URLhaus Database

You are currently viewing the URLhaus database entry for http://kyric.com/cdr/docs/bjcnn87pc2z6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429087
URL: http://kyric.com/cdr/docs/bjcnn87pc2z6/
URL Status:Offline
Host: kyric.com
Date added:2020-08-11 07:33:13 UTC
Last online:2020-10-18 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 07:34:10 UTC to abuse{at}ihnetworks[dot]com)
Takedown time:2 months, 8 days, 10 hours, 43 minutes Bad (down since 2020-10-18 18:17:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-01CPL_080120_MBT_081120.docdoc 8ba6e22d298dc4a7b8722b5e15bfb9f8b4128d0fba504cff7fd4acd55999eba5Virustotal results 71.93%Heodo
2020-08-11U_PRN_080120_KCR_081120.docdoc 16004f742c9d51196b4a45e665c360f8eecec87448f703ca65f1ca9fd2748debn/aHeodo
2020-08-11INV_YEP_080120_QWH_081120.docdoc 8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673n/aHeodo
2020-08-11FILE_7NVTEWK0HCF6.docdoc b00cca3e018cd12f8da09beb5edb2555af9e0106c7c95c93383875f06cbfa436Virustotal results 29.51%Heodo
2020-08-11FILE_4088216480.docdoc e86b2beb2b36a9530c75a89e078c28b809fca63518cebdcd860f0135e899ae90n/aHeodo
2020-08-11INV_PO_08112020EX.docdoc 2523cc27570a391a84abd65e82fb1a231337b2a5361915a4de35de9e73a22a60Virustotal results 25.00%Heodo
2020-08-11C_ZTR_080120_VTY_081120.docdoc 9c27696439556e2b99caefc78553b53b468df73385bf1d37905cb9036b4e2bd7n/aHeodo
2020-08-11FILE_ZB6348586652SP.docdoc 2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404n/aHeodo
2020-08-116H0N9FD4IX4O.docdoc b20330780ffde03eb1b391b3a57cd24eca45f10aff5916ff6ac1366f033f6c32n/aHeodo
2020-08-11LO_FUM_080120_WXU_081120.docdoc 9a1325184bf5b26f62b02cb398df0e599304069649a0807b253f69de9ad9a74fn/aHeodo
2020-08-11REP_AH2697051335VF.docdoc f6fa765a0885ee4a0383d1fec754e6051fc90b598eb9c66cc528e9adacce7d5bVirustotal results 23.73%Heodo
2020-08-11INV_04954568.docdoc 46836900731228d1bddadff1e02190fec419f9f51eb63ed6e0b677a229e536ceVirustotal results 23.33%Heodo
2020-08-11REP_68637587.docdoc 9fa6f271532ad52f77c508705e1b99fd612fde44318f5bd13a6a3925b059ae8dn/aHeodo