URLhaus Database

You are currently viewing the URLhaus database entry for http://kakhun.ru/ACCOUNT/Invoices/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:26925
URL: http://kakhun.ru/ACCOUNT/Invoices/
URL Status:Offline
Host: kakhun.ru
Date added:2018-07-02 16:26:52 UTC
Last online:2018-09-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-07-02 16:30:58 UTC to abuse{at}beget[dot]ru)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-03MW-996481384.docdoc 5c5c73f4520d5fe5e59a7b34b29d3f3607121744c198d32a3e74336fd8648cdfVirustotal results 17.54% Heodo
2018-07-03KL-4054889196647.docdoc eac608e5f2711a689b7c7ecc2b18bec0d29dcedb7281f1915cb18613459c488cVirustotal results 27.12% Heodo
2018-07-03NP-979688666159822.docdoc a5d51814ff92009ef5fd0b3a7df8f58e2ec5cddba36771f8dc429d89ca36d2d1n/a Heodo
2018-07-02LX-37202022978.docdoc 2f27663116e9c98f65806d238fad640cee2bf3b182df80495359b36c9bb6aa76Virustotal results 15.25% Heodo
2018-07-02TE-8761780226495.docdoc 4c371f084b810457d27249d8ad5640864a9e706a1c6fba646d52ccfe94cb52c7n/a Heodo
2018-07-02YH-8191105639.docdoc 89505a2833cc0ead40315a101fc426c519df40b8c582ed2d236b5deef96ec819Virustotal results 15.25% Heodo
2018-07-02YY-3751836451507.docdoc 48d8b8fc897f997976f94329cc84ecd47491f3fe02e7f8c982f8c456efa73a27Virustotal results 15.25% Heodo
2018-07-02GQ-94826575080.docdoc 6d254b4e6d9e010342016174f1aa9ef5c377701dfd4d2fdbefe67b21098f8893Virustotal results 18.03% Heodo
2018-07-02NK-4319666803604.docdoc 243d8733e8c7df67b8f48341538d4f96d04bc4de5af221a8d894c5429832691dVirustotal results 17.24% Heodo
2018-07-02SM-444630462716376.docdoc 79ae87648922dbcf15ebe361355ecdfe1ba0714fed90f70ccc3729b9af9eb0b8n/a Heodo
2018-07-02GX-37080196.docdoc b8206b9e2d7756db2be7d8b7239435f7cdef674dd666d6c061d5e9c7b464d51an/a Heodo