URLhaus Database

You are currently viewing the URLhaus database entry for http://csnserver.com/blog/LLC/jW3ugzijdPaL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:188383
URL: http://csnserver.com/blog/LLC/jW3ugzijdPaL/
URL Status:Offline
Host: csnserver.com
Date added:2019-05-01 05:54:03 UTC
Last online:2021-10-05 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-01 05:54:06 UTC to abuse{at}rr[dot]com)
Takedown time:2 years, 5 months, 17 days, 21 hours, 22 minutes Bad (down since 2021-10-05 03:16:50 UTC)
Tags:emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-08-15INC_12145768271US_May_03_2019.docdoc cedfeae127ba9c31e4e29642508a6367c9c5dc4446e5c9820c2725ec84374e14n/a Heodo
2021-06-09INC_12145768271US_May_03_2019.docdoc 1e48692fa67bf608591924ae964ad98fc29ed37d0d9b0667c1453eebc90ca53cn/a Heodo
2021-06-09INC_12145768271US_May_03_2019.docdoc 2c9c0ba16e5ba62340f8de39046c8eee38f1873a142a46b2dc066c40a8933ab4n/a Heodo
2019-05-02INC_12145768271US_May_03_2019.docdoc 4a4e5f7221b64a94e9ef4e6aa74464802d5156b0fed3258d36bc778233fbf8aaVirustotal results 36.67% 
2019-05-02Document_87832940443US_May_02_2019.docdoc 6c1d9bbd9dcad8b950dcada8139a8b21e31036ae9d319050f7513d240ef31995Virustotal results 36.07% Heodo
2019-05-02SCAN_532754229001US_May_02_2019.docdoc abc589d5ec63138ee0c588f744cb6c8ba59baed47e9316419c174ef6e6a7e393Virustotal results 37.70% Heodo
2019-05-02SCAN_27744162729US_May_02_2019.docdoc 77eb40705926158b5dc43657acd06acbd152a96b25ffa0c7570deb2d30f30a55Virustotal results 36.67%
2019-05-02LLC_2434934936US_May_02_2019.docdoc 77097aa9879009420abd97243ad99b01d6f37aeb4a0f10db935af76d24071f60Virustotal results 33.33%
2019-05-02LLC_860800978056US_May_02_2019.docdoc 0a0052896d023efd6db21fdb504e996474df83abcfe4ffb55b55bfd894125505Virustotal results 34.43% Heodo
2019-05-02LLC_8440599850US_May_02_2019.docdoc 0aba359f77ac576510a26b160b60e4b0bc470db5ec0341e64234681ec8c607c1Virustotal results 34.43% 
2019-05-02DOC_983971921301US_May_02_2019.docdoc 11f45c2f0d6d243306cbd6c70c01f1efb2050836b14f4d669b7a471511ade739Virustotal results 26.67% Heodo
2019-05-02INC_3885393341US_May_02_2019.docdoc 29d5a0eb1f8b938839724b100c9d78b140e82567e8addd0d15bf06f98e61de90Virustotal results 27.42% Heodo
2019-05-02SCAN_778590480217US_May_02_2019.docdoc 692814008db3acff680edd583633e98789c8458f795753f459410f89869d59cfVirustotal results 27.12% Heodo
2019-05-02DOC_927728222129US_May_02_2019.docdoc 676593b3137422bae95a34c1bc6e6c4966e8a1895feb948faa1c8edddef80e2cVirustotal results 27.12% Heodo
2019-05-02SCAN_31940296785US_May_02_2019.docdoc 456c3edf43e0677174dad7da916faec9c2534520655a62ad5be950b123060daeVirustotal results 27.87% 
2019-05-02DOC_932416044766US_May_02_2019.docdoc d208f3eff68d5739131aeb2b16c66c1b6afb8fae27517f1b7b9029d4ef8b1ce2Virustotal results 32.26% 
2019-05-02DOC_313173491955US_May_02_2019.docdoc c00f51900f0ea1f2b2f180fce863a775f22285c5e714f71db05511ebbff40bffVirustotal results 31.15% Heodo
2019-05-02DOC_010573901719US_May_02_2019.docdoc 8715b1a0fca07aa174dff8f761755d3879f305b1c5201960fda42ed8840822aen/a Heodo
2019-05-02Document_4920144949US_May_02_2019.docdoc fea2192a0625af323042fe1f31e647d6a4be939d0ad615b8eae445e1d29bfd8cVirustotal results 31.67% Heodo
2019-05-02Document_860395901174US_May_02_2019.docdoc 05a8d63623061e357e6537d32e097ef07f792fbfbdbb534d37533e5f9632c5adn/a 
2019-05-02SCAN_8719730609US_May_02_2019.docdoc 8e4a311d2368b3ef3374691d891e860542fbcd33a8c5df81d9264762449a41a5Virustotal results 28.07% Heodo
2019-05-02SCAN_454049239625US_May_02_2019.docdoc 17f4ae8fba484e7fb87c16216ece4622556d70db4d807d8b0a4ac207eba7d015Virustotal results 35.00% Heodo
2019-05-02Document_48896620112US_May_02_2019.docdoc 8849cbdb89ef44865f23e8745eee176d529ca564c20c66da99aa5c04db555ec3Virustotal results 35.00% Heodo
