URLhaus Database

You are currently viewing the URLhaus database entry for http://kypa.or.ke/cgi-bin/BNUda/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:292632
URL: http://kypa.or.ke/cgi-bin/BNUda/
URL Status:Offline
Host: kypa.or.ke
Date added:2020-01-20 12:15:06 UTC
Last online:2020-02-11 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-20 12:16:04 UTC to abuse{at}ovh[dot]net)
Takedown time:22 days, 1 hours, 21 minutes Bad (down since 2020-02-11 13:37:34 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24Invoice G67_298655188.docdoc 8b2e4b7244319f99c6c6813e954f42c6f9580320d266b016e4752e25c56f812fVirustotal results 27.42% Heodo
2020-01-24Inv-CGSM3_144274.docdoc df0a79ffdeec7100e50fcd6189bbc006e1cfda3082257e73b791667bc98c26daVirustotal results 26.56% Heodo
2020-01-24Invoice_Y874_106656.docdoc e6227f508ea8149469cf318e6939e1fd1d8b32b728997677e8220d7c4b827ac3Virustotal results 25.40% Heodo
2020-01-24INVOICE-0041_470166.docdoc 829533600afafde7716701f0ea4bc0cb998fbd85124cda950547315d1c512adeVirustotal results 25.40% Heodo
2020-01-24INVOICE-J446_34116656.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24INVOICE_196_7301856.docdoc 3019c5713b1eae96e9080ac03f4c948abb9012ec8937fd082bf6f26c9aabbd98Virustotal results 46.77% Heodo
2020-01-24INVOICE-D1_602368.docdoc 8e96c8617604fd15ab39a4e48e257ad769bfc12440f857da0cb0b21ddcaa86ddVirustotal results 47.46% Heodo
2020-01-24Inv-GNGA9_17664544.docdoc 5c566546a1462e17becc0023ddfae0f8e4d8b495e4feda5bcc5f7fa52e0ddd0aVirustotal results 45.00% Heodo
2020-01-23Inv-51_6486257.docdoc 743ad08455946953277aecab35ed454e9afba44dc4e7163ec121fa1f4bb770eaVirustotal results 41.27% Heodo
2020-01-23INVOICE Z8478_9681515.docdoc 7a407a5d5853fcad0d7872e8ae60b0471662cf83c0b5bd56dfbd474fe2e6036cVirustotal results 40.32% Heodo
2020-01-23invoice-FDKH0045_6696969.docdoc 69896fb1907aeb3711bc79924a6aa0f9d636605647439f36e14ad1e7c1afa917Virustotal results 31.75% Heodo
2020-01-23INVOICE_TX3_305549025.docdoc af8976ac691aa40327d9844ef283ec4de84fd38c56d57218befd747516e4e92eVirustotal results 32.79% 
2020-01-23invoice-TAZR3_83409756.docdoc 12958a0020162751f99e336844423a03e94d65328cc2bb55a570293e54d2a0c3Virustotal results 32.26% 
2020-01-23Inv_EO2895_27455312.docdoc 68e17ea7659b443ae8e50bee4d874db5b873b772ffa3eeb61b5324f2b4c637cfVirustotal results 30.65% Heodo
2020-01-23INVOICE 4_791152.docdoc 6c4e7cca35ef2cfd9d62bc224087750bf986a9c8437cc72f5c6fb3d2f686fbccVirustotal results 31.25% Heodo
2020-01-23Inv DT266_602472680.docdoc b07ff55d071c5c69ffb624fb492477dfb4e650385376a909c180c0de206d4d8aVirustotal results 30.65% Heodo
2020-01-23invoice_SBTA64_322658.docdoc 343354c5822df99e96d6b88dc7da718785a030ba68942f8cb71584e3ddeb78e5Virustotal results 26.98% Heodo
2020-01-23INVOICE-JIJZ5015_325215005.docdoc d04261a460402343f773ce1975d76a17b2a2d042e53c7b68bb9c6391d79efbc0Virustotal results 27.42% Heodo
