URLhaus Database

You are currently viewing the URLhaus database entry for http://agri.sci.lru.ac.th/th/c2gw5vwnbwy/xv0545801240873yijyw85ratbpdnw1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:436911
URL: http://agri.sci.lru.ac.th/th/c2gw5vwnbwy/xv0545801240873yijyw85ratbpdnw1/
URL Status:Offline
Host: agri.sci.lru.ac.th
Date added:2020-08-19 22:10:38 UTC
Last online:2020-08-21 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-19 22:12:05 UTC to helpdesk{at}apnic[dot]net)
Takedown time:1 day, 11 hours, 26 minutes Poor (down since 2020-08-21 09:38:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21DOC_PH9241659722FK.docdoc 9bef601df3e482ea5b723a710c2086bab43312b7c275da979b1765cb7660f060Virustotal results 20.34%Heodo
2020-08-2150226096.docdoc 28f2d62905428be69bb94405cef4459871fb4d34be7d8e1cd99be4088802ce60Virustotal results 29.82%Heodo
2020-08-210365495908009.docdoc bf9fe3f7b66ae5baa3877c2da0edf95f1434298010128ce61c76f6bb6c4c46e0Virustotal results 29.31%Heodo
2020-08-21FH_9ISX42WG22CZ1FZ7.docdoc f4cf506743474d0a3cd6642db40bb54301ec4a84e38d41782b1199600b16df5dn/aHeodo
2020-08-21B_BPG_080120_LEP_082120.docdoc b3bab296d26d412d3adaa195a93ca6ff44a5b6bc5e16f130e2386928d12f0570Virustotal results 30.51%Heodo
2020-08-21REP_AT0959962490MB.docdoc fd2732589c07dc97af78689360772ace939ebdbf5c47132f7df607d9e24a267dVirustotal results 29.31%Heodo
2020-08-21INV_529375665018089268.docdoc 0566ee320bea900383d9ca704bf88d12efbcb69e6eed4b55d1e904ced4c6af2an/aHeodo
2020-08-21REP_18002290.docdoc af3988b7856704b5467030ee792d90beff86f1f453c3280c8d0f822b2dc9898fVirustotal results 31.03%Heodo
2020-08-21PO_08212020EX.docdoc 29489d8ec25a46a76a0bb977cba3d4260eef3e2520e1b060a323df2c5f8cd8fbn/aHeodo
2020-08-2191210004.docdoc 346bffecd143569cdd0fb796380eb297dbf4b03fbb9c68edf994501847763d20Virustotal results 31.03%Heodo
2020-08-21BAL_PO_08212020EX.docdoc b067f851af29843c48232b84fd2062937192d864d7f69979bc590786f4f4d4d7n/aHeodo
2020-08-2127708196025557664.docdoc 7112a5a9264a099d9056f3d980c95fead062c56ea04362528c505bcc6ddd2b1dn/aHeodo
2020-08-21SW9399700695CY.docdoc 913271f10fdbf26cf67c0c6b3b0f0f501848bf25f539c04feb5553f95307bd95n/aHeodo
2020-08-21FILE_93154681.docdoc c87f02029dfc7cc838cdbd76fe5640ab9778826bebdd965fd772f7b853d4178cn/aHeodo
2020-08-21BAL_38697969.docdoc 32473b384e1e07f387b80575017b09c425d1bee0904b9d96319e3bb72e7d6ecfn/aHeodo
2020-08-21FILE_BKNWDHLFJ4.docdoc 4ab707775fa2390fd9243175abdd54e81f7bf91607d4d7fc5c97be1d43f8606bVirustotal results 31.03%Heodo
2020-08-21FILE_KZ2932346749QU.docdoc 1d4d8969d69882c83a3c783bea8ab1443a88303f332c7bba708ee7b9d1b66b78n/aHeodo
2020-08-21FILE_RIS_080120_WNF_082120.docdoc bae16ea340cc512d6e1934d205bb3f0e34da81c10bbdf1a411b338c91f415c03n/aHeodo
2020-08-21REP_SDA_080120_PQY_082120.docdoc 1125770ca72ec38466e63abb84b14f1128a7b5fdee91ab098dd25c53230e1537Virustotal results 30.00%Heodo
