URLhaus Database

You are currently viewing the URLhaus database entry for http://ks.od.ua/mmenuns4/parts_service/PMIFzNnqLKLTiXtfGbtv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:242362
URL: http://ks.od.ua/mmenuns4/parts_service/PMIFzNnqLKLTiXtfGbtv/
URL Status:Offline
Host: ks.od.ua
Date added:2019-10-09 21:49:53 UTC
Last online:2019-10-11 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-10-09 21:50:46 UTC to hostmaster{at}ukrainianhosting[dot]com)
Takedown time:1 day, 23 hours, 55 minutes Poor (down since 2019-10-11 21:45:56 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-1113091011050655597.docdoc 8b7d023895f408e2edd6ae41c70e98d8de59b31d7150618b26711ba56145aaf5Virustotal results 21.05% Heodo
2019-10-11QSDHV0VZ34L7.docdoc 9b4f08903cb06cb11d87e14c95592849b51d01d73e0f537bac93522e1d1abe2cVirustotal results 22.03% 
2019-10-11419078714303.docdoc 019b7ef704a635b4853b98e67f10c7e6b607fb5b91c24d4d2b4e2c5459b61bd3n/a Heodo
2019-10-11AKKJ4RX6JAIEU_10112019.docdoc de9752e65eef8e813a25cd7daf3e54bec2c0ea8bc4dae4052991b87971034e9fn/a Heodo
2019-10-11FS_FFAS68KYW4KG.docdoc 9e1d7cd63b0edcb4b3c4b1c86ecf477245ba82b4291bf26484fe2dd6cd9d12a1Virustotal results 22.03% 
2019-10-11XPX_3216545511102084_MY.docdoc c96e123865ea3b3cea184bd021ff5c2242dbc0a9b30cd2e916af7bc936c711ban/a Heodo
2019-10-11RN_87O9YMYQFN7.docdoc f86caacee45fe5c5d010cd4ce227e9218612a27db4a5126e2ed0d5ae125fc4a4Virustotal results 18.64% 
2019-10-1155202144531493375.docdoc 0c7c14abb4d1bf673ff07c232b994279e316a77465b4b4ef041fbe17d51bde96Virustotal results 22.22% 
2019-10-11SXZ_SBP4RIJO4DY_OH.docdoc 0c8bbc97828005bee9e7a2cf4887665e56a4a6755983424cc087a3a3ff58c672n/a 
2019-10-11CK_ON1NSPUKW.docdoc 76a62f7e63606a966378d9f3ba8fcec5a7cbb1e67caf749a9cc77e20092aed08n/a Heodo
2019-10-11QC_80910146331737_10112019.docdoc 8f5f8f2799851e1a63fc6bd93499c0ee6f967604fff74612a0caf411d51372e4Virustotal results 18.33% 
2019-10-119617500616098.docdoc 1f08e5bd06d1bde318055f626dff14677005ec9200c533c74a98cc68ff1b648bVirustotal results 25.86% Heodo
2019-10-1109585578354013.docdoc 4166fabbbd12ded7de1561c3bb7cc3eda1889562bb268ffaeca0eb828379bca2Virustotal results 23.73% Heodo
2019-10-11YI_88897199710_10112019.docdoc 4e91a37ebd2c6b0aad3b1aaf1d2d09c0d4187e7c3d0fff94327c30f72572825dn/a Heodo
2019-10-11UBW7XOWJBRMJ5WJ_10112019.docdoc 9caeb7939d720620791e0977ce3b7331d59e39672b647a479c12f50c23001ca7Virustotal results 22.81% Heodo
2019-10-11WP_DEIQ28D275B1.docdoc 069e184bae8a676d584ca8df23ea4ba998ffab0b067d031cdac1df7a041a6bbcn/a Heodo
2019-10-11BL_I10LJ8SAVT6FY2B.docdoc c92ed8fad0f453c7460aadfd8bf687d5cf99560115dddacaad75833aa40e0b6eVirustotal results 17.50% Heodo
2019-10-11QGEHUYHSMKCLK.docdoc 2aa3bc1c73221e8cb02ba6793487e0b7e88caf38dd40da5d1a42d3f36147b5f3n/a Heodo
2019-10-11LLC_2873944326_10112019.docdoc 7bb9b68f8f2c198f14e3d91780d43c593393fe8034f433553c9f06af24c015c7Virustotal results 34.62% 
