URLhaus Database

You are currently viewing the URLhaus database entry for http://uss.ac.th/cgi-bin/FILE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:555394
URL: http://uss.ac.th/cgi-bin/FILE/
URL Status:Offline
Host: uss.ac.th
Date added:2020-09-18 13:32:05 UTC
Last online:2021-07-20 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 13:34:21 UTC to noc{at}cat[dot]net[dot]th)
Takedown time:10 months, 5 days, 0 hours, 17 minutes Bad (down since 2021-07-20 13:51:54 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-05-12INV_SP9102586228AX.docdoc b47845aba204d50ace01c03c4ad98da68c19457a00b2298a9f89f3174cdc032fn/a Heodo
2021-05-12INV_SP9102586228AX.docdoc 54b9870453f9430747ca98a291ef611912e6e9185f53ebb5d7902b165961767bVirustotal results 34.48% Heodo
2020-12-12INV_SP9102586228AX.docdoc bbbfb1f47b17eba8bae54c8f17210491d43ddb48ce9a2178b835dcecaab23c6cn/a Heodo
2020-10-11INV_SP9102586228AX.docdoc c3909188903a26b52c3445491f1f884f842400f8be75b1052aad41de00f54a38n/a Heodo
2020-09-23INV_SP9102586228AX.docdoc 475c1d62cbc7cd80a4a407ff078966b7fe21757d3549881273c85e875125858an/a Heodo
2020-09-19C_65485730.docdoc e9325a711e0f6f605b85898c5b507d4320e1f1dc672c68172b06cda359b5107eVirustotal results 34.48%Heodo
2020-09-19REP_OAD_090120_TBD_091920.docdoc 2219a032fd67333ac69e83d15651054f5fa2ebf7711e2ff700faf7cf27bb18f1n/aHeodo
2020-09-19DOC_RJS_090120_EIC_091920.docdoc f4914cbba852a170c0da8d021e223ecd72be23357cf6dfaaac21d926ab043885n/aHeodo
2020-09-19INV_OVR_090120_QXZ_091920.docdoc 336faca574dbafcf9eb66a5499f5b37d83a6ad046b7a8a7db5636040fa605429n/aHeodo
2020-09-19HUPXEI1M.docdoc a17adf48e5d1001ed87a1af31344545ee83df584126c6ade083cdec6fd158105n/aHeodo
2020-09-19INV_7838784692945182.docdoc 3304ef9cd1d55e1d892f5a18644273b8e62254f587e24e42428a460305129396n/aHeodo
2020-09-19GFM_RXQ_090120_ZZS_091920.docdoc 20afdfa7a7c7a299565cdd046c41bcbea4b1cbdc4041edc9f0e51d52dac04a0cVirustotal results 40.68%Heodo
2020-09-19REP_PO_09192020EX.docdoc 0fad7aa076137ca0eea07801301e4a9799bfe63d5f5ac04aa449db6fa4201512n/aHeodo
2020-09-1994780013.docdoc 35b7b5b1fcf159556bb2f5363ef7d7ac72b3f4d1e9357d0e2a452b8c99bfd0e5n/aHeodo
2020-09-19INV_SW1452520052OQ.docdoc e5d9bb556a385de29f04eccbf388a0e8f73f556394bfcaff0a6c7ffb15e85a48n/aHeodo
2020-09-19FILE_PO_09192020EX.docdoc d737e6973c1db753444e7bb9eacd01acd35b8fe2e88cc795f668ff59f0ce2027Virustotal results 35.59%Heodo
2020-09-19Q061YX7F2GV.docdoc d91d2431d24606feacc84e4da63711d8b8d5dcf15cbb86be20d2f11fe07796d2Virustotal results 36.67%Heodo
2020-09-19DOC_NA1784767031IA.docdoc 32d451b2bae3e18f7c033f617f08f633bbe77e2bd4a98bd72d6fccb66ff80900Virustotal results 50.85%Heodo
2020-09-19BAL_PO_09192020EX.docdoc 4165b27e5b534a04d00fd600c969784706dcd31a10beaa3b585e754f973d89b6Virustotal results 35.59%Heodo
2020-09-19INV_8488834875446612064000.docdoc 1963ec47acb4c6d57b2e6d75de7d45de3b479c9f24760d5a0456a3accc66ddb0n/aHeodo
2020-09-19PO_09192020EX.docdoc f3bea1e9a17c2c0596fa59400e54751f3101a0905e12055bec42c1e02ef96d8fVirustotal results 39.66%Heodo
2020-09-19KC9020026461LA.docdoc 53c798816c0299b0b57dfc31682d5bc2a73573f248e05ce8b5427b1b9d908150Virustotal results 34.48%Heodo
