URLhaus Database

You are currently viewing the URLhaus database entry for http://frankbruk.pl/logs/217GINFO/PI3668337177G/Aug-09-2018-18227/REZT-QUO which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:40745
URL: http://frankbruk.pl/logs/217GINFO/PI3668337177G/Aug-09-2018-18227/REZT-QUO
URL Status:Offline
Host: frankbruk.pl
Date added:2018-08-09 23:34:44 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-08-09 23:36:10 UTC to abuse{at}domeny[dot]pl)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-10ACH 79462NDLXSG Aug-10-2018.docdoc 8679469288439887ca42ffebb82bda8f26cf82f70cd00941ca54703307842b79Virustotal results 35.00% Heodo
2018-08-10ACH 9990237SMODFYI.docdoc 6a9b3661f52200da3d02070b646874fdde1902a5bd2a22dccb90ddc21d8df0ccVirustotal results 35.00% Heodo
2018-08-10WIRE 543RGDERBIR Aug-10-2018.docdoc 37c08bc14f578f0b19f992648c113e46dc49e0ad1ddc9cd2e63dfb9242fe151cVirustotal results 36.67% Heodo
2018-08-10ACH 36474IWRSRGN Aug-10-2018.docdoc fc368060fb4946b073b55e56d495e7ab249dbdabbc8f7cd809b55089c9854feaVirustotal results 33.90% Heodo
2018-08-10ACH 51UFBSZQV Aug-10-2018.docdoc f23147b0d5a9cae49c26d00b85809a3391ffbe0bb2366e3f38397ad31084e29cVirustotal results 33.33% Heodo
2018-08-10PAY 76313ZBLYXJ.docdoc 2c97f2997575df803d28dd38636856fd0efb9fa7efaea22c526b8dc71daa9aeeVirustotal results 30.51% Heodo
2018-08-10WIRE 8923840UUOH Aug-10-2018.docdoc 86a7dae872af9e6ee468db8b766f3800c60e622745111f1de5a70c916858e38bVirustotal results 30.00% Heodo
2018-08-09ACH 00269NYBMUOYH.docdoc 21982965fc5661c509d1833f8fe9caf02d7649619b7b542d7a735abd7936a9cdVirustotal results 32.76% Heodo
2018-08-09PAY 08874OLBHS Aug-10-2018.docdoc 626ead7063f00752432c54dcb61975b060e306f2712fa2fb1e6f3aa4cc406e1aVirustotal results 31.67% Heodo