URLhaus Database

You are currently viewing the URLhaus database entry for https://kaatenco.be/cgi-bin/http://sites/qQCqKE9dBN/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:503041
URL: https://kaatenco.be/cgi-bin/http://sites/qQCqKE9dBN/
URL Status:Offline
Host: kaatenco.be
Date added:2020-09-14 21:16:13 UTC
Last online:2020-10-15 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-14 21:16:28 UTC to abuse{at}combell[dot]com)
Takedown time:1 month, 0 days, 11 hours, 30 minutes Bad (down since 2020-10-15 08:47:07 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-15ARC_550.docdoc b997ef935211ba1a51989effad7a7d7aec2612e83fb9508ef801069d8271b79bVirustotal results 20.00%Heodo
2020-09-15rep_XMB5479.docdoc b484a3ded2b75029607dd3ecedc2caaccd6dcd90ae16bf68c5cea9858ce35dbaVirustotal results 22.41%Heodo
2020-09-15MES MZ3636.docdoc 3ad326abc45400b40ed0fba1540f26c7864da17cd0bf503e3c5f435fba6adcbdn/aHeodo
2020-09-15Inf_CFZ676.docdoc 6880d2e79190370d40b0b27d9a18e34142fab5a99a6e94aac94e5e32c8cbfe84Virustotal results 26.67%Heodo
2020-09-15Rep_RZP340.docdoc f163c66aa73b41b96ed8c04c9db32f3917a67fddb8f2d58ec0f0e51a7e127dfaVirustotal results 27.12%Heodo
2020-09-15mes.docdoc 822b0ee6feffa446295a158caf0be5dd87f630715d1c1d5dc62c121a235a869cVirustotal results 27.59%Heodo
2020-09-15Attachment 594.docdoc 61b277c90703979b6f26776e18cad637717fb7113ec8fbb277a329621665cfc6Virustotal results 27.12%Heodo
2020-09-1576845DYT-NZ92107.docdoc 45eac8d3f2c340c37b1149fded87c22cc584e341677c5cae9bab43280375a6acVirustotal results 27.12%Heodo
2020-09-15rep-2020_09_15-7997.docdoc ba16a6fbe9cffddd217b697a158eda111d85a3ca6ad0c1a350340a554d22520aVirustotal results 25.42%Heodo
2020-09-15list_20200915_697.docdoc 4ffb60a6bdfa7e5fb63a913ab8545cfe5288827c74ea890d2aae2692f190737bVirustotal results 22.81%Heodo
2020-09-15Doc_20200915_8876.docdoc a3f3c2d720c92d343641e4ce6e5f8bb1aec61a90efbd97286a8b9da69dd1e170Virustotal results 23.73%Heodo
2020-09-15dat-2020_09_15-766233.docdoc a9690f5c26e45f7ea505e40cfebe5888a3535c137dee58140a63699579cadf72Virustotal results 24.56%Heodo
2020-09-15Attachments-878.docdoc f316eecb674c54a4ec894a5a65237568bb94007f2ba66421a23ff37df4916fc6n/aHeodo
2020-09-15E28972_20200915_T87233.docdoc 61ece0282de0d8ea6739dea95cfbe7a08bae1059fbfc8aab9a9a57a996b7c927Virustotal results 24.14% Heodo
2020-09-15Rep 2020_09_15 KA221012.docdoc 298d9879445508c48a660ca0eb1c1f19f65483755ce6ce04374995eda6c8b395Virustotal results 22.41%Heodo
2020-09-15Attachments ERK442882.docdoc 117ff974263e5ba8d7be16655458ab34722982734adac8b03d62ba9c0f8b6078Virustotal results 22.81%Heodo
2020-09-15INF.docdoc 4e194eb7d4d431f2639472339e07f462e51df265e1681349a519dfae98b8048dVirustotal results 24.56%Heodo
2020-09-15FILE_20200915_EKK549693.docdoc 3efa7fdc4ca6834bb9660796ff8e44d4920b31e3cba358915cfc879f08cadbecn/aHeodo
2020-09-15file 20200915 SK525369.docdoc 6c6225685c94dc3731580b64ecab9c502b1a89defe6a0ac2c3d3ddb2726f9a65Virustotal results 47.46%Heodo
2020-09-15ARC B984707.docdoc 52a16eb4d0a5916ce64afde8ebd6f617d816671ca29c92b3076ccb8199e01f0fVirustotal results 48.28%Heodo
2020-09-15MES-20200915-3980195.docdoc d012e41f5d0ae35662f72581970abfb9e90773c7388f97ee093bc8a045b9b340n/aHeodo
2020-09-15MES.docdoc e0aad52f9de4512023a6d55564583a80a0c187c213055d7ae3f5c47da8d5d7ddVirustotal results 50.00%Heodo
2020-09-15file-2020_09_15-16975.docdoc 70fd42a9c8f4e756e7045642e89490e8917b44e18a081e82a9a6be42a1cd29a2n/aHeodo
