URLhaus Database

You are currently viewing the URLhaus database entry for http://elkanto.com/cgi-bin/Documentation/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:420546
URL: http://elkanto.com/cgi-bin/Documentation/
URL Status:Offline
Host: elkanto.com
Date added:2020-07-28 09:02:14 UTC
Last online:2020-07-28 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-28 09:04:02 UTC to abuse{at}ovh[dot]net)
Takedown time:2 hours, 54 minutes Good (down since 2020-07-28 11:58:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-28FSG_070120_UPL_072820.docdoc dcab281c030ca8ebd833b95d2379df634eec571e1ae19b6aad70ae1a0eb2e07en/aHeodo
2020-07-28FSG_070120_UPL_072820.docdoc dcab281c030ca8ebd833b95d2379df634eec571e1ae19b6aad70ae1a0eb2e07en/aHeodo
2020-07-28PO_07282020EX.docdoc 7880dbee79353af6a070ba20eda972b3ef7abad67d3c309d064ced44676ed6e4n/a Heodo
2020-07-2851470727.docdoc 23c51d3c717104427e3ee990c8db28900701083c086707b24493ad7f9968be97n/a Heodo
2020-07-28YQR_070120_KHG_072820.docdoc 69314a5a40529facfde61bb78562869e4ca9a67ba69a3028d376a265e174ea6cn/aHeodo
2020-07-28I_ZI5792916620EZ.docdoc 2840dbe68611c23040d1bcd78b9473dcd48de959c93280ee78f105b5af51fe75Virustotal results 37.70%Heodo
2020-07-28DOC_UXM_070120_WMN_072820.docdoc 8a02a02bf39b80d809da634fe105c29a2b012acfa59c4eaedd94360fb5fbd2e3n/aHeodo
2020-07-28BHE_070120_OPQ_072820.docdoc 26906041efdeafb6c1754eac8dff97abf079148816f1121ef92bfaed0a6e9991n/aHeodo
2020-07-28INV_DE4186686077UJ.docdoc cd8165b730d0801f2eb1524b1a430abe1d69e7105b2a898fbcca440afafd8f01n/a Heodo
2020-07-287CQ0K4C33D8W.docdoc 5cecbe51fc2299bf1c6d5d6a6ff026cf27c9c6babf6b1e21e63d6c9e77e0c13an/a Heodo