URLhaus Database

You are currently viewing the URLhaus database entry for http://kevsun.org/fonts/report/kbvlhu4o/g97827940366v7x8vn9crvlv50dkj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:421862
URL: http://kevsun.org/fonts/report/kbvlhu4o/g97827940366v7x8vn9crvlv50dkj/
URL Status:Offline
Host: kevsun.org
Date added:2020-07-30 09:15:27 UTC
Last online:2020-08-03 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 09:16:02 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:4 days, 6 hours, 7 minutes Bad (down since 2020-08-03 15:23:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01QH553B6F35E.docdoc f5671015ad6746cf334bbde3f8310dc831719a74e5432d619f8843e20be44dd0Virustotal results 52.54%Heodo
2020-08-01UR6685360392KO.docdoc de2bea12d50b5d2cb0c8f8bfb7621b6d0409010ed976532feb38665583816698Virustotal results 50.00% Heodo
2020-07-31CF_GTP_080120_YJM_080120.docdoc cc7bdd707f48d5b726a93953080eba89aeac024a738dee113d31c83c8ea8a88dVirustotal results 49.18%Heodo
2020-07-31INV_WO4124086322OO.docdoc 75244da9313cd0d5b9ca13f7c3ad461dc8898a27702311083eefa8e2617ec16fVirustotal results 47.54%Heodo
2020-07-31REP_WE7900848003FW.docdoc 94d26039afb10119b8ed05666e43a95e3b9e8093304d9b796aa1c791f200ccabVirustotal results 46.67% Heodo
2020-07-31INV_0665212375752409.docdoc 6e57ee227a3844d09aa4ed4a64cf69ec819367f00f8df9bdac7f6e09ffc551aaVirustotal results 48.33% Heodo
2020-07-31FGY_080120_IID_080120.docdoc ad5d63edee98350ce19edb0c144dd79079865cf72f2e092b91678a77835f10c8Virustotal results 49.15% Heodo
2020-07-31282212405083853405654.docdoc 1e4b706d611f935dd5aaac2b97e921c9c1df152d9dcf98127840b7c0e60348eeVirustotal results 47.54% Heodo
2020-07-31BAL_PO_08012020EX.docdoc 60d2c1b3565b58a9f42f64e9e860fa317cbe2135d9780bdca82678fbe8742c48Virustotal results 47.54% Heodo
2020-07-3162575023.docdoc eb028d6cc2f640226ea486371a452928db1bc61e3a09dfedb3a4a6d213b4a661Virustotal results 46.77% Heodo
2020-07-31PO_07312020EX.docdoc cb62bca74d99cf663f017a96fe335ed6f7b61dc98c84b17b65184293ed02e223Virustotal results 46.77%Heodo
2020-07-31RPXBNDG.docdoc f1e1e68550b7e18fd6a28cd62ba8029851c3838d98ea70b2ed7180fd9b275de1Virustotal results 46.67% Heodo
2020-07-31ND977BKEGTX7.docdoc 139e9c5ad9d6a1623f98793bb06bda1b4e5da37d9c26de4f314fc2eb5673acbdVirustotal results 46.77% Heodo
2020-07-31INV_PO_07312020EX.docdoc 5730c4c8436965355b6f87bb9ddd7c86a1a11e75775c732c12fe03fa142d0757n/a Heodo
2020-07-31INV_0GOBGDLL.docdoc 55da5c5eb03990c56ace11826deedcc82fe9d5f1a0fa6055575be6d9830f85e2Virustotal results 46.67% Heodo
2020-07-31M_03323251.docdoc 66e9380acc03aa90e855320b6090e72cc9e0fd7c72f1fd005f08a0b3e5aeda0cn/a Heodo
2020-07-31T_PJ9826005949LB.docdoc e88b7d0e4363092ed12b21fcbf43766fb53ec19ceeabfc6a33c7a514dcfd89b4Virustotal results 41.38% Heodo
2020-07-31REP_22661638.docdoc 74c79e2ddbba251595996dc010becfe64bde18250a2996d4930d60b6dc688f79Virustotal results 43.33%Heodo
2020-07-31BAL_PO_07312020EX.docdoc 79c176bbb127e50221aff1d14c8b4f8536dfe567f477e4608a526858824fcd26n/a Heodo
2020-07-31LDC80M5.docdoc fff80f4d5e52e8ada39f0fdf2613952499c7d90f8b651335993ee20b382afe3dVirustotal results 44.26% Heodo
2020-07-31L_27991517.docdoc 921fbeab5d9cd5e7b8a6e13ddff72271c9d0ec192dbfed4d4b8ce79db99858c8Virustotal results 40.98% Heodo
2020-07-31REP_070655549137818674.docdoc 9c184a50a28234ea058519a136d7e474a3e8fa0d75828d3b5167ff02cbf87b8fVirustotal results 40.68% Heodo
