URLhaus Database

You are currently viewing the URLhaus database entry for http://it-club.kg/files/En/Statement/Account-33342 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:41162
URL: http://it-club.kg/files/En/Statement/Account-33342
URL Status:Offline
Host: it-club.kg
Date added:2018-08-10 09:45:27 UTC
Last online:2018-12-04 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-08-10 09:52:11 UTC to abuse{at}rtcomm[dot]ru)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-04n/aunknown b1d89a93267d3d7b89fdfae4f3313257c4a45e9f8f0114e714c631160c85321fVirustotal results 0.00% 
2018-11-28n/aunknown 0cf0f8963f6560fed3b36fb927dd2b44657472f438a1983030c242fa8d2531b4n/a 
2018-08-10Final notice.docdoc 74c6e442c5527639b692b7324a2795e6d5d6870de718fc7d3acee33791a62088Virustotal results 35.00% Heodo
2018-08-10Review invoice required.docdoc be067a5bb420931e608a60872fe4cf7f94009e0bfeeffbbeda1fe556ed0dd071n/a Heodo
2018-08-10Invoice Query.docdoc dbde9292cbefe9efdb2e701469636e0c7825ac33bcb0595fd5a9f86e0a45fe44n/a Heodo
2018-08-10Invoice as at 10/08/2018.docdoc f0bf639da101f2a263b164a6eba4b6da81e7665ad82a0b33f6f360fc74babcd1Virustotal results 35.00% Heodo
2018-08-10Billing Invoice - Job # 692171.docdoc 3751fcf093e112800f61a83b4ed5392a6665ef1d8be22a104111aec55b39d709Virustotal results 35.59% Heodo
2018-08-10Inv. no. 5O6S12408.docdoc 28582479608874fc819077ca9ab5e849b83250488d0d5defc484121b1c6c0c81n/a Heodo