URLhaus Database

You are currently viewing the URLhaus database entry for https://kunstefan.de/cgi-bin/docs/8lhhilwxq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:452678
URL: https://kunstefan.de/cgi-bin/docs/8lhhilwxq/
URL Status:Offline
Host: kunstefan.de
Date added:2020-09-03 18:30:06 UTC
Last online:2020-09-04 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-03 18:32:02 UTC to abuse{at}strato[dot]de)
Takedown time:20 hours, 18 minutes Good (down since 2020-09-04 14:50:34 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04REP_ZWQYPKAW5BU9V.docdoc f19b7c3502d8e70e4a41fc4676cf0ba7a1de47cc19b1e961be4ceb8511119637Virustotal results 41.67%Heodo
2020-09-04KD4868526397BF.docdoc db8ec99d40ab02d4ccd48a1c7b15bf169acb5b672dad9862e19dcb7f2805cde6Virustotal results 42.37%Heodo
2020-09-04JLX_090120_LWT_090420.docdoc bd6d04f3dae6135958f29487917cf501c1fa74ddb6efc7ce60d56f2d71551b26Virustotal results 41.67%Heodo
2020-09-04REP_PO_09042020EX.docdoc ba12420cc97e12ee529581e19365496e3aee5521546bbe9ee25a49e12ea1fe1cn/aHeodo
2020-09-04FILE_OY1410733723PT.docdoc 1348492e73a12dca11baf904fd17a8f5ec479e7a535229a1d05f753cb81dc49fVirustotal results 42.37%Heodo
2020-09-04J_HWA_090120_XKB_090420.docdoc c189d47783e317fad94867d3dda3a2cbbfba58dc3cda5f354b7f43b8d80daadaVirustotal results 42.11%Heodo
2020-09-04J_HWA_090120_XKB_090420.docdoc c189d47783e317fad94867d3dda3a2cbbfba58dc3cda5f354b7f43b8d80daadaVirustotal results 42.11%Heodo
2020-09-04DOC_57223462.docdoc ad84c8c2cf5cec48293d676cd04c85584493ec6ea41985daf27420a4855461caVirustotal results 41.67%Heodo
2020-09-04INV_1951830120539258676241292.docdoc d4e4779bc7a595b54aef09d0febad3b0412b7919c11c7d60fb1350f25f9d8731Virustotal results 42.62%Heodo
2020-09-04F_14835906.docdoc d39068244f6daf99e7f26840e26f7a22a79b149f93546294945973683aa5e749Virustotal results 42.62%Heodo
2020-09-04W_81493803.docdoc ff4f948205a9963a9502f66416a727514ecee03ab8d03067fc0a0e636a1bef26Virustotal results 41.67%Heodo
2020-09-04BAL_PO_09042020EX.docdoc b6f6deed6a2a7773bc32ffdeb76b3c6203ef5104979733b539cefafd5172afc8n/aHeodo
2020-09-04INV_MIJ_090120_PGP_090420.docdoc e9a5c8f81a3a669685cf322e54f602a882b6a8843070c10d6f5e53794379a8dan/aHeodo
2020-09-04FILE_XCB_090120_GTB_090420.docdoc 2fd8aea8d3be3ae3fadc472dd4a766ac279f36154f6001d577dca10c7a77cbf5Virustotal results 42.37%Heodo
2020-09-0442001146.docdoc 5b1d4e139dae2d809b81b5220c27135614ea3770089435f6eda1c8ee848bd48fVirustotal results 43.86%Heodo
2020-09-04REP_7DE5XZWT1R.docdoc 628bd28e635f7fa6ca78c666cd219873a82d1c749dcd80ca407469194fb0064cVirustotal results 41.67%Heodo
2020-09-04INV_87154823.docdoc 781509afe3329ab61b29f3b67394eca12b43b25e82a4f1b9ed2c4f178b3a6d8bVirustotal results 41.67%Heodo
2020-09-04INV_CIR7O2WPDQDLFM.docdoc f0e89834b4906361a067ea23efa018387f75a2dbf921d028779c2ad15a19bf47Virustotal results 35.59%Heodo
2020-09-04IX4721059158PY.docdoc 0e17461c84992dd3117448367cb38d7d6323d37b5c3314a0105ee4dc59a908baVirustotal results 41.67%Heodo
