URLhaus Database

You are currently viewing the URLhaus database entry for http://cddvd.kz/cgi-bin/dw4m-uc95n-ssds/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:163369
URL: http://cddvd.kz/cgi-bin/dw4m-uc95n-ssds/
URL Status:Offline
Host: cddvd.kz
Date added:2019-03-21 10:40:09 UTC
Last online:2019-05-31 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-21 10:42:05 UTC to abuse{at}telecom[dot]kz)
Takedown time:2 months, 10 days, 18 hours, 50 minutes Bad (down since 2019-05-31 05:33:03 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-23CKEIZ98818537831.docdoc 2f302690b0aaff3466bb341ea1b7021fdb9040df402cfb7f74db2a6799c1ffc0Virustotal results 32.14% Heodo
2019-03-232658803427.docdoc c1f247af8e622f5f4d206b2a06c36828f75d77fc808e91708fef07f349656cabn/a Heodo
2019-03-23RECH280319749557.docdoc f40006f93f77d43826014d51126b5e92d5eebcc98c1e908caa909aad9836fe78Virustotal results 35.59% Heodo
2019-03-232019_03_RECH77283330448542.docdoc cbab81bd449e4fae3a483999cf55ac7d419e3d58a0335356e12653e19bfb843dVirustotal results 32.14% Heodo
2019-03-232019_03_RECH8475107548951.docdoc 3a47c3eff4efb56b40a20c4d46660d1b145521ef74ee73fba66f879c8dbd0053Virustotal results 31.58% Heodo
2019-03-232019_03_DET292582516.docdoc 5cdfeb44bb777e446bfbc704700841e5716b33b198abc139b244289b4a001b42Virustotal results 28.57% Heodo
2019-03-239568149092.docdoc 4af8af7566b27b6a1af71d6a97be6112e4f306eaaafdf6245e18e981507cbd80Virustotal results 28.07% Heodo
2019-03-222019_03_DE301985617491.docdoc ad9e75077d3219eb3b339842546adcc35319a6fe3c8012b50a1b081f740d1670Virustotal results 28.07% Heodo
2019-03-222019_03_MT80883788716.docdoc 4e786307e2871b649ce7359512c9e1985a85edace0a0ef1f303483972b3ca7ebVirustotal results 28.07% Heodo
2019-03-222019_03_DOK2412845843734.docdoc 34c0719de0c2a33e3a6f8bc3c2c401ac3238334b4b22a2789e6c1841b41f3d22Virustotal results 26.32% Heodo
2019-03-222019_03_72680702805.docdoc a04ae44598fdeb27c5155cbd8552b0fbd1c61e934ddc6b5014a23f998b3569d5Virustotal results 27.59% Heodo
2019-03-221567531073050.docdoc e718b83989a52f9f9c290b54ee79750fdc2f712659864b3cbb569436dde0257cVirustotal results 28.07% Heodo
2019-03-222019_03_RECH10126455830423.docdoc 55e50d21545145456425d036bd88b9f5ecb0474332d153cc80e0c8674760a81fn/a Heodo
2019-03-222019_03_DET14260328551597.docdoc f13b7d8bec4daba478c07801cc968f723fd50a463712dcf98ea2b6515bd16993Virustotal results 25.42% Heodo
2019-03-22DET72885459331.docdoc 306fcb518e80bc9b2cb4e50d8938e00efd38a60a840c05b49e82de5ba6105354Virustotal results 22.03% Heodo
2019-03-222019_03_DE0956162537704.docdoc 7a90da71844c2cf3b3923c48120e623d5a1977de4bb903857e0677ae1b4414bcVirustotal results 23.21% Heodo
2019-03-22DE000532595.docdoc 8572f4c8c186b629d0bea6095a3e2f3e69af1252f43a9804a97e1a6cf0bd5f1aVirustotal results 22.03% Heodo
2019-03-222019_03_DET77305191854704.docdoc 2a71e0203713376f5c98730bbf259d920d350fda24f6c7cf3c157053fa8552cen/a Heodo
2019-03-22RECH488762163.docdoc 634ae1d72084cd2e32ec48b8f7a6e2b1153b2871b61c690d1dc128dd1174c39aVirustotal results 20.34% Heodo
2019-03-222019_03_DOK8972217521488.docdoc 931a1116054623b9e7d2e5c91bc38411022405d210bafdecff94dc4bafec0abaVirustotal results 22.03% Heodo
2019-03-22DE408921394.docdoc 3e75d5232b9e43be06a66f7b0eca6fd742a39bb7fa7118a3e56937d010fa7babVirustotal results 22.03% Heodo
2019-03-22DOK3102249355.docdoc dbc81f70d77ba2d6f381ef0ae449533a6185e0a99e8a0c8a50cc97d46c641ba8n/a Heodo
2019-03-22DOK79575619451.docdoc 1b98899b97f0533fb3c3960fc2492ebcb42d4e9ee5bbf65d902850e24ba197adn/a Heodo
2019-03-222019_03_DOK4604750622.docdoc 7c9354f5fe14b02fe97407074bec0a238a1dab10320a16c2f13a2d49c9917848n/a Heodo
