URLhaus Database

You are currently viewing the URLhaus database entry for http://ktbcs.co.uk/f07w_PzAMTx0KZ2JP_sector/verified_warehouse/7445119449_MBxcKPb9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:421964
URL: http://ktbcs.co.uk/f07w_PzAMTx0KZ2JP_sector/verified_warehouse/7445119449_MBxcKPb9/
URL Status:Offline
Host: ktbcs.co.uk
Date added:2020-07-30 13:42:08 UTC
Last online:2020-07-31 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 13:44:03 UTC to abuse{at}liquidweb[dot]com)
Takedown time:1 day, 4 hours, 56 minutes Poor (down since 2020-07-31 18:40:43 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-31Doc_2020_07_31_1770.docdoc 5ead1b9352418fa1085bd15bb8580363c9cbd2dedd065b928d29b42511f7495fVirustotal results 46.77% Heodo
2020-07-31LIST_2020_07_31_PW835.docdoc 292178338f7f8510eb142c51f9e32b7698b9167a26ee9f4eac6f921f285d9d07Virustotal results 46.77% Heodo
2020-07-31REP 36490.docdoc fbd0c49f5c2708ad67b9d66dc6d64eebc7ab9d234b2b79321393591d081dbdeaVirustotal results 46.67% Heodo
2020-07-31arc_2020_07_31_B7632.docdoc 32e881072750a545a85cea81d48946596c0396a875f3bc5bb2c23512b2d33110Virustotal results 47.46% Heodo
2020-07-31LIST 2020_07_31 WY953.docdoc 810d5899f085d1c3160e9a069dad7915609292c8666fe0e02c0438d997827753Virustotal results 46.67% Heodo
2020-07-31ARC 2020_07_31 NQ985.docdoc 3807ea27c87ef220916b55deb372a2eab386ffd18028cfee853a34521e6fd377n/a Heodo
2020-07-31Mes-5472.docdoc 4c6a9e9d068aaa2a313b10f83cb3f03ba7afdca5c5cf699fb7da411be652526aVirustotal results 46.77% Heodo
2020-07-31REP 20200731 R797.docdoc b9c07b0add0ebfdfb953f12ca052352e83f960649b3e3b260bd55cd93c9252bcVirustotal results 44.83% Heodo
2020-07-31file-G395915.docdoc f9daf58283bfa44af378dcad38562399d3e8a6ed3117f97a4019941b8f6164baVirustotal results 46.67% Heodo
2020-07-31REP_20200731_6260114.docdoc b9e30b1122f4f7b875893dc81126dc002e58997fde186f9a50efa25d0d41b8a2Virustotal results 44.26% Heodo
2020-07-31Rep L1962.docdoc 0d19eab6c2f65c93fb4711c4ffc828bf9cb8d040a96755fd0c8f7ca1e360dd1dn/a Heodo
2020-07-31File-20200731-AT4657.docdoc b932f9fcbcd3c278483655fe0f75a06f328c7b36c2ecef394d07e8413adff2b5n/a Heodo
2020-07-31dat_2020_07_31_S954865.docdoc 4d2ba508dca9a3ce899aa342252f786c29c81a735433b98163b27a7c1f76c646Virustotal results 43.33% Heodo
2020-07-31LIST-2020_07_31-435.docdoc c5e1be1f3b4b0978b9a8d32d545c5d775db521592c4b0c41ee29dd6353cb0190n/a Heodo
2020-07-31Doc-2020_07_31-818.docdoc cd29071298cbab67d898b5cbcf4b56f1b7d725f85267037659bdd2da3083f57eVirustotal results 44.64% Heodo
2020-07-31mes_001.docdoc 72038c4d742717c91add32782d8128e5c7753b4cd7ef566bcc1d39aa0df0677eVirustotal results 42.37%Heodo
2020-07-31doc_20200731_842.docdoc 596669e4ee62dd88d2ad8cd5b9f66d21a243874280e56566b6530cab61ed15b2n/a Heodo