2020-09-04FILE_PO_09042020EX.docdoc edc285fb056f220eaf6bd0fac0b68417b1a433e5a1da2fcec0c518277f1cbbd6Virustotal results 42.37%Heodo
2020-09-04REP_8WN4JWF.docdoc 847c5774eaea8a9d9ce3d2a5b91650c30fe5a44a68cb6ab8688236c878787aecVirustotal results 42.37%Heodo
2020-09-04ZJ7769506939ZG.docdoc bf8ba4d58a232e576705b37030a7df091539bafb0051f4f28032d54fe49c4c98n/aHeodo
2020-09-03FILE_YCV_090120_DGR_090420.docdoc f00f58cdf16e19d21e63d94d8fc0be44f2ca6b18df7ca59cb6aed2bba4b5ff97Virustotal results 36.67%Heodo
2020-09-03DOC_75818310.docdoc 2e96dcfe760df7dd6db7de3e4a51f33e031a3c1c8d3aa5545cfe92fa072b6189Virustotal results 36.67%Heodo
2020-09-03REP_PO_09042020EX.docdoc bfb730608ea4de6d4d60292f703782a118e42cee42d7c0b1077e6c70b3fe5491Virustotal results 36.67%Heodo
2020-09-03FILE_UA6598738246DL.docdoc 079755626794412a025b4f2e13b8a7900345b513afb0538ee3f16c638878c800Virustotal results 35.00%Heodo
2020-09-03BAL_846792702649884.docdoc f95add757971b2b4deabdb71a2aaaddf3ea0cd2562b6bf7c1db04298470477baVirustotal results 32.76%Heodo
2020-09-03EJ_37619699.docdoc c9bb1e95c94bba0c079268182ba5d9ec4934d3a859c650d685777d5bd83862c7Virustotal results 33.33%Heodo
2020-09-03RE4957883835TJ.docdoc 12f1f6eaba5c14c0f12ebabea1fb99278c07a501323f1c81297b290f8f223b17Virustotal results 31.67%Heodo
2020-09-03BAL_68B2RHCON4Y.docdoc fc9e4656d99b0f3f630a84da99c604feaac1aada1ce97dee65cfcfa63931e8a4n/a Heodo
2020-09-03J_19330746.docdoc 443dfb6a71c2268defebbf32b16630045140b55595bd22e9e38df2c76fda6e2bn/aHeodo
2020-09-03EFB_CY5922173362KT.docdoc 5542f3a196fa82e55824fadfba8827ac16d483a5a8cfb23089fbbfad77e6dda2Virustotal results 32.76%Heodo
2020-09-03DOC_MGD_090120_KXV_090420.docdoc 3fc5c32aea12c66d06cdb30dab7f1e1cb7181efc4d2d6d9c91511d69e53f4a04n/aHeodo
2020-09-03TWJ_06718690.docdoc 520aac7b363312bf116cf9bff103ed8a010ffefbc4962a7f4a76e4d609f78734Virustotal results 31.67%Heodo
2020-09-03INV_PO_09032020EX.docdoc e56820ed5e83d51aa84705e88d0ece136340abd67783ea2c9b47b055cd7d87e8Virustotal results 31.67%Heodo
2020-09-03RIM_090120_PVK_090320.docdoc 4a9307ca116cf320763099224e219973bbcdedb3accad93649c9b0989d24d8eeVirustotal results 32.20%Heodo
2020-09-03FILE_UO5429965277AC.docdoc 2e0f7c9e58ec09204861e7c69cc2d77222c4f4a676e25f9ba845352ed010978fVirustotal results 31.67%Heodo
2020-09-03J_180094885558.docdoc f50133085cf408fa42e3568d8466e35d6ae2ceffb26ec78fc25041eb5e5d7c93Virustotal results 27.12%Heodo
2020-09-03INV_77660369.docdoc 76ae164cb6f6fd68f41c001c6a9f9726e47e274b7ff077adefb3fce61627d5d3Virustotal results 26.67%Heodo
2020-09-03PO_09032020EX.docdoc 48688cc3a9bbd8d29c150454a4659257796ea3bb2b2a20ceed7414d5afd6ede6Virustotal results 26.67%Heodo
2020-09-03DOC_2276907099279391250506686.docdoc d7dccaf606ccac241264d06440a58415ea545b955e3e2538954c3ab166c541c3Virustotal results 26.23%Heodo
2020-09-03INV_9741237592563.docdoc 54db84a7eab0ad73dc1fd9b802cbea856c41d186a7ece87b0b2dffd42a9c1edcVirustotal results 27.12%Heodo
2020-09-03REP_DDH1WPJJELW.docdoc 6c818fe954c67ca4e2b3fccec2e00931f21b0a825d378e963e409827bba019d4n/a Heodo