URLhaus Database

You are currently viewing the URLhaus database entry for http://bkpublication.in/css/85yivp5f/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:588330
URL: http://bkpublication.in/css/85yivp5f/
URL Status:Offline
Host: bkpublication.in
Date added:2020-09-21 18:21:32 UTC
Last online:2020-10-30 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 18:22:34 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 month, 8 days, 21 hours, 38 minutes Bad (down since 2020-10-30 16:00:34 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-22AF5187937053BL.docdoc 6b58f3d639dbfd3f04c2534bac10583c7e2d0ba1e88ef31ebe443fc18f409a76Virustotal results 49.18%Heodo
2020-09-22INV_21231769740.docdoc f8a9eec75fa4360483b50dbac630a13f91975dc2415df9eed41c9aab0f6b6e13Virustotal results 48.33%Heodo
2020-09-22FILE_PO_09222020EX.docdoc 8d49090e5ad1ca487645e8dad8b6e90d267b4a7f5d4cdf4d9c4441d969f088caVirustotal results 45.76%Heodo
2020-09-22FILE_73097610.docdoc fe1fbbade251f94508504fe8861a87b7c721755f8116854ec1497d79a8a84dc5n/aHeodo
2020-09-22PO_09222020EX.docdoc 61b104c81d6e07bc38102631a844c6247bfb16ff720fc134b3a95d601df23fabVirustotal results 42.62%Heodo
2020-09-22Q_20299138.docdoc f574d141e50f5f004b6d5b2932ce746ef012404c5bf46933947ad0ce3b397665Virustotal results 40.98%Heodo
2020-09-22D_PO_09222020EX.docdoc fb096cb018d3c66f22c322028f9e8f1f049e9a9eb3531f9e893c3d2522f35951Virustotal results 36.36%Heodo
2020-09-22PR_PO_09222020EX.docdoc 718113e004b811df9d311a7edec1092b2aab2d9173d762022544a74b5ba02657Virustotal results 32.79%Heodo
2020-09-22CSW_89708050.docdoc 58dca36db6814be3bc7016599693d84cc074f17451bebe7eb98baee99cef0ac9Virustotal results 32.79%Heodo
2020-09-22RRWA_04052226047332936.docdoc 9e25ce36733cb087f13b4a1c744a28856f2e1e878782893ac18e682ad0f2e842Virustotal results 32.79%Heodo
2020-09-22F_PO_09222020EX.docdoc b664feace8781e7ad1ed550dc5f1a66b77b73f75228c1898a1986b67fd543477Virustotal results 33.33%Heodo
2020-09-2217GFIA9D4JLI39.docdoc 7aa7d38a55d5f7d01ee40a977a2df63d0cd4c938482a2fba3c73e1844405a0fcVirustotal results 31.67%Heodo
2020-09-22REP_9960546193704921848.docdoc b9ae26c8fc56943d82223a7d3c26671f4247a42d3d56fc25a455217cb84674b7n/aHeodo
2020-09-22INV_I0HKF6XS.docdoc ccc41f0194e3ea4cd0460cdb76391a4edf6732e895a600acaeb6099a6796c558Virustotal results 32.79%Heodo
2020-09-22XP0889555123FY.docdoc 43b978d85da34d8b60a7555d0c1ca67e51817214b70f29e321eacd4c96f35051Virustotal results 31.67%Heodo
2020-09-22FILE_SKBXH96NR32V.docdoc ce04dad796a1819d846a6a981c97426c43b0943deed734991bc6780eb54ba074Virustotal results 30.00%Heodo
2020-09-21864059713.docdoc 0ecb8f0ac3c2c27f213dff3752b70d6832343dd6e1ef7e95e066e0446ef384f8Virustotal results 31.15%Heodo
2020-09-21WFC_090120_FCF_092220.docdoc 3366930cc13338eb0661795bbde1d36e686105df071793c4080d1483b27d2d84Virustotal results 29.31%Heodo
2020-09-21UQL_090120_BEX_092220.docdoc 1c32c9f78e41111a64f8b70991f12d32e3baaf7def1f2ec157245644d8e4ddf3n/a Heodo
2020-09-21XHT_FB3474923794WE.docdoc 74c1fc2f43a4a426a9f4ffbc4738e6107d95009d67a202f0c8a2a1b80ef60937Virustotal results 31.03%Heodo
2020-09-21TWRZ_FU2099626038HF.docdoc 5bb3e05266ae1854d7bd5732eface0a2f45a896e99c1d0ae15f6e70423b2a2d1Virustotal results 32.20% Heodo
2020-09-21REP_QCM_090120_VCM_092220.docdoc caefda78ff290b2ad9de3f8ee864f985144a3caeb6e307e034427b5f621184daVirustotal results 31.15%Heodo
2020-09-21PO_09222020EX.docdoc 1ee23bc9e2a3807499d0fd736a4503235cc2d46e14429f19ff423fb2095bc38bn/aHeodo
2020-09-2154387359.docdoc 9f3a5491d61d0e1c05f436639b20d24b38465f96aecdda836f9fe292d1af0b34Virustotal results 30.00% Heodo
2020-09-21959710348327363911256.docdoc 5f48ec62b70130e2ebbdf504c0de8057499f87bcf6bda3462f498f3d2e08c22bVirustotal results 31.15%Heodo
2020-09-21FILE_PO_09212020EX.docdoc 9959447fc9c87f2838c48ceecfcb5cb1eb094702dcdb553d798bfd513207e3aeVirustotal results 26.67% Heodo
2020-09-21OJ_PO_09212020EX.docdoc e6573ea6cfe0bdb4f9b3d43b7b68207d18fb492c9ed35aaf6bee52d0d681a9ddVirustotal results 28.33%Heodo
2020-09-21DOC_PO_09212020EX.docdoc 5af136d60a366d4fa170883a816b530f4ef2828bfd11eafe0204c4f202deb748n/aHeodo
2020-09-21REP_501979270.docdoc 0375b4835fb4def35254dd37af3b71c8c92dbafb8af44ccf8f7ff85e3751ffb7n/a Heodo
2020-09-21REP_LI31OR4H2N9UL.docdoc cabe0605dd6140798ca1573bc18bbc38043b41d7e8bc202fb6ce104462a88595Virustotal results 28.33% Heodo
2020-09-21BAL_GPG_090120_CRF_092120.docdoc ceacb71b802701140f4c5432823b479d42c5d3a712c0972d8316b7d145b3b366n/a Heodo
2020-09-21INV_71066961.docdoc dd8dba51621cf349aa102562f01a6209911ee8d9ae534436dbddd573653159adn/a Heodo
2020-09-21NZR_090120_RNS_092120.docdoc ea13635d8fae6f813f3021e4d264e12f874aba0cadf496e53a82fdd80faf37e5Virustotal results 25.00%Heodo