2020-07-31file 20200731 S1167.docdoc 77573139944c47abf290288581650dfde32bcae6d6f1577e65987f948f483385Virustotal results 43.33% Heodo
2020-07-31INF_281.docdoc 4acec2a5ef0b6f549b39db572081188d4e2d9cc039f95a709c105b7aa3bddf7bVirustotal results 42.37% Heodo
2020-07-31mes_20200731_8134.docdoc cb6ac957d36fc72b75e45e7c90202b929041dd3d870a095ddae756a7f50180a5n/a Heodo
2020-07-31list_20200731_72191.docdoc 2b95566cf7003e763ed0197b5fa50108fe5056cb69e2e0ad9151ad8b1b2af8a1n/a Heodo
2020-07-31ARC_2020_07_31.docdoc 1602a72bd2aa1513efd4a39860a05b507ccd8dccdb8efacfb093ba85b231c4d6n/a Heodo
2020-07-31doc 20200731 5975757.docdoc 925fb8974d3622ddd5df080f3bee888c2ce91a92d43cd6b685ee82c8108deab1Virustotal results 41.67% Heodo
2020-07-31Doc-2020_07_31-524.docdoc 9f29151adf25cd326724e0397d177d286715ebfd39809e2660e099134acd1774Virustotal results 40.00% Heodo
2020-07-31list 642742.docdoc 97071ba63f17807623b2324ae19a8fc1cf5b4dda03e64e3c6bf3921575d83695Virustotal results 41.67% Heodo
2020-07-31Dat_2020_07_31_RC92896.docdoc 8000822d4c8c7e44dd4b30d66d27dc97e0200b918008f375cebf7147411cbf74Virustotal results 40.68% Heodo
2020-07-31INF-20200731.docdoc 75cc6b61d895e82e5ab177ba62aa31ac93ed56ec1ba04701b2b2b3927d98e30dn/a Heodo
2020-07-31INF_2020_07_31_417.docdoc f50fb4e4eb9c8fd7caa059bb20573d67a0a47bfeda1c3d0efb6a2f4faeb77ea4Virustotal results 49.18% Heodo
2020-07-31inf 20200731.docdoc 4747129b682a8bce6fe1548a36147ad211b0089ae003ea7a9e8524d287e0fba9Virustotal results 49.18% Heodo
2020-07-31ARC 20200731 PML624.docdoc 9dd3708e066847d1e8829df7fcb338017d72aafeaf867869a58f5524a5328888n/a Heodo
2020-07-31rep-2020_07_31.docdoc 73729cfbc98f25d4dbdecf63cd27eb82bff9057cdf78e160440e41c9d553f4c2n/a Heodo
2020-07-31DAT 20200731 H267581.docdoc 504a1e650555404e3526d3045ef7bc16a577c06635215b1cea49e2c8877a7cf7Virustotal results 48.33% Heodo
2020-07-31Arc-20200731-058653.docdoc 624aa2e87b85c4c93a21bf0b764d1594ddff016da7f44040918cbcccdfb017c5n/a Heodo
2020-07-31arc 2020_07_31 YA6393.docdoc 06bb12ac0adffba3f0f1286ef26927750fbe1438a8953b91109ec4890e548404n/a Heodo
2020-07-31rep-2020_07_31.docdoc 8fa1a53141a9745f824ecea3c830850c7b798488ba6e3e33382229bf495c1d5dn/a Heodo
2020-07-31Rep_2020_07_31_BTT52307.docdoc ae98434b475cd34f72aa2b317e2c29339d0a2578d792a14ee7102cc0bb415aa8n/a Heodo
2020-07-31FILE-20200731-5993.docdoc 2af35203a78ab48a45126f959aa05f3037e941bc7ff22d04decb13d88846a967Virustotal results 48.33% Heodo
2020-07-31FILE 20200731 PM249.docdoc 61e8635da3b4dad36cbca3de124b4e2d07a5de346e069517354f0e063bb9ecfdVirustotal results 48.33% Heodo
2020-07-31Doc-20200731-MEF79789.docdoc 57b075be6438184bf527bd055363a33f851ee9acb765aaff3c717f2ca6ea7d5fVirustotal results 49.15% Heodo
2020-07-30ARC_20200731_3903953.docdoc b9c357adce4a39fef2bdc25779951e2f40307dade90e05fdd0f95b77cf77c786Virustotal results 49.18% Heodo
