URLhaus Database

You are currently viewing the URLhaus database entry for http://kostanay-invest2018.kz/AT_T_Account/KJGmbt_o1IKeA_2ctXi1HS/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:118796
URL:http://kostanay-invest2018.kz/AT_T_Account/KJGmbt_o1IKeA_2ctXi1HS/
URL Status:Offline
Host:kostanay-invest2018.kz
Date added:2019-02-06 22:39:27 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-06 22:40:05 UTC to abuse{at}hoster[dot]kz)
Takedown time:11 hours, 0 minutes Good
Tags:doc emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-07AT&T_Account_02_07_19.docdoc7625a69d632f36c9bae9db25eb9f257bca00baa686882aa6e25484c996f7edf8Virustotal results 17 / 57 (29.82)
2019-02-07ATTBusiness_02_07_19.docdoc7219a61d1a694060a5e95f025a5486f900cca6415745e0fa87bf9329e340d574Virustotal results 17 / 55 (30.91)Heodo
2019-02-07AT&T_02_07_19.docdocaaec74387e587f002c1351b7d2e9c77a067c06c4ab043b6672034ee5fecec3f1Virustotal results 18 / 56 (32.14)Heodo
2019-02-07AT&T_Account_02_07_19.docdoc80faf0dec357a18c510735cf3fdbca9f17d5064ff8f7551fbfec5e69336048d2Virustotal results 17 / 56 (30.36)
2019-02-07AT&T_Online_02_07_19.docdoc6204ebbc1fb5a7948d2c59a1511dcb90e96a131f6797fe6346d63fe8636ca4eeVirustotal results 17 / 57 (29.82)Heodo
2019-02-07myATT_02_07_19.docdocaac636a51bf08da5cd53620df0961a5db93f7ab3f9bf6669ac3778dd01e30738n/aHeodo
2019-02-07AT&T_Online_02_07_19.docdocab31424d2e0c29cb8fa3516b04c1ac3f50c2a082b9d65113f0458665b3df9c67n/a
2019-02-07AT&T_Online_02_07_19.docdoc90e0d09889949134628f2559147ad2b36305bc8fd1180a81768b3be632f391a7n/aHeodo
2019-02-07myATT_02_07_19.docdoc5297e96215dff03894fbb10786553455916245bd871885c6af9e6c863ff1be2bn/a
2019-02-07myATT_02_06_19.docdocc623210d938721f17ab0a4ad848714ccaadaefab0f10f83322dedc8a9e57a85eVirustotal results 18 / 56 (32.14)
2019-02-07AT&T_Online_02_06_19.docdoc8895394638778b766ff4e0b0aae95a798736b1f36eeae2afe9c5c277727f8098n/aHeodo
2019-02-07AT&T_Online_02_06_19.docdocd7a0fd25cff80d1cee655aeb32862e7aa85e42735217df709471187f72a9751dVirustotal results 17 / 56 (30.36)Heodo
2019-02-07ATTBusiness_02_06_19.docdoc9b6dc058e3dc5de11bd34fd959a8309c4ad348c93fdc19701c19dec2a7c47dden/aHeodo
2019-02-07myATT_02_06_19.docdoc642c732d55c00cbd91f5e34e55a49a8e5ee45a853416a54dab4421abcd6c5f1cn/a
2019-02-07myATT_02_06_19.docdoc4f8fdfe8526ea7d5bb6db0e6c8d8f4e6694fa6469aa45896d08d358af25521ben/a
2019-02-07ATTBusiness_02_06_19.docdoc0897c8f8b6a70627fdab1b2335d71da294cd38fc82eb777277b98f1a44382131n/aHeodo
2019-02-07AT&T_Account_02_06_19.docdoc9b0e250e8aae1d392b530d4d31380b1834584e0a86618782061eb07dad65a891n/aHeodo
2019-02-07ATTBusiness_02_06_19.docdocae994399d94a06860a63dd7b218979937f4c527bcd928d684d00f5dda4fe3ea9n/aHeodo
2019-02-07AT&T_02_06_19.docdocf44ae0d2bb6cec28020502576defa0dec4d6e41aa2ee25f93843036cf1996f1dn/aHeodo
2019-02-07AT&T_Online_02_06_19.docdoc724ce45f640444c37e891f239f1b13223655e2e8253f8adfeb88787ffdc0f528n/aHeodo
2019-02-07AT&T_02_06_19.docdoccaefde7582d46e41e65554ca2dc9cdf55d62181a124a5ffbd8003b7f151f1fb0Virustotal results 16 / 57 (28.07)Heodo
2019-02-07myATT_02_06_19.docdoc26469408219b887df60cd56535a6e379eaf9afcd04be2db1755e5a950f8ce9dcVirustotal results 17 / 57 (29.82)Heodo
2019-02-06AT&T_02_06_19.docdoc2b67c86d483a57bf0f7cf24078c24bf99c6a052201b2df4e727497bde4e42d1fVirustotal results 18 / 56 (32.14)Heodo
2019-02-06AT&T_Online_02_06_19.docdoc585d8ce9664b03d8d9e4da1ae06600822abfe8c95a7ae0f7834a4085148a6a3bVirustotal results 18 / 57 (31.58)Heodo
2019-02-06AT&T_Account_02_06_19.docdoc35cc89d32e7882a7fb220c22b227d373b4c6a3dc4fc8817ebe3273f9622a0426Virustotal results 19 / 57 (33.33)Heodo
2019-02-06ATT_02_06_19.docdocf11212d2d2dc938b0ceb51f8cfb793915a1d2b4013190a8a803b04c12d415510Virustotal results 18 / 57 (31.58)
2019-02-06ATTBusiness_02_06_19.docdoc9ec427f45a5da2747138306297b47821e1a76f4bc3c2cd60d0a9045159aeaae3n/aHeodo