URLhaus Database

You are currently viewing the URLhaus database entry for http://wire-products.co.za/INFO/US_us/Paid-Invoices which is or has been used to serve malware. Please consider that URLhaus does not differentiate between websites thats have been compromised by hackers and such that has been setup by hackers for serving malware.

Database Entry


ID:89442
URL:http://wire-products.co.za/INFO/US_us/Paid-Invoices
URL Status:Offline
Host:wire-products.co.za
Date added:2018-12-05 14:39:55 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-05 14:40:14 UTC to abuse{at}hetzner[dot]co[dot]za)
Takedown time:16 hours, 37 minutes Good
Tags:emotet epoch2 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-06Inv. no. 82XPE814173.docdocb5ac00ed3d9b9491ce4be7590fea3c9e26e11c29f55148f1d95f3efd4895fb6an/aHeodo
2018-12-06Billing Invoice - Job # 6552788.docdocc9385f267d36c21fbfc850da796b50903537f5bc21645ba9d33a7b670db37878Virustotal results 24 / 59 (40.68)Heodo
2018-12-06Month notice.docdoce5c383ca7b2a8535213dc710f18f4320f02ae3e86a671cde46337a954d9e72c1n/aHeodo
2018-12-06Invoice # 104A4374.docdoc289291492904501c3fa513b07f7cff6ff8a0d3199cbfc7f88275ebcdbfafa81fVirustotal results 23 / 60 (38.33)Heodo
2018-12-06Invoice.docdoc5f27664de17c1165426f732ea2e0d6f3649dc574558ffe44152f9d910c0fcae7Virustotal results 24 / 58 (41.38)Heodo
2018-12-06Inv. no. 6F938637.docdoc396649ab983e65522e825483ff7d785b61ecc1fbbbe8a18337e616f08f736186Virustotal results 23 / 60 (38.33)
2018-12-06Customer No 3466882.docdoc97ae60ee271400dc57b1d80442636ce626a2ee6b40b3ce04e976b65e44fb1e82Virustotal results 23 / 60 (38.33)Heodo
2018-12-06Inv. no. 914TW6842.docdocfe65e845b5a5f2b6f4e54002786df236053cd386b94991d75c5a53b422f5d908Virustotal results 20 / 59 (33.90)
2018-12-06Inv. no. 33N1T01501.docdocc1246c10c29b6a981a36d987f5720a648a2901f90b227ed06614659b55c4befdVirustotal results 18 / 61 (29.51)Heodo
2018-12-06Final notice.docdoc4f7316cabb6f4298a992e560c71c43ab120d82fac8024ce5befb39d48dfae540Virustotal results 21 / 58 (36.21)
2018-12-06Accounts - Invoice.docdoc6998ea6c5297f5762effaa7b6d27999549bc9342d0b885c2e7f945e0c3f92523Virustotal results 19 / 58 (32.76)
2018-12-06Invoice Query.docdoc06e61d55297c519e766e929a621ba40cf328041d43b072a59e036ffcd11dee95Virustotal results 20 / 60 (33.33)
2018-12-05Latest invoice - 358193.docdocc542c06424eef222b892dae56d457a6516a5a213a4fa817e7cacc0951b3937dfVirustotal results 16 / 59 (27.12)Heodo
2018-12-05Invoice as at 06/12/2018.docdocee4e596f52c6367c3e07fef3edd6d692f28fc3c1e2a46d58793533b9fd610c91Virustotal results 16 / 59 (27.12)
2018-12-05New invoice 2CRE8993.docdoc3362f7c72c235f2c43f3c2a8f5fcc779b7809768c1857a45575091ed15477ba6Virustotal results 16 / 60 (26.67)
2018-12-05Invoice Confirmation 46497932.docdoc468c7794b9865e4918ef8402bcc2088f8b7f50125a7de385ff0188b80c21d694Virustotal results 16 / 60 (26.67)
2018-12-05Invoice Confirmation LN6982.docdocb6dfd636d29451220ae7071e133d1727fbd08871a02af917c5150b0f16aba1f6Virustotal results 17 / 60 (28.33)Heodo
2018-12-05Accounts - Invoice.docdoc391a2a26e0d76cc8c7f5439ef1eb487304e410d8a36612c184052f50a548546cVirustotal results 14 / 59 (23.73)
2018-12-05Billing Invoice - Job # 062692.docdoc75ed06f8a1cd5fae3d642273b0ab549d634b59ca55f6648e8d0f0c5f6896b7daVirustotal results 16 / 59 (27.12)
