URLhaus Database

You are currently viewing the URLhaus database entry for https://research.kku.ac.th/sys-cache/balance/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:620410
URL: https://research.kku.ac.th/sys-cache/balance/
URL Status:Offline
Host: research.kku.ac.th
Date added:2020-09-29 03:10:19 UTC
Last online:2020-10-02 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 03:12:19 UTC to helpdesk{at}apnic[dot]net)
Takedown time:2 days, 23 hours, 6 minutes Poor (down since 2020-10-02 02:19:08 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-3067X2N5PV75CL5Y.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30W_40228237.docdoc e8a8b9fc12cfa3ee4f3cd91504cbf5b9af3281a25798c9c23c319044b39b551fVirustotal results 27.87%Heodo
2020-09-30BAL_BC2646174485DI.docdoc 5fa75a02b1c855828a4a11cf3cf8da64502f2b4023c776b5f37c98ef894df875Virustotal results 26.23%Heodo
2020-09-3035195543217453145015.docdoc 89184bca1106ed62901477bceef09ee282bceca404d17c44630544fdd803cbbfVirustotal results 25.40%Heodo
2020-09-30BAL_PO_09302020EX.docdoc e0b14c7013db13d2758bc65aa44f7d54f176e4c60749b9dfa397e1d4d9312355Virustotal results 25.81%Heodo
2020-09-30Q_UVI_090120_OYS_093020.docdoc c86715ec898705b4f96afa145de31fef0c732dd66d0e2707407cb453731f9facVirustotal results 22.95%Heodo
2020-09-30T_T6D3AWDBEKRF11C.docdoc a6bda5016faa4796392e20bb0d8076147b2d6ea0f899019aed66cab6a4ad220fVirustotal results 22.95%Heodo
2020-09-30REP_PO_09302020EX.docdoc d206f9b0e7b447444d1f5d592716186fac89b660509dc88efa51a5701e795a77Virustotal results 22.95%Heodo
2020-09-30BAL_9ZLOA8V1ZYEXJCYJ.docdoc ea04aeb35f3ee924c978225fd95f2fa3df8a4847a761685ad79f96c82886f80dVirustotal results 22.95%Heodo
2020-09-30FILE_XDJA7ZC.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52Virustotal results 22.58%Heodo
2020-09-30F_PO_09302020EX.docdoc 08bda1ed5fe14e5198b9ac6497ef066c83189be44ff6fe663d6a708bdab3c8fbVirustotal results 22.58%Heodo
2020-09-305781788465964.docdoc a5bc68599f8ed3a4cdd8e4894aad9cd9fa0753278b8a44af04debb277960d44eVirustotal results 22.95%Heodo
2020-09-30DOC_HX5598788331VK.docdoc 558218ea25f3527cb164ffeb3deeecc8e2f5f3cbc0d7f1d098e13662947f224cVirustotal results 22.58%Heodo
2020-09-30DOC_LHI_090120_BXW_093020.docdoc ccdb5d6da8574cd91bc5a89eb085951208e231843ee7f0a561e3006338898c5aVirustotal results 22.58%Heodo
2020-09-30AEM_XV4540740249TG.docdoc ba44584c1f1d349168d9003b0bd7fcd9d738c17877427c3f02ad492598d5c637Virustotal results 22.58%Heodo
2020-09-30INV_553720922.docdoc 3e6e31b97b51015205df9e5043f01adddd0e5cd8248bac5bb0a7e7d75b5684bfVirustotal results 22.58%Heodo
2020-09-30519726590248935171.docdoc dae3de0260b268fd89734a96196759e0a878835e38a868db1ec44194c212e1f0Virustotal results 22.58%Heodo
2020-09-30LXI_MUGZIO9.docdoc 8a28504fcb36f233a01a36c1c90230bae3dd51d22bce884a6892b4354c922f96n/aHeodo
2020-09-30INV_17210487523274749.docdoc 19377355e91331d5f2438275b1af46c6f266bd250c9e6a421feb6deaa86f7cadVirustotal results 20.97%Heodo
