URLhaus Database

You are currently viewing the URLhaus database entry for http://www.ksgresearch.org/LLC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435215
URL: http://www.ksgresearch.org/LLC/
URL Status:Offline
Host: www.ksgresearch.org
Date added:2020-08-17 22:14:05 UTC
Last online:2020-09-22 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 22:16:03 UTC to abuse{at}dimenoc[dot]com)
Takedown time:1 month, 5 days, 15 hours, 50 minutes Bad (down since 2020-09-22 14:06:09 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19PLG_080120_VMJ_082020.docdoc 202e9946335a6bbcfe31ed6dd361c069685259ffe504dddfcb312ff5ca4b5107Virustotal results 26.32%Heodo
2020-08-19DOC_MK1533222625YV.docdoc 038f9798da3df2c253620a2fd844e48c6d1a331e314d44196df45b0f9bedffdeVirustotal results 27.12%Heodo
2020-08-19INV_96530124.docdoc 3ae29b3f7f29f20ad0073a44572a88b7aafe19da62e0a8d8d8a04213945f0e80Virustotal results 18.33%Heodo
2020-08-19REP_2121725950472882087143595.docdoc 063b886950d14cfd765fafcd552629e1c87c3c1d0b03cc4a794e8c02dd34db42Virustotal results 16.95%Heodo
2020-08-19REP_ZZK_080120_CZV_082020.docdoc e11c5acfd7962cbfc0d24bd96833b535c52e148b42d4181feae6ea497f2fc228Virustotal results 16.67%Heodo
2020-08-19DOC_PO_08192020EX.docdoc 02f66899e7cd52cb12709e3065cad150b30ed04782bce65a3f8e85ffc80becf4n/aHeodo
2020-08-19INV_10729025.docdoc ae8e0b13f8a5e5b92a659fa5609b31a27b976210d50d3bc6f1e3c3cebb292519Virustotal results 15.00%Heodo
2020-08-19DOC_SLA_080120_OQG_081920.docdoc c3f0d0d594a74f097907231612a0cd0da8c75160a2ae1064a3744ecdea407986Virustotal results 15.00%Heodo
2020-08-19F_HRQ_080120_WJE_081920.docdoc 7feab4f1f35adcc7433afdbf4448e5b79996fbe150dfe6e0f708a6c13ce86f7bVirustotal results 23.33%Heodo
2020-08-19FILE_WAN_080120_LSG_081920.docdoc ff9d2cd1291e7e054d43be46f0003e489fb1296da57ead7e4d36146b1d8d04e4Virustotal results 23.33%Heodo
2020-08-19BAL_WIPVCW339JM.docdoc b91a7041bda493b586b8da44b3722617493bbc26064fe5a9d03fd11602a9ad1dVirustotal results 24.07%Heodo
2020-08-19Q_43326095729.docdoc 46cb2c80369e51c136820b6399d03f8a87dd7aa339a95f24dbdb88c2d4628adcVirustotal results 22.03%Heodo
2020-08-1956026054.docdoc 23e706cdfa5431676e2066f2efff7119636654b5d55bd0dd6dc1847a0061bc6bVirustotal results 23.33%Heodo
2020-08-19BAL_EOH4HUXD3G.docdoc d6da467520d535953153382ada0c5d3c08328a1968e92780a7b0c45901ea6fb3Virustotal results 25.00%Heodo
2020-08-196Y7RWR5XW7HEI.docdoc e183c3f0f8273c75705155e62882128907ed26de07e70a64480f752db751b492Virustotal results 23.33%Heodo
