URLhaus Database

You are currently viewing the URLhaus database entry for http://ccs.elitekod.com/ccs/available-module/guarded-portal/0UC68A-Nfi9rmygGxl6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:299967
URL: http://ccs.elitekod.com/ccs/available-module/guarded-portal/0UC68A-Nfi9rmygGxl6/
URL Status:Offline
Host: ccs.elitekod.com
Date added:2020-01-28 13:10:04 UTC
Last online:2020-02-01 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 13:12:04 UTC to abuse{at}a2hosting[dot]com)
Takedown time:3 days, 23 hours, 38 minutes Bad (down since 2020-02-01 12:50:18 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30REP 20200130.docdoc a997f00ec8ef4ab98fad48d947d00c6ee99b466c8262cca072a47d4d85379b32Virustotal results 29.03% Heodo
2020-01-30Mes_20200130_51698.docdoc 7099bcda5f0b4caadc077f6bc794a4dc8933e66863535f49c23c8b19ec793b7fVirustotal results 28.57% Heodo
2020-01-30DAT AQJ2234.docdoc 6686a87ce4ec03815de4f384705a2a876aee4195ecaabf95d727a6d63030d4e8Virustotal results 29.03% 
2020-01-30file 20200130 625.docdoc 093fe06865cc5cd449e9684d621efaf181505881f5e0e818b0ec9c4459ef1ba9Virustotal results 22.95% Heodo
2020-01-30Mes 2020_01_30 7607.docdoc 038d0ce1dd9ae6a7d69c47a40781b784a8ddca91244f04123a85722bcd787b84Virustotal results 24.19% Heodo
2020-01-30MES 20200130 5974418.docdoc cbfd00a796bdd447134f7dc1f38823e8e2eefb7075068cc197ec67c044ecfc24Virustotal results 24.19% Heodo
2020-01-29MES-2020_01_30-8993258.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29FILE_760.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29file 20200129 71006.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 34.92% Heodo
2020-01-29file 2020_01_29 JC146090.docdoc f794730342329d1ca756e53becae5be97d1f5fc5628dc8dd371111d0d8df96c3Virustotal results 32.81% 
2020-01-29Doc-20200129-931.docdoc 93e6b158ccceb81017a551ff0ede39622381a6ee79e572a206f2756b342a47fbVirustotal results 28.57% Heodo
2020-01-29arc_20200129_JGL2643.docdoc c0ebbfa695c1e2d054d32b340956dfffb4c155a4e420caaf593b0f1bbccbbd18Virustotal results 27.87% 
2020-01-29file_20200129_4597981.docdoc a6f8d6e5f80b47b55146e82c61a78c5ed8c451bcb68d157dee574d02c768ba30Virustotal results 26.56% Heodo
2020-01-29FILE-2020_01_29.docdoc 1b2ab9713101a1224f92f7b670acc6debff91071765f456e98552b87fe6c6750Virustotal results 25.81% Heodo
2020-01-29DAT-20200129-26316.docdoc 39a7498cdd0e0e7d2647254250c527ca46b6c7638794d1c1f524f5f5aaafaed4Virustotal results 26.23% Heodo
2020-01-29Doc_2020_01_29_7470817.docdoc 7fe7d585439b5c35ae237be440c87a62cc89bfb0bb98bceb800b85b6aefc7ce6Virustotal results 27.42% Heodo
2020-01-29Dat-20200129.docdoc aad9025b37d955a0929dc76185e7b87d374e735e3a30a258bd549dcfc7a1bf27Virustotal results 26.98% Heodo
2020-01-29INF 2020_01_29 Q512.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29Inf_G630894.docdoc c8e1e8fc65e999e2d0b073e81b57998816304c58ca21ffaf5e4a8d47d6205832Virustotal results 26.23% Heodo
2020-01-29Dat-2020_01_29-NGO0984.docdoc a1245dc00abc837e5b912c2aab2cc8eb34eb70db4bad71991edb4854fccadfb9Virustotal results 24.19% Heodo
2020-01-29ARC_2020_01_29_44721.docdoc c2b2cd3b90f72db2fc325fdac1161626765153b7cb874ee42bea9fe3caf0eb6cVirustotal results 25.81% Heodo
2020-01-29INF-16576.docdoc cb20d7137bc79d85703a2ca1daf9a73904b39c77714bd2d495022b5e973bd7d4Virustotal results 44.44% Heodo
2020-01-29rep_2020_01_29_6347802.docdoc 6a23106b558df36e6d88bb5b5dd187430087eff0c8a2ca1586f8538e8259e01dn/a Heodo
2020-01-29FILE 2020_01_29 251641.docdoc 623303d6b597c92e43276ac21c6338a64cb078760e9a74bd08050666a3aeca13Virustotal results 43.55% Heodo
2020-01-29Dat 907.docdoc 85359d87138be58de0c049e5c520f4de37adde9310893971769a0c640ba0a0fdVirustotal results 44.44% Heodo
2020-01-29List_256199.docdoc 99f4cbe6a9549c0dd8d99cdbee3c8ffe2c85d61f8a3cc94d1e57a962e4497be1Virustotal results 41.94% Heodo
2020-01-28Inf 20200129 Q770160.docdoc a5b8d8907e0cf3e09b5a2e7bd993dca67975830d84b0ff832334fdafe4f656d3Virustotal results 39.06% Heodo
2020-01-28mes 56348.docdoc 4b4867516d0fd10fb9b46f9474a7db95edf90a09b41086aaa1eef12ed73664baVirustotal results 41.94% Heodo
2020-01-28DAT-2020_01_28-F72160.docdoc d92bc4efa28b232e6331a4e9b5f75992659ad3e64268f5adac60ea14f9932f5dn/a Heodo
2020-01-28Arc.docdoc 4f0657b4834de2757799949da41f3ed5391b919f6539122e9dd06523c75df20bVirustotal results 36.51% Heodo
2020-01-28dat 2020_01_28 1887116.docdoc 76288b03aada28f313d41a8856e42320372dfc03b255335b3d8c0427cb01c4a1Virustotal results 31.75% Heodo
2020-01-28Doc_537269.docdoc e973fec4c3e5b5f599c5defe0c00df33eae0e9b00f1f8a1d8f9479d4e343e446Virustotal results 25.00% 
2020-01-28Dat 20200128 93041.docdoc 59428bbec1459b7f3517f508013242a3dd7f4dbdee059380b5ff1c265abc6197Virustotal results 26.98% Heodo
2020-01-28Rep-ARC237.docdoc 17de704a282307408b556e2328dec5c5715d0cd7136dcdc1d6fe54f841dc2bc4Virustotal results 23.81% Heodo
2020-01-28INF_20200128_978.docdoc c50c6dc106e4d46b561eb4f45f329818ee1c5077cf4d4b4010ce38d01e437756Virustotal results 22.58% Heodo
2020-01-28REP_2020_01_28_786173.docdoc 00c961d6f1ee38ab627a53e25d96dac0e20f93bb34e4806fc63002944c2ad6e2Virustotal results 22.58% Heodo