URLhaus Database

You are currently viewing the URLhaus database entry for http://www.uasingishu.go.ke/wordpress/wp-content/uploads/lm/b0pimu4668321pawwgo3ykopn8yy/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:607891
URL: http://www.uasingishu.go.ke/wordpress/wp-content/uploads/lm/b0pimu4668321pawwgo3ykopn8yy/
URL Status:Offline
Host: www.uasingishu.go.ke
Date added:2020-09-24 00:13:40 UTC
Last online:2020-12-15 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 00:14:04 UTC to abuse{at}ripe[dot]net)
Takedown time:2 months, 22 days, 12 hours, 9 minutes Bad (down since 2020-12-15 12:23:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25PO_09252020EX.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25JPKF_CUT_090120_JDO_092520.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 27.87% Heodo
2020-09-25INV_QRF_090120_VUQ_092520.docdoc ddca7bd9923ea1a93f054a8ea4c749b80793daf20550c9ee2f4e63446572c400Virustotal results 22.58%Heodo
2020-09-25INV_HER_090120_OKH_092520.docdoc fe3018c09ebbc1ba8e04839eafcb353384ffb23b0be6729808a820abc068b280n/aHeodo
2020-09-2456937642.docdoc 30a0c59711e06c411f4e1a20c649f507a1ef69742192df4ede24d92289aee591Virustotal results 31.15%Heodo
2020-09-24REP_PO_09252020EX.docdoc 777b616a49cad6687f1706ed066ad7879d80844e9e4529a7a2416d6e0804f4e7Virustotal results 31.15%Heodo
2020-09-24UM8849556434KM.docdoc 8e4be7abeafb997210d1c39bf851ab0c4cd097268cf3664f53c72abc3dcce92fVirustotal results 30.65%Heodo
2020-09-2408732129.docdoc 029de7c595a68b46233e28bbff65f065f8baf48178b6998928ebadafb8d3368cVirustotal results 32.79%Heodo
2020-09-24FILE_JZS_090120_FNG_092520.docdoc c8e1fe8c16784222fdc737735ed29812a5f1721e61b75f3386fa6ea802c9b525Virustotal results 21.31%Heodo
2020-09-24DOC_SKL_090120_PHM_092520.docdoc 35774d12164e3314ec57dde2f5948d18c0e60439fd49b21753e4e0954b3325d3n/aHeodo
2020-09-2489793245.docdoc 7e1935fab86166df5d6770468bf12c57a50720c0b7ba90e21accf2ca8493ce15n/aHeodo
2020-09-24TVI_090120_JTL_092520.docdoc dcffae4b2bca57b2e8b65609a127df9975ff71d81bc14a409f0058dba81ebb56Virustotal results 29.03%Heodo
2020-09-24INV_QH7053031495ZE.docdoc ff6440d9c01fb2fc8526c683c418271051ec21b1b730972f02ab6442bb0f83afVirustotal results 29.03%Heodo
2020-09-24DGD_090120_DBL_092520.docdoc d25aed1074e6086a1e8ee4fb6885c8accddd96469d110e343f36d2e13aaebee2Virustotal results 29.03%Heodo
2020-09-24BAL_UZ1852712803AW.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41n/aHeodo
2020-09-24FU_JK1T5ARRB88I55.docdoc b638a54fb8b1ae9d64723adeea13dfada5ef1ad4d4c606ed9a34370f4d216d09n/aHeodo
2020-09-24DOC_PO_09242020EX.docdoc 7ef0c540f3c535a1789981bcbe5e3dd3ba3809e8d6ef1a9745f00ccd018db031Virustotal results 29.03%Heodo
2020-09-2478458139041190422.docdoc e065d7a8263671a9d5afd66e671dd1d8cb12ccadcde39686f63b37c411d977ddVirustotal results 30.00%Heodo
2020-09-24REP_PO_09242020EX.docdoc 520c035bd0bd60fac0008ee46cd8e3eab4dbdc31d8270d9559efb1e7b5016c7cn/aHeodo
2020-09-24INV_SJI_090120_GSC_092420.docdoc 0043af7d182b9d6145aa3d75f6ced14fbddfab10b615e6997bd426d3a23da6a7Virustotal results 29.51%Heodo
2020-09-2437155419.docdoc b8c075d4057bdd225bd2328001ef2cc8efb5e79192d6c2fe8279677927714ec8n/aHeodo
2020-09-24FILE_JUU_090120_TKX_092420.docdoc 1e8a41d3b5b66bf2151302e128b041ae3994ea9a2a0a688a098fb691a692e222n/aHeodo
2020-09-24IB6000920080EM.docdoc 7f2909dbaff2ca4d076322b968a100de8c38b257858149d44dc8976189d2571fn/aHeodo
2020-09-2431269353.docdoc 7e78d353bf29cfd042c3741647fea216a70d735df0b286f87383bc7732e6ff23n/aHeodo
2020-09-24TI3436989473KR.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24INV_M2OKPKW9967.docdoc f1d7646cf6abe9a746a6dab251be541e66a294060a1f32665b7e1c5d54de17dcn/aHeodo
2020-09-24PO_09242020EX.docdoc b8a9d5f54e75467b003cb37db317d9537fc49705aa3334531937929937b0eaaeVirustotal results 29.03%Heodo
2020-09-24REP_EGQ_090120_FKX_092420.docdoc 2e3f0cba76c76de6beb1d7782576c1913d7a5ec9e471a36bac04827d26b0185dVirustotal results 31.67%Heodo
2020-09-24REP_04211933.docdoc 0513605e1d28ab01152da25d30cb6762b95b79d8183cb775c505abc6f341e4f5Virustotal results 31.15%Heodo
2020-09-2433279488.docdoc f97b2fe462e15ffbe47937e6d6ad815595fdb180d137a7ddd92f9f41e5a6b5eaVirustotal results 27.42%Heodo
2020-09-24INV_VIJGBDNA.docdoc b109f9bea346849203b79acaf03255849b23a431d1179bb93ccd213a92da3b39n/aHeodo
2020-09-24NSM_37285527.docdoc 447465de32a94153d18ec88201122059c81c4d5e43fad6bdace0fc4b7b788a57Virustotal results 27.42%Heodo
2020-09-24FILE_95446615.docdoc 27dc3b44a37b8d1d2c9fb8be66fc68db20eddfd82efd9aec4a13681328129242n/aHeodo
2020-09-24PO_09242020EX.docdoc 35fdf71d1156a709edbfc6250568a61a62afb183218e5fc5ffc1249ab07bb4b3n/aHeodo
2020-09-24DOC_PO_09242020EX.docdoc eb6603914138fdf745639105d5d9df8a97a3db951cb1ed415138f3b3b2d1fd80n/aHeodo
2020-09-24X_08118320323.docdoc eded433f531513b960d540a5a009de4bf991d6ef3a525317bc5c1ee9f10c1192n/aHeodo
2020-09-24FILE_PO_09242020EX.docdoc 3f772c90ffb4a3f86c025607102abfb70ce728d1070671319642e1ce5dacccb3Virustotal results 20.97%Heodo
2020-09-24REP_AI2245317405WR.docdoc b0c9e63cd039da312aea84e7c632e4faab8fa1bf3b6d8382f6fd898635c39941Virustotal results 22.58%Heodo
2020-09-24DOC_3R4LGG7EIWUG1LV.docdoc 10ee811abda6b02efcafbd3d0632861a478e57acafde239f71e7231b6ca2e7c8Virustotal results 22.58%Heodo
2020-09-24INV_TUE_090120_HQV_092420.docdoc e29c7182354a985eaf81940489c20229a695c30d38a91d01c8581955e5b1e455n/aHeodo
2020-09-24MO7822714933VH.docdoc 7439811010be6eb023390a28eff9b2acf598883daf1cb66bf4c6e78bb8f13998n/aHeodo
2020-09-24BAL_CD3100406566LL.docdoc 4d6a492ccf58a9712b96c0ce4443b1881fa7405bbda94ce7cc0a92ef06a2daafVirustotal results 40.98%Heodo
2020-09-24XQB_090120_UCX_092420.docdoc 21d6462af9e28cac11c5b8bc20c9f07e953c7af99c15966175e8b8cfc8ee9363n/aHeodo
2020-09-24REP_SZ4268973878TG.docdoc 353903d7b90942b9e45059e7a1ea56eea91c412f5cf0864982870f55f9e61e98n/aHeodo
2020-09-24DOC_NWM_090120_HTH_092420.docdoc 6a85b35a3efb06108074ff5c1c41b6673f1888f5f4766aad5214383d324fd416Virustotal results 34.43%Heodo
2020-09-24ZBBVKLH3.docdoc 813c3689cf9fecd602a950034dcd90f060f360f68193e239a02e13ed8587c220n/aHeodo
2020-09-24REP_16755871.docdoc 109faa9ffefc2e21ff1a72efcf3e665b4be5820282f07f8fa54c14bc9f243803Virustotal results 34.43%Heodo
2020-09-24XKVA_CX9774918440BY.docdoc 3b95077a69ba1ee1226face3a5f83a78950357b93815180ebb6b6772cf8212e8Virustotal results 37.70%Heodo
2020-09-24INV_UCY_090120_XCM_092420.docdoc 79a7d433152a96d54a0687fd65dae6aab97a6af26dd206692bf88636977729a1Virustotal results 34.92%Heodo
2020-09-24K_68613166.docdoc 8c2167e0297ffcef1e67f0aed9f87dd7de95a4b552865584b7bd0185ac8f98f9n/aHeodo
2020-09-24BOT_3504925345777580987804964.docdoc eb45dca6aca88223d8145576132a86f7f21770508a20b6335021ea03cc040d8cn/aHeodo
2020-09-24REP_ZXP_090120_EDD_092420.docdoc a7beeb1521d12c379e5eaf94aa8b734f806e5ee1cada250f51dc5c3be983a7a1Virustotal results 27.42%Heodo
2020-09-2420194748.docdoc 9ca8f66ca174af2d6d9944b2cfda4685bd8710217610c24b6332ae5436c52405Virustotal results 30.00%Heodo
2020-09-24INV_PO_09242020EX.docdoc a6bdea3758ccb519e3736628a467290a74b47562f8a489e89346642276c9f177n/aHeodo
2020-09-24FILE_PO_09242020EX.docdoc 0e30a7bc2d19a489b6c26b22e411e9f691cfb0b9d693a5888ae064519809470cVirustotal results 29.51%Heodo
2020-09-24I_9L8ROQSU.docdoc 097a3af6719d48a0d83d9c75a6e8edc0d4cbbfd508488a6bc28c27fd21b3e7d3Virustotal results 28.33%Heodo