2020-09-30DOC_HR8054470614LJ.docdoc 5bd1dec77e268f1da221047d95d57981748b9f359c04a76b1b80de3a2144c67dVirustotal results 21.31%Heodo
2020-09-30L_IIP_090120_HVE_093020.docdoc 420c99cf0d5ca3e0ddb053ffa31741bebe9dd69fb61224c8c741b7ec01e85e96Virustotal results 20.97%Heodo
2020-09-30RDB_090120_GNF_093020.docdoc 119dab813d43139ec7ee0f953f68341391776f7f5cdbc1fc6eeabf95356a8a21Virustotal results 20.97%Heodo
2020-09-30BAL_XJB_090120_DWI_093020.docdoc 0c169d8b50436ffcfc67dc75e5a8534829a932697bf5e79107b4ecc423e227f9n/aHeodo
2020-09-30WOR_090120_QGR_093020.docdoc f8fb4db3104cc2c9f261f3b3b43acb4132f5759f8e485677651a52478610f5bcVirustotal results 20.97%Heodo
2020-09-30DOC_PO_09302020EX.docdoc e9a9d7c87ef767357d0019c6185d27bec8449b2abd340b93b54b6621c426fc14n/aHeodo
2020-09-30SAS_090120_DGS_093020.docdoc bf10b7e9f1ff0345f426df6b7da95cdb75284d378f7ea29d192e24623e35f3a5Virustotal results 45.90%Heodo
2020-09-30INV_XQ7678853758ET.docdoc a9b4569007c2822d7d717a8ea3a4e3a496c52a3f2011519ca3c4dd5e42011465Virustotal results 46.67%Heodo
2020-09-30PO_09302020EX.docdoc 9c8962de4c40c27a546d2347cc878f099354ae9f5cc7e799e78d864d74a6a72eVirustotal results 43.55%Heodo
2020-09-30PO_09302020EX.docdoc a1cbbf8abb7c17079dd727968cf72dadead6f70a04ffc9f51b29860c9a8d4801Virustotal results 44.44%Heodo
2020-09-30E_FQL_090120_MQT_093020.docdoc 267635371e8ce155728f5a57ac788f36284669033c41d39c1bd6f1168b3c469fn/aHeodo
2020-09-30REP_AZR_090120_GMX_093020.docdoc 010d313ef5a6680acc6fcdaca0eed3e19f256a23cac861684466d6e7f7138030Virustotal results 41.94%Heodo
2020-09-30BAL_47760614202409386394.docdoc 0bffbb268223d255d4ebdcee53bd0d8e990843600bf96f811f47a550d1e366caVirustotal results 39.34%Heodo
2020-09-30TSVJ_JJU_090120_TNH_093020.docdoc 8c21463a0b127e2db497f399810180572cf5e4027f3942919aeeccabf1d3753bVirustotal results 37.10%Heodo
2020-09-309N7P5KHIGTE5.docdoc 31096733d8d5f5ecff8a6a1f0bbf9b3af3fb5f1e8f0b509b342a38cdb0a01b43Virustotal results 35.48%Heodo
2020-09-30BAL_UP6483864563OT.docdoc 0594dad5ba161c51ba71ffbb41c36696b151edf4d1d7738b31a026cd28164a4dn/aHeodo
2020-09-30REP_Y3R8RYA0W8GQV.docdoc 8649c9f23563646d5b0033bb729307388ddb4396da639cbf0385c08ec0a01cffVirustotal results 32.26%Heodo
2020-09-30PO_09302020EX.docdoc 5620011cd8bf0acd1f3ecc32958d26a9f38c982b191406bada41f3db5a9250e5Virustotal results 32.26%Heodo
2020-09-30H_5PF1HJUH5E1GAIJL.docdoc 9503120eff8e09bde10d7341fc02b19428bf024bfa48b4db12e902ce9895be55Virustotal results 30.65%Heodo
2020-09-30FILE_BI5971958084IG.docdoc 5fce7635748a17b0553d34bb396757644f6ab211ed7865fcd3ecf8b5f1014b29Virustotal results 30.65%Heodo
2020-09-30DOC_5J9AH83LPTJ.docdoc 587adcb5768ec9aa8b3be79e9ea740bc5052b9d0f09d4b2854fac3ff667edd4cVirustotal results 32.26%Heodo
2020-09-29INV_PO_09302020EX.docdoc 5bc9314961b874f09854775cf9f6bce09cc9c8106200074edb961cd544efb675Virustotal results 30.65%Heodo
2020-09-29AAA_BHW_090120_JGF_093020.docdoc 5a9f82efe64ed654c3bc8be5822ab7e6cc987624f9b90222d1ecac779b7d2347Virustotal results 30.65%Heodo
2020-09-29O_TK2778267097GD.docdoc fbdacf9e30368d59414b52f459d935964b7833d6d8467bf0eb4ccfa97f71e4d6Virustotal results 29.03%Heodo