2020-09-15REP-HI652688.docdoc e6886185d8fca1585bdc84a753479ddfa5c91e129422a964e2510238293b5192Virustotal results 45.76%Heodo
2020-09-15INF 20200915 JG676090.docdoc 5ce44d83a41eb185f956666c77f22aabf955616d25fac283a491f9451fe7ba52Virustotal results 45.76%Heodo
2020-09-15Inf 20200915 HH561.docdoc 3e868560d166d6558acd1e5a23b2c695fbeaa76a900377c8da768ac562d17343Virustotal results 45.76%Heodo
2020-09-15file-20200915-U841.docdoc d4c9555b63b03bb49ef48c18edd3d1e1dc33617c56a00505f470823f6de5c394Virustotal results 45.76%Heodo
2020-09-15File-20200915-UE14240.docdoc 6284608a75bd2f21cce00c2c3453353c83b146947f173dc53013c0919178a4c7Virustotal results 46.55%Heodo
2020-09-15mes 20200915 PY772.docdoc 8656695ef3e73212f1da1f7c552c57c9f43e5b9e46fe1f3aec227b1700baf555Virustotal results 45.76%Heodo
2020-09-15H33162-20200915-59906.docdoc e9fcb6031b256633694a632ff788b143b51d422749b4433952a0cf79d1fc3451Virustotal results 44.07%Heodo
2020-09-15mes-2020_09_15-94980.docdoc ced3e5fdf4b4632f136fe21e7a32deedb1bada34b697b4daf4fecc7063ab961bVirustotal results 44.07%Heodo
2020-09-15doc 20200915 860.docdoc 76d26557ad9344a10d718f60b088004f1335e8217a201641d894a46373bf73fdVirustotal results 42.37%Heodo
2020-09-15Rep_20200915.docdoc 5fae5bb30e9800ec137ead15679e59e39b70069c5a495f35874953f74cbd4c6cVirustotal results 42.37%Heodo
2020-09-15Rep_2020_09_15_K40608.docdoc 0602459939d6a8fb1a4a6930c2dc8e1353770134e7df1852024fabfb17cd7985Virustotal results 39.66%Heodo
2020-09-15inf-2020_09_15-2553.docdoc 2bced1a8302d817af06cc07010a27345146769b3d9ad0e86d246ca93e4dc8e69Virustotal results 38.98%Heodo
2020-09-15List SFA350.docdoc 3dd9848d0ed7443d064dc035f363bd7b96e8712e4540981de8d3358092a6e74cVirustotal results 39.66%Heodo
2020-09-15MTG061.docdoc cf8d757135f246e73646a6a72adfde896d3ed51271e7056596076d834e960968Virustotal results 40.35%Heodo
2020-09-15321_134.docdoc 0b92085e3fef4b9cb196fb9a8e9bf64d4eb8664184ea2bdf46132abfa7f72a3fVirustotal results 38.98%Heodo
2020-09-15Attachments 2020_09_15 96752.docdoc ca62501fd8a132340a63f97e4547ee1384a7744ab8c7e1afe4e69a008b2c3602n/aHeodo
2020-09-15doc_HTN889.docdoc 0e56a212452f8382cc59f8ea56838b188802b56853a868f03a610e633095cda6n/aHeodo
2020-09-15arc MIH64838.docdoc 95a565fbe3dd58781eef947d31d6de93257032734052f7402be980023742980bVirustotal results 38.98%Heodo
2020-09-14Inf-20200915-P348.docdoc e16c524a4a5cdb8c78cf9413fda5b88385057a9f97e2a5c080f8c015fe1fa9e9Virustotal results 39.66%Heodo
2020-09-14XOP248-2020_09_15-PM241.docdoc 353654c4a8d65e5878b00c7943ee5d2e19e6438c31bd949ad16452496ca627e0Virustotal results 37.93% Heodo
2020-09-14doc-1618452.docdoc 659eee918658caf613efe868209fc51ff054b39f70d699c5474e5f6ad4684d76Virustotal results 37.29% Heodo
2020-09-14Attachments.docdoc 46086a9b833d843d14a1970ee32fbc800cdbcd58e151a358a917164ac7937972Virustotal results 35.59%Heodo
2020-09-14Dat_20200915_700.docdoc e5abd1707e24afbeb2ad49977ec61f6da45392df2a709979f8f17a4b6d187002Virustotal results 30.00%Heodo
2020-09-14list 20200915 ONS003.docdoc d99f28be1bd88f4eb8efcd54c021f9b248038aa19d71fe399be76813a24c2b25Virustotal results 31.03%Heodo
2020-09-14Attachments-7672.docdoc ee5bd3d048be89cda7b21ccc887b9a31bd338b0d97a8d34569b26619d759b3b7n/aHeodo
2020-09-14824VX-2020_09_15-Y394878.docdoc 5215ec882e86e8604927d2f9da1a9ac3d0f6cb8cb2cf4b53441df2a10602bcfaVirustotal results 27.12%Heodo