2020-08-19CIP_080120_XCC_081920.docdoc ed6f742fc6e103f092e9fd9301bf4ec786e88abca3ec1593661c4083f398616dn/aHeodo
2020-08-19U_44352707.docdoc 76b5b8d527359fb1183fc7e4e4eb0dc5369aa0126843b1ec8d04f73c658e0b15n/aHeodo
2020-08-19NF4567151266YD.docdoc f2d2558321c1b85c41505c190a6b4f309524c7eb7282f7a10ca8f832f539e42dn/aHeodo
2020-08-19FILE_ROQ_080120_NLB_081920.docdoc 40fa8d283d305ffcf422b0f327dc4da32e62cbf82da81841240e3e2c1bd53881Virustotal results 16.95%Heodo
2020-08-1982138743.docdoc 42b9726416b4076116e799c57988e1d97cfc0331d87ddbb84cd3ddacae97effeVirustotal results 18.33%Heodo
2020-08-19REP_Y0NTSVZN6E.docdoc 40430817aac77bdfe251ec9275bd54f3f38e091508e5381af53292469132db78Virustotal results 16.67%Heodo
2020-08-19REP_INP_080120_RNV_081920.docdoc 293921527da71236ef9e13d2b761e81efe85607ab084b379dd797bc3b6a31218Virustotal results 16.67%Heodo
2020-08-19INV_3160811817805255035672341.docdoc 8fa3388c004c72bc132d2ae9af6e47729f3e30ec0337e69115fbf3b2d2b4260cn/aHeodo
2020-08-19P99X29G9T6.docdoc b93c97878b79cb090624ab5371c8d5d7b3b5a9ad08e0ad35839a4ac352db83bfn/aHeodo
2020-08-19DOC_84043449.docdoc 1a17af806d615019154f0985010aad3789bd90bdb40970f78cd0cda2bd722896Virustotal results 16.39%Heodo
2020-08-19REP_EHGSTH8A.docdoc 28c14d0d9ba56ed508a4312e9098de46caaa153eb89958b6a8e027476ee3e6e5Virustotal results 16.67%Heodo
2020-08-19REP_2259686709424.docdoc 031a67c034a76b31c3fa139f4bbe570bc3a74c61c3b901164fb60733db2db9a1n/aHeodo
2020-08-19EBL_080120_CLY_081920.docdoc c6c4ba6bead64d98f91dca8dbc28c67ee9be3a3c5b9de2e50dd98c7c11349cb0n/aHeodo
2020-08-19INV_PO_08192020EX.docdoc 75053be7f5d07337ba28d4d9fed63933fdd33feda824f8adb8587e4b4829caf5n/aHeodo
2020-08-19AJQ_080120_MNL_081920.docdoc a7f7da45bf54c26cc2fce4e3c3a639209f7701cad6339b69b3980224423d2d7bVirustotal results 16.67%Heodo
2020-08-19DOC_PO_08192020EX.docdoc e1ad58fc89b2089ce1478cd296d226c1152315a2b047c86d84819160061e1dceVirustotal results 16.95%Heodo
2020-08-19CB8917260395CT.docdoc 74c71e841348fffe1f1a1bddbd7db99dcefdb48c019b49fd480dd8975a482cf3n/aHeodo
2020-08-19BAL_PO_08192020EX.docdoc 5ee8314065d14a3a3a5b81dcc72ecdcf770103b6d6fbd433eb4a6f41a9dfed1dVirustotal results 17.86%Heodo
2020-08-19PO_08192020EX.docdoc 6c565f07002b82c287ed1f4c316b8ed204766e4fbd223250f1c2cc1f110b7bdbn/aHeodo
2020-08-19I8F6X5MLE9PLVLYZ.docdoc e6897b31f6e77a3182753226f0781709a200bf67633cd45568c33c4e78b9456bVirustotal results 20.00%Heodo
2020-08-19INV_87UD69P6S8.docdoc a89f4a0e07aed6f0db5226aa6c45eca8e232db1686eaaf99f163acf0eb849c37Virustotal results 18.33%Heodo
