URLhaus Database

You are currently viewing the URLhaus database entry for http://clubplatinumnepal.com/css/personal_disk/close_warehouse/lugrc_ztt8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:307944
URL: http://clubplatinumnepal.com/css/personal_disk/close_warehouse/lugrc_ztt8/
URL Status:Offline
Host: clubplatinumnepal.com
Date added:2020-02-04 11:26:07 UTC
Last online:2020-02-17 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-02-04 11:28:07 UTC to ip_admin{at}csl[dot]co[dot]th)
Takedown time:13 days, 5 hours, 27 minutes Bad (down since 2020-02-17 16:56:05 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-06arc_20200206_924.docmdoc 6ea2a78c140aa0a279726ad2f13c1cbc707508dc450760c6ba91ae5ad023a599Virustotal results 22.95% 
2020-02-06rep 2020_02_06 VYJ133.docmdoc 6359275fa65b551a691c324e03fa5c3c73ace835ca4f3d90087dc3332f76ececVirustotal results 22.58% 
2020-02-06file_20200206_SLG185.docdoc 7fe4afe59b087bf542c67a12ac54ccb89eab281656477ed8bfc41ebab0e0135fVirustotal results 20.97% Heodo
2020-02-06list_20200206_S717.rtfdoc 5c3ce056d5c4c031e62f29306f27698d258d673ab890eaf2c2bd06487933aa00n/a Heodo
2020-02-06LIST.docmdoc fa37e0cba4786db4ba847c2e4f9b4ee78aedbf0eea4491228705fc00980af4e8Virustotal results 32.79% 
2020-02-06mes_2020_02_06.docdoc 482157c417b079c676484f07bfe8a5904e393be4f53fae3e56942fe904d5b42aVirustotal results 33.33% 
2020-02-06doc-20200206-Q34262.docmdoc 43e38902740c39567550fd0e4c87c00947c5fe577765eb00051f0212c05d7cabVirustotal results 33.33% 
2020-02-06rep_2020_02_06_T246.docmdoc 9e7490ea59c003826b03252f70bd3fc3a4c910d44aa5c1cf377a0cb24491118eVirustotal results 33.33% 
2020-02-06arc 3595422.docdoc 9005832cf404bc1202dcad8865b5250a9826f2fa18a6e23ee0a7e705c1d63ab0Virustotal results 33.33% 
2020-02-06File_2020_02_06_PVD9560.rtfdoc 24bc1b322505611fc96f657f00be75ad4a096d02fc3e78d4b45369b13358575fVirustotal results 33.33% 
2020-02-06mes-262.docdoc 58f94895848e841464a8b36d26e332a50e9b082bd7df37c1c054168929b7b34eVirustotal results 31.15% 
2020-02-05FILE-CDJ33906.docmdoc 335e92129e141d12928fdc17fbb6c1dfe8b6fa59b2ff2a4ad0c60f4f0637ee83Virustotal results 27.42% Heodo
2020-02-05Doc-4510506.docmdoc 061b77c1354bff1d5cafa4e10d903ee5feb16bb91c295298444e056ffefd1370Virustotal results 26.23% Heodo
2020-02-05arc 20200206 735.docdoc c1d36e9aab2030f23a10178cc432f92255b74c7e2382840bbae1ad7c099e97a9Virustotal results 26.67% Heodo
2020-02-05REP.rtfdoc 23f4a774007e2fc64a2824e5973bb695a64667d8d832fbc29806976dad67d7f7Virustotal results 26.67% Heodo
2020-02-05mes-2020_02_05-789.docmdoc 408642c623b422164d2d5e79d498b439c267c0756121e7d453587702c3b9f50eVirustotal results 26.67% Heodo
2020-02-05Arc 20200205 80099.docdoc fe70cef82c0a8acabe3289f5863a62b3bdf8bbd476ff9c0536600c40fcbbfb9aVirustotal results 26.23% Heodo
2020-02-05ARC_20200205_969.rtfdoc 59b1973230dffbe699193f1b10773d0e327fdde500ae9ce1a1af2024c5f38140Virustotal results 26.67% 
2020-02-05REP.docmdoc 4bda34084014e21ceb2db8fb9003f36f4b3a7bd5a8bcfb9b1badbf13529a6d84Virustotal results 26.67% Heodo
2020-02-05file_2020_02_05_QN1112.rtfdoc e9de053b8046e662771b320b25a49cd709591ac896fb6bd4c324ba0b13f37b35Virustotal results 25.00% 
