URLhaus Database

You are currently viewing the URLhaus database entry for http://banahtv.com/cgi-bin/OCT/9y16gtinb/r787370127804t6q0xw62fgqgawa7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429209
URL: http://banahtv.com/cgi-bin/OCT/9y16gtinb/r787370127804t6q0xw62fgqgawa7/
URL Status:Offline
Host: banahtv.com
Date added:2020-08-11 11:03:35 UTC
Last online:2021-01-09 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 11:04:02 UTC to sales{at}dfw-datacenter[dot]com)
Takedown time:5 months, 0 days, 23 hours, 7 minutes Bad (down since 2021-01-09 10:11:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-09FILE_KS5058278138IG.docdoc 61cbc9607c1322ab9f382a0fd3411a0676ac6c83bb5538df64106fd8a5637074n/a Heodo
2021-01-08FILE_KS5058278138IG.docdoc 93545f08b9243f5b5b4fbab586021adf0926a02074eb76a106cbc4522ff663b6n/a Heodo
2021-01-06FILE_KS5058278138IG.docdoc 8afe55cfe966d6d54ad3de2d7e1d87061abbdf727fd33f2e45e21ca678e5f547n/a Heodo
2020-12-14FILE_KS5058278138IG.docdoc 097868e05d7eba120782a0c02c3e4f5ab14d44027d8841cfdc7540b246c321bcn/a Heodo
2020-09-27FILE_KS5058278138IG.docdoc bd3d700c930952cce07c7f75b0302097d05d6699f14ae412872d1f1f2eea423cn/a 
2020-08-13FILE_KS5058278138IG.docdoc 2731bdfe77c211d311b857d10babfacd3acfb74042d2c03c3ccc5b4b0abccfe8Virustotal results 28.33%Heodo
2020-08-13UI5551093488GJ.docdoc b1f8d98523bd93f24f930e85c58bf2dbacd41064303731e4dec0fed008fc3080Virustotal results 26.67%Heodo
2020-08-13BAL_28414849.docdoc 0652c184cccfd772644a2b72467b93f57ee93b1095894cc08ab3a9d9470fbac9Virustotal results 26.67%Heodo
2020-08-13INV_PO_08132020EX.docdoc 1ef5c1b7a68f7241097e40920f2b68d84457829edde96034073b68decbd72cb9Virustotal results 26.67%Heodo
2020-08-13INV_279474889656194.docdoc 30aceb60d6841a0f444bf36dbf53b021d32f7c1494c42f2c8600c6ea1b84909eVirustotal results 26.67%Heodo
2020-08-13DOC_78900119.docdoc 1ac4188f22c717e76b493881ab12ef60e719cb86d2e5289f743b42b338cb5b96Virustotal results 27.12%Heodo
2020-08-13BAL_OCV_080120_JDP_081320.docdoc 476c19ca963d9a17e5e758320b98ec3c0fd457fc9c974651e838d52313f651acVirustotal results 28.33%Heodo
2020-08-13BAL_DCH_080120_DNG_081320.docdoc fdd5654b78c6c5c23b4f6c6502eb69701c87c65ad4bd2d121046db883154d863Virustotal results 27.12%Heodo
2020-08-13DOC_10498777.docdoc ba510b5a0f97430a09efbd12acbb4c1be869e71e678adf5fa0b5498fb477068eVirustotal results 28.33%Heodo
2020-08-13INV_47138818.docdoc 286553ae57a160d6c96aead277a25d92227a3f0030fb98198e7be863f897e1deVirustotal results 52.46%Heodo
2020-08-13BAL_SZ3303808245YN.docdoc d3cbf8eb26742271a0281233827b52ab52334bef5335d0f8a27c9db613de55c7Virustotal results 53.33%Heodo
2020-08-13DOC_PQR_080120_KLX_081320.docdoc aa6d1d92278957eef1af09829bba94b4b37a84b56cb33e65cd070f7ada92e244Virustotal results 51.67%Heodo
2020-08-13REP_IR4155559374BJ.docdoc 294dc4d0897b43e65d8e7c4ab761281fae2d7ff62a16dd47e9b7731019ed0c21Virustotal results 53.33%Heodo
