URLhaus Database

You are currently viewing the URLhaus database entry for http://kancelariazborowski.pl/_vti_txt/sites/wcs0q3i3a0i1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:267888
URL: http://kancelariazborowski.pl/_vti_txt/sites/wcs0q3i3a0i1/
URL Status:Offline
Host: kancelariazborowski.pl
Date added:2019-12-12 21:23:04 UTC
Last online:2019-12-18 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-12-12 21:24:04 UTC to abuse{at}home[dot]pl)
Takedown time:5 days, 20 hours, 16 minutes Bad (down since 2019-12-18 17:40:31 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-1420135330.docdoc 01ea0d5371f2fc78251aa4aa7b51bdd4d2a387d71bc298160a1460d7d765ced8Virustotal results 31.67% Heodo
2019-12-14PO_ 12142019EX.docdoc 7d7711be4c0a6b37c778a7b60fa904511f0891166d88dc4ae6ec48367d3a5f61Virustotal results 31.67% Heodo
2019-12-14REP_72487475.docdoc 177485095e3a0c626b7d05e86d8a9cde1f2d5a9448e9f1f65393cd5282bd936bVirustotal results 55.17% Heodo
2019-12-14QH_S3ET1U1GKNDQ.docdoc 7cb2ce004956c533a28d83695e20fd6b02564df6ff33ea74de3d7b6729d54151Virustotal results 31.15% Heodo
2019-12-14REP_07338772864344038.docdoc 7e1c5673c56ecdac1d8680eda112c2fa815373a9431c240ceee34803b37c5941Virustotal results 32.20% Heodo
2019-12-14FILE_SY4028256654TD.docdoc fcba535746c8fa21eb1f9c498f35e9df3c1afe9251f6f8657ef2bdcc3d3f972eVirustotal results 31.67% Heodo
2019-12-14DOC_PO_ 12142019EX.docdoc 02f800e5fccbe66d6563a9c6ff9c5246849a724263676a653e91e98de3c48e0eVirustotal results 30.51% Heodo
2019-12-14K_UY9843719004XQ.docdoc 64913743d7d40515014026b2aaa18cd5e65d537d17b47f4e1048fcb6de2ae157Virustotal results 32.20% Heodo
2019-12-13F_814373674335600601787506.docdoc 1188e99ff2231fd14aadb0b89be226f17b04a94be62b7d8270e838947e93fb50Virustotal results 31.67% Heodo
2019-12-13FILE_AHC_120119_FST_121419.docdoc a579ce3d2d15e8816850a60dcc22eee820fa6711c258262ad5802c2f6e1a1e44Virustotal results 31.15% 
2019-12-13FILE_VAG104RJ6048.docdoc ab49efefe457f2c0c050496c1fdc8d586d01c70baaaaee84a831e766db85973bVirustotal results 28.33% Heodo
2019-12-13FILE_QYS_120119_WWY_121319.docdoc aadfdc82f050fcb2e3002a14f3982fd8c46af5fc8967eedf28f8f8444dc43d7cVirustotal results 28.81% Heodo
2019-12-13REP_96034379.docdoc 848735c57e1a6435289594c80b894ae30009e92a9735261b256d15baf27b4cabVirustotal results 26.23% Heodo
2019-12-13PO_ 12132019EX.docdoc 13f5585e89d9bfafdb41014b75ae7320974f25026fc74d1e333d857b2ca13260Virustotal results 31.15% Heodo
2019-12-13DOC_HV6384744448ED.docdoc ec0e70c7355494d17949475109a1d6693d27a72cf686547f8f7c94634f49a492Virustotal results 28.81% 
2019-12-13REP_KZF_120119_YVO_121319.docdoc 7672328d284205d3ae9dd68d3842b671ea8393227ca046cfe3bc2f2b37ebc99fVirustotal results 27.87% Heodo
2019-12-13FILE_36297597.docdoc 2328329f003f62be7f0fbfc6b8438cfec2f2d6c9aee19dc127579b1153798e22Virustotal results 26.23% Heodo
2019-12-13DOC_OIWI0TDZ0Q8XH.docdoc 4640a1f47cdfb050fa7690ad2369a986641ae5d7b0072441060a7e099629cc43n/a Heodo
2019-12-13FILE_QU4463592522AH.docdoc 09a4dcfa609d35f93f113a48c321504d914a671ec5a90b5385fbec029f686ed0Virustotal results 27.12% Heodo
2019-12-13DOC_99914221.docdoc ad35b92c46bbfa19204d81d350a8822fa74c2461f15ae49869141816c71398d5Virustotal results 27.12% Heodo
2019-12-13REP_92792705.docdoc 84bac96b1cb3bd42694000e4cd6ef996f066ddce2f137e2374cf537a6e07e0a2Virustotal results 40.68% Heodo
2019-12-1311949021.docdoc e2e4f606a0781b7e7a32ffce6227f92e4016ef6f3d5e27a8986014ed27e741f6Virustotal results 35.00% Heodo
2019-12-13REP_UBQ_120119_NUR_121319.docdoc 0b46984b2220d0a860fd03530036cf63599137320ca84fdfb8fe7029a952647eVirustotal results 35.00% Heodo
2019-12-13LSG_PO_ 12132019EX.docdoc acc7ea43de61e6d7bd1a88fde0e40ca54f4dc2d0ababd3ec2d68cee4cc7c4100Virustotal results 35.00% 
2019-12-12TD_52606415.docdoc 6983cab99e18ad37aeaa7271119973d3faaba9892c60f456ae56a6d4c077390eVirustotal results 35.85% Heodo
2019-12-12Y_56273255.docdoc 9b41cb53786a486e00fd172b3b9e3268ec06b000cef6d3a976031edb82ffe7c1Virustotal results 35.00% Heodo
2019-12-12DOC_NX1C8IJ1Z.docdoc be0e04263efebe17eeb4946ec68cd057ffdfc402d7b316bfe233e0b8913282can/a