2020-07-31DOC_URJBOORMB0.docdoc 522b63a0d190f96b3d7e635d7431958b68f94c8f95a44594318d0e382b17bad5Virustotal results 41.67%Heodo
2020-07-31E_FKICVSQYL1CS3WN.docdoc ee2f50571961ed46bee7e005e9fe84d76546655d2bb621d1a1d27b1da4fa4800Virustotal results 41.67% Heodo
2020-07-31MOT_070120_WOS_073120.docdoc 93bcb29483578cd7401b7bf7eaa56b52b01f61c3df4a325d51e172d8e889a53cVirustotal results 42.37% Heodo
2020-07-31ST_74413177.docdoc fce4f8a710e0b5c70dbefba56be92297a5ca5ccc6fbf5494dbf017f1e8abc24bVirustotal results 40.68%Heodo
2020-07-31U_49812828351001.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3Virustotal results 48.33%Heodo
2020-07-3135717412080416034345.docdoc 10314fc1bb1c8a78ce4473d52603d6ff6a44a14d94f1dde59f153a9e40b83fb5Virustotal results 50.00% Heodo
2020-07-31FILE_SY0586577488OC.docdoc 8d7f5cd06bb06193bf56a6084659355f3087b32118304efa7f736950c5c3224dVirustotal results 48.33% Heodo
2020-07-30PO_07312020EX.docdoc 226d9689fcf84f7cf9decb14e3b58a86f7f82df4ad2646632444f63095544015n/a Heodo
2020-07-30I_PO_07312020EX.docdoc af9e602754f7d319a32f202e76b84feb895cb3eb147da14cd7fd97b91232f11bVirustotal results 50.85% Heodo
2020-07-30JWQ_070120_MTC_073120.docdoc fa9ebbddf93bf0bde73a7e62692c9a2ba07478ad334b60810862fe795384032en/aHeodo
2020-07-30E_QM4633831774BZ.docdoc 2f335817434e148eb3306ec99d29a3947f89ff9e3aee56f76f227d5894334abdn/a Heodo
2020-07-30REP_O4BQQUHS.docdoc b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378Virustotal results 50.00%Heodo
2020-07-30DOC_4436928432068.docdoc 8706e7c86b87c282f47ef4c70c7eb9d536fe1d5c82acc211851f2443190a4a59Virustotal results 48.33% Heodo
2020-07-3077355288.docdoc b3c476526978c5ce2f22627e47f21fdd3a16f03b166965bac3be05ca29b80575n/a Heodo
2020-07-30PO_07302020EX.docdoc e36e626e95cc4e2feb34bfba30b423f08786bde39a1ddda5fa65ce1abc18bdb7n/a Heodo
2020-07-3061313282.docdoc b73b4d108375f5cff262fa1803a46d3a5a21fab2adae42521980242b2b1e76acVirustotal results 48.33%Heodo
2020-07-3066362863472107936459.docdoc 07e776c54df1af3395854812f0a6b7915acfa69f07c466e088eab9655d99d886Virustotal results 49.15% Heodo
2020-07-30INV_XSM_070120_LXQ_073020.docdoc fa73af66bc5518a1097c217ee61d717eb4aafc0305cfb29a591889b1f4908836Virustotal results 44.07% Heodo
2020-07-30WA_LG9L3WG9.docdoc bae631a4bcfb6f64cb01a26d307ddcfa85d0d63f8765a7020242e2e5b7ba979eVirustotal results 45.00% Heodo
2020-07-30SI_200103338862232471659.docdoc c84cabbddd69bdc825d121fd233f8f07c123bf60bf294b6fd253506e21432501n/a Heodo
2020-07-30X_YX2262208532PD.docdoc b142f2afa6f949be5fd70d20821f44b28680f06d06ed60e6311e9ab9c898f5e3n/aHeodo
2020-07-30REP_YXE_070120_JMF_073020.docdoc 5aca4b2c9a231b560e0375a292defe35147afbfd61d77863c69ae2b1bfb1d544Virustotal results 39.34%Heodo
2020-07-30BAL_BSPTQAAB64T3.docdoc 7f808ac67ce1cd2c1e08a46de2537e6471f4ae05aaf7f61d3d21091745adad9aVirustotal results 42.62% Heodo
2020-07-3057425355.docdoc 4e19a40400b659e85d29579ef73d26b68f233b36c95955e2133c2d7f11e6eb3dn/aHeodo
2020-07-30REP_CIC_070120_FBJ_073020.docdoc ccffd1057a0198494234050b71333c4cb0411d6c9fb3fdb730043076797c6fbcn/a Heodo
2020-07-30FILE_RZ1421252730OJ.docdoc 9753345689b4a9807df97ef55a6f73ae295aa23114df7727952483430b6ad127n/a Heodo
2020-07-3060405467.docdoc 07e19f3c256981e488d086f48552ee93a5b7d9148744edc670f477090ecfd5fcn/aHeodo
2020-07-30BAL_MJ3VRDN8BMSB011H.docdoc 7aee3145ff460dd5b1479fbbc82d32f347ccaf575848d8f5c5d9ab205913530en/aHeodo