2020-08-19FILE_PO_08192020EX.docdoc 9214a210e7bb43bd59a4e2bc93a6e020db78e48665cabba44b5128d186f40b4fVirustotal results 18.33%Heodo
2020-08-19TFI0UY7FKB.docdoc bb8f4400df61e199e8f1c8bf7bc8f4409d7ad9eae9af6cc6ce8ae32bcb99be8bVirustotal results 18.64%Heodo
2020-08-19Y_NW4363912508ZX.docdoc b6966069b269be3564ad98f838ff90182c10803bf019c0e298eb6ae910b1af31Virustotal results 18.64%Heodo
2020-08-19BAL_30133065.docdoc 73bb57416aa009d5bc50da9027eec6bc8bec76050d7db2a4626cf60bb4f5331aVirustotal results 18.64%Heodo
2020-08-19REP_F51QBQLC.docdoc 8cb099dfe32cbfe60c289a8b7c4aea909b9a0ee9fdd5a757bc169147fcc9445aVirustotal results 18.64%Heodo
2020-08-19FILE_53777690.docdoc dac9381a81d9d239f2a341b839cdcd469921f650f74da24535abe92d78951118Virustotal results 43.86%Heodo
2020-08-191UTBJAF.docdoc f329443fa89c43b3eb672ac38e5144982784f69c43d462af0883121d249bc4b2Virustotal results 46.67%Heodo
2020-08-19499112819483.docdoc 9be9c52a2ed346fcab910d6e22a065f7f1ddbb851e589a1c18e4b0577afe0e5bVirustotal results 45.76%Heodo
2020-08-19HV_CH8742124472JX.docdoc 4e187ac73b149abc0e10adc49388c872b2bf2dc68d4a7285586ce13e3b6bf427Virustotal results 47.54%Heodo
2020-08-19INV_28797519852203.docdoc 882600fee7e0ea4b30699f07b2c5237c9cb80b2ed0bdd471d055f7b450565272Virustotal results 46.67%Heodo
2020-08-1948355881.docdoc 1e5fdb496c17dd55dfc3e32231d286de4334d59bcc313b939202c4f8ae2abecaVirustotal results 46.67%Heodo
2020-08-19DOC_77778434456101.docdoc 6756567ceeda5670054c44e707aeb67389b6bcf82b1bd7406461c520fc185bc9Virustotal results 47.46%Heodo
2020-08-19PO_08192020EX.docdoc 4fafaff4c35c7050da039eba46004fb4df1789b0f4cb103ecaf05d4fcf0834beVirustotal results 47.46%Heodo
2020-08-19FILE_FNA_080120_XFW_081920.docdoc ade0c61c5a90ff1c6aa1b54b0f5d9e29382b98feb206f3b170724aa6e34cb389Virustotal results 46.67%Heodo
2020-08-19J_YG7WC2W2YAZXXQ4Q.docdoc 0e79daf2a9f00edeae140c5e513dfe381e03f54ae3fec2dae7b2bd9f005b4f6fVirustotal results 46.67%Heodo
2020-08-19WPB_080120_SBM_081920.docdoc 5b39d05fd1a75574a20fce09addb52c62b766bb08f8812b8d692936918ba780dVirustotal results 46.67%Heodo
2020-08-19DOC_R7HNGGGMGNH0.docdoc 13ecb0280410d83e2d67d9f049fe85af186a0c9959c316c90f3ec327a9ab244dVirustotal results 46.67%Heodo
2020-08-19FILE_PO_08192020EX.docdoc 9cbc258b5f93fe39609cced6c936d4529b4b3ba671125e8ad51eba9085dbd3a5Virustotal results 45.76%Heodo
2020-08-19FILE_99633508.docdoc 546326b982f8d4e1c2af1b80d268127974403aae48e453ff6d8f1820120a8d0fVirustotal results 45.76%Heodo