2019-10-11DDES23J01Y_10112019.docdoc 4a913d6da563604d246a53c01a1652da032d6c6baf9fa1bfccf650635555f97fVirustotal results 33.90% Heodo
2019-10-111UN0ZHWULA34_Q_10112019.docdoc 75eae2ead8febffb89de4e0e64e3d9c9218cdcf88f83c46f3e1324277fc5245dVirustotal results 32.20% Heodo
2019-10-11DOC_93810912087090522_A.docdoc edd0ab17a61f95c20b02d9c7b58ef29911fc287846fdd80d6804d7e325e6b4e5Virustotal results 32.20% Heodo
2019-10-11BL_2P1RE7PJHR3.docdoc 33bd1e5d97265753389685d400934b69456479b92137b4b4ff0457e83e7aa8cbVirustotal results 33.33% Heodo
2019-10-11FT_X6SIR5H2FHW7.docdoc 69fa6b2b52312b8aefd0c77695a215245b8eb499b0904bb31e1f9ede0153fe74Virustotal results 32.14% Heodo
2019-10-10INC_JM7M0OVF830C.docdoc 51de13d18a23740342f1c681de4cb6c2baf116f2a4df4730c5338439d05823e4Virustotal results 35.59% Heodo
2019-10-10HJ_74106448024_Z.docdoc 47cad341e26f67d00adaf1c4e3d0adf77eafd64d24999e35500e364f046361ddn/a Heodo
2019-10-10SCAN_GQ9ZMJ849M8G_10102019.docdoc 7a8a800c29c6e9dbf732d98fd5eccb9e78078101fee30d287dc534e83e58a22dn/a Heodo
2019-10-10FA_0KRQXZ3G70M.docdoc cc88b6c2e36692379df13967b38df23ea41e6e39403ea6da5bd20097c74d4142Virustotal results 31.58% Heodo
2019-10-10GVI_595873438040.docdoc 2edaea083ea39aab08670d19867627d5516f1f78efff05973e3524c3f897a4c9Virustotal results 27.78%Heodo
2019-10-10DDX_6975083219469763_10102019.docdoc f61b3e7db47761a36ea24ecf8d0213a63cd82d07d84c422f46784f85275e04cdn/a Heodo
2019-10-10INC_359GZE7QC.docdoc b42bef60b590a42952b0473bedcadbf27b0aa9cb2c6206d08aa1271579133dd4n/a Heodo
2019-10-10LLC_872QV3AI04RA4QC_CSP.docdoc 705e55a252475b5ae7fa7258eb04be795347a8eeaa929dabe7660e33ed392264Virustotal results 30.51% Heodo
2019-10-10FA_NJELDHJX229.docdoc cc82bc7177f26107263871628ac0c38e385d8f26010182f0f7fd6352221fca33Virustotal results 26.32% 
2019-10-102183211485260379_10102019.docdoc a9c3dd24c5d7018ede1f2c2ed330ac15462510f7bffcaaf8badbdb5a4da623aen/a 
2019-10-10INC_6AYZJDTOI5VUV.docdoc 7e5c45cc547d770601dd7dcc29186fcc8ad1e00dd7d36ac9d58b9dd279998dedVirustotal results 26.42% 
2019-10-10INC_9740434987762189.docdoc 6fdaa046ff8def5c39cb32e45cb3755f9997d46fe8db480f1659f6b48f9f9bacVirustotal results 25.00% 
2019-10-10DTQ_0IQHWZ87EUNNA86_D_10102019.docdoc 86b8b4f6962aeb0aa7ec20cb11c345340fcbfa394b651a238e989de896065584n/a Heodo
2019-10-10D8OQIRO6YNA_L_10102019.docdoc 5111aee3697b7e6d97f54f97bb11bcbaedda8eb0a8f759e5fb491853b4352c82Virustotal results 26.32% Heodo
2019-10-10DJB_B16WK95FRJJRVY_10102019.docdoc 361b9eb186d6b5b0cb035335a8b2ed19979af4d7f407455891188860f1b82fdeVirustotal results 25.42% 
2019-10-10SCAN_81173476355_O.docdoc d6ba47dba7a4b5d3edbc954990704573281e71239ffd59490f13290d2f19694bVirustotal results 25.42% Heodo
2019-10-10HVD_271923825097493.docdoc 861d17c81ca38671d9c3e1aca61ac0e839d18c12f206a5c1f414f7f85c310cfen/a Heodo
2019-10-10SCAN_TLT7RLT3VSSNE_M.docdoc 559caa2233ddc0f6cddc50ba23ed9556cda00af17c9154d7222f839f04022bf3Virustotal results 25.42% Heodo