2020-02-05list 2020_02_05 IMO2621.docdoc ab556aef3f7baf74127e682541cd5bb674af38a62c4c1f89ff43f09388894af2Virustotal results 25.00% Heodo
2020-02-05list 2020_02_05 IMO2621.docdoc ab556aef3f7baf74127e682541cd5bb674af38a62c4c1f89ff43f09388894af2Virustotal results 25.00% Heodo
2020-02-05inf 2020_02_05 AN317.rtfdoc e017e89646b0d091bc67504f4318ea078b5a279edd898f418ff735e40c432e28Virustotal results 25.00% Heodo
2020-02-05list_8414.docmdoc dbbe0d7dded778f388849d7ce83487c413292de6f83d4d8286e7b13bd8f5b981Virustotal results 24.19% 
2020-02-05Rep_20200205_ZZW5449.docdoc 4e82c0983f4287199416515585b3322785209242527d21f73fc1213fac0da816Virustotal results 25.00% Heodo
2020-02-05ARC.docmdoc add57fd6782c427fbdbab1e52f313746c594f78a352135f6961c6e7d3d9ea2f6Virustotal results 24.59% Heodo
2020-02-05List_2020_02_05.docdoc 07fe2fb2cf6e99bc0fee819b38bda8d4c0e8f7d18f8faa9775463041c71ba5faVirustotal results 24.59% Heodo
2020-02-05dat-20200205-7204.docmdocx 3002799efe2f36491f41e0c5e350a6c6ae06bdc8fbef3c1ddf753c6c2e206736n/a 
2020-02-05Arc.docmdocx 3c0292963e5af1dfc8aa14b1b0408c3d3e0873fde4dd75962bd380b5aa67eb36Virustotal results 34.92% 
2020-02-05file_20200205_YBS39075.rtfdocx 98a046c048e6dccb43c0c6c6ce35eda6d4792e013b3bb7abf69702d4736b8840Virustotal results 34.38% 
2020-02-05rep_M3407.rtfdocx dcdcefae226e1eccadad30728bc5d5a86fcc042676c0e98078e62ccd82b564d2Virustotal results 33.87% Heodo
2020-02-05file_826.docdoc ab25cd8065a0df8608fcd69bd29689ae7657b263b8290a459052ff0cfcac3951Virustotal results 30.65% Heodo
2020-02-05rep_TES596263.rtfdocx 87bf983815a7bdfc6fda722fa02b1adef0c064fc60a443faed053662ba92a74fVirustotal results 32.20% Heodo
2020-02-04ARC-20200205-W22482.rtfdocx f2d5330b5aa423a1c21c6f960154447080fb0b6a7747307519ce8d57a310d1a0Virustotal results 29.69% Heodo
2020-02-04mes_2020_02_05_B733.docdoc f189891eacbacefcd510376ad44060a48962b25cfabcdd82b7845acdb512bab8n/a 
2020-02-04File_20200205_EV834.docdoc ec4146a69e81f690514da6199f759c184964dbe031f6ca7850b4af5d0d365150Virustotal results 36.51% 
2020-02-04Inf_5478965.rtfdocx cf00a0e13bdc326ecf08bd0238ee35c3600642133c7f84f69b0434aa63bfa291Virustotal results 32.81% Heodo
2020-02-04Arc_2020_02_04_8320568.docdoc 226e3d9397801a0c20fc12e65373887d6b8e32d5d47ea818a8b891be4513e330Virustotal results 33.87% Heodo
2020-02-04Doc_2020_02_04.docdoc b47eba67f3bdcaadc7e9116053d4a250ae71ce6031b8ae4c30bc22459a57ba0dVirustotal results 31.75% Heodo
2020-02-04rep 2020_02_04 633521.docmdocx 265e4a2697fbfecc43edb76419d9e4a8928492d01b548cd7d6804226d6b2a593Virustotal results 37.10% 
2020-02-04rep_20200204_TVH7687.docmdocx 786563efb876e891aa804967d96e0a176417ad2c731e93a1fd788cc7d15d57a7Virustotal results 37.70% 
2020-02-04FILE-20200204-362.rtfdocx a22639097a957b8debdfb4ff182eb2b6a288368b09b8427853ed91346b687737Virustotal results 35.48% 
2020-02-04arc-2020_02_04-5703.rtfdocx 71504ffb2ac7323b2da494aabf013190544db3e4230b363b639d68878aaf77dcVirustotal results 36.51% Heodo
2020-02-04inf 20200204 XS967.docdoc b71394268acf3acca757143450d5ccc9030bb60cd3e5e9e3245f81fa1b63e757n/a 
2020-02-04List 4748.rtfdocx 66fbfabc52fac899652f0e490be589ec3d3c5d3cf233ca24171ab6d8ff55a50dVirustotal results 34.92% Heodo
2020-02-04File_DKU453778.docdoc 8850bfdd37da2c746074f307dfcda1b492a3d639d6a48a9d56dc084fec7c536dVirustotal results 34.92%