2020-08-21BAL_7RZM7YS0.docdoc 0a10c7547caff2ef72359bb8941e5b1d66920f7ecefd54c795b7d18c1474ab9dn/aHeodo
2020-08-21AQW_MIJ_080120_OJD_082120.docdoc ee0ecbcd1c840072ab9f352930a3d1d53c1669f8ea22577bed152b6e644a6c74n/aHeodo
2020-08-21PO_08212020EX.docdoc 827b61d3f0f0d3d42ee69919ecdb9a190e3939c7d32cf425f7cf355276a3d2d4Virustotal results 30.51%Heodo
2020-08-21BAL_CC0958236050PD.docdoc 3c86a0b190ac5ab87b216155e1a11d7a756739986e3545d994fce52d209cd64cn/aHeodo
2020-08-21TP0473260127FE.docdoc 5aef84eb7042aec5b21c949a61c3beb6aae3ed2e1d897d383e802a60766af3ccn/aHeodo
2020-08-21REP_61576177.docdoc 7523d22aeb84f9371a23ac8932c4316ea64ba34548df83083e4110ab90ce9cabn/aHeodo
2020-08-21BAL_PO_08212020EX.docdoc 87fa434c22634148cd773528a464946457014d363c09cfe28a9a28b69f14f136n/aHeodo
2020-08-20DX9661585125KB.docdoc db5d466d972210f819496f74e47cc8db88a065acde70d9d2ac61221eb8746003n/aHeodo
2020-08-20BAL_PO_08212020EX.docdoc aac3f9b6d09a48b999dbe421aba8e36591e5f245f960a292bbf0cd518c23b922n/aHeodo
2020-08-20AQU_080120_ESG_082120.docdoc ea9a29f42ce90bd0cc4aa2b4758dc76ce4a5d639dcbe1ee8f4f0b61632793577Virustotal results 30.00%Heodo
2020-08-20REP_87102285.docdoc 172af56801cf4f253a30974aeeddb1910408d1417b4d8bffbefe887436c3b633Virustotal results 27.12%Heodo
2020-08-20REP_Y78P67ZGBZVSK.docdoc 4ede2184628e55fa1ea3685e13bbd786f208d794b3778b7c95fcb18765d8ab68n/aHeodo
2020-08-20REP_DA8519593318NY.docdoc 60222c9a16cecc0e2cdbc84cf33986aa7663cbf80321a3106f4dc0b096529401n/aHeodo
2020-08-20LVO_080120_WCY_082020.docdoc 0c03dc40a8db0afc9ae714106e0bf60601869368336a60842cde31c0a3c8b55dVirustotal results 22.41%Heodo
2020-08-2061NJWM21W.docdoc 02beded3bf97160a812d8bd478ac0f798e12c3b82c464bb8429c8a5d78ae0c3cn/aHeodo
2020-08-20ZXYW_PO_08202020EX.docdoc 1c61a6fec7f540e75cf3ee83531b0da27e40c95f3aef4f8fc750c911d731c1can/aHeodo
2020-08-20INV_PO_08202020EX.docdoc 3d3214a91f8fa0fe6c54f9de7d331ac31f1a562aa0c0b0e33fb5aef75163ff95n/aHeodo
2020-08-20PEAC_52623769.docdoc 2704479bb70ab89f699b958bff80a648c4c3b03d3875afd7cf5d833fd625e037n/aHeodo
2020-08-20172666757.docdoc f2c11a8f3f6306050420e37c8c1c24cfde3ca7e03cb703761581c1e5f6f75757n/aHeodo
2020-08-20REP_4Z9SH5R.docdoc 29b52f890109db1441bb1fab0d062383405b49e076d6f8c04c40644a9cfda15fn/aHeodo
2020-08-20INV_PO_08202020EX.docdoc 3950245c4b02b5b36cad1f7785113bb4312d8afd9f6106882f29d16a80a6735bn/aHeodo
2020-08-20Z_29532796.docdoc 3cf6636d1972930d486f669fc73492d137e9bbb470ea98c3466c14a582d3995bn/aHeodo
2020-08-20GB1062851684TE.docdoc 093c4c10f1ad0e417b62968802b3cf0b3e4b43b59ff54f6c894a005b3de57b54n/aHeodo
2020-08-20G_73605413260382707086343.docdoc 00cfa0d29018a083da02dd5f6e523ada069a14dca8be20142f8ffc7fd03b1fc1n/aHeodo
2020-08-20D_FF61YIHHZ8D.docdoc ab47a062dbbd97fae72fe297e5cffaea9d96c74395b5e6e3113c55364df5f6a1n/aHeodo
2020-08-20O_126992762392.docdoc 6999b90afceb089b399c074269f52600ddb3d7aee434cfba9a1896c8213f4df1n/aHeodo