2019-10-10OC_45650407966651_10102019.docdoc d6fe373d277c5f879898aabf73b8dca3dc628e78cbd2e0ac29d639e1b5d1654bVirustotal results 38.33% Heodo
2019-10-10FT_50879580737167505.docdoc 58eded6711ac307b2b48e309d869ed1c4d88c6a23815973779b6d610704a3f12n/a 
2019-10-10SCAN_F1FQ00J6W3A_UX.docdoc 3f90a20aa7c21e5d785814d6521649e9b99c8dffe61a910e5ed63f8a70bac08eVirustotal results 37.29% 
2019-10-10DOC_J3JYL7YDR.docdoc b9ff09f2a5cc441790c6577f731c756ea95af9961e44cf41af17deaa10e18df5Virustotal results 30.36% 
2019-10-10RE_FY5ARR3X203VDTS.docdoc 0c421092cfe868bfc29d2e6f007bf424f8d02edf05fda335f832f5d67fa57d27Virustotal results 33.93% 
2019-10-10BXY1LFWK6NZDO78.docdoc f9cdaed775eb3635df2b10e792da181de1c0fd3e9a5f01f5b7ead25ebfc9bb9eVirustotal results 36.21% Heodo
2019-10-10FA_9CYCJ4NR8CW8L_10102019.docdoc 13deb16765cfd9f4316397848bb834def766955e5c37a1056732e6df278ee646Virustotal results 30.51% 
2019-10-10INC_Z21TASBLO3JALQ.docdoc 93d3e110f803099c89c63c9e08bece512f373ea47bb55949e2fc9c3d221c6370n/a Heodo
2019-10-10861901266979_O_10102019.docdoc 6da107e20a4bde15076e46114cd08f53e2a082c6afd30a36b05de9b97fa66474Virustotal results 34.48% Heodo
2019-10-10DOC_5519503376409.docdoc b4dd04c27697f3b87422d720c09d3a81af3823ba993e20e05de8a285932f047cVirustotal results 30.00% Heodo
2019-10-10INC_ISSFYWUYKA1Z05_10102019.docdoc 144d03ea075288b15252acf044fc37f946c00e044fe29ede864507d477c3129dVirustotal results 30.00% Heodo
2019-10-10DOC_WGPNTMFMT.docdoc 16aa536e17f9eae3fabff4fc9a99ee6112aa82c6bdc58dea62d7c0a44f9899faVirustotal results 30.51% Heodo
2019-10-10SCAN_I30M5A6IVISAMJ9_N.docdoc fc13915dcf6948edbe4bb35e72d68abc124fd2703b6d7cb8e54901b490010a75Virustotal results 30.51% Heodo
2019-10-10FT_407445021594_WVC.docdoc 88177b5b39ed84cb0d01934549e1af17f39273dc50302d920fee4bb06932ec5aVirustotal results 30.51% Heodo
2019-10-107045047625695_10102019.docdoc 4fc7f7b3f725c62a8cbc0ebdb3ce31b92406bd9fd895823d08e478c5440d3e36Virustotal results 30.51% Heodo
2019-10-10EF_CGXI5B5GIADUNG_FC.docdoc e333768e423c4aa3e8d064045ab3245ce04700293b0ea520ebf5e5475ebf8da4Virustotal results 27.12% Heodo
2019-10-10IHR_139217730375.docdoc c923b3272f267788fd3b9324de97192cac0839d72c742b492a6a5e8240858548n/a Heodo
2019-10-10VLRFBXRYUKBB6.docdoc 8f9307bb59d42b4317ed47e23470dc886580d809a3caa7026614baa348dd50e2Virustotal results 26.67% Heodo
2019-10-10RE_936533097902301_NX_10102019.docdoc 4f25f7d86cf0f77dc97ebd3184a7e03e8da522ad421766bb559b8f928e53cd45Virustotal results 27.12% Heodo
2019-10-09RE_H032G9N8D0O_EU.docdoc f93381722b5ba7d4ed93d0c44fe08cd794574547d97eff11ed814b0ec18273ebn/a Heodo
2019-10-09BL_27166907259476618_10102019.docdoc ab90dea096c0cd0114ae6aaf4fa406b524a5f503d2a5188a7742403c8cf48a33Virustotal results 28.81% Heodo
2019-10-099527528646_10102019.docdoc 688b36ddccba7411cfdd5b7289f698cc1a0eb9f0f22fe9313ac4a97706067b08Virustotal results 25.42% Heodo
2019-10-09FT_31785962770051_10102019.docdoc 72e80950c7a2f21ef7f6934e4fae280f8401fe83de4d6995fba8e0dfc559ef53n/a Heodo