2020-01-23INVOICE-P660_34122450.docdoc 4efe99e760c862d17d3128bc8c9bfe85a4512b981ac9944bd6f3c38d0d02651bVirustotal results 28.57% Heodo
2020-01-23Inv_063_5759909.docdoc d91ee6af9a42e6c4c90bcc0602f6ca687bf444b88a183867d943b365bf8a7db2Virustotal results 33.33% Heodo
2020-01-23Inv R0_416834080.docdoc aa561ec45a890d783fcb412768c706f829bf7648de033cdd190fab9584ed7a40Virustotal results 26.98% Heodo
2020-01-23Inv_GNFB413_66882735.docdoc bcd78fb2ae376c31ea21a7d1b7d110e4dd0a49c9a8261bc5f68816e4d1091bbbVirustotal results 22.22% Heodo
2020-01-23INVOICE_DOBA6_93252555.docdoc 93cac8f7e51e270b89a9c834216ec2cdc9273ea5cb5cc6f31bf7d2b145c36776Virustotal results 21.88% Heodo
2020-01-23Inv_JZK3_3472458.docdoc f28efd022a443c710b7a21451f86673fc1f60b1d4c7a49de6f52297edb24cb26Virustotal results 21.88% Heodo
2020-01-23Inv_72_197881354.docdoc 0f8e10bbdc8728918591e85cccb046c2773c40bac92da35c9474905528e4f22eVirustotal results 20.97% Heodo
2020-01-23INVOICE-6_6080676.docdoc b880f03f8d1480e05b41dd7f4f69cf55c05166f273b59619d8af1386d2c92316Virustotal results 33.87% 
2020-01-23Inv-414_179297.docdoc 0fb7365da093214e7716801f1201aeae256ff726cb0d3b8a52cb379690744490Virustotal results 32.26% 
2020-01-23invoice-FSEU9330_467174729.docdoc 5e297813f3fa48d656e02dc3178fad53591a5207c0b87c2d145a8eeca8a6afc1Virustotal results 26.98% Heodo
2020-01-23Inv_RIX939_405677.docdoc 8fce0c3f5b2c7f7961769c009486ee767f9463bf3f80aee244f964717b5f0fc0Virustotal results 34.38% Heodo
2020-01-23invoice_GPCT72_41536122.docdoc d88c083ec9e3bfef57c53f3d9944343406cf2087de89f3f46b0eb20ac35a33c2Virustotal results 33.33% Heodo
2020-01-23Inv-FVKR57_5060061.docdoc 1c244d818f2d1e8b44a21b46b36aa29b2a6de9b37ce8463210ced5c7219801faVirustotal results 34.92% Heodo
2020-01-22invoice NQX1_405116998.docdoc bd8b255f6f725d19175c00ff0950d2d96978762a8e19832228c64eb2e142433bVirustotal results 34.38% Heodo
2020-01-22Inv-264_04268591.docdoc e82adc98fcfdb46771178d4b4aa4d672a9cb7e6250ca4d87db04c9190ab00d23Virustotal results 28.12% Heodo
2020-01-22Inv 0_6329064.docdoc 9da436352a29d8210b6abea3831be91e8622232f1db319cc78e8a228434b8351Virustotal results 27.42% Heodo
2020-01-22Inv-EOFA9368_3347920.docdoc eff485b4e41f7a843399ff68e9c27e451743bb38c0a47eea0ec9bc92ab2286d0Virustotal results 30.65% Heodo
2020-01-22Invoice XL51_50524604.docdoc 58fe40e165c8619daa7dca1d76a7dc59f79bdccbf16ec14d2ea0ccc20d8d55a3Virustotal results 32.31% Heodo
2020-01-22invoice-FCX00_724953.docdoc 21e28ea9f6d254b7e3a2b5dfd8a941a486982e166f3ceeef2e4cf3bb4a6d4669Virustotal results 30.16% Heodo
2020-01-22invoice-UNL030_34095466.docdoc 4b5edcd54f1fbffdbff8e456d0d8d1f1ff198f996fc3ae23f44b4eb8ab8a4163Virustotal results 30.16% Heodo
2020-01-22Invoice TQDV8_12931202.docdoc 4a9cb1f8c8e74e302d7f141af65afaefe4f0d85c539a9cdc03380e6365f57044Virustotal results 29.51% Heodo
2020-01-22Invoice_V910_343096.docdoc edf5507491f2b272e1a8cbc96c979257b783777d741d427c0655e638f0963bf9Virustotal results 29.31% Heodo