2020-08-13PO_08132020EX.docdoc 2ec1025c3a44b35de74853b22998ea439d6eb5f0d92d9065256692f0deadcbd9Virustotal results 51.67%Heodo
2020-08-13BAL_6753092683237.docdoc 5ec2a412f6729dbbd84453b84c85ac56f93e865a1900eb514efedefedc56467fVirustotal results 50.82%Heodo
2020-08-12I_T774TIJ0NBZON.docdoc b09cdb8f91eb70d7f179d304a4585ab2b1867a160d9760ab236065aae029268dVirustotal results 50.82%Heodo
2020-08-12BAL_BHK_080120_EMV_081320.docdoc d0ecee1cad0e97af4b127dc23861ffbee329ef4a465840447b48e554801e6081Virustotal results 49.18%Heodo
2020-08-12QM_XNBUU28EMSMU9HSE.docdoc c872e36dabcc02d5ca6d5a1c7ff09a8673509c3a45dc42978988f19f053fffadVirustotal results 48.33%Heodo
2020-08-1207883151.docdoc f3a601950fbbbb99855528eac98d43109bf3ab8aa35e4de00ae14321f1d6ea2aVirustotal results 48.33%Heodo
2020-08-12INV_SVF_080120_FLQ_081220.docdoc 5ec93d8ade8ce137e0a4718134228f587451d59aeaa2e27d24713ccc4866e8edn/aHeodo
2020-08-12INV_31642200.docdoc 04f8c0a6881a2159e13398f7072a461705b4ccc8517a28cb9565506f9b9ba8b0Virustotal results 50.00%Heodo
2020-08-12REP_PGX_080120_HYI_081220.docdoc 44d9b68f5aefc2eef02bbb78ffdd24d10ff0097705b179cd623a8833dc64ff89n/aHeodo
2020-08-12FILE_79908288.docdoc c75a7753aba5fdf5703e46cfe6e6a53ceb7df3394f932fc521343b25ab0b2388n/aHeodo
2020-08-1298436671.docdoc 86a7080b18d0d16fd7b1505799c006382ff034fb5dbb65b0e933ab56cee84215n/aHeodo
2020-08-12DOC_KHEXW9L8OTQH.docdoc 4b94ba4ad2c65349c09e18ba049dd76f5b61a5491812b3ea60961945d1866446Virustotal results 49.15%Heodo
2020-08-12REP_568650131025057718639126.docdoc 6678c9d2f3e28e53d3cf9fdcd2baeeafbc43c899aad658fd005273aaa29e3edfVirustotal results 45.76%Heodo
2020-08-1266933623752242113594087.docdoc cf71122cefc9da3a118c409800dcdf2f9a961238a3341bf9c373d69fe3923959Virustotal results 45.00%Heodo
2020-08-12VM5867472060OE.docdoc dd4525e6914fa0fd2f91bde41f2df30ef8857b9f08c19e0a106ec78098ab63c1n/aHeodo
2020-08-12BAL_4TSX4T1I9G9L4.docdoc 0ccc815e047e5c8bc4824f7c3f963bc4757a6a6efed1eba12ebd366fd1fd4c09Virustotal results 36.67%Heodo
2020-08-12PO_08122020EX.docdoc 25263694227734da43c741c2d09b0f0aceb8cb2d9488378a2ea765c6c19be594Virustotal results 31.67%Heodo
2020-08-12BAL_3WVCX00.docdoc 4020a8982e70b51b150cd40a837ea5dfceb35f0a6c9f9858b3fae5e00404ae62Virustotal results 30.51%Heodo
2020-08-12TD_JE9490226012UZ.docdoc c061ee053937b8cc9490eddd20545bd0a75a2e3eab67bccd10fbea50aa0cd7feVirustotal results 30.00%Heodo
2020-08-12MEM_080120_BIQ_081220.docdoc 56fb7bd9a61fd2c723055aa379f92c87b134c376217c523d018b8be2dce01300Virustotal results 29.51%Heodo
2020-08-12REP_CHR_080120_YWW_081220.docdoc fe5011292cb2e94c86a4ecdca607f37badd9ac68515b1e4d1b8a601eb6ce05c2Virustotal results 27.87%Heodo
2020-08-12E_IB9SQ2G.docdoc 8133ad23a95674ac43c254256076e1571b6ac10c7fa712df1a0a3fc9054f2093Virustotal results 27.87%Heodo
