URLhaus Database

You are currently viewing the URLhaus database entry for http://csnserver.com/Service-Inv-June/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:25152
URL: http://csnserver.com/Service-Inv-June/
URL Status:Offline
Host: csnserver.com
Date added:2018-06-28 23:03:23 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-06-28 23:10:48 UTC to abuse{at}rr[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-06-30inv-RON-14595.docdoc 027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6Virustotal results 33.33%Heodo
2018-06-29INV-June-30.docdoc 63d44ddc7164565d400424f93ad7bbd0f5d4f38e28297f3003294d4c7fe52532Virustotal results 31.58% Heodo
2018-06-29invoice-00N019165/60.docdoc 276e5e230766222ed208b1d4d1bd994acc2e763ca71c6d28f41a17988375d099Virustotal results 30.51%Heodo
2018-06-29INV-02W36764/3.docdoc 7e318f0069486a3d7292abe1da09086c9719aef9ade7d1804df6bf98edd959ecVirustotal results 28.81% Heodo
2018-06-29INV-June-29.docdoc d4f7be8261c469285370f7cc2dab8aae203ea82239e82bc26531bd5e12076e4fVirustotal results 28.81% Heodo
2018-06-29INV-04/179772.docdoc 735b5ce53b6f36c044018f5c956f77b64cf934a878e46f31f4f657e37c10271aVirustotal results 20.34% Heodo
2018-06-29inv-JAP-3781739.docdoc ca77b3b2ee91b1f0ceae4fb0b97120392bc75e7616d068813746f6c7dfa87cdeVirustotal results 15.79% Heodo
2018-06-29INV-00/08496.docdoc 395a4a347a4fe00d00646357f06b3d7a48ef269fb29ada98e769d839222db12fVirustotal results 15.52% Heodo
2018-06-29inv-06292018.docdoc a035579a2a473bdb953ee45bef64609572261721a81e57ca2716883b00c0f62bVirustotal results 22.03% Heodo
2018-06-29inv-06-29-2018.docdoc b9f4e09cafbf2e8f5532765049d9094dc3689cf79f23251868f6b77c75addf99Virustotal results 23.73% Heodo
2018-06-29INV-06-29-2018.docdoc 394f8061f4ad6714a72092b327f8d3f8268da7c881ff0b2ea1fe29c7a26ac34aVirustotal results 21.67% Heodo
2018-06-29INV-00/9252643.docdoc 6864655577a22f5f289b9b8e092d6506909c28dd843438064842bab21947807cVirustotal results 20.34% Heodo
2018-06-29INVOICE-078/327107.docdoc e888c8a6f8384f0987a15741f5a865d4beccb38e460a6d1626ca1972a2656df0Virustotal results 26.67% Heodo
2018-06-28INVOICE-June-29.docdoc 27f47adadba6d9f62e8239c19813f2256a86091af65868d18fe5a122ffdfcc12Virustotal results 18.33% Heodo