2020-08-19PO_08192020EX.docdoc 94fe6d0cc1723a60d8965c606027ad0283a60c1f4677cf33c8cb85fd202bbc60Virustotal results 46.67%Heodo
2020-08-19DOC_16712313.docdoc fededa8f56c791fe22493104398edd8f25c5b47a5668857fbbe72e6ee16ede93Virustotal results 45.00%Heodo
2020-08-18FILE_YGNFCHKATYK4Q.docdoc 6e7bc5b464486368fc64b81be80628536390d77832adc42ae658a9ec6642f2b4Virustotal results 45.90%Heodo
2020-08-1855013724.docdoc 6c9d3d58e28a1e8bbf0d1c77a0bbb7f6c71a55ac204041c9f1f8e372b19df91eVirustotal results 45.76%Heodo
2020-08-18IU5907468664IJ.docdoc b3c49f6fc4bccfb7209cc9da0e7092c623b21c438cf4ba36d18d3473015ca2aan/aHeodo
2020-08-18YO6905558589QP.docdoc f81838aa227956ab72ef239e4bb20e9f84a8596e89e7dc91d59d66c488ebeb1eVirustotal results 40.00%Heodo
2020-08-184609873969854878645721178.docdoc 6cbbdaa0e24876ae422d284449759d09a5bba350158e7e489ae806620bebb00bVirustotal results 40.00%Heodo
2020-08-18R_63389659.docdoc 385433701c68cc76403d2a484e7795863e21238a11d5892af2e910b2a5c309b5Virustotal results 40.00%Heodo
2020-08-18ZCFH_889732804555.docdoc 1ab945db51701046ee561291c84c12844c96cad17d38c044915bc3657803b75en/aHeodo
2020-08-18DOC_PO_08182020EX.docdoc ebd963ca8395c76b57e615461fe021e7c8055b6859298a2a330fe489ab34d692Virustotal results 37.93%Heodo
2020-08-18REP_MI7653125929LO.docdoc 460a8e4f639b96c10e0094ce3aceeb1f60278284a1d7b27e3b16fd4b76744636Virustotal results 40.98%Heodo
2020-08-18DOC_954UPY3W.docdoc 0abe25a1015f697d6e8f5657c0b05437419935530321c56d7d76893e138ab8f6Virustotal results 40.00%Heodo
2020-08-18OTR_080120_TIX_081820.docdoc f13b6d284eb7046fcbacbc7d199359ef96282da973fb4baee25c10fe1f96d9b9n/aHeodo
2020-08-18VEW2BZ26K9.docdoc fef24e0c24fefb1c867b231cecb3ca9fcfd7322a0df4f1d47be8c48000fb0ba5Virustotal results 40.68%Heodo
2020-08-18FILE_JS1260178337YW.docdoc 40bf45a0f3955cc2cb68375dd18ebe4bfbf79a8c1ced852bfaab79bcb58eb4bbVirustotal results 38.33%Heodo
2020-08-18INV_3660504926520086659374770.docdoc 4d8e7cfda1c0e9d03775d5858d97345d0a2ebd918a721a33ab2b2225e594711fVirustotal results 37.93%Heodo
2020-08-18OX_MKN_080120_EXK_081820.docdoc 010999a8438ea40d8012240b03d2ced196d695c0e6ddcdb43bca7d28693c16dfVirustotal results 35.59%Heodo
2020-08-18REP_PO_08182020EX.docdoc 59a09a4e193789a268b7d79fc4e5a2f5be16c87cbb04c5fc10e2ec27aaa641d5Virustotal results 30.00%Heodo
2020-08-18DOC_42926103.docdoc d1eb123b1f5017dc3c5011fbc459b5b45702fcd06e0c5e08941fa273c53ac84cVirustotal results 28.81%Heodo
2020-08-18FILE_12175351.docdoc 77300670b06067855e3c1d1b58df8a505ec1598099aa1a03970407a2798336c7Virustotal results 22.03%Heodo
