URLhaus Database

You are currently viewing the URLhaus database entry for http://kancelariazborowski.pl/pub/TnYJYL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:308955
URL: http://kancelariazborowski.pl/pub/TnYJYL/
URL Status:Offline
Host: kancelariazborowski.pl
Date added:2020-02-05 11:21:03 UTC
Last online:2020-03-10 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-02-05 11:22:03 UTC to abuse{at}home[dot]pl)
Takedown time:1 month, 4 days, 2 hours, 26 minutes Bad (down since 2020-03-10 13:48:47 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-07INVOICE-D3761_279725.docdoc 8e19805abe1b26bc2953fcec9a9b7681ce4c8feeef8bb0d10a4c5b34b347db16n/a Heodo
2020-02-07Invoice_N43_301710.docdoc 3078e9310437cd53e82bb9cc5679dcb71bb06e07a0113039114b9fb017590cf7n/a Heodo
2020-02-07Inv-514_212306.docdoc 00b524435a1e4b70e1783600f6ba01545628bacd15c00154b232bd464f1de19an/a 
2020-02-07INVOICE-0381_161817.docdoc 18a869754b911c8a5e368d994d8b4f7405203cd1ad23862c51c30b8b1e900b38Virustotal results 22.58% 
2020-02-07Invoice-NKWJ4943_6332994.docdoc da55d54edd3021ebaf41530e1ec8dd18fb5541bb09c3cc9d10c88e9da0351409Virustotal results 32.79% 
2020-02-07Invoice_OZ411_675065.docdoc 77815318e9f6226ad493ae32d374b61c54aee323314b8bca1d0caa7ed864e56bVirustotal results 30.65% Heodo
2020-02-06invoice_P6_981053.docdoc 092cafc5eaeb0e2d80004cf333e8e2d5898f25562f86323a3b31cbc1ec7b5d7aVirustotal results 29.51% Heodo
2020-02-06INVOICE-WH7_7584276.docdoc 0d52884323396c99de2994a867ebe7ccb325a7a33a6ae3317f4290517232a3edVirustotal results 29.03% Heodo
2020-02-06invoice-ULBO3801_014243277.docdoc fbccd622c1dd3d84621bbdc63975f6a57fd06bb79c310e15b469beed436acb64n/a Heodo
2020-02-06Inv CBVN49_75000234.docdoc af68f95640411edf06350ddc5f697fa63501dad1a427026652ba7a411e87c258n/a Heodo
2020-02-06invoice G3467_9512450.docdoc 6c06954cbc088900ecf406f49cd3620cb6152c02121a754986fb65f7935bd043n/a Heodo
2020-02-06invoice_022_895756342.docdoc 08a17a2ca774e5d63d00d6347ab8569354e6fc33b9e65cd55db64f088125e77fn/a Heodo
2020-02-06invoice-I79_346831146.docdoc 72cf0e1c89a577b94531a7723c3d176dfd37839c0b19bc7878c49945f7dd7339n/a Heodo
2020-02-06Inv-688_359966.docdoc b61644b4d4ea1d8856ff589c7017a16c5cb48d63a54cb1aa69aa19bfafc4dfb4n/a Heodo
2020-02-06INVOICE WRBT2590_066994.docdoc 515c3515f3728002f957e469f6d30be479f3db347968856134e1f0287ad0438eVirustotal results 24.19% Heodo
2020-02-06Inv-TQ48_2189250.docdoc 3a3f0714f63453bd2fcc58a0596220a3506fd01ca30af70047e5ed75fe53dfcen/a 
2020-02-06invoice POEE0_183997098.docdoc d8a98e712d6775091bbcdbe1e2b1ed30135d7fcb59a9ec4ce71bd80823438c5aVirustotal results 23.33% 
2020-02-06Invoice_DZ9_9433283.docdoc b0568d9ff726c394e4b6a7b7a59c6dcccfff57c4d618bb531c30dc3ffa5aaeedn/a Heodo
2020-02-06Invoice-KBSA701_3616872.docdoc 67617db60beb8c4cce54db289e3d3a8406049516de95ccc8940b0d1735caa144Virustotal results 20.97% Heodo
2020-02-06invoice-49_71710570.docdoc fd7c8c6cf457d1d127ee24d40ea990ccae1f8f8e8c648e61c760124a04dd4941Virustotal results 22.95% Heodo
2020-02-06Inv-923_611259655.docdoc 5f1d9dff136888c71d8b157e91821d73a94faa92af1bdc04912d223b7b1de32dVirustotal results 31.67% Heodo
2020-02-06INVOICE P61_5463791.docdoc a5fc11e008c844121e447116ba31e7430ab4bc38350cfd1b6bd52fd322c059f0Virustotal results 32.79% 
2020-02-06Invoice-2_165962.docdoc 7bfbdbf8dda70b20e5d40d50d878d970a765a65fc39e856fb26e8c525a4a45e1n/a Heodo
2020-02-06INVOICE NW58_579166671.docdoc f64c7b18189347af96b402b6f3cb3294d4dbbc7cad63748805727ac4d2a83997Virustotal results 32.79% Heodo
2020-02-06Inv-PE581_1348117.docdoc 955266fef242bce6acb2e20a60ae98fcbe68846f196fbbabfe5304bf7c56aacbn/a Heodo
2020-02-05invoice_GDR04_904977.docdoc fbc7e227ec8bd45144bdd33ac13c8a9b563282ce2c47bed6f613e71ed22dea4bVirustotal results 26.23% Heodo
2020-02-05INVOICE_CWG16_948099.docdoc 4c81ae4043b5ebb941a22c4511a4757a6a0ca5a842660b5c1ea31c57955800c5Virustotal results 26.23% Heodo
2020-02-05Inv 91_625663159.docdoc 4152d52f1411482170163f5c1a548319cf7bf6b6e3b95a2d5dce87a21ef76708Virustotal results 26.23% 
2020-02-05INVOICE-MZ3_2724252.docdoc a2de78a3a39c2c5d3d3c617de7f83a6ee2ba59eeb411de1095a208d4b21ecffen/a Heodo
2020-02-05Invoice_XMTD3_76697199.docdoc bac64a981e3fddb119868ac4b6c14005db9b3c64f608849911d6c08947267dcan/a Heodo
2020-02-05Inv-XMR628_853287.docdoc 80ff1f7758139fb61d82afe12894afc778068701ba7fc6acc78f1e05b8e6d90bVirustotal results 26.23% Heodo
2020-02-05INVOICE_CQK21_897365797.docdoc 2592177b8fc2dad7890e1d568a33bde6b00c015fc0c96dbccf47299f5f0953b2Virustotal results 27.87% Heodo
2020-02-05INVOICE SWYO497_624150632.docdoc 8e4ae42f1ee386f30217512b729013328f70fd84115d2f8b7b70155d8733b797n/a