URLhaus Database

You are currently viewing the URLhaus database entry for http://seatrade.com.eg/index_files/closed-o2z-17xm2/verifiable-portal/bkhs1-x930491v/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426466
URL: http://seatrade.com.eg/index_files/closed-o2z-17xm2/verifiable-portal/bkhs1-x930491v/
URL Status:Offline
Host: seatrade.com.eg
Date added:2020-08-06 19:03:06 UTC
Last online:2020-08-13 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 19:04:05 UTC to abuse{at}tedata[dot]net)
Takedown time:7 days, 0 hours, 35 minutes Bad (down since 2020-08-13 19:39:15 UTC)
Tags:doc emotet link epoch1 heodo link Quakbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-08FILE 2020_08_08 807537.docdoc ba50483a5407dc7d213263534638c2e4e0445d9d06f977dc496e979beda32f33Virustotal results 45.76% Heodo
2020-08-08List 20200808 2616.docdoc 6d851aa91fb4cfef84903c3d1926892f45b06e662077f5fb62434768f44e5ea0Virustotal results 41.67% Heodo
2020-08-08file_2020_08_08_8454371.docdoc ce5d6aa5b1cfe76e48ec485669e784f6e6fa115c5c008cd89c499726b2a74652Virustotal results 40.98% Heodo
2020-08-08List_2020_08_08_VGQ14119.docdoc 7749011322a1fa88e88ac29e4663fc961f0b6ca6432e1257aefaceb28252a4c3Virustotal results 40.98% QuakBot
2020-08-08DAT-OX605.docdoc 8d118098701f23422ec3560934134ab170767e28ea66c8a336be4dc8ec102987Virustotal results 44.26% Heodo
2020-08-08List 20200808 I737995.docdoc 70d75d5cd67db6987e30cdec0ba5856d4d7acaedba8e771af42a12151b44295cVirustotal results 41.94% Heodo
2020-08-08File JTK7687.docdoc dbbfe251ebab8c3e19de23d3e0aca5661d1e893f34b9a123699fa7f2d3d5b8abn/a QuakBot
2020-08-08doc_798.docdoc cec603db22ca641e772ad1f3912383a2b3c73d6210e966c3b6ab9b4ab6695362Virustotal results 40.98% QuakBot
2020-08-08FILE-2839761.docdoc e49e34bfeed9d527f6a2c80df9f388d89705278aafa1aa2b250556754ac38944Virustotal results 40.98% Heodo
2020-08-07Doc-20200808-ZW30268.docdoc 5d2b88e4fefb1593bca1de5b27276ba0d00140416c91339fc6fd44431c8ccbd9Virustotal results 40.00% QuakBot
2020-08-07list 2020_08_07 ISE367294.docdoc b73f780a433d41cd9d6d0046f85474514b51eb5471e34e530974673c6579eb1aVirustotal results 35.00% Heodo
2020-08-07dat-2898046.docdoc acf64b8e97e3201f06314a33733d479adef77620d8c569663be2e02c3ef38e98Virustotal results 33.87% QuakBot
2020-08-07List 20200807 1339575.docdoc 1da264741da26d5235adcc736828d7c8f3297c6a299bd6f1f264ef21de841c04Virustotal results 34.43% QuakBot
2020-08-07doc-671.docdoc d44dbb7dff5cb10abc9c612c5b8a79f2b57a93a11cc8f8da66d9879ab5bc8dc3Virustotal results 33.87% QuakBot
2020-08-07Dat_6460382.docdoc 7ba25693e2acb9afa6c453839ed62fb82efd94369f13a1549a0b57b8949cf0ccVirustotal results 33.87% QuakBot
2020-08-07Mes-Q8059.docdoc cb1f2bf4578f29a20e8d2870d56795a1b2ebc499d05b0b2398af82735726cb6fVirustotal results 34.43% Heodo
2020-08-07MES-2020_08_07-KU631685.docdoc 0c766d3a07f99e1cc96a0d7bc751071359e27be1f241df811774c74e0e946e05Virustotal results 29.51% Heodo
2020-08-07INF 20200807 2728.docdoc e3fcefe4f56ac0b117abaaf8fb063b466bdfa3a115a2992daa4cd928cf46b3ceVirustotal results 27.42% Heodo
2020-08-07list_V35897.docdoc 69831db688744f625614a4e2ac33c2ef43314a1d0b7478ad88dfec441d669122Virustotal results 26.23% Heodo
2020-08-07rep 20200807 J996112.docdoc a288dd3026142c4fb729f070fdb05a968a11a0cb77d24bdcc066866ac51eb936Virustotal results 26.23% Heodo
2020-08-07DAT 20200807 7359142.docdoc 3ec975d212b214553bac033787cb72d8310c493b5261f76b8ba3b5421b9f31e1Virustotal results 26.23% Heodo
