URLhaus Database

You are currently viewing the URLhaus database entry for http://kancelariazborowski.pl/pub/docs/x7ou06yg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:292512
URL: http://kancelariazborowski.pl/pub/docs/x7ou06yg/
URL Status:Offline
Host: kancelariazborowski.pl
Date added:2020-01-20 08:56:06 UTC
Last online:2020-02-06 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-20 08:58:03 UTC to abuse{at}home[dot]pl)
Takedown time:17 days, 3 hours, 34 minutes Bad (down since 2020-02-06 12:32:59 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-22RP_PO_01222020EX.docdoc 2261d09c38d14809ff4ec2581cf8f63a3f1976db628676c785ba431a924bb295Virustotal results 28.81% Heodo
2020-01-228UW3NTPF2A5TCSA.docdoc 336ab3a461e1a9206d529c38bf94f01e340884585fe63edd765c3fd0821f68e6Virustotal results 29.03% Heodo
2020-01-2271251253294228470951.docdoc 96e71ebc8855336f1ff5006afcd5167486abf09cebca7b194da01a83388a9053Virustotal results 21.43% Heodo
2020-01-22REP_G13D94XQMPGHZ.docdoc 38787b38f9ed7908075086f02ec866791014775637c563d31e7926535cfad02eVirustotal results 20.97% Heodo
2020-01-22RP_ZJY_010120_TQC_012220.docdoc f1f365ec1cd9c2805689ef43678eeb5ed47666bfd6870ac7bfd8a9856694a845Virustotal results 21.05% Heodo
2020-01-22PAY_433843493696193003309023.docdoc 6dd831fbe1f601834039bd80bbaf9b2bbe45f08d144b5d4ad5caa0e8135df998Virustotal results 20.00% 
2020-01-22N_39506859006201.docdoc 8bb40f94230c4779d38d4849765d3c668b37c66d257ecbf89fe76f042c850958Virustotal results 19.35% Heodo
2020-01-22REP_64406153.docdoc 9cef3a4fa75b4b779a45d473f9750fd2c7bb8acb0ef5be177acab2e0b43050f8Virustotal results 19.67% Heodo
2020-01-21AJ1943219308XE.docdoc e7cfcc5924207c0384febd2ca4125ab12dc6c893443adf4fecf44f056f3e243cVirustotal results 20.97% Heodo
2020-01-21SW_ZD5789315432NR.docdoc afc71ff2f950fe201610ccb3658ecabd28277de445f299d235048e06bb3c02ben/a Heodo
2020-01-21FILE_EI5777264120VX.docdoc f9b21302d1bbfe5eeea136cec2e2792f2daf2a7f0a3f2c3b73666b78be3acee8Virustotal results 19.35% Heodo
2020-01-21RP_093143764555640218.docdoc 9b7ca6a9502ab1284746dab988015b7dc157dab0d18128cbe1487e4b8fea4febVirustotal results 20.34% Heodo
2020-01-21DOC_Z1INQQFP.docdoc f8b7610b7621a91b5d28857ea340a864fe7c4b11e544e0a8d55b06130078f520n/a Heodo
2020-01-21BAL_39574016.docdoc 87f198aab109437e66b753398ed36d61115bcd349c900750ed31b89952b9f3bcVirustotal results 20.34% Heodo
2020-01-21PAY_JO4856105258YJ.docdoc 3d3251db7fdf4ce69cd096e40ec64f5a29e379f209e810a7d1b617f23307a38fVirustotal results 20.00% Heodo
2020-01-21DOC_84887191350.docdoc 2f2a0cf5f701e2014ef05a565aab080235be85106bd630e67bb5c9e1aabefad5Virustotal results 20.97% Heodo
2020-01-21SW_PO_01212020EX.docdoc ce7997a982cda9e7c2591ab8566bbdc583595e079b68bb121820bd81bc0f5c7cVirustotal results 20.97% Heodo
2020-01-21SW_PO_01212020EX.docdoc 61507dd50818260d95aaadcd23ed886f445d5c1afe613e53e1633c08ee5bdab8n/a Heodo
2020-01-21RP_RT4476720997PO.docdoc dfe2815ab27e806aa38d3a86f0c43e7aa9fca4b580604411f1d339c734d038e3Virustotal results 24.59% Heodo
2020-01-21Z_FLB_010120_GYN_012120.docdoc ac0a043ddb5cd2ef939889a7dface6d1464766b504e1cf491e8d05d6983e0d12Virustotal results 22.95% Heodo
2020-01-21SW_YX2139907561VH.docdoc 5e98531907cc57e4b1fa31b9808e8349d25ccb173af389776484b6e12e0bda7fVirustotal results 22.95% Heodo
2020-01-21FILE_CU9655289093SJ.docdoc 3d7638d3dfb9736e90003021fd9a8a5dde3aef6a2d13539f6734043630d1d035Virustotal results 22.03% Heodo
