URLhaus Database

You are currently viewing the URLhaus database entry for http://csnserver.com/78T/PAYROLL/Personal which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:54910
URL: http://csnserver.com/78T/PAYROLL/Personal
URL Status:Offline
Host: csnserver.com
Date added:2018-09-11 13:06:31 UTC
Last online:2018-11-27 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: oppimaniac
Abuse complaint sent (?): Yes (2018-09-11 13:08:35 UTC to abuse{at}rr[dot]com)
Takedown time:2 months, 16 days, 14 hours, 5 minutes Bad (down since 2018-11-27 03:13:45 UTC)
Tags:doc heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-13PAYROLL #427JTJ.docdoc 8870a62f875161882a0c93807ccc85209554a068953ae16190484414b427b173Virustotal results 36.07% Heodo
2018-09-13PAYROLL #41PBDTQYI.docdoc 0f27215d431683ca9e12bc565504b524a386c4815d19c60070205280676ef292Virustotal results 36.67% Heodo
2018-09-13BIZ #536Y.docdoc 40f3064a7da1ff06689f57ee2fac66ce653c7395cfa1908516129e737b028dc0n/a Heodo
2018-09-13PAYROLL #425634DV.docdoc 7f3e9c4a40ec41639e6c8d9db032229d6c58002874ed5d4cdc5fd03e622d25edVirustotal results 32.79% Heodo
2018-09-13PAYROLL #62U.docdoc 1316c887d94e24f942b882ecbe7314ef4746e2800122b27bb0086e8aacbb8b00n/a Heodo
2018-09-13PAYROLL #6UBNPTGL.docdoc aa44a4b26f945e7204d6ee644a5cde053dc131b4f05f007de58ebf2fa180a90fn/a Heodo
2018-09-12BIZ #4047209PUTSZL.docdoc c64c8cb54c57849ca6c0d5a741e0726e4337b3df8dbd389e912c9a7899e3b311Virustotal results 31.15% Heodo
2018-09-12SWIFT #0860101ZVSMJN.docdoc b3e3f957528379284a50d3c3efe1acb675266f10f52b3e4c98e29ed1124435d3Virustotal results 31.15% Heodo
2018-09-12PAYMENT #9551354P.docdoc d255e74d39fb90e116b46e8ae8a9285ebf292696285a84be8fb17bf3891a2da4n/a Heodo
2018-09-12PAYMENT #197727FEW.docdoc 9115ac3af709e3d318f6ffe826b06d6c5a168b9e336501d78f0513bc8e00b0c5Virustotal results 31.15% Heodo
2018-09-12SWIFT #9031811CJJW.docdoc 5c8c43924bfce2c270f21a55435cff7e8a76bcb1c7397448ebf20d9edc3c6c25Virustotal results 31.15% Heodo
2018-09-12PAYROLL #57ZYFLZZY.docdoc 907aeb750eb680cb57c7e93fdb76af114de2bcd12fb4ea47af5e76e755f832c9Virustotal results 31.15% Heodo
2018-09-12PAYROLL #1651677XZOJL.docdoc ea8dba08b3a950db78076bf7bcd42dd9410ab5b87a344cf4051c5fb072dac165Virustotal results 22.03% Heodo
2018-09-12PAY #0768Z.docdoc 2ceb81f9c7601592ac7b99888c1c7611f0cb9053aed8a7a9306078f4c1d9fb92Virustotal results 16.95% Heodo
2018-09-12PAYMENT #5KZYDIHI.docdoc 980595ba0f4687c8c114bedcdefc993f4d92ba183865ec263a71892737f317dan/a 
2018-09-12PAY #04332JBLRWF.docdoc d4482c6be7b3208e3668f55f40b2207dfe7acd33c26f93e7100757827eafe66fVirustotal results 21.31% Heodo
2018-09-12BIZ #451019MPOVRSF.docdoc 1858e2a692ef2d989e4cc717bb602057d9fb6d6bf7b65af08260f6a3cb39eff9Virustotal results 30.00% Heodo
2018-09-12BIZ #312085AWSA.docdoc e44ad7d54c33963149c77ee31940482540e8ec955cd9077aefdf938ba5c6c933n/a Heodo
2018-09-12PAY #1675962UOTAORW.docdoc 0d05e6c0df71189a5a6399281af155418a24fb20d7cb857799795db44f73eba1Virustotal results 27.87% Heodo
2018-09-12SEP #0639560VEDCHG.docdoc a4447d6d2ac0b8948372c72077fe25133ddac2a70ea0e63519fbd2cb2f7f0fd5Virustotal results 27.87% Heodo
2018-09-12BIZ #78YXTGESVY.docdoc fd9b1e990e1d888bdfea261eef75fbfec27bf3c4da6c8e15fda706d385856d3cVirustotal results 28.33% Heodo
2018-09-12PAYROLL #80508AJBJ.docdoc 0953c77f94f2b2a224fcbb9e4e32fc7bac365417a78a8d7827b9dbe438145cefVirustotal results 28.33% Heodo
2018-09-12PAY #627824ZF.docdoc 2e820c0764fe84c5ea317b3915d13c787bfaa22a741dc603c350936fee6cbecdVirustotal results 27.87% Heodo
2018-09-12BIZ #5067828Z.docdoc 750de3c0ac403809e9278478546150617ed5df8b852cc22c5600ab9094fb3451Virustotal results 36.07% Heodo
2018-09-11PAYROLL #16FO.docdoc db960c5df69ed5957af827b49783a74fb6cb13ef84107cd0a594f70cafa4f7dfVirustotal results 37.29% Heodo
2018-09-11SWIFT #9WAKSSBPC.docdoc 5586e5cc630f53effe5a62b0dd54a67a55f1a70503c175cfc65b8431abfb44a3Virustotal results 33.33% Heodo
2018-09-11SWIFT #622HGNVJD.docdoc 97386dc0f1e12dd77272154eedeea6057876513296307a3956b00d079eaef348Virustotal results 29.51% Heodo
2018-09-11PAYMENT #140857XZ.docdoc 3b213349974a6994adca2d0d0fba15a9cf07adf7a3b3529601ca62d6031ec53aVirustotal results 29.51% Heodo
2018-09-11PAYROLL #4UQ.docdoc 53f79e47833dea19d9d7fb5b41efcf86d3ed33416208cbe42f459595b766b005n/a Heodo