URLhaus Database

You are currently viewing the URLhaus database entry for http://weisbergweb.com/vWAM-3Tvu_Q-kA/Southwire/GXJ7148109212/EN_en/Paid-Invoice/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:98556
URL: http://weisbergweb.com/vWAM-3Tvu_Q-kA/Southwire/GXJ7148109212/EN_en/Paid-Invoice/
URL Status:Offline
Host: weisbergweb.com
Date added:2018-12-21 02:16:56 UTC
Last online:2019-03-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-21 02:20:11 UTC to abuse{at}peer1[dot]net)
Takedown time:2 months, 27 days, 19 hours, 50 minutes Bad (down since 2019-03-18 22:10:40 UTC)
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-01-04this-site-is-virus.docdoc 65d63c451a83d9758fcfab778b5990da4cce04c4c2b4f8380d3273e434224065n/a 
2019-01-03this-site-is-virus.docdoc c2e393ff568f4a87ce48011f10664138e569710f56ddc0462aa7f36bdad5ecadVirustotal results 0.00%
2018-12-2261274787827914087.docdoc 1e8f1a7b257ed2bec73f5ccc84fbd3f4147248f7195044bf8572aa5c2a978b72Virustotal results 18.33% 
2018-12-22ATT509271481530650248.docdoc 2899fe1b0bc184ad656ecbe7619569fc5aafcd628e985ea444638b0661cf14a6Virustotal results 18.64% 
2018-12-22PAY731631292077652.docdoc ded67710f3ca9395bcd8bfa2f777c03827fb32372cbbd6d60d173ee8e0ce84e2Virustotal results 18.33% 
2018-12-22ATT34008108333.docdoc cb82db6cb71cafdf3bc45d56b6dc61538e375e6d43a5313bffd7cc5305c2b859Virustotal results 18.33% 
2018-12-22ATT1708742065812.docdoc e8c0db162bc9beb8f576674590c01becb12764cd6c26a294ab20e4229b05ef43Virustotal results 18.33% 
2018-12-22US68368685349738.docdoc 8dcd62ec023f71d6e17b6a1a2673502cdd64d191152cc7222a3025e979f223b9Virustotal results 20.34% 
2018-12-22PAY1431944792.docdoc 93ba212387e1bd370dc3c3363e9e6394dd432e6adda57a5f6ad556d5a664f78cVirustotal results 20.34% 
2018-12-22PAY692079769896.docdoc 7425fa87a17a3c42f070a494df1a31414a8737e2f1401c097ab915a5d5e7996bVirustotal results 21.05% 
2018-12-22PAY7861176928840512.docdoc 7dfa8b0828289a2378326f02cc6dcddc4972f7cfd885777a5690de5c44d01482Virustotal results 18.33% 
2018-12-22114047098.docdoc 4aa608f0f3cb2f84b6d68ef82c495d4ffcd88e34d290fdb1241da80fdc7a541fVirustotal results 18.33% 
2018-12-2276498888163876053.docdoc 949798295be1058debf08978833f8c07b541948757b9768b3b42617ba1cd4216Virustotal results 19.30% 
2018-12-22US378563249184988.docdoc 50eb62c1daedc46bc33abace5a7fae2be6ae2c82bba9f926823d5a8976808d3fVirustotal results 18.64% 
2018-12-21ATT654581747580.docdoc 0fd92c81376c606642ce8534f107e2166a92a698aa1727662872bb9e89773ab0Virustotal results 18.97% 
2018-12-21PAY04702771079698872.docdoc 6214312f0e1b3de943c4e703c5036b673590a8a4f8c4a62058a5f303f42a4fdeVirustotal results 18.64% 
2018-12-21PAY831781413.docdoc 63a49e706185b9977204b76a4878dacd7326da7b7c908548d834c0271fa331f3n/a 
2018-12-21PAY4585537538261.docdoc 815d87cb86cd3e0ffc8067c7e78b0b814b00dccc3492fce37ab05bcadc7c3a47n/a 
2018-12-21PAY924136454337.docdoc ae5a7abe72014cbbdfb20e5eec9596f55063aad43a995f0c636c3a0d9f3b71b7Virustotal results 18.97% 
2018-12-2158052275886704.docdoc f49369b45b060f01d18039662ed87503f42ce7b4230ec38220f4a77bb788d016Virustotal results 20.34% 
