URLhaus Database

You are currently viewing the URLhaus database entry for http://kuss.lt/bendridok/sites/eTaxrJxipKieZn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:205169
URL: http://kuss.lt/bendridok/sites/eTaxrJxipKieZn/
URL Status:Offline
Host: kuss.lt
Date added:2019-05-31 19:20:04 UTC
Last online:2019-06-06 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-31 19:22:06 UTC to abuse{at}ripe[dot]net)
Takedown time:5 days, 19 hours, 9 minutes Bad (down since 2019-06-06 14:31:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-06-01SCAN_04321984363US_Jun_01_2019.docdoc ef62880b29c9e9403633bfe2c0572d75e5d9ee3fa4fb698697dceb9efc99ec3dVirustotal results 49.18%Heodo
2019-06-01DOC_7960106170US_Jun_01_2019.docdoc 7c4cc9d295547a0cef91a556f42d21a5e87964fb2272c8a33fca00016e71ec4cVirustotal results 48.33% Heodo
2019-06-01INC_1315630252US_Jun_01_2019.docdoc bf032ea596d973c8333c4a7d4e7338cdb4276e3d2e8ae5046b8bfbac20941c92Virustotal results 50.00% Heodo
2019-06-01SCAN_7856382600US_Jun_01_2019.docdoc 51b855cbe57d74b049f542899bba538e6a47f83b9d6e15e8e5f38cc758664f8bn/a 
2019-06-01Document_1232033806US_Jun_01_2019.docdoc 545a4700f14d2cfd7f03499246dbb2738f5555f92ed45538f5301622f220c985n/a Heodo
2019-06-01SCAN_84435263021US_Jun_01_2019.docdoc f787bedcfbb4d4f2ac2507770741ea1ac63ea94e2ea432d464e3bbd23465798an/a Heodo
2019-06-01INC_39963994633US_Jun_01_2019.docdoc 84a66f8e7292ede26e286442de89b8a1fed1521c29552f9b8b1bc17da0d26e5fVirustotal results 48.28% Heodo
2019-06-01DOC_1059239121US_Jun_01_2019.docdoc 78f1f6d72541c029a695ff06e0b00368d8c2e76e40a24f220ae805149d55daebVirustotal results 49.15% Heodo
2019-06-01DOC_31340836384US_Jun_01_2019.docdoc 6db3364c302d5c19db16a08c2bc81b3d4c2950d667272c12dcbd6827654aeabfVirustotal results 48.39% Heodo
2019-06-01INC_37232478931US_Jun_01_2019.docdoc d777840280b22871584a1f1a9fb73dac5b7b335ed3089c35c638e0ad6984eb5bn/a 
2019-05-31FILE_86486799173US_Jun_01_2019.docdoc 71bfba9498217d205555c3c7f0896f3930029f0ebc78a09e0ceb48cbbe8b2899Virustotal results 44.83% Heodo
2019-05-31Document_780543560604US_Jun_01_2019.docdoc f8e39ecf6d736e3e321da3e786e095c108564c0ada8a0916f70e04bc642e60d5n/a Heodo
2019-05-31FILE_261708155012US_Jun_01_2019.docdoc 625f2ec3f9c827fd166ff8442aae091ef899a4282e8b1102eadc87bb2baa9096Virustotal results 44.26% Heodo
2019-05-31FILE_862019431182US_Jun_01_2019.docdoc f61a7749ba4a209db07cd10c799a6563aac71bcdc4535f1d6777cc685b6e1d6dVirustotal results 45.61% 
2019-05-31INC_32901239658US_Jun_01_2019.docdoc 7894381b0ab455b3f831f689607a32a015b1a244cb633a040c887eb3976258b8Virustotal results 46.55% 
2019-05-31INC_171776660649US_May_31_2019.docdoc 995b28abfc1f4ecb8a0ba990334fcba0709ad10b550b2aad9000a4bcef8acc90Virustotal results 43.33% 
2019-05-31Document_3369253417US_May_31_2019.docdoc 04c699bef7ae513b70d5949cf0800737cc70feb748c9a22de9d385790c07d86eVirustotal results 36.67% Heodo
2019-05-31Document_9607156440US_May_31_2019.docdoc a53484da9e213b8f9a1506bc4356647f57082f7eddc755737785e30ba2b09eacVirustotal results 33.33% Heodo