2020-01-22INVOICE_RVMX983_613604.docdoc 053acb16b2b378bb2d3e47318df335ccd37ec8d0c358faedeca182a57ad2fde2Virustotal results 26.23% 
2020-01-22Inv-735_45566990.docdoc 88ce28544773169c40c27fca43e493f73d997ad67d58000d9554edd251754738Virustotal results 26.23% 
2020-01-22Inv OSAI118_95664030.docdoc e3c19433848a0b0023963e05496e09744003119af344985daad6a614cebfb1b4Virustotal results 21.31% 
2020-01-21Inv_MT870_52199583.docdoc 5fc5b0f1165fd1d3c8d8143b5ba08e4ab2b38f7a7d2d4e68bb454d0f14272414Virustotal results 21.67% Heodo
2020-01-21Invoice_KLBP0_6597272.docdoc 6e45a9ae91897bec6b4aaf8f30420016e4f6875e176f032b00102a67f94ed9a1Virustotal results 22.95% Heodo
2020-01-21INVOICE_712_550802556.docdoc bde730e3c431c09700268d1d1ed11043248973fc0a946de535cf05dfb8f9d332Virustotal results 22.58% Heodo
2020-01-21invoice-EOBI7226_9479548.docdoc 7501ac37ca9adce1a6c87e4cc6db66d985a25c0a47eab1ebb098d308f8b1a96fVirustotal results 22.95% Heodo
2020-01-21Inv-RS7_485501.docdoc e373a7a4b54c1ebc385e4200abe5710412cf82d191ba8c77801ae899486cdde9Virustotal results 24.19% Heodo
2020-01-21Inv-D09_0959574.docdoc 911c7302bba8ebf022f7b06d72b4ad2d70a53021ad08349b0b974a61177cd886n/a Heodo
2020-01-21INVOICE_FO800_013614293.docdoc 7c138128d8dcfcef1f383d815bb70b4c4e33f6a88ca5996fff2f67bde4f4b26fVirustotal results 22.95% Heodo
2020-01-21INVOICE-D6210_099083559.docdoc 0cf22f290aeb6815de1ee2241737b02a8db7d6ec26923eea8b8524aa5c24b773Virustotal results 21.67% Heodo
2020-01-21invoice-S8_22306191.docdoc 87171d8a9f307a3eb15346cf8cc328cd6d28398b7095e88b869a518060f7e5ebVirustotal results 22.95% Heodo
2020-01-21Inv_TPQ5311_22509182.docdoc 0f65d8f9626e49b02356890e226be978fc3f4a68caa8cdc94c78b161aa117b15Virustotal results 25.81% Heodo
2020-01-21Inv-K32_75882000.docdoc b771bd8355401ea565dec0a76276f979eaca401e72db5ed2c3e8abcf8edf2d20Virustotal results 24.59% 
2020-01-21INVOICE_JCV5099_7613456.docdoc c3ae73dc2d963d63e9d7876319fbaf0ffd43ac760a60452f840ab58f19a29c18Virustotal results 22.95% Heodo
2020-01-21Inv-NWGE3_89650714.docdoc e09637eddfc2bfc14bc5b1c30b82abf32499e5dc406882a5a825ecb223492e86Virustotal results 28.33% 
2020-01-21Inv WPV1943_839447.docdoc 476305b7c2378ca50cffed7160476c37493821e9221b48ba057a8df13d596b42Virustotal results 32.79% 
2020-01-20Inv MSP3_045224.docdoc 787df192f308f9a01ca7dbba7cb355dee283fd28f4a77be46ea3dcaaf7e86675Virustotal results 27.87% Heodo
2020-01-20INVOICE-CW3_78511259.docdoc 8e665f9b2e1d344ec5b5c4e504563c36660b990e10b2c566f48fa20ea57baa13Virustotal results 25.00% 
2020-01-20INVOICE_ZF9_165616744.docdoc 2cdee961306ba579733dd7153ebee0a8b905679101146510f54f3e1452c16cc0Virustotal results 27.59% Heodo
2020-01-20INVOICE_PR9_340027841.docdoc afdfcf12a2ed10f98cfadc3652f1399954cc0b752f32761567293209efa18fe2Virustotal results 28.81% Heodo
2020-01-20Inv 7_32439881.docdoc 05bb41d07a52ece935c2cc3b57c7c77544f0398a9a8c35667ebf18bf931f4eb8Virustotal results 26.67% Heodo