2018-12-21013278445.docdoc 6493525cb545a5cf0d5f133e879d38edb725dc631f1b50789df352d861bbf5b8Virustotal results 18.64% 
2018-12-217765087195.docdoc 523b8855fc3a19261a1fbb7ef36dbc039fff0943158a7a706d1c75c45ae8dd17n/a 
2018-12-21PAY8183313619889562.docdoc 8ac7e39bbf842d7efa2565edbc55cfb858f25a2c0554cdc7ea8a247c5340ef70n/a 
2018-12-21ATT0587195969192.docdoc f43aeb9334ea9ac3c5d96f953824d0e9e38ec46e0d9a7fbdf50b79e6830a3393Virustotal results 18.64% 
2018-12-21ATT427187235277799143.docdoc 8cd52f27b42d99270ad570bb0c8ed8a45846e94f246f0027721caf6b35110d4dn/a 
2018-12-21PAY24928233941885.docdoc 4b4014bd957fd90821e7dd2bb940cb0ae565b257cb58bfc473b256d30f5cc207n/a 
2018-12-21575297281.docdoc 167aa92b953e437c96c43db26fce8477d5e0c72f80dff97a77c722086f604304Virustotal results 16.39% 
2018-12-21US2346095807088.docdoc 364670db6b44db7f6e965865d58d1276ac002e7f6bd4e98535c3669875eb9f58Virustotal results 18.64% 
2018-12-21US976976058671855.docdoc c487b27617f4c7d2da63e39277c2902e7d43720d4f19fd2877f84d5dfe4c60c0Virustotal results 18.64% 
2018-12-21US60929673876.docdoc dd5981475e3a4e3a1ce5eefe98427cfaf44c4691ac958c914d479408994780a5Virustotal results 16.67% 
2018-12-21PAY7334699643.docdoc 58dbf8880efdf2c2c5f002c2fb3a3a7330fa88d5f490fefff3786e9e4525d228Virustotal results 16.67% 
2018-12-21US9694461790424148.docdoc c322687669b20c5cc87f5103cd041090164ecb3b36d77cb38d531d9eb81bcaban/a 
2018-12-21PAY96808018700730128186.docdoc e88c2b2a2df124144ac5204b46773cd3513da174ab4f2453fbf76649021a5360Virustotal results 16.95% 
2018-12-21PAY4619999461.docdoc e7a11d0332ead7829f544c1679a3aa58f0d6f0f53e30bee44d2ad25aca063c1fn/a Heodo
2018-12-21ATT428319068.docdoc 0df2b8cf1205c4b1cd2e6bdcdf217cf4c1029b33c0a3623a9c0d4b3743c1da9bVirustotal results 18.33% Heodo
2018-12-2153723815274176000.docdoc 1c1bccebfb1bddc65fde79ee9a5c5b3c8641b33e68348fcf2972ddadcea2c3b7Virustotal results 16.67% Heodo
2018-12-21ATT08260276687595511436.docdoc 06164f4e857de5c121ce9e1ab6ce78b63cc1e966729d7cbb6df6154b1a713ac0n/a Heodo
2018-12-21PAY16328191960.docdoc 06de1b4184bc72dd89b65295bf150fb6a1a4db552f9e01fc3e909ccd591398can/a Heodo
2018-12-21US85680190322372919968.docdoc 0f19e20671a0fc6f0640e53a904aeac4d2083a7d40ae36f8b313203a1f8621b4n/a Heodo
2018-12-21ATT91793526057385.docdoc bae1d4bc9d17b509679c741ac0b7a88b28a46886869556077b2dac1feb14653dVirustotal results 16.67% Heodo
2018-12-21US3479977805467452.docdoc 2f413a01315d8404ea122998168bb74035dca36cf0972e83ebd0b6b80258a7ccn/a Heodo
2018-12-21PAY7483898759.docdoc a1b6ba620e6dae846af5bbd471ed8c5cb84abb122d262a330e8550032e6b90faVirustotal results 16.67% Heodo
2018-12-21US378524969934034.docdoc 0a29be2888d9f34c85dc70522c8f7bb46a7c504f3343a4023a1ae8b95619cf65n/a Heodo
2018-12-21US6053178261.docdoc 6eaa3124eefa8eaac9a12b09037f398b37e6fbe3e3867e996ddf70b4f6ed555an/a Heodo
2018-12-216729175507040238.docdoc 539304f5371e263c73240dafd270fc82baf06b3fa02d8bff6b7f46bc67daee69Virustotal results 20.00% Heodo
2018-12-21PAY54565448001647.docdoc 29cfa5450e654f50e4c77ee77d7d78d0e508b6446f3a6ff77098ab2eee4384f7n/a Heodo
2018-12-21US702575347320060.docdoc 7effac6ad5b903509394be751e664a3145e5a5138da06d1786782a72be25a5ebn/a Heodo