2020-07-30rep 561897.docdoc 1aec4694358be776e5733a6efe431b95ad93ed01eb0b394bac898a68f62938b5n/a Heodo
2020-07-30file-20200731-29296.docdoc 103409fe241a51656f19890d23c38daa378646f589ef42fb9a84480af85fcddfVirustotal results 50.00% Heodo
2020-07-30Inf 20200731 4806161.docdoc 71100778f6bc4fefc8bee7d8191d1a50ec140a1f8d30b57b9abfd2db06635274Virustotal results 48.33% Heodo
2020-07-30MES 2020_07_31 N627.docdoc 336b25265f899aed9af71e2c258d4f5dd3a1dd3ae5f9cee18969e5132dfd18b9n/a Heodo
2020-07-30FILE_2020_07_31.docdoc 47a4397d930bc10e83e63f8587de72befe6ee3f3364bbb2c16247d630d450e85Virustotal results 48.39% Heodo
2020-07-30Arc-20200731-0203746.docdoc 1076bbb650f5180bd85eead7b5411b8d601b04cebbf38dac7328ea86b4e7adb8Virustotal results 50.00%Heodo
2020-07-30DAT 2020_07_30 WKI2483.docdoc 82c19bc7b809a5cb1e7301762117274546c812090fc4aeb9802e77736bc3a95dVirustotal results 48.33% Heodo
2020-07-30Mes_2020_07_30.docdoc de22f3d159bf17825aa2c83805068b8ebe5d690f6981d2e8102613087fd3b6den/a Heodo
2020-07-30INF_63646.docdoc 8fa056cca848c61d974a9bbcb5ee31aa9e45987ef15a2589765d61065fa9fc1dVirustotal results 48.33%Heodo
2020-07-30ARC-20200730.docdoc 94edc6ca93bf52aa32d4a4c5ff3382b0a1e1b39e3b234ff48354551d37aecbafVirustotal results 47.54% Heodo
2020-07-30Dat 20200730 OGZ795817.docdoc 0a20209c9b6d387dc569b4a5e5c2bb715254fb1f1448b3a09f7eae306a38efe6Virustotal results 47.54% Heodo
2020-07-30mes-20200730.docdoc 1456611b072537f939f40c7e12afb4203e7408aaa3cac2f6e42d555ed5807283n/a Heodo
2020-07-30ARC_20200730_W82985.docdoc ad92d3c3a20bc981d01c9e656562b497f7231f4aae963d83823611086b681496n/a Heodo
2020-07-30doc_C1853.docdoc 8a1fba88b4c01acc0265806ff8f82b7bf292654f354481021212bb8bdb372409Virustotal results 47.54% Heodo
2020-07-30FILE-20200730-P88759.docdoc c7cf836f720de4f6ca197815eb09d5588d630f613b082ead21ca6fcbdf124f3fn/a Heodo
2020-07-30INF 2020_07_30 1154.docdoc 6511b1fde2ef072f82a4de1fe9124c05afea6eee427bb3f6e204d6d8f583bf8bn/a Heodo
2020-07-30Mes-2020_07_30-32241.docdoc 093e1000147aabe0b38214e2060d1d52e6592e7aea8e0f1ee01e0735f5421e89Virustotal results 44.07% Heodo
2020-07-30Inf_920408.docdoc 8a47aede1c01b49c2d649a74e6a6708a81d61a8e196ef0584735e31b1d8504beVirustotal results 43.33% Heodo
2020-07-30mes_20200730.docdoc 69cbb0b1f6900a121b7b27ae55e71124bfec8baa108abc09348c4cdee24a63b6Virustotal results 45.76% Heodo
2020-07-30File 20200730 PZ8325.docdoc 2e2e5e6833664812bb481051e7202eeabed0a90e21bc190758eaaf0a2c498528Virustotal results 45.90% Heodo
2020-07-30LIST_2020_07_30_BG864117.docdoc a702f6781176c5d488363281032eacb1cd7fc80931d732d49e548246908abd6eVirustotal results 45.00% Heodo
2020-07-30List_20200730_UDC046033.docdoc b1d2d02314e9aa70078f6e3eba851d85d4718e1f378edaba74e0ce989aa1365fVirustotal results 45.90% Heodo
2020-07-30MES_20200730_3016.docdoc 8308f4e06c4550f383e0b7dae8a85d4677618d81c739452b3d0533aee80a359cn/aHeodo