2020-08-20INV_GZN_080120_FFJ_082020.docdoc 568471d2d31e15f9b46076ae0167cdda7da49957b7cb120d330a0e450bc2c7f3n/aHeodo
2020-08-20HBT_080120_KRI_082020.docdoc cc9254149ac0a5f25e859e00fd4ae509b05a23e42d49708d4c0a15e4628b1c66Virustotal results 20.69%Heodo
2020-08-20BAL_PO_08202020EX.docdoc 0efd74cc9a3e2043ccf2d1aed8696b82a65a9c96293fe1ca3c6958f41c818543n/aHeodo
2020-08-20INV_720IDVIK.docdoc 0c5454df9df018349448059d3bbc7f76aff843cb4dd42b43bb4769eeb297606fn/aHeodo
2020-08-20REP_P0Y2D05E5YDD4.docdoc bbfbe727d8a5b53456c3b234d64899d7789a885517c719fb9c26c890e009318aVirustotal results 41.67%Heodo
2020-08-20INV_QVJ61JW5A4ZV.docdoc b1a3a3654d76f8eeaf84cff925c62e4f349407617da64a11c91b03851f5cf209Virustotal results 40.68%Heodo
2020-08-20REP_GE9282796826WE.docdoc 77dc94d7a2eb1a8f1f2875ee18a8115333a3c2ab0f0455d8cd46b952f93809b8Virustotal results 40.68%Heodo
2020-08-20DOC_KQ4644459005VY.docdoc a184a094e50174dc9dc8c5c22ac016c02f3605fd19c733c49ad1ebf02c493f65Virustotal results 40.00%Heodo
2020-08-20H_YC22O2D.docdoc eaa1c250dbc47328eafe0c85fab62bcb61bdbca2c66baff441e462b6ae5c1a1bn/aHeodo
2020-08-20FILE_SK1NQP0GWJRRBUD.docdoc f4bdec707792203de37f57aaa05aee2ce49012f69866816d8275ceed21df1daen/aHeodo
2020-08-20F_QS0472991268LP.docdoc b26d580deb9ff666c0dc35f4cc7c9d88038fe0f3c8bf48c4aacd56dfc05c4cabVirustotal results 40.68%Heodo
2020-08-20BAL_BH3627718739CY.docdoc 29524d934f54a27deecaedd3e58de8a4490eddc04ac913bcb37c3ca1354c5b06n/aHeodo
2020-08-20TLE_080120_DZX_082020.docdoc 580ae2c3801f24f8be8cc24b136f1d795787ace030c75c837410f5d827ca02e5n/aHeodo
2020-08-20REP_TXH_080120_ZTY_082020.docdoc 521688de7a4f5ae13f0d5348c2d0c4604f43a409de9751fd4ba6d791f4adc281n/aHeodo
2020-08-2071126402.docdoc 275e276c98e61d33c2852f27d543c9cda4212aa16383e36b2e3651a28070a8fcn/aHeodo
2020-08-20008495029047981947.docdoc 60bb16533f938460519528657d8b785485622e3471330a87fa5894fed506eed8n/aHeodo
2020-08-20O_PO_08202020EX.docdoc 5debb0401a79585a656197d49e148048a7c7db909c234ae80dd84798e89663cfn/aHeodo
2020-08-20882707577245924101574383.docdoc b32f302c129728edd895136f299f0e68031f9554b42be4fd2dd35f80a9b2a750n/aHeodo
2020-08-20INV_33681518561125622.docdoc be8b2b9dcb90fbaed4e7bc6186fd5dbad93c77fd80cee44717c88ac07641368an/aHeodo
2020-08-20G_PO_08202020EX.docdoc 96f7d13cfc1edad4f9381ae98cab2336d39557b2230d88583c92284d6616b4e5n/aHeodo
2020-08-20DOC_W6HLEXDEL3O.docdoc f49f483de9c2f5fc441b529eaa889631aa5a272206dfdca519993427403f65e9n/aHeodo
2020-08-19UN3644161409FR.docdoc a75897a4101123281bbe047444001acc874171e15cc5a6047baa32d5100d4237Virustotal results 35.00%Heodo
2020-08-19198539877274978652253.docdoc ee0c184cdb3791d36a47a1d945aab42379266c4cc4ea6cd88c316ace9deb8826Virustotal results 28.81%Heodo
2020-08-19REP_36192352.docdoc 202e9946335a6bbcfe31ed6dd361c069685259ffe504dddfcb312ff5ca4b5107n/aHeodo