URLhaus Database

You are currently viewing the URLhaus database entry for https://naturalwaterresources.com/wp-content/BaHtb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:765280
URL: https://naturalwaterresources.com/wp-content/BaHtb/
URL Status:Offline
Host: naturalwaterresources.com
Date added:2020-10-29 13:18:04 UTC
Last online:2020-11-07 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003041920 created on 2020-10-29 13:20:06 UTC)
Takedown time:9 days, 0 hours, 44 minutes Bad (down since 2020-11-07 14:04:50 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29October Invoice.docdoc 2efeab91d822ab76173df70e491b2cd6881d1435186ad6659da73c4e5c5214bfVirustotal results 34.38% Heodo
2020-10-29October Invoice.docdoc b646a2f2855c1348d2d8cbdf2d3f54747bcd727069000f64e1bd824991732442Virustotal results 34.38% Heodo
2020-10-29Form - Oct 29, 2020.docdoc 824b555ab78a9670b9a6f46138f71620ac8a363dd7e6d8009bad404dcffca81fVirustotal results 34.38% Heodo
2020-10-29INV_5906.docdoc b620242d81548da725331ab89065055cf2766d259d918733cc3a33c91e309adeVirustotal results 33.90% Heodo
2020-10-29Form.docdoc 490447ab0221c1d099b57c81080eeddf31c23a6b90f4e753aaa82be8e80aefacVirustotal results 34.38% Heodo
2020-10-292229628.docdoc 739b604f19e74fa2a4c12ca8e77df879b1ea0fbde304cf63d53247285e5f976dVirustotal results 34.38% Heodo
2020-10-29Invoice #795.docdoc 0d30a2f25c077dbaa89fd166e0c2e24a2d75900432ab850d5c00dbd826ff759fVirustotal results 34.38% Heodo
2020-10-29invoice.docdoc 092adc3e63864e36764ee209d07e652c3b37b55e0f433d9ae5c69a1619a482a5Virustotal results 34.92% Heodo
2020-10-29Inv. 7884905738.docdoc 6510c1088251e05cfe18fc22279a7312308f08614ba3dee7852e6b1342e21dd6Virustotal results 32.81% Heodo
2020-10-29invoice #6831.docdoc ce26d68de2263ab355558dd9f0b201883404c91ecf3f164c8ef0bf17c9e98f20Virustotal results 33.33% Heodo
2020-10-29Form - Oct 29, 2020.docdoc 015aaecbeea372d2cde18c72ef93ce742b3e8c3ddf7247918403295dfa7357b5Virustotal results 33.33% Heodo
2020-10-29Invoice #55790.docdoc 62da1d16914ee7b918b84c1bfd2714584b9f6a979558c8e3c09c779b4b30deeaVirustotal results 31.75% Heodo
2020-10-2920598.docdoc 1c6a68700c5a829d8c421561d670c1f86cb25027af4b54be19724b1b7a979ef5Virustotal results 28.12% Heodo
2020-10-29October invoice.docdoc 9143453f9dd04d35a094a0332fdc37a1d517cc582db210673a79310a26505e65Virustotal results 28.12% Heodo
2020-10-29invoices 8715 & 8602.docdoc 1d56ca58b9d83ed2dc74559beabbc4022b781bfee0f365d9997e3ff099bd6d5fVirustotal results 29.03% Heodo
2020-10-29Form - Oct 29, 2020.docdoc 094ec2bccb21b949d59963a6a17be2b816cdb626b5e91622ecc64a01fb16fc92Virustotal results 26.56% Heodo
2020-10-29AR2 invoicing.docdoc b923e2eb612bd13c6a6ee664b62eb77a9ef516772bcbc77f5bdd50dc255337caVirustotal results 29.51%Heodo
2020-10-2900765754.docdoc 6793bb2d87fdd82f3f3be7463704436bae5b6dd4c0f25b34d2da3caf0ec5548aVirustotal results 26.56% Heodo
2020-10-29Payment status.docdoc 3bbd2607e23ff082929cad28a957e8e1096e5419ecd6e56856d3504b946a12bfVirustotal results 26.98% Heodo