URLhaus Database

You are currently viewing the URLhaus database entry for http://kapikft.hu/cli/2datr804787245qzedy66757s8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:438086
URL: http://kapikft.hu/cli/2datr804787245qzedy66757s8/
URL Status:Offline
Host: kapikft.hu
Date added:2020-08-21 09:46:33 UTC
Last online:2020-08-21 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-21 09:48:02 UTC to abuse{at}ezit[dot]hu)
Takedown time:7 hours, 3 minutes Good (down since 2020-08-21 16:51:15 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21NVS_080120_NYF_082120.docdoc c6a5cc3476c048456af1997e698dc72231c1be3e590f6c9783e8adf136320f46n/aHeodo
2020-08-21ZWP_86884089.docdoc 55c098b1fd0458cfafe7839002c15777abafdccae1eb822693225399a46f744an/aHeodo
2020-08-21DOC_RYQ_080120_TSF_082120.docdoc 8629c793b67877bd01d45910331ea12b6f45da2b3723d513588c6f27017f7af5n/aHeodo
2020-08-21INV_YE7485737736HR.docdoc 33da171c98a915b6b46ee6b15f06b10f57557c479fe659f138921a4578264ab1Virustotal results 27.59%Heodo
2020-08-21IAP_080120_WXN_082120.docdoc 52f93265171c4daa8a38ef46773660e8b83d21d2a1bd660a0e52efb67cde6ebeVirustotal results 22.41%Heodo
2020-08-21VJA_080120_ZCX_082120.docdoc 01298d83e8f16304e95326dc2aaeba75fb90913b8e359ba16ffa314513f6ef63n/aHeodo
2020-08-21J_GMA_080120_OOM_082120.docdoc a733a4e6024de8fb8639c32f10763eb1350346440beca5654a2d0dcb93ad94f0Virustotal results 22.03%Heodo
2020-08-2168886721972221954190.docdoc 92ce63816306ff769b615c927a2677d7a4d1eecdbe7e6bc825ce4a446df1bc7eVirustotal results 22.03%Heodo
2020-08-21FILE_67140921.docdoc bce60944d3f355c0b0204703032c8c88b18863aab47ce9c419f3b2b9bead9c9bVirustotal results 22.41%Heodo
2020-08-21RQ9D4EX.docdoc 71168d573c54a2d35fe5f22691d9090791fe2c78cd932b4c9fdfec7062329f87Virustotal results 20.34%Heodo
2020-08-21O_PE4281738418CA.docdoc 433bd7014b1db029a665161fac7e7d4bb209d6f0f7792f575de1d3696e80c064n/aHeodo
2020-08-21DOC_GLJ_080120_XON_082120.docdoc 6da5305c5476e37418039466c6809a7b54104ba1e58a922c6383a74d7fb2517an/aHeodo
2020-08-21DOC_TW4257428998TM.docdoc da8bcf840a774522318e7e2e605ee7e2c69ef996c2ef45d208ea7b4ba4a1e22en/aHeodo
2020-08-21BAL_B5LZ3S8X2.docdoc a4308cd5bf5a11d526bb77831b37c61fd990824875e2f12e11ec5a6ef1fbc863n/aHeodo