2020-01-21INV_QY4541960508DJ.docdoc 02ffafb9df3c1817c1407b645b452bf63dea66ee2992bd41a6a1dbc7ffed0bd3Virustotal results 21.31% 
2020-01-21FILE_FWJ_010120_ZKU_012120.docdoc 73deaf5540bdd8aa881f769754e29998a7f895666230e06afc6a7452998d6067Virustotal results 21.31% 
2020-01-2198774086748.docdoc 1a54c57512dbcac388648552cf8ec7536827af1c60f032cf6b3b6fc3197033c4Virustotal results 38.71% Heodo
2020-01-21ST_GB9786603615IX.docdoc a02cad1bc2e1e070005d123abd1ed33ef20a502d65d597145a77c7f1983a8888Virustotal results 37.10% 
2020-01-21INV_LBYX8MR581XD0.docdoc bab6c6989935ad3265af5fe641a9070d85fafb84e2148f1eb356282fd2a51aecVirustotal results 32.26% Heodo
2020-01-21Y_TYV_010120_XBP_012120.docdoc 97f55cd9a4169904bb304d25dec8f7e772082dc8c1aa3468206307bb6e95df26Virustotal results 28.33% Heodo
2020-01-21K_8684775030752348177293.docdoc 6f95ea0f92c00748e1215edfe2c7b4c7e772776fc5e4c48e67ead100f4c5c835Virustotal results 26.23% Heodo
2020-01-21RP_JP6C70CZ.docdoc 852d7c2fe2e50b54bcc8b4bd89978251dbcf736f134ce9226fbb287d77394db9Virustotal results 26.67% 
2020-01-21PYH_PO_01212020EX.docdoc df533b50a5025d7357f0b73c84d71956e33a9e636ee8d344035cb3074936672aVirustotal results 28.57% Heodo
2020-01-20ST_YV1645032343FG.docdoc 1ea87b49c2446c87238b34dc111ec4a43ce7d35ccad27a5c61d601ff375dc6dan/a Heodo
2020-01-20IMJW_GSE_010120_ZDO_012120.docdoc cf5743023ac09e336f28201ae882afbff0e5d2a6840634a99421b05daf0a86cbVirustotal results 27.87% Heodo
2020-01-202564212707322961913.docdoc 8c315ebf4829f97717eb97eda8aaa254483ebaf7f43e3250d0efa8990f2ffa40n/a Heodo
2020-01-20CJ7889473670NR.docdoc 4447b642ce2918954ed6caadd8f62d5dc8b65c5a888673e5f9b921a7ec51c9e8n/a Heodo
2020-01-20PAY_UMQ_010120_PRW_012020.docdoc 678ade151e9690c4e5554104212bb97160c5fd2fc610bf2097a6f3fe4276657eVirustotal results 27.12% Heodo
2020-01-20SW_EN1756835131CB.docdoc aa3c760924ba7c9087decd46d2af6ac7b5790dc6724f87102b5c9f3dcca76da0n/a Heodo
2020-01-20DOC_2891271043508.docdoc c70ff6b4bdd933a3c90726845702b3807c51c2275eebeb30be28ac46e68aa6e0Virustotal results 26.67% Heodo
2020-01-20RP_FHS20UTB.docdoc 77f470766022173e04ada1e7ba6d5d27999b7383cd72fd3665cfc564f9177b27n/a Heodo
2020-01-20SW_DE5023374054QX.docdoc 884facdfafba1a2e0680bcd8fb7bb26b01bb41480123c7a1be068e3c612cfc0aVirustotal results 27.12% Heodo
2020-01-203555190592031523673.docdoc 85f52ce0700048ef21e9b73d225f0466d5860521768a50f9f10bbf35836f5c60Virustotal results 28.33% Heodo
2020-01-20OF5699965658LD.docdoc c9b678080ccb5769db65943649b9ec6468b150c65c65dd116a39c0bec4940825n/a Heodo
2020-01-20FILE_75808875.docdoc b89d9eb1afa9efe104cd610869ea199a163d4aaa647a7c18a83acd81bdf40a76Virustotal results 24.59% Heodo
2020-01-20SW_MU2UPBC8QU2KTZH.docdoc 847c6c247a39b31eec42ebe2e293b14b644d2791fa974fc1a456c4197307ad4bVirustotal results 25.00% Heodo
2020-01-20PAY_38ED5M6C.docdoc cee1fe9ba8180b8e239586bb644d6f1383fe738b9a91df4071fa6018872aa2c3n/a Heodo
2020-01-20DOC_QKH_010120_OMV_012020.docdoc 593c75c30a16b2aa22918c22294941e267b54a1ba7d9b82689b0865b78510708Virustotal results 24.19% Heodo
2020-01-20FILE_99926745.docdoc 939f22929f6f4074a958508f3e21bf3b9c31d92c19061e8d2935a23a619e1a18Virustotal results 24.59% Heodo
2020-01-20U_GAR_010120_XBM_012020.docdoc 5f0bba5940ab7cc1c22433c81c4c96d71ae506e174a9515275ff2ba2bbb42261Virustotal results 24.59% 
2020-01-20REP_RSS_010120_PZR_012020.docdoc b26b9fbb6cefa99fcc08a7bf458d19ffa75999592a6449bfffd445715ab458bcn/a Heodo