URLhaus Database

You are currently viewing the URLhaus database entry for http://uss.ac.th/cgi-bin/public/beawmod/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429440
URL: http://uss.ac.th/cgi-bin/public/beawmod/
URL Status:Offline
Host: uss.ac.th
Date added:2020-08-11 14:38:36 UTC
Last online:2020-08-12 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 14:40:03 UTC to noc{at}cat[dot]net[dot]th)
Takedown time:1 day, 1 hours, 14 minutes Poor (down since 2020-08-12 15:54:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-1206979357.docdoc 4020a8982e70b51b150cd40a837ea5dfceb35f0a6c9f9858b3fae5e00404ae62Virustotal results 30.51%Heodo
2020-08-12INV_60652076.docdoc 2c99381fa134d8121f52b07a62cf94574cd977c2662a4087f18b2f5960370005Virustotal results 30.00%Heodo
2020-08-12PO_08122020EX.docdoc d9d475ae79ed46f2b566d8683b5d680cced225807e23723845c1ee49efdab247Virustotal results 29.51%Heodo
2020-08-12REP_299R0E66Y3.docdoc fc15009f0b0f3066546203abf08c3f98e289f63a7791d5de4b94a666e6348483Virustotal results 26.67%Heodo
2020-08-12REP_05428772.docdoc e6aff4596a71a4b0c501dd7850553e31385190366a94fd6dc636e0664665e131Virustotal results 27.87%Heodo
2020-08-12W_HG4259659387XK.docdoc beb08012d1a1eaa82766653d073df1c7d7579e39012001170ce6ffdd3225e1b7n/aHeodo
2020-08-12DOC_IOX_080120_MSL_081220.docdoc 6b825da15adc2cc05d82bcea3118130263ba2dc1d411e6486cbf37e6d317cc6dVirustotal results 28.81%Heodo
2020-08-12INV_BB6934185544NL.docdoc 7eba5b17df94761ce65d93039d81735e0a1525f6b3244704a023df60dd04c17en/aHeodo
2020-08-12585574726098878174625.docdoc 975bbf11f28dfc7c66c6cf49572657178c8ee4acb9d48d403c01bac687b1eedaVirustotal results 28.33%Heodo
2020-08-12REP_AGL_080120_RPT_081220.docdoc 408bd6525ea4e38ffe39a42a4c24c314099dff289a0cf7ff621c7f171c63792aVirustotal results 28.81%Heodo
2020-08-12AAY1N4LR8.docdoc 9f355154b3f108769ec0855431cb69c5172916d78b07a8d79ff6da2f49371b6aVirustotal results 28.33%Heodo
2020-08-12PO_08122020EX.docdoc 81c27d10e37bd700d8cee11eba8d01d2bda91b7743083fa7a4e51f3f169ef0c5Virustotal results 28.81%Heodo
2020-08-12DOC_TCU_080120_VOQ_081220.docdoc 214f91b9b3ab2ea28b14536241901516f9141df4e12fd3b2ce52088fef0a3734n/aHeodo
2020-08-12FILE_32674914.docdoc fe14ae5d76ac1ccafc67f474efe315000dadae344444a44c9200e04e94ebbdadVirustotal results 28.81%Heodo
2020-08-12BAL_KU0606617658VJ.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12JQW_080120_NEL_081220.docdoc af51abb1270f34af770a98599b8023a55d05885a976e2c898299e78ffe91c943Virustotal results 51.67%Heodo
2020-08-12REP_66544607.docdoc c978e204a4343d19a9b1df57379618a391455fe0f0fd17e49fcb670670c4241cn/aHeodo
2020-08-127315652738611281309332972.docdoc bf23bdfcb1ba099bac9552136a669b228f4fffaa65dd00d243331be54d5ff517n/aHeodo
2020-08-12REP_AHX_080120_RFK_081220.docdoc 035f407beebfa56f402f686f6bf72e0217cf4d4b06106b1dcb3877e1167fdfd7n/aHeodo
2020-08-12DOC_V1A5DNS3NCJ.docdoc 75e0692474be7d8066516c6ccb1904530d6540d82228ca27d52c6c8c5f806264Virustotal results 52.54%Heodo
2020-08-12PO_08122020EX.docdoc 455f02233220edb99d4f99f02ec20a5ad8b3a157bacaeae2dcac14f707613869Virustotal results 53.33%Heodo
2020-08-12G_UOMEJ0Y0FYW30U2.docdoc 29a8f854081e5f20b6709851863472cd33a1863fbed4867153edf6fcc5e86dc8n/aHeodo