2020-08-07ARC 2020_08_07 845.docdoc fe1ae8ea8abfaf32f9f1f40504fc00c2f746c6dfb758714e8a29b9a43c35d019Virustotal results 25.81% Heodo
2020-08-07List 1009918.docdoc d8b1512c883ce8a757dc12b9a48423d6f6854ab429004ae2435ed470a397dcf5Virustotal results 25.00% Heodo
2020-08-07arc 20200807.docdoc 1cc3fe55cd9952581cd54ff7b1a12d5a7a2aa90d760fda8b9a6b2ea8d010e1a7Virustotal results 44.26% Heodo
2020-08-07arc-603.docdoc 2c5b7f8488ec8abc944d1a90f84293494cb7c6dea6cd23bad40fce8429f41442Virustotal results 44.26% Heodo
2020-08-07MES 20200807.docdoc 9fda153dee6f47ac4ab198402cc17dac3bd96bd975458ef5dc23e2345abe48bdVirustotal results 43.33% Heodo
2020-08-07File-20200807-939806.docdoc fe032b45e17799af19f0dff52340131849e761ed8072baa910c48854206f12b6Virustotal results 36.67% Heodo
2020-08-07DAT_2538.docdoc 2a7f0551cd0fa000ed5992db4346987430e32084240b9eb53ad0369763734b71Virustotal results 33.87% Heodo
2020-08-07doc_20200807_5600271.docdoc 50142b56616f33de96a00f3619a900237753bb4552fdd62f220ae93fb25cbf3cVirustotal results 35.48% Heodo
2020-08-07File_20200807.docdoc bde536ff0957de3adb9867d66016e8c3cbf60783323bb1589b762ca55e034fd0Virustotal results 37.70% Heodo
2020-08-07inf 2020_08_07 DF7538.docdoc 4db4602068fdb37b51866a80dab39455e49b2c3a46b1e778f4afb54385027935Virustotal results 33.87% Heodo
2020-08-07ARC_5200464.docdoc 8dee1c489137e967d7674246af7a20f33986189be2bc33d2d1c2a766391d65d1Virustotal results 32.26% Heodo
2020-08-07ARC-2020_08_07-OI9503.docdoc a9f3247aa61118e5538983621ebddd91a88c6fef1097fd3f142ce169b078cd7eVirustotal results 29.03% Heodo
2020-08-07dat-20200807-V84728.docdoc 45d57af4df3ea5f698e2cd3b99ad5c649487b9a7c3583fc1add77c0cd4a7d945Virustotal results 29.03% Heodo
2020-08-07Inf-20200807-3248.docdoc b8dacf3ee73cdfc545f0e66e81dd8331ad345136a5a94dcc78f387bc7dfbea3fVirustotal results 29.03% Heodo
2020-08-07MES-516313.docdoc 73e2caa408d07e0108e48b2636910a8894434b6f052b80a142eadc2b8e4390feVirustotal results 30.00% Heodo
2020-08-06Doc_20200807_PVM8038.docdoc 3a17dd818992725fb9bf1c2e0d4d18141f5b9fe15a184e7ebac32b935fe7e60fVirustotal results 26.23% Heodo
2020-08-06inf_20200807_549.docdoc 4d66b8fafcf69f590dc74a3383fa08576a6de54ef030b8d47bced68e03f63065Virustotal results 29.51% Heodo
2020-08-06inf 20200807 6346723.docdoc 834ae3e3344f994a972b0a6dd3850fc3a7d26a9d1ab48ed2c3ec49e34239147eVirustotal results 29.51% Heodo
2020-08-06MES 2020_08_07 KTV753916.docdoc d21fb5ef05cc6d7375ad67529c3b74d7111dff2fd9a11ce6944a25e4dc2463c0Virustotal results 25.81% Heodo
2020-08-06dat_2020_08_07_L0007.docdoc a1668530748354caf4b83b007f729aa168414a2e53c2c87bc4043bdd0c7a3c06Virustotal results 25.00% Heodo
2020-08-06File_2020_08_07_F1778.docdoc 60317c70b7bf645aaa1486df2110ed8d5b562fa849d73b3d6c850093713545b8n/a Heodo
2020-08-06inf_2245773.docdoc 2390a70453dddc7b17d5b2b8ddccf943b3004dc5550d6537d2bbaa9b5e7feff1n/a Heodo
2020-08-06Mes-MY68334.docdoc 18408c500fd552380bf7fc52ace963938f89014e083d14d14a2e6434db057c97Virustotal results 27.87% Heodo
2020-08-06dat 20200806 L628.docdoc ec158636bf6fa445fa2815c7ca11d6d21210ab8d95180bcc110164193210fa58Virustotal results 28.33% Heodo
2020-08-06MES 20200806 U307307.docdoc 8b7d452fbddc7ae83d98a52e61df4d58e8376e0aac9419dcfa40777aa279a0a1Virustotal results 29.51% Heodo
2020-08-06file_323.docdoc 3975037bef94f652eb8077090e9533499bac916e93ac2fa02b91aad09ceb21caVirustotal results 27.87%Heodo