2020-08-12REP_FEG_080120_LLU_081220.docdoc beb08012d1a1eaa82766653d073df1c7d7579e39012001170ce6ffdd3225e1b7n/aHeodo
2020-08-12BAL_4JT0SKBA8L6I.docdoc d4c552ce903e8455566a265fd7ba1a276db5bf2a88ad998b7c93e89989d1aeccn/aHeodo
2020-08-12FILE_6178058039.docdoc deecd2c02ce1300608d772703afe9dda7a49aa3c1a1d59246b476138d6ebe201Virustotal results 28.33%Heodo
2020-08-12DG7158773876WC.docdoc 265373b64df48b69c520486d767efa8c028ec29d4b7cfaba05e0459400ad0b2eVirustotal results 28.33%Heodo
2020-08-12N_KDH_080120_OJY_081220.docdoc 408bd6525ea4e38ffe39a42a4c24c314099dff289a0cf7ff621c7f171c63792aVirustotal results 28.81%Heodo
2020-08-12PO_08122020EX.docdoc 75ef3d95b4977d636664bda5c6cd5f0444ecc1ca7d0753f424bfe829474fa330Virustotal results 29.31%Heodo
2020-08-12PO_08122020EX.docdoc 0160fb33a3b7b03284dceff60e218282693ead61eeef4d2f8bd7387b09cf51c6Virustotal results 28.81%Heodo
2020-08-12G_PO_08122020EX.docdoc 259fcebbc6d8a67f4524429d46b2c8570a46b867debfe2c186bf35ff4879d6baVirustotal results 29.31%Heodo
2020-08-12FILE_PO_08122020EX.docdoc 4d6b98ee214b8dbf1b7241f2308904bbf6ddb8ffd1ce6d6c6771f03b9afba077Virustotal results 28.33%Heodo
2020-08-12DOC_AEO_080120_VZR_081220.docdoc f5cce6613741a27074dae451858cf61fb0419f2d5ff5d09c8c8e4b85570a4252Virustotal results 53.33%Heodo
2020-08-12DOC_IE4119786495LF.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 51.67%Heodo
2020-08-12ZZB_080120_GCM_081220.docdoc 274183210ef39b2e9096bc782cf02e85e4101e18805e59ce55692d90bfc9a51bVirustotal results 53.33%Heodo
2020-08-12BL5966132497UU.docdoc bf23bdfcb1ba099bac9552136a669b228f4fffaa65dd00d243331be54d5ff517n/aHeodo
2020-08-12PO_08122020EX.docdoc 035f407beebfa56f402f686f6bf72e0217cf4d4b06106b1dcb3877e1167fdfd7n/aHeodo
2020-08-1213417587.docdoc f9f228e552c3971983d4b5909776c052df083b9b41f65f764ceba0dc9d6219e7Virustotal results 52.54%Heodo
2020-08-12STD_080120_DGR_081220.docdoc e95c19b3173d0c69d60efb950859b2ffd3020235efd6c47ffebddf950a0edf52n/aHeodo
2020-08-12I_KFA_080120_YQC_081220.docdoc 29a8f854081e5f20b6709851863472cd33a1863fbed4867153edf6fcc5e86dc8n/aHeodo
2020-08-12PO_08122020EX.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12REP_60628815.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 54.24%Heodo
2020-08-12DOC_NBF_080120_CJC_081220.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12VUU_MMZ_080120_FEG_081220.docdoc 5d38e73c8e461773d7bd09fd69760d3e0335e51cd3df39676a4c2af22343c43cVirustotal results 51.67%Heodo
2020-08-12DK1904152691GB.docdoc f5e067c9ce4ac6b6dca42fbb099d867e403cc3e6590dbe9d8650b588cbb48637Virustotal results 50.82%Heodo
2020-08-11J_HG15SHHUJSI93.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0Virustotal results 50.88%Heodo
2020-08-11458087212830.docdoc 896db11ae3dd47bbbdaef6de2e44964142461c89f1fd377015b96affcc75cf60Virustotal results 50.85%Heodo