2018-12-05Final notice.docdocbf388734f6aa482fc6454004c7b96bf07eced8e2f69b0978f7d061c36c9f8479Virustotal results 14 / 57 (24.56)
2018-12-05Invoice as at 06/12/2018.docdoc484316c83d7b433d196e24ff4c647ea209c2ca27f802d5080ed759b45ce5d159Virustotal results 14 / 60 (23.33)Heodo
2018-12-05Final notice.docdoc8e2fc7dea11532ed3aef76377bd7f2f51d9707425bd88e67f0b27f35c4af64e1Virustotal results 13 / 57 (22.81)
2018-12-05Month notice.docdocdf7a5246bef24762f095cdf7d465132bb8a0a35d03d27429964757ea8f23d285Virustotal results 13 / 60 (21.67)Heodo
2018-12-05Final notice.docdoc50954a4260fca80ed026fe86544036200cfd1efd5dfe38e84676c02de71c3fa3Virustotal results 13 / 60 (21.67)
2018-12-05Invoice as at 05/12/2018.docdoc4358f9435ea7d3c4ca102db5ba38474e3c7899b3ac281dec913010f6d71c5439n/aHeodo
2018-12-05Billing Invoice - Job # 1758906.docdoc7b1782ffc6719d45a1f412104148a00309f8cb1edc5ea2ae4fe82313cd8a6224Virustotal results 13 / 59 (22.03)
2018-12-05Outstanding invoice.docdoc70a722c1b2ef80208ea7f13c9de3fbb7df8705793ea4b4dd53cb58b5765b1261Virustotal results 13 / 60 (21.67)
2018-12-05Latest invoice - 266128.docdoc5840c3a9296c312705b2f95b608336743acf5fe496f3a400c33842038673bbe0Virustotal results 13 / 57 (22.81)
2018-12-05Invoice.docdoc8ed08d1635bfac0d86e20b55afbdd666f3959f89c890bdfb222e4df370c77f4aVirustotal results 13 / 60 (21.67)
2018-12-05Invoice Query.docdoce59b7974e8372b1f1a1d820f668967ef5d88894ab072cbf105a154a140abe70eVirustotal results 13 / 60 (21.67)Heodo
2018-12-05Billing Invoice - Job # 764283.docdoccd94900c110f0c048f8fa455f028fd266223596d5cdf55e8663938e0f4ecb514Virustotal results 13 / 60 (21.67)Heodo
2018-12-05Invoice Confirmation CY05707.docdoc98a8871d6599c23fc96d93b8023e5d365bb520be65b9477dfdfc900787eb9f02n/aHeodo
2018-12-05Invoice # 606J634930.docdoc40ad6c555567c5eeffe3310aee442fd12bf84022f3e737ae6d0a44d93e537deaVirustotal results 13 / 60 (21.67)
2018-12-05Outstanding invoice.docdoc1448252fdb32819e23aa0e8e0d85e1068c3caf3002c929b30525299fe270a581Virustotal results 13 / 58 (22.41)
2018-12-05New invoice 20M5Z4003.docdocf96266349271cd27cacc34e10343241b919cb00c6cbe7c6a765cadc78d28956dVirustotal results 13 / 59 (22.03)
2018-12-05Statement as at 05.12.2018.docdoc1b11eb3250e38969955bc7b5029ec6d82d8a0bb0ac009c7d53290efb491fc85eVirustotal results 13 / 59 (22.03)Heodo
2018-12-05Invoice Query.docdocf3e94698495f62e9acda8522a134dabf667f5f4b83e0a2fb9cd66664a8ce0c84n/a
2018-12-05Inv. no. 1E664591.docdoc21833799dc2ec4cd6b2806d317faf44ec8d1c9b26131e54951f9482c6f2ac504Virustotal results 13 / 60 (21.67)
2018-12-05Inv. no. 1M6I11318.docdoc4608c032e004d33a289b3105c0952c25276239650653e0859288dfd4f9e0a250Virustotal results 13 / 60 (21.67)
2018-12-05Final notice.docdocf584027e9326158f7d29ffda1224c9c3ba9687d051346a21b990cd56efc1b7a7Virustotal results 13 / 60 (21.67)Heodo
2018-12-05Review invoice required.docdoc3b1325a48dce3ca730ef02e4f93a202ebe4e25f6c41c6a8655823cf6c9d02bb3Virustotal results 13 / 58 (22.41)Heodo
2018-12-05Accounts - Invoice.docdoc3f92c788c6aa0f8828f4f678236270fd6514d612fd1f66f175f1856665a94557Virustotal results 13 / 58 (22.41)Heodo
2018-12-05Accounts - Invoice.docdocd622c1e912b5fbb00ddefea54e9c53ec843ae5bc342fbe769cf1b2d0b7df02b8Virustotal results 13 / 58 (22.41)
2018-12-05Invoice as at 05/12/2018.docdocdafe8002172c169da7983c59e2237a43aa04759d4931ddf832271da916a66c9aVirustotal results 13 / 58 (22.41)