d8234ef01fe0cebc5d615a6b630a2222366cd51a871658Virustotal results 31.75% Heodo
2020-10-293408969718YM.docdoc 07e080dc70dc704b7d6f6eb5138fc133b388aa42e3e4f9db824c0aa5e7637285n/a Heodo
2020-10-29PO# 10292020.docdoc 2a132f8eb55b91975634807a5dab592f5c50ac116fe5914adcf1cdf16f9a6fc6Virustotal results 33.33% Heodo
2020-10-29Invoice 006596799.docdoc 4937e26d4bf2f3ddd43cfebe507c1ad452c29cab1451e7685e24045e74cf514bVirustotal results 29.69% Heodo
2020-10-29Invoice #7782.docdoc 1c6a68700c5a829d8c421561d670c1f86cb25027af4b54be19724b1b7a979ef5Virustotal results 28.12% Heodo
2020-10-29October invoice.docdoc b3498e558242db8d11e61b44f5d92839aed7dc9d6535bcb4e2d9e5e870682290n/a Heodo
2020-10-29Copy invoice #6054.docdoc 5ffac4c27d8c1b1162ad2e686e5d3d3397df8684bd78be1ac2658f1bd0fc1b70Virustotal results 28.12% Heodo
2020-10-29invoice.docdoc 2df17cda9f5ded819514b9060733138dd171d92eba13d68bfa61efa6d39a85bdVirustotal results 29.03% Heodo
2020-10-29Form - Oct 29, 2020.docdoc f3068382cc295bad25bc7c5ee96d09893b73ed065dd521170ec6c4cc731d6145Virustotal results 25.81% Heodo
2020-10-29invoice #5378.docdoc 2ef4e4d6b171c3c34f3e35d9bfdd051ca3fd4110f0d44e24438572861f336641Virustotal results 26.98% Heodo
2020-10-29Payment status.docdoc 3bbd2607e23ff082929cad28a957e8e1096e5419ecd6e56856d3504b946a12bfVirustotal results 26.98% Heodo
2020-10-29INV_20835.docdoc 477abef826205efd3cf971b2c425dff760789b1c15cfcbc182634ba92187e59bn/a Heodo
2020-10-29October invoice.docdoc 32ffb1dec406a36a9e2bce688ed2c8219c952a6b479506a24aefd9dd0d7f9566Virustotal results 26.56% Heodo
2020-10-29invoices 97138 & 76697.docdoc d5d9e0e60d6db253aed185dd686c68b29fbec72a120812b62cba1e5bacbcd2d5Virustotal results 21.88% Heodo
2020-10-29form.docdoc 9eddbf9eaa4b753108631f0cdbef5ecc758378c188d216542bf2db06a4c4e7e5Virustotal results 22.22% Heodo
2020-10-29QFO-100120 RDYH-102920.docdoc 9da8a687183313d2dec4f41ff6c4b5b6fda388b7d8d295b3071df72518fb318eVirustotal results 21.88% Heodo
2020-10-29Inv_5466.docdoc 8200214bee8f21c170b9173814cac8166b9f605ebeee543870d9facdefa73d76Virustotal results 21.88% Heodo
2020-10-29Form - Oct 29, 2020.docdoc 95b4f0a791e9ffefe35972f8c4e1a90c115fe1c8976f779e44b5190d859b3eb0Virustotal results 22.58% Heodo
2020-10-29invoice.docdoc dd46084c550c55905276f7c43df92dbe4a91d31ba7afebe0313262ddbfbd56edVirustotal results 22.95% Heodo
2020-10-29Inv_7469.docdoc dbecc21fbfe21aadbb22f6de20f4868f7f4a5c16552ee9ff3cc5c590e0563a2fVirustotal results 20.63% Heodo
2020-10-29invoice #171272.docdoc 526517f6cb457615481a34a844da89648c01e54f25dadafc68c5594c9797cb17Virustotal results 19.67% Heodo
2020-10-29PO# 10292020.docdoc 36bc0b0a45b7b904804ec1e2efc5349ac69bbdd883633311f3c89eea32884799Virustotal results 19.35% Heodo
2020-10-29invoice #5377.docdoc 2c9ff8e37385daa5453c52ae127481515435d634effca3453e09a863943386abVirustotal results 19.05% Heodo
2020-10-29invoice.docdoc 86784b37bc0a4c5ad8f488356ec333dbeda709272a5aa412aeff54fee3f9db46n/a Heodo
2020-10-29form.docdoc 1fd97c3d16ba4383f3df637bbd3ab25b987657d4afd5541d2bef1045db9028c4Virustotal results 19.05% Heodo
2020-10-29invoices 703 & 8030.docdoc 92d834cc4eeb0c988360abd919fed33b6ff21d18e7fc4fbf17a443d56374ac19n/aHeodo
2020-10-28U00 invoicing.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo
2020-10-289170188293YN.docdoc f839b00e54aa7b0d68e3f3d7e7c12965d9d64153cd37d0600c4297542385eec4Virustotal results 26.98% Heodo
2020-10-28October invoice.docdoc c9d70d7c3547b6ac0806b6f00654a2862125de4c7e63c4fa7b46f41a70ff489eVirustotal results 25.81% Heodo
2020-10-28Electronic form.docdoc 6904c547286eda2ac977185bbe3705732db4ca6eebc33e340e9ee9540909d671Virustotal results 25.81% Heodo
2020-10-28071001.docdoc ab327e3be9ef1ce4781f725c995feb6a13f6eaf1d1c31e894048e5be6b4e24aan/a Heodo