2020-08-11Y_IC4841115692HE.docdoc 6ef92d63f441bea978f148ae6b93fd26d8feb4716042101e28ebacd3101f6eb1Virustotal results 51.67%Heodo
2020-08-11FILE_E26HCFDG7Z.docdoc 1aac25866333e7f77dc237137353a0a65ce189972d87658229eae96e3037bc68Virustotal results 51.72%Heodo
2020-08-11222199876758053.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-11PB7CQA2AQ3BBJ58S.docdoc 2adc586ea7a59715aa3226b8b211a8d39fdc6b40691c30e3a96962d2c041688dVirustotal results 52.54%Heodo
2020-08-1129811348.docdoc bb6e3d0f0394c94254fd90afa543277a215c6834d045f0c20aabd990cb68856dn/aHeodo
2020-08-11FVQY_PO_08112020EX.docdoc b9be58269c46d1dba55d08e51cf5186e5c6669171b0b96d6bf2ca5b7558af124Virustotal results 50.00%Heodo
2020-08-11DOC_4X5GNAMP.docdoc 597ed34e38d2b0c2313a9d95a421d70af23bd88d60c66de8e04f4127d425c6e3Virustotal results 50.00%Heodo
2020-08-11KI5862088227RM.docdoc 0dc77319f898db1037b996e421c171d0ddbd13166a8b589ab1da97b8bcfc99cdVirustotal results 50.85%Heodo
2020-08-11Z_SEA_080120_VOC_081120.docdoc 3f9ed468a85787c4bf29a327c525e87f3ac3fed5b4079b2958f3617ef3d3a1dfVirustotal results 40.00%Heodo
2020-08-11DOC_LAG2NWOC8SYX.docdoc 4bec5606767e91444d89a869f8d4b3d323b71326c0ce3e164e6ab2a2a1749ac3n/aHeodo
2020-08-11WX3041380283KX.docdoc 16004f742c9d51196b4a45e665c360f8eecec87448f703ca65f1ca9fd2748debn/aHeodo
2020-08-1128779411.docdoc 2e6ff6d6098f2b63d436caef9146a587a4906131d0cb324b675b959be4d88598Virustotal results 38.33%Heodo
2020-08-11REP_72980087.docdoc dfe95319cf0ecc8daf385929ff7c7cadb747e81a026fdf88dbb55eaf43b38491n/aHeodo
2020-08-11U_PO_08112020EX.docdoc 819a2c8717a367ec5a69f4a0ddc0eed9f469fea2415f8b0e3defc94d21813f41n/aHeodo
2020-08-11K_JU0698167384EV.docdoc 156c89b670d37466329fb682dd618caf3bd58f87e765cca5964284ab364e311bn/aHeodo
2020-08-11INV_PO_08112020EX.docdoc 208687883ec482d8ef391621a964345892dc3af09bbb0797af59fb18935df319n/aHeodo
2020-08-115634520304966307445191730.docdoc 5ca1aedbc7b3e63e13e3b3263321e12f1d49d668c331db20a1f996b3fd362894Virustotal results 32.20%Heodo
2020-08-11MCCG_RH7848755401EX.docdoc 3cbbd9298f3b6d77456b687dba10ecf5f45614573ed3be647167c5e96ef16552n/aHeodo
2020-08-11REP_C5GOEE9.docdoc 8bfd3587537db9be73cc189509eab9796c40a95566b79753724b36ce7dce7c19n/aHeodo
2020-08-11KQNG_2862910015784867328339.docdoc e86b2beb2b36a9530c75a89e078c28b809fca63518cebdcd860f0135e899ae90n/aHeodo
2020-08-11BAL_PO_08112020EX.docdoc 2b773fc9f00dc3faefe05dca9697347ab80fb8224235bd96dec05698ea4139f8n/aHeodo
2020-08-11BAL_0993813291151.docdoc f266dfe6eca386777143d38c655e759b22fba117bcd9138c44354938222c1673Virustotal results 25.00%Heodo
2020-08-11K_PO_08112020EX.docdoc 1455b3fed34c9f9524557c1681b4ea63f86ce164113c4c2c15bcf5e70d14b251Virustotal results 24.59%Heodo
2020-08-11REP_ID1434800626CV.docdoc 3d477e011c898aa159e3ec7ca2f5c7653bc76b0ede0fb32fc6d9c564a1e39634n/aHeodo