2019-03-222019_03_DE390552116474367.docdoc df9fd7ce7bec341c12f34427851845c4a5d36eea503a0f1ff1e0fe6350d52f45Virustotal results 22.22% Heodo
2019-03-222019_03_DE8291356821.docdoc f83d5d6081c38339390256ab4c7cfc033e1eb67c77179281153d7f6c69f76fd0Virustotal results 21.43% Heodo
2019-03-212019_03_DET69741796424.docdoc 2ceff8b964e28e3e3e22cb5402388d1579d1775d69e1566aa3651304db09d291Virustotal results 26.32% Heodo
2019-03-21DET020178665764.docdoc fc2a637fb3dcdf6176a7ec5de78e4ff7178e69a3ee79058090b810c05c11074dVirustotal results 27.12% Heodo
2019-03-212019_03_DET77348271391.docdoc 938bec3c96ece76474ce55f056c692090556a42474dcefca9fe324ae55b7422eVirustotal results 25.00% Heodo
2019-03-212019_03_U579066260185278.docdoc d1b1d5fcc932f610d3bafc19b4a4ff22caaf8d2d07b02bbc4aa7d96759f681c6Virustotal results 27.12% Heodo
2019-03-212019_03_DET854408479767.docdoc 6b11d4062b01fdc2c31388bd5cfde91daad119bedd2821df9ecb15e61aaf4e39n/a Heodo
2019-03-212019_03_YWOMJ70741146498.docdoc 1927493309e8283ca5acc7611fb06ed3ba0614a9b9ee58e42f0d05a39e7e9330Virustotal results 23.73% Heodo
2019-03-21KBLD0432200328.docdoc 5b6b7894bd61356eb562f86f7b6ebbd0d44bde0ed133adbacffe224ebb53b1acVirustotal results 22.81% Heodo
2019-03-212019_03_DOK9441937570654.docdoc 969c79c5d5346f38f74342951b0bba068af173e699eff0a3533fb9846e4dc5e7n/a Heodo
2019-03-21ERJA8647222514644.docdoc d9f98b73769e307527748556add720f71670140251908205bef755d6de52b71dVirustotal results 22.41% Heodo
2019-03-21DE224499944321.docdoc 6f0bf1f1302c4d3bab6b0a34c4374e84c78581bd2bee054a322908d897416cd3Virustotal results 22.81% Heodo
2019-03-21DOK4055838227.docdoc 6ddd5a92f5bc648a1d993499ef5619ede9b68ece256ffdbbfdb4ea77e7bf837bVirustotal results 22.03% Heodo
2019-03-21DET133978396.docdoc 1b700680908ff3592b0fa5400c81b73e54767f7df6c355a7e3c87a828fdda377n/a Heodo
2019-03-21DET808705315210619.docdoc 25f619d5da8eba95097b9297217d9650f2ad34563e91cb7124979992826632e7n/a Heodo
2019-03-212019_03_DE249192564438684.docdoc d3d4e794b15a2758f70a49f8ac1e8041a321aad86b7f158288dbed2f48ece7e4n/a Heodo
2019-03-21DE589035559817409.docdoc cf27d0eacd5aac3c82c80e60d73e185ec871b5350c8118f2d5931c02e4db1b86n/a 
2019-03-21DET81675358765.docdoc 44d855d2d229adeebdb8ee1aa67cf53254ea12f5f0f0b1ccda9eb4f459c91c0bVirustotal results 20.00% Heodo
2019-03-21ZTBS474039992.docdoc 533ef1d2270013663393a29a5864f84793f8e9ed5024eb291e83b4559910e890Virustotal results 18.18% Heodo
2019-03-21B06543998018583.docdoc e9151e567dd246150f218979f3ed597cd32348c1ab4676a188e4d1bd2ef64fe3Virustotal results 20.00% Heodo
2019-03-21RECH2840091684453.docdoc 3f7a01742d16606a6cf5fb5cc47c3f3cdc31190ba32f1984975667cb6778207dVirustotal results 17.86% Heodo
2019-03-21PYKLQ013512509865.docdoc dc0d89d87561824973f29e1d1869a57cf30754e7bf6767b4ae9c54f4414125d6Virustotal results 16.67% Heodo
2019-03-21RECH660076049.docdoc c78390d0606baa4570ae0ea9fab2e9c03a9188736a3dd09e83cd3cc644747da9Virustotal results 17.24% Heodo
2019-03-21DOK724529806072859.docdoc 15383493e29551b4ccaf64b7221c8cff5e721a3bef94021bea8322b9c7d49a38n/a Heodo
2019-03-21DOK106309456780.docdoc 0252197d001ea7737ece0c7c4026745687485d8fe490de998e91df00cfa12effVirustotal results 17.54% Heodo
2019-03-212019_03_DE399324907.docdoc 82e01e3999f26efbb1f063ed6d76a80949e7f208b3a603fe39003718d59401efn/a Heodo
2019-03-212019_03_EMK1566207795.docdoc 109d595f355f3fc989820d24d4b6ec8b9f99e27596ca0c0cc450c82ac96e0400Virustotal results 16.36% Heodo
2019-03-212019_03_DE756503360.docdoc db4391e434e65276cf7bc43ab2883f7e741479896f32243eaea04a504162ff69n/a Heodo
2019-03-2111299210276.docdoc 36e4fd16536764903a01c3f3a354ec7e133dc92301a669450b77bdd513eaad06Virustotal results 17.54% Heodo