2020-08-12BAL_SHLSIUCWHE1KU7.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12PO_08122020EX.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 50.85%Heodo
2020-08-12DOC_GY1862117010ZH.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12DOC_BFR_080120_HZB_081220.docdoc 5d38e73c8e461773d7bd09fd69760d3e0335e51cd3df39676a4c2af22343c43cVirustotal results 51.67%Heodo
2020-08-12INV_555300198404755589325.docdoc e4d1deaefa7f905c5ce7490867ae09ff2d50fdf4162f102e276653c1c46eeab6Virustotal results 51.61%Heodo
2020-08-11YRK_080120_YSO_081220.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0Virustotal results 50.88%Heodo
2020-08-11O_IBA_080120_EFQ_081220.docdoc cafe9be1769c83fbeb348a49f0c1e0512df75007fbca4689516ce442fa72b54eVirustotal results 51.67%Heodo
2020-08-11REP_928HWLV0RV0.docdoc 854be831ad01f15c5a5cc2f0f253d059b2a9faaac66db5b90fe51b3daa401c57Virustotal results 50.00%Heodo
2020-08-11BAL_90722023.docdoc 1aac25866333e7f77dc237137353a0a65ce189972d87658229eae96e3037bc68Virustotal results 51.72%Heodo
2020-08-1103054631.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-11BAL_36744743.docdoc 2adc586ea7a59715aa3226b8b211a8d39fdc6b40691c30e3a96962d2c041688dVirustotal results 52.54%Heodo
2020-08-11BAL_WS2768379213EB.docdoc bb6e3d0f0394c94254fd90afa543277a215c6834d045f0c20aabd990cb68856dn/aHeodo
2020-08-11WBC_PO_08112020EX.docdoc b9be58269c46d1dba55d08e51cf5186e5c6669171b0b96d6bf2ca5b7558af124Virustotal results 50.00%Heodo
2020-08-11995K9GDK.docdoc 597ed34e38d2b0c2313a9d95a421d70af23bd88d60c66de8e04f4127d425c6e3Virustotal results 50.00%Heodo
2020-08-11BAL_WSU_080120_ODC_081120.docdoc 0dc77319f898db1037b996e421c171d0ddbd13166a8b589ab1da97b8bcfc99cdVirustotal results 48.33%Heodo
2020-08-11DOC_ODX_080120_FRD_081120.docdoc 8ba6e22d298dc4a7b8722b5e15bfb9f8b4128d0fba504cff7fd4acd55999eba5n/aHeodo
2020-08-11C_69948471.docdoc 8e5f3490181127db4ae19a0c19a2aab3233016bcc64272ec836a68426ed0ae89n/aHeodo
2020-08-11FRB_6035633452903472059690442.docdoc 6c042835d406a08afd589550530dbc4586f9490fb02cf9cf77a0695097190ebcVirustotal results 40.00%Heodo
2020-08-11FILE_QO2701214975ZU.docdoc 8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673n/aHeodo
2020-08-11PO_08112020EX.docdoc f288fc67d607003c58bc277bf9c779e8d206ae43259b9cea64be737d4df22a7dVirustotal results 36.07%Heodo
2020-08-11DOC_697569849631766302042413.docdoc 34d67996b2581cdd647857f3e3e696b014b5439d13108d5cbc713db42e9089cfn/aHeodo
2020-08-11FILE_HQ0859155967MJ.docdoc 156c89b670d37466329fb682dd618caf3bd58f87e765cca5964284ab364e311bn/aHeodo
2020-08-11RPM_080120_BWJ_081120.docdoc 5a7268af14b85f336d44d0d10af1c59a02ce7738a4966e2ef96a39574a42b7c6n/aHeodo
2020-08-11DOC_NAC_080120_DLP_081120.docdoc 5ca1aedbc7b3e63e13e3b3263321e12f1d49d668c331db20a1f996b3fd362894Virustotal results 32.20%Heodo
2020-08-11I_35796816.docdoc d760943bc37af2bcfc28d0e4f2a9de09a531cf8eb96220ea588ab5373d0b5ddan/aHeodo
2020-08-1160910321.docdoc c81e2afb18ca2f18cd62b5cda110e668e5aa9480cfc9e4aecaa86367dbb22d9en/aHeodo
2020-08-11S_EKG_080120_KGB_081120.docdoc 1b8aff501271fe9a3075ee844ae73210d6f4edc60e10de6ac805c58dc2f10dbcn/aHeodo