URLhaus Database

You are currently viewing the URLhaus database entry for http://dietwithchef.com/backup26-10-2020/report/o4mkvfstr2-00179631/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:762804
URL: http://dietwithchef.com/backup26-10-2020/report/o4mkvfstr2-00179631/
URL Status:Offline
Host: dietwithchef.com
Date added:2020-10-28 23:16:04 UTC
Last online:2020-10-31 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?):mail Yes (Ticket DCU003040918 created on 2020-10-28 23:18:05 UTC)
Takedown time:2 days, 4 hours, 2 minutes Poor (down since 2020-10-31 03:20:22 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29Payment.docdoc 2efeab91d822ab76173df70e491b2cd6881d1435186ad6659da73c4e5c5214bfVirustotal results 34.38% Heodo
2020-10-29INV #003975692 FOR PO #00934661409.docdoc 55948fa440efdbe28f551bded69dcb747f665518a10876e4ae3ebdcb5e44ea67Virustotal results 34.92% Heodo
2020-10-29N5011517160FE.docdoc b35e8c1cf63de1025db2d2f786b3252b88272d9bad9576c7e2a223a9b4187663Virustotal results 34.92% Heodo
2020-10-29I-100120 WFMX-102920.docdoc a0fa698426cf3decea21c3e89fe324393fd7a7743da94068ba8be39c4ebf86b1n/a Heodo
2020-10-29invoices 4806 & 3623.docdoc 12a1ded61ef91e5e79c4009234b54a7f4c391d254585bd931987c8289841abb8Virustotal results 34.38% Heodo
2020-10-29October Invoice.docdoc 7035a94379b991e446531c0965b4935f1d3be9a10b20dd97e7dd1e34e6571707Virustotal results 34.43% Heodo
2020-10-29Invoice #451.docdoc 64176cb24145e182cb8783aecc0c2b5ceca0e851c932775b5a44431abee2a611Virustotal results 34.38% Heodo
2020-10-29SA0006 invoicing.docdoc 407011017107dd82209d02b6714d52efaf3270f55a81de711db2f20d9b918d23Virustotal results 33.87% Heodo
2020-10-29Y12 invoicing.docdoc 220c19f5b011876c257bc3e3e48c3b032be339e535a8e93b564bfbe65ea86610Virustotal results 33.33% Heodo
2020-10-29E62 invoicing.docdoc ce26d68de2263ab355558dd9f0b201883404c91ecf3f164c8ef0bf17c9e98f20n/a Heodo
2020-10-29October Invoice.docdoc e48485a5f02afb4fa932b38c41f278e6a4571911311828ff8fc0cae186be9be2n/a Heodo
2020-10-290993635522.docdoc e30eceea75b291ff394ffb670b46a3b07e8725dc0a146c1df069952d9ed885a9n/a Heodo
2020-10-29October Invoice.docdoc 07b12baabc51749df13d78cc093496d641f03a1aed14ee0ecb867e2a4a2d70d5Virustotal results 30.16% Heodo
2020-10-29INV #00624 FOR PO #0063402256582.docdoc 1c6a68700c5a829d8c421561d670c1f86cb25027af4b54be19724b1b7a979ef5Virustotal results 28.12% Heodo
2020-10-29XX-100120 UEND-102920.docdoc b3498e558242db8d11e61b44f5d92839aed7dc9d6535bcb4e2d9e5e870682290n/a Heodo
2020-10-29form.docdoc 5ffac4c27d8c1b1162ad2e686e5d3d3397df8684bd78be1ac2658f1bd0fc1b70Virustotal results 28.12% Heodo
2020-10-29form.docdoc 2df17cda9f5ded819514b9060733138dd171d92eba13d68bfa61efa6d39a85bdVirustotal results 29.03% Heodo
2020-10-29Copy invoice #7413.docdoc f3068382cc295bad25bc7c5ee96d09893b73ed065dd521170ec6c4cc731d6145Virustotal results 25.81% Heodo
2020-10-29Copy invoice #55434.docdoc 2ef4e4d6b171c3c34f3e35d9bfdd051ca3fd4110f0d44e24438572861f336641n/a Heodo
2020-10-29invoice #86115.docdoc 3bbd2607e23ff082929cad28a957e8e1096e5419ecd6e56856d3504b946a12bfVirustotal results 26.98% Heodo
2020-10-29EI8993561488OO.docdoc 477abef826205efd3cf971b2c425dff760789b1c15cfcbc182634ba92187e59bn/a Heodo
2020-10-29X0038 invoicing.docdoc 918c89cb1f615bbe015743c772926158f3005c4316f7436e31b5a948ad79d064Virustotal results 23.81% Heodo
2020-10-29Electronic form.docdoc 69feb49b203345739f8ccbe447369b371c114f0da1bb1ff9f607e5ca6ad6b95dn/a Heodo
2020-10-29Inv_477922.docdoc d5d190f1fac46b962b459226f25c1e630715a1c7fb4bc14451c56817b4cce25dVirustotal results 21.88% Heodo
2020-10-29invoices 753 & 01649.docdoc 918aa2eb7333c6f0dfed50ccde760c827c26c5b2f3b2022f83c03a7d3c1f1464n/a Heodo
2020-10-29Copy invoice #30374.docdoc 872d3855e7d15b10167896aa79941f2defa7cd42778c55fef0c4770a6b146560Virustotal results 21.88% Heodo
2020-10-29TIC-100120 YEVP-102920.docdoc f2abbdc375e02c34831922b417357bdbbc322e4ef3b25e03dfe0250aef261a12n/a Heodo
2020-10-29Electronic form.docdoc 361d6b6dc6f28f30e2caa4ad1ccaef39af9a19ccb07836b6455fa2467f245002n/a Heodo
2020-10-29Invoice #6285071.docdoc 176d883eced9c465d7391f935cbdb75d425c31d1d0d51771b6c730dee296a8d6n/a Heodo
2020-10-29Electronic form.docdoc 25ae7bde6c2c46284a6756330d4c81e2307ea67967c9d9fce7ddf0841ccb3089Virustotal results 20.63% Heodo
2020-10-29Electronic form.docdoc df634084d9cb08a06d2e82f00cc3fef1f64efc21da9ebd08ba86b684ee237863Virustotal results 19.05% Heodo
2020-10-29Payment status.docdoc 526517f6cb457615481a34a844da89648c01e54f25dadafc68c5594c9797cb17n/a Heodo
2020-10-29HA7177927257XJ.docdoc 2c9ff8e37385daa5453c52ae127481515435d634effca3453e09a863943386abVirustotal results 19.05% Heodo
2020-10-29HA7177927257XJ.docdoc 2c9ff8e37385daa5453c52ae127481515435d634effca3453e09a863943386abVirustotal results 19.05% Heodo
2020-10-29invoice #0427.docdoc bf01de28c8cf6dc5958da2bedc45b045e3978c687cc80c399c8fb63407e8562fVirustotal results 19.05% Heodo
2020-10-29U-100120 NGRM-102920.docdoc 1fd97c3d16ba4383f3df637bbd3ab25b987657d4afd5541d2bef1045db9028c4Virustotal results 19.05% Heodo
2020-10-29Inv_03051.docdoc 995bfae8132d4637a2d2e72e1f40a22043e19520c5c45039b2f257e9430f3cd5Virustotal results 19.05% Heodo
2020-10-28Electronic form.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo