URLhaus Database

You are currently viewing the URLhaus database entry for http://cskconsultingengineers.com/config/browse/mjrvdqsm/049qbg90374564y3ne1s8e44jx9cga7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:430454
URL: http://cskconsultingengineers.com/config/browse/mjrvdqsm/049qbg90374564y3ne1s8e44jx9cga7/
URL Status:Offline
Host: cskconsultingengineers.com
Date added:2020-08-12 14:10:19 UTC
Last online:2020-08-17 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-12 14:12:06 UTC to abuse{at}ns1[dot]bg)
Takedown time:5 days, 1 hours, 0 minutes Bad (down since 2020-08-17 15:12:52 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13INV_079324022865430319868782.docdoc 67df3257dd00cbe4769aa656e732b0a2409fb999e987dc491aa8a4a4804a1b59Virustotal results 35.00%Heodo
2020-08-13DOC_5086995789712.docdoc 75b72728b4e1d6de964271f76b8536a1a62dba26552d07436aef8f183e57b267Virustotal results 35.00%Heodo
2020-08-13932895166873693.docdoc b8748876a802240520ada4d1493ffef171a7e7a99ad42481dbeffec99b436c50Virustotal results 36.67%Heodo
2020-08-13INV_MX3012276725MQ.docdoc 02e1a4ab50d9465ed37429b538a0fdc7b977b21a9d50bbc7ec859ca51627da37Virustotal results 35.59%Heodo
2020-08-13BAL_29115868.docdoc 575f0ce42ff719dc940eb34657a8e1cafd665fc78c67e7ccd1b4916edfb1f3ebVirustotal results 32.76%Heodo
2020-08-13BAL_PO_08132020EX.docdoc d25b15e7bcd21952c4da4af6b2bc6e597ce406ff06d213e84733c4152ec4244cVirustotal results 30.00%Heodo
2020-08-13REP_96740990.docdoc 0532eadbdda96ceadb7250d379491c1bb64d6d40b96bc71d551268896fd4bdd6Virustotal results 28.33%Heodo
2020-08-13REP_PO_08132020EX.docdoc 41a0d09fc217911df24c7529fa274764addf047b407ce938a2ecc6df48bf03d5Virustotal results 28.33%Heodo
2020-08-137U1AV4J3L8OEOO1.docdoc 3dd6562787c08407c9fbd639fc7e1b5a90251fbf8bc40b032135cf84a2243970Virustotal results 29.51%Heodo
2020-08-13FILE_93533552.docdoc 03ef971ad58eedda8a6ca86a77257b4214bf5f6d8725c319241d8d25cb255991Virustotal results 28.33%Heodo
2020-08-13DOC_LO5097895204XZ.docdoc 430d07c2162af45022115ce4b557ab182afc95143b698568d50c41832c6b281bVirustotal results 29.51%Heodo
2020-08-13PO_08132020EX.docdoc e163803cb71c55b28fbfe8435c5aed2616a006e425556ee9b4f3670db2115d98Virustotal results 30.00%Heodo
2020-08-13REP_RSG_080120_XFN_081320.docdoc 0c4fc99638ce35263569e89011b336bddac6074ea768e3f77d4d6acfda9e3ddeVirustotal results 28.33%Heodo
2020-08-13QONQ_HR7E58ORSZOA.docdoc fdf714d8a02549739b60c414ff535944cd2b7d8a84e465b55f4fa263680e9cbeVirustotal results 26.67%Heodo
2020-08-13ZC7726432537JN.docdoc 57077fbea2ccbc5464be5b94b7e01a59f4b28e6658a7a432645380f6413e8a00Virustotal results 27.12%Heodo
2020-08-13L_8948364897765167395253.docdoc 3f9f641892bac263ede86f11632b4a6498dcc2b94b13727c5dc8c8c594e0f608Virustotal results 27.59%Heodo
2020-08-12INV_0COJOQ2YRCG.docdoc f7839e4820b80184243adc516719a06331ca2214d95f1f803b33f2884cc5cb22Virustotal results 28.33%Heodo