2020-08-18REP_AQ8428136949GI.docdoc c6313b13d24c46970563fd973b3b8b40ffd67b9270160ba475ba43994c824d8eVirustotal results 22.41%Heodo
2020-08-1860434891.docdoc 5c8ecccdd3152ef12c7449cc2637ddcf40c2e53920f92ccd91885695605d118eVirustotal results 21.67%Heodo
2020-08-18UU_PO_08182020EX.docdoc 248558f5b8547279882c012169b965765eab106c30275d475e3de2ba02e6c7e6Virustotal results 22.03%Heodo
2020-08-18FS93JDNK5P.docdoc 85431ac67a721a63e9e100e9176634b535969b4cd7c70c34908ab629a7e80d26n/aHeodo
2020-08-18A_75976088.docdoc b8578fc1800c341816ee50de533d7e77a647bb4005e63d7c5234b983863d9c34n/aHeodo
2020-08-18VG6KJN5DPOF.docdoc 456510d5a40582d308f81577cbf8ae64f2b616539e4bae452df2916721b027d8Virustotal results 20.69%Heodo
2020-08-189172040217909746080307.docdoc 92674d8d935ca49cbe4489ad9f6b55bb98697e74750d26bc138edd3c70f214b4Virustotal results 20.00%Heodo
2020-08-18NX7296087166ZH.docdoc 8307b0240a3df3f69ed9390c9d3c041bdce48f9b0454b98140c5e569cdb9c052n/aHeodo
2020-08-18INV_41326465.docdoc 773759e9dd58c255016495830f0db7486f6a0f27c1c23465045208b8329e95a8n/aHeodo
2020-08-18DOC_PO_08182020EX.docdoc 9c9cf53af694c053c682a3dfdf2c204c75e1a78a18e9bd92fedae2622b83b9abn/aHeodo
2020-08-1852586761.docdoc 6e95c43a8b2b08d6d37fdb596544522ec747317954db11749b8585aa8bf5594bn/aHeodo
2020-08-18S_78788001.docdoc d43ab83c9405de6cabd5db3463beaaeba958d73c6d6566f43fea69b522267ae4n/aHeodo
2020-08-18BAL_QY1015486097WH.docdoc ab6c9909e16fdf41b17881417d7ae3e0caa1a66bff25a443a4e5ce8b338ddb0dn/aHeodo
2020-08-18DOC_47498749189854117445.docdoc 7976a8188a5d793cdbb85eae76d2bf5dcd550789634815969fd953edefd06been/aHeodo
2020-08-18PO_08182020EX.docdoc e7e59e1fee68542ac8095f59c35cd7c88c27b60952550c64ebbc62c63a66e507n/aHeodo
2020-08-18Z_SGP_080120_XLY_081820.docdoc 4dba7674a65d6c5e1cd3a1ad7226c21f0b91705ac0a61326e58044947a641cacn/aHeodo
2020-08-18W_HP4954839442IU.docdoc 7f1c65238bdfc720f45f489cc20e78173bcc8d8bacad5a4299fcb08f010a0a14Virustotal results 48.28%Heodo
2020-08-18REP_1483676124.docdoc a821076f4e8ae03d113a981ac01066b1025195206bace6b13c4a12e00b868bdfVirustotal results 45.00%Heodo
2020-08-18INV_PO_08182020EX.docdoc 01003564db8e02cdc33e4d259b217f180b85cc278ef24e8f8077a6071c0899d6n/aHeodo
2020-08-18INV_PO_08182020EX.docdoc 41f1e702b57bab0ebc27e61570867b5417e34c5aa1b9046382207f7f62fd15adn/a
2020-08-18E_SGEH9S3WT.docdoc b1021100edd56e9a41eb6661376e44e4066fe511be9fcf5a71538156713fd91fn/aHeodo
2020-08-18REP_AZ5240442754VJ.docdoc 2b221062e6443009fcdbcc513a4f981e019e92626e88fd9a6f1c849a74b1169an/aHeodo
