URLhaus Database

You are currently viewing the URLhaus database entry for http://sangkhomwit.ac.th/cgi-bin/multifunctional-7ba-6qeybqonk/open-portal/4442854891-LXDUv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:303238
URL: http://sangkhomwit.ac.th/cgi-bin/multifunctional-7ba-6qeybqonk/open-portal/4442854891-LXDUv/
URL Status:Offline
Host: sangkhomwit.ac.th
Date added:2020-01-30 19:27:09 UTC
Last online:2020-02-02 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-30 19:28:05 UTC to ip_admin{at}csl[dot]co[dot]th)
Takedown time:3 days, 0 hours, 48 minutes Bad (down since 2020-02-02 20:16:15 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-01DAT_20200201_B8816.docdoc dda76af8d395dccbe545d1229617376570b747b0bacfe5582b646f42937eb732Virustotal results 38.10%Heodo
2020-02-01ARC_205329.docdoc 192a6e684ee8db113f1095fbec796be6ec1ed28cfa4367fe0b8b37991c8e8806Virustotal results 35.94% Heodo
2020-01-31LIST 2020_01_31 89288.docdoc 049abccc59689b4e8ce0be3d64cd371f56f9a8e15bb32565181fcc7c5ef856bcVirustotal results 30.16% Heodo
2020-01-31ARC-IHE799.docdoc e7863425cfe23c40a2c40e179c1bd67eba047602a382158bb9458b1f52cbeec4Virustotal results 20.97% Heodo
2020-01-31REP 2020_01_30 764265.docdoc abff4515e0e2d0f9dc1e580018dc792aa0a5dfe7fb17c640e582db5369724d6eVirustotal results 35.94% Heodo
2020-01-31arc 20200131 TF636.docdoc ea51148cdc0467878de5f7617a51eea0063f03f860e86b4d5c5ea04bc37db0dfVirustotal results 33.87% Heodo
2020-01-30list_A656.docdoc 38ed0185799cc1cb1e2fcfea1f554229ad2ddee7695a8eee704426cf83a6b7e6Virustotal results 33.33% Heodo
2020-01-30INF_2020_01_31_WRE056845.docdoc 710bca7eb8f1b38ff3ff591ffce42780c42d513d5db8e8edbed62b2a30a41145Virustotal results 33.87% 
2020-01-30Arc 20200130 08919.docdoc 72b6ec3c1e924a2f6b1bbf4f5359a7dff2c8d0cd96062fa882119a929ff9b6faVirustotal results 33.33% Heodo
2020-01-30inf-20200130-U929230.docdoc cbf6c5f0b2e8490da726cd1e46acb19ca0fb97d6a54dc0eaab3515bf2eb9d781Virustotal results 38.10% Heodo