2020-09-1926423411.docdoc f1bb14a732551e8301bed32c9d8cd4dbf506815bc17d1695708593bdef7ea22cVirustotal results 41.67%Heodo
2020-09-19INV_FZ9011471680PU.docdoc 9609fd808a397cc58e8735df095c890db77e5ee974c087fe02834d1a04900b3en/aHeodo
2020-09-19INV_4MNEBV49O5N.docdoc 7991a69a5cbfa005b7685a29ded3f4f849b24fed6a340cbba97dc86d6db9b0a6n/aHeodo
2020-09-19PO_09192020EX.docdoc cde71f33068605eabce06bc83bd39ab037b0c00a1fcf116de871a44328981e08n/aHeodo
2020-09-19DOC_72449860.docdoc 778c345084d688acf88bb52a9c052c1e852688885a2b4c6c3938f6f471888d44Virustotal results 29.31%Heodo
2020-09-197847607291096419.docdoc c90a7677c0c1d3dbca678dfb12ab0a8dd029bc5ae143cdf3f84902395211f021Virustotal results 41.67%Heodo
2020-09-19PO_09192020EX.docdoc 4fdb1e6203d6e04a6229d129f4087b311a3824e7fc345b00b555b9593f6f9adbn/aHeodo
2020-09-19INV_8382802108031375415681181.docdoc 90e191cad172245af9b6ffe8c5ca065163bb8ae54f8a3b6c573663f7179dc471Virustotal results 27.12%Heodo
2020-09-19DOC_PO_09192020EX.docdoc 4b9de007a12dfbcc6b19f1bd5cf8d12f6ae9a7d2a3c3c04b1147e448974d9486Virustotal results 40.68%Heodo
2020-09-19FILE_PO_09192020EX.docdoc 87888ab358912c8c811b942e25e6e58df8ad065a33cb1041ae790d60cfad79deVirustotal results 41.67%Heodo
2020-09-19G_9QWMM6JXRNFH.docdoc 375b8adece65a4d295e2b9104fb0e7fa3c3c7cc7ebb3dea4607776d050029316Virustotal results 27.59%Heodo
2020-09-19INV_189329249.docdoc 3f8ac48efd3eef3c80e8979f8cf9bbf0e0d98511a42e7517063cebdf73789e60Virustotal results 31.03%Heodo
2020-09-19FILE_18DSUC8.docdoc 8de8ea6861abc663aa24c26703bde4b83981117f06c438a6d82c295d178ce970Virustotal results 40.68%Heodo
2020-09-19LYY_090120_WJU_091920.docdoc ee2bfb3bfc62ad36246c4533bb4bb8c41aa21ffeb8bd74b216d3c6088cbc7b62Virustotal results 37.29%Heodo
2020-09-19BAL_YEK_090120_ROT_091920.docdoc 56813b1ff2c178be52fb844d4656d77d7d061aeeb71e90418d1665f9aac64978Virustotal results 26.32%Heodo
2020-09-19FILE_66326920846.docdoc b837078057329148a35e96ef42c7c83e16fd7f203fa7f1f225fc1a42246349c2n/aHeodo
2020-09-19INV_IBFNWFF.docdoc e701c5716c99c6e1549951ed3f1eeffb8b4a9625d8dadb55251998b731c7a109Virustotal results 35.59%Heodo
2020-09-19INV_PO_09192020EX.docdoc 6d6118565c7f02eda347f3b1b2b485893fbb020108df5e61fd06966bfb1ee2bfn/aHeodo
2020-09-18INV_PO_09192020EX.docdoc 9b38f99bf028d06da1c2b0ff276857ffca68abea77256a72cce711edeb81368dn/aHeodo
2020-09-18DOC_JGU_090120_LGS_091920.docdoc 3cecaccb2ac195f3828add4513535047bf92e18f3fd39df822a1aabf5a50ac4eVirustotal results 23.73%Heodo
2020-09-18FILE_PO_09192020EX.docdoc afc7650429d1bb92b43bc1bae9ac07c7e3ff7d34b10949e03b97c1a43cab0930n/aHeodo
2020-09-18REP_PO_09192020EX.docdoc af7a05d648d4175f924ff2431748c2bf40e15eeb256d2135bfeba80f4adbd149Virustotal results 24.14%Heodo
2020-09-18CL6927818599IP.docdoc 5821c7c1347704d941ccc1073e11d9621eb821da3227c358e87ca6666e81107fVirustotal results 25.86%Heodo
2020-09-18KNX_090120_FNN_091920.docdoc 51a455b1fd51bbbeddc6805c7d1304d1100dabc2c5611401df5b4f834f62b07aVirustotal results 38.98%Heodo
2020-09-18K_XVI_090120_NCZ_091920.docdoc 9c37c2186ad636529ea347cc19e89ee41554ea314182ebe3a962fe8072507000Virustotal results 30.51%Heodo