2020-08-18FILE_PO_08182020EX.docdoc 36df396c174d0c918c372a25114d8732328ce8658fe2b138d953e0c0ac3ad471n/a
2020-08-18REP_XOM_080120_JBZ_081820.docdoc d2b8765df72f5975d4984c9186d5373ea19685fa981b09438eb6600188ce4477Virustotal results 45.00%Heodo
2020-08-18V_KI5788902493VF.docdoc eb46b89d7e58183df45838e5a44989e33a129063e6b410d5e1a0fb8eb9e5cfban/a
2020-08-18VHHN_76860462.docdoc 00e380616dab3927547b0da3ed8a844b9dccd8d34b516ac04cc5f2617405ef97n/aHeodo
2020-08-1853047087.docdoc e284647edaee2ed25f77af25077cf6abe3b9339e1890a0cae20dbfdc5bf1399fn/aHeodo
2020-08-18FILE_XW2597664811TR.docdoc aecb14f5fd610dae65d94c788e6451f3f073561c8c00b0b62b4cf9d710c570edn/a
2020-08-18V_56420528.docdoc c5a5417ac06397f164bc4984deb3c87c1d4290465e649f541f74aa3e19854fcbn/a
2020-08-18PPF2KFW87WK3GT8O.docdoc 0ffb0270993fcd6afd5e3fd437fbbf4fc270cf5700d109a886786ac316d9f75fn/aHeodo
2020-08-18REP_PO_08182020EX.docdoc dccb23d76041147736f6f324b3ab4b5bf23db414b1b9aaef5b12da4033ef7f91Virustotal results 41.67%Heodo
2020-08-18DOC_67ORG0XVAHD2.docdoc e5f6385e4a493c599585ccf6c17d2177515475196e58fe7bdd08e334db238808Virustotal results 41.67%Heodo
2020-08-18D_UIX_080120_NCQ_081820.docdoc 2a06b2a913102a6c410bfbcb01e2d57a80f0d62a3c32d9a1cae4a1611cc300bdn/aHeodo
2020-08-18REP_G7B55WGSVO52R6O.docdoc 5b6530e4d580725b37bd1d03eeb44c472d0529b1422b830bebdc62bf8b6d0c83n/aHeodo
2020-08-18REP_50888881.docdoc 5c8b923944c5816b259806159d34a3d379b2c8f347ef3b69cbc5b18f60637d93Virustotal results 41.67%Heodo
2020-08-1806741876.docdoc a9f2dfb969ec4a5c09edfdcf49a041eed112c8ef64c36610131b1ef17118292an/aHeodo
2020-08-17BAL_PO_08182020EX.docdoc dff1df7c560a8a24caa14cf006d941b7c3d80648923fc99f691cf668706dd683n/a Heodo
2020-08-17CR5466486497HE.docdoc c0bd051153ba3fc559191e1a744dafb51332259e42fe8e436dade8cc96fae9een/aHeodo
2020-08-17BAL_KNS_080120_OGQ_081820.docdoc 7b77207a79af88d9ae875004fe564803f06bf6fc32432e99635e7910c43e720dVirustotal results 42.37% Heodo
2020-08-17H_ZKJ_080120_QTD_081820.docdoc ec178e0f0ac105f09d9c4a287238b6b5fd1a48107228b8eb7afd96e2ec4747e7Virustotal results 41.67%Heodo
2020-08-17IC_48972793.docdoc 7776a0f18e269f643225df332d619771a31094c4f40736c9a03d179c03fbc668n/a Heodo
2020-08-17FILE_TFVNOSMA08A.docdoc 18b1585abb668182213b56998ae5ed30758e1649c11469b52af43723c5b0704eVirustotal results 40.00% Heodo
2020-08-17FILE_CXL178FR8.docdoc 6eb52f464c8845b595169880341a670e6dfc2fb1c5ba4e59f01122d6e15c9536n/aHeodo
2020-08-17HKC_080120_OBM_081820.docdoc 2249b7f682e20e230fa3a26e2c1ca95f543448fafef5872aba51ab41dac6d54an/aHeodo