URLhaus Database

You are currently viewing the URLhaus database entry for http://cbsmun.org/wp-admin/Document/kfsGCwywenzornHMhNtOdNK/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:190455
URL: http://cbsmun.org/wp-admin/Document/kfsGCwywenzornHMhNtOdNK/
URL Status:Offline
Host: cbsmun.org
Date added:2019-05-03 19:28:04 UTC
Last online:2019-05-06 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-03 19:30:11 UTC to abuse{at}one[dot]com)
Takedown time:2 days, 12 hours, 7 minutes Poor (down since 2019-05-06 07:37:27 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-04SCAN_49624874948US_May_04_2019.docdoc 9547c3f40f790fab370c5620245c7736282c4931b82100c519746d8f3b072bd8Virustotal results 33.33% Heodo
2019-05-04Document_9863431534US_May_04_2019.docdoc df4a1ac757ed8c6c3ed5d16d933c168b3f0093088545af5fb4abc3787e802dd1n/a Heodo
2019-05-04Document_687817593319US_May_04_2019.docdoc e46ab44563f129dfaae10e440d99832bcc0058052c2f8452d4e22f76a86619f9Virustotal results 33.33% Heodo
2019-05-04INC_7581649137US_May_04_2019.docdoc d58c1fce018c99965fb2c06ef7c4c3e92be7290f9338741e652b99394eaf8d19n/a Heodo
2019-05-04DOC_39141497452US_May_04_2019.docdoc 3d27988d2bf5995fb39453cf9a94fd9ab6319ba0ffa17f3cb3b8e8583cf2327dn/a Heodo
2019-05-04DOC_046636233673US_May_04_2019.docdoc 5354f08d420e5f3b9e57955862ebe8414beccf3871d49e4283ad1a37a5757f8dn/a Heodo
2019-05-04FILE_32593201146US_May_04_2019.docdoc ab6d7afe37a7c302d8489b43da39d785a547b50d689feca2d57c26da17af6e73n/a Heodo
2019-05-04LLC_4213617042US_May_04_2019.docdoc f29605f7da73e128b8c8a3b3c984b6d2fad00a690d29fe40e88712fa1cd4c943Virustotal results 30.00% Heodo
2019-05-04INC_156393856092US_May_04_2019.docdoc e0de872319d3b08cb7322884af7dac8f10632fec564862c9c6364ff2c01a07bdn/a Heodo
2019-05-04DOC_20356128568US_May_04_2019.docdoc 953c247099818d7f8eb6e694a8b4513d61329b90afc651d75664df86837ca012Virustotal results 33.90% Heodo
2019-05-03DOC_207932900421US_May_04_2019.docdoc d94ff5aadd33871bf10b2316e3d14e19520506724771f95749210248b7931effVirustotal results 32.08% 
2019-05-03Document_384616729395US_May_04_2019.docdoc ce0dd149d783089c8567d59c766017c31a84863a4bed4db476786851cf827943Virustotal results 33.33% Heodo
2019-05-03SCAN_8811547000US_May_04_2019.docdoc 0282a70dabec4f4b6cc1f477cab7a97e23558677a0b6d8bb55f329b9719deb5en/a Heodo
2019-05-03LLC_8794383920US_May_04_2019.docdoc eeec0046cd334722d51b9db31e8c18d1d6ace4246c790bbbc311d553c2f3ddd4Virustotal results 33.90%Heodo
2019-05-03FILE_64474882299US_May_03_2019.docdoc 9f00e70566d4c513207f676149a70437674345f52f057b83af8553fb8b7ece4aVirustotal results 26.67% Heodo
2019-05-03LLC_68668494200US_May_03_2019.docdoc 0731dac1d684fd9c6150d9d0c20e52073cdf8b9a8a2afbe06578f553c315bc86n/a Heodo
2019-05-03LLC_545526296130US_May_03_2019.docdoc 89f70f1ea8bb56015eb8427c1900918320be4468fdd858cd59c410ff5f6fc1f2Virustotal results 28.33% Heodo
2019-05-03SCAN_9208917969US_May_03_2019.docdoc f63659051f14381812967eefeb665056f94a457273cc24a5b22ac24bc336b65eVirustotal results 28.81% Heodo