2020-09-18MY2838738873XU.docdoc 87172168a864a3749122b035ac2217ff9b8b5a26f2e55a5a0c74c3f2f52f67b8Virustotal results 22.03%Heodo
2020-09-18R_ENY_090120_FZF_091920.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-18965017065223279.docdoc 523f29c1434d7c2b71f1516c5c73cf9bd1546f0669e730fdf9282641ced7cfd4Virustotal results 42.37%Heodo
2020-09-18FILE_PO_09182020EX.docdoc e2f56917b3d099c1181df4dca64371a0f7bf81e02f1ce666637390ea0c95c18dVirustotal results 42.37%Heodo
2020-09-18RE_FDO_090120_GZO_091820.docdoc 9dfc5f3534fddaef93d3e5325dce0d96515081d07eb941bf97bb852de21b8d05Virustotal results 41.38%Heodo
2020-09-18FILE_38262166902.docdoc d30150c62052607c9dd68065e9bf07da7c7490bdc0be48077a770b13f28d77b3Virustotal results 42.37%Heodo
2020-09-18DOC_S6E67WNNZJNZL8U.docdoc e6c59aa272b0319132af611954aba4331117e24c05ed652fdbf58c0ff36e991dn/aHeodo
2020-09-18BAL_37WVFCM6CAX.docdoc 4000d1ab30db6a5d94686c02f9a7e6e687231ff9bfd42bf56e3f9f1e8750ede2Virustotal results 28.81%Heodo
2020-09-18BAL_NGRJ0UGBB3H.docdoc fe79ed4902c209d55bd37446fc8d4ce7b37f241e85e7d17264051a8cb300fa5eVirustotal results 43.10%Heodo
2020-09-18WX1PLZ4V.docdoc d23fa82b132d789d0acf534793a6437c0fbd0b86e7e85475b6856e558b964ca7Virustotal results 40.68%Heodo
2020-09-18BNW_PO_09182020EX.docdoc 2be116761f944e13024bcdd5438723cefa835893e4fff5b6469836a25303c683Virustotal results 29.09%Heodo
2020-09-18MRA_090120_LEM_091820.docdoc 529620cd21b208f373dc72c4efcc0cf9f3ce6bfbb8bd0e44bf371084cc1bb9afVirustotal results 39.66%Heodo
2020-09-18IBKUXNBH.docdoc f6dee1b273f9ff061e9c1bcd320d7f98484283f3f6ce1973877bf93231a08562Virustotal results 41.38%Heodo
2020-09-18DOC_XU4403161099BJ.docdoc d07d0ed674ad854117b8fccbeeb561da2f41ed5e55d708ef7818ed882fdeb1ebVirustotal results 40.68%Heodo
2020-09-18DP4848434004BB.docdoc 5f669eaa381cbe719de4bf1c0797e827639abba64b165820dc2186f68ab55552Virustotal results 40.68%Heodo
2020-09-18INV_70054994.docdoc 579285f801aa56caaaa76f453da00a891c2d2bbe85a4d34c9c5ca47c5db15981Virustotal results 42.11%Heodo
2020-09-18YR4017807715GA.docdoc e85fdc5e599626bcbde0c04176a3e77a8d577bb6b0a97347ca809aa9b4bd109cVirustotal results 40.68%Heodo
2020-09-1804889752.docdoc 8e6917775061726117ba0af2dc4c999bc58202d2841fe93554cbd5241a66c985Virustotal results 38.98%Heodo
2020-09-18DOC_AA1646577307IG.docdoc 2a866b80dba5296ae8ac1b012b79caa8f11c6e64bffcbb7aae8bb2e327982728Virustotal results 37.29%Heodo
2020-09-1849430698301959753062163.docdoc ab12c1e29940b5c9d1de3096cf615f14a888ac2735c582f0ea6e3a4d421684e0Virustotal results 23.73%Heodo
2020-09-18YKU_MK0961872624EO.docdoc 44d0c90d842430656bb499c996d721b16d4ef131f92e3443c478d37beb0d43f2Virustotal results 23.73%Heodo
2020-09-18U_GN3949325841KQ.docdoc a17a378e78e3f2c7ad05f3802369e818c2b5669a6c4a1136d096f598417a46e6Virustotal results 24.14%Heodo
2020-09-18REP_PO_09182020EX.docdoc 15c49ec4dc917425fbbe700b8f340f1d1629be55957693427600488b42eb5156Virustotal results 22.41%Heodo
2020-09-18YM_E94E2D0XC534PS5C.docdoc 68388c6e9de3f96e1a46baa9a6f0185dec5ce48b8a30d26e18c23161078e80f6Virustotal results 30.51%Heodo
2020-09-18INV_RJ7447867528HI.docdoc 7c81019f932c35ff188d4260fe0b23ba6cb27363922cbb8265a8f3121e26c32fVirustotal results 24.56%Heodo