2019-05-02INC_80839429924US_May_02_2019.docdoc e39ace0837155e85d59f5059bfe202ba3de02a88c848a6067c9965cadb79c5aeVirustotal results 36.67% Heodo
2019-05-02LLC_329932691269US_May_02_2019.docdoc 4208aa9b2a8e40195be3444efc9bc9cd2accf732b249c921025207feb62a0970Virustotal results 34.43% 
2019-05-01INC_47439786612US_May_02_2019.docdoc 07ad82ee6f552024b89e9569759078672295762694af017f35f64bb7284b93c3Virustotal results 35.00% Heodo
2019-05-01FILE_2097405161US_May_02_2019.docdoc bb393d58b6809fff86d32f6a6b5f3af0de4ecdc371a6454ecd9fd2e47f55e59bVirustotal results 33.33% Heodo
2019-05-01Document_1235545547US_May_02_2019.docdoc 1f4a46bf19d090bee1282d5920e1ce502620c0a50cb4d5165d735d5b52e4a79eVirustotal results 33.33% Heodo
2019-05-01INC_158777615818US_May_02_2019.docdoc f28f62f33ff6ea0d8d9708e54142e83603afe0bcdcf1206bca2f2dfa00e05b0cn/aHeodo
2019-05-01SCAN_2571112331US_May_01_2019.docdoc 571210656adbfe8cde574bb15f96232169cdfb487f4597ce1a4532c7a0258f46Virustotal results 32.79% Heodo
2019-05-01DOC_018345984028US_May_01_2019.docdoc f9aa8059e3a7418a2e686036ca8198cde4ba026f1d0b05ba2a32774825fb71a8Virustotal results 32.79% 
2019-05-01FILE_603542498388US_May_01_2019.docdoc 3b338a2b75997eba6f9666aaea6f422da3e38754657f4be7f7e0e9967c479a63Virustotal results 31.15% 
2019-05-01SCAN_163540277111US_May_01_2019.docdoc 9c51bcdb82373007744c0dd18a11c06decaa000f48880f23f1bf9a335e5af053Virustotal results 29.51% Heodo
2019-05-01Document_33843219366US_May_01_2019.docdoc dc49d2d7421719050d62368d665c84629bb08d6874ade0bb8940f133b619d9aeVirustotal results 31.67% Heodo
2019-05-01Document_534654760033US_May_01_2019.docdoc 930cace84e8704d5385df2db7557c7d3b2a183de3ffad0d3a51291745b4f9f39n/a Heodo
2019-05-01INC_0575805145US_May_01_2019.docdoc 7416ebc5373fd8a3ec9ece1dff46c15699738491d703b47f20ae4de8c59bcef0Virustotal results 24.59% Heodo
2019-05-01LLC_56396417503US_May_01_2019.docdoc ed12cccf232d6e24b35f114e6c8c3e2fa856a5bcc7ea2c64cd17774aedb83f7bn/a Heodo
2019-05-01LLC_252082525245US_May_01_2019.docdoc 42981d37b50801d5cdc23d5d9f0a1e0e20f3787e24c4d20f606d2250ce5bf804Virustotal results 26.67% Heodo
2019-05-01SCAN_195039945631US_May_01_2019.docdoc 6f926261cf70832a6f3332c727eb674da29212109a968a25cab4cb92fced7694Virustotal results 25.86% Heodo
2019-05-01DOC_2322631818US_May_01_2019.zipzip 4e1da1a1d9bab327515976be7317ca0af3a954d882422903be7429a0a3f162b8n/a 
2019-05-01LLC_716003003979US_May_01_2019.zipzip ed3bd5947204c41ed26b139447ea0e4e9ba9dc813dbeb1c9be13b4750ce90d55n/a 
2019-05-01DOC_48248287410US_May_01_2019.zipzip baa5573f396bf0096db12c93f20c85d01a12ad819c0481ead140eef8cac71be8n/a 
2019-05-01Document_4432753001US_May_01_2019.zipzip 6e7dc5e0c31acd9407bf1864fdb3854bea3aabdffd0bce761ef3013bde28e503n/a 
2019-05-01LLC_84118199156US_May_01_2019.zipzip a16b6bca55ea373ee305fa7725e2710c6af75e59b6a307c00145b2d9139d17d1n/a 
2019-05-01FILE_18100105045US_May_01_2019.zipzip 7d747a41f2d54536f32e6397555567b2f88c0e4cb5d15b62c89b43143b7565een/a 
2019-05-01SCAN_04227583295US_May_01_2019.zipzip 8eca3037bceda415d4e46b8a5256d373871cadaa734c94e06f78cc19d1c92edcn/a 
2019-05-01INC_687143662507US_May_01_2019.zipzip 31e2109e3f6fb0871170bc897930898662191a8589966c4766506ce2c1ba29dcn/a 
2019-05-01LLC_45457265719US_May_01_2019.zipzip cb7b070627913a185e35dd558a53b3ad5b3b811a7f9bbd35bb0c974afeb981c1n/a 
2019-05-01LLC_0419890073US_May_01_2019.zipzip 4e422e7aca737f887a25a0896b5d2c285d38aa089ab5bdf1f720105c14a1629dn/a 
2019-05-01SCAN_817056631021US_May_01_2019.zipzip efd4d2882982eb4347ca0bc0bbc2351033f7611e7b30e690d6eb13f82cb152aeVirustotal results 34.43% 
2019-05-01INC_843726520994US_May_01_2019.zipzip 8d4d8d07ce208d1702692ec35e028db980341f3e900b48e5b6a2f50dcbb64e58n/a