2020-09-29DRKD_R99V27Q30HBP.docdoc 91d4d101c3e8a665106bb48847dbee3791e2a9a04c0adb2f363ae7767e463337n/a Heodo
2020-09-29BAL_TYW_090120_FHI_093020.docdoc 16b031e38044afa7252dbfb56c762b3723de1cb4b3535a8c76bd5d4f10a2819bn/aHeodo
2020-09-29BAL_28572872.docdoc ec406f315de493ed38f3fc8e7bdd65664965b74a7215c69123b3e1c08ec28fc8n/aHeodo
2020-09-29DOC_4592598433664277857234086.docdoc 268213ac49eccce1009b6716db9e2abf5c5a0f9d3722f052976bea02209c051fVirustotal results 32.26% Heodo
2020-09-29GQQ_090120_GJX_093020.docdoc 33c16dca57826043e0e0e906d157fcde3b15178d62747fe0ee0f10f1589d9498Virustotal results 32.26%Heodo
2020-09-29PO_09302020EX.docdoc 5ec415733e64c05854cc229c0978d9da72b7615bb092d7cfab7f2b36059af466Virustotal results 32.26%Heodo
2020-09-29BAL_600927012182527536226428.docdoc e4f489cca030944314421b5bc6d72833515d692b991be16287fb9a642785294an/aHeodo
2020-09-29PO_09292020EX.docdoc 6827be98be808d8165d3ba0a77c452fdfa8e2718d6e479714ced1fcb4158988en/aHeodo
2020-09-29FILE_46273804.docdoc 1973d2f06ae252b0c09f5f6376f2ccff3a8149c4b660eed973baab1921e80dc7Virustotal results 32.26%Heodo
2020-09-29FILE_LVZE166JNUJH8.docdoc edda9cda5227aaf1c5490691422022a91aac808a0c2b6707291068ac611dabaaVirustotal results 32.26%Heodo
2020-09-2944163952.docdoc e294f57a535adb7cfcec6ecf45ef8b940a1e67e3955a2b8ade573d84fbc1322fVirustotal results 32.79%Heodo
2020-09-29BAL_93932085.docdoc 645c5b6a11b55fb4e8462cb10dbe6fb0275131087d711a20dec2d7fd2fa18264Virustotal results 32.26%Heodo
2020-09-29BAL_PO_09292020EX.docdoc 9025b7b53a4f4ad612a95f5a281a443768dea8de3c043f33a0f6fb1f9bd0f763Virustotal results 30.65% Heodo
2020-09-29REP_76741364.docdoc a06ad91cbd8e1a2748921479a01b93cba5910718c0975e9cc5fd8a71bb5e823bVirustotal results 31.15%Heodo
2020-09-29INV_19990074.docdoc e03c23700f8baab62c5149e1d1169134bf49cd2291e182a481c21258392a1d68n/aHeodo
2020-09-29DOC_JTS_090120_XGV_092920.docdoc 497e3a22da2b7e3f15b709ae48774acaab651969c4325a4a32a28325a809ee1dn/aHeodo
2020-09-29BAL_WZ9612099396NE.docdoc f3bfbdc45f33d12c9a3b74c9524c63fd1a3358ebbfd8ee7a9fb3dbbc14d339aan/aHeodo
2020-09-29REP_49754426.docdoc 844dc7bc8eab502d43f5eb0a7501fc0b97ed3192fe06e4e2f33d69dd28fb63f5Virustotal results 33.87%Heodo
2020-09-29BAL_9024398520.docdoc 21683182de4fec04da4b2d708665e90ce6eb04cb988221063c51baf436784a0an/aHeodo
2020-09-29ZE4OU8ZZFP.docdoc e3693b5ee468b26a26975f7a46a1246cd2aa9e273c82430ee7747f7bcd9cf247n/aHeodo
2020-09-29PO_09292020EX.docdoc 75284ce88d24ec303b134ab93a005af756cfd8e65c06fd2438579d8ff10dd621Virustotal results 33.87%Heodo
2020-09-29FILE_476869580856.docdoc a24ff1a3bee9fa6a1feb6a52c64d85af2811d52e9bccaeb05a7abd72b2687120n/aHeodo
2020-09-29FILE_51795310.docdoc f973136adc63c4e41033c24a450790d40f8fa1a4e235c23d9c3a61e42b439be7n/aHeodo
2020-09-29Q_44470885258740315.docdoc 0a3926601b222023649d2bd84f51d092fb8130ef54371b3da9c9f7ac2fd4acceVirustotal results 24.59%Heodo
2020-09-29DOC_PO_09292020EX.docdoc 15037611200ebebbccd4d90f8015bbf32a0bc6cad14c630aed696b5f2ab5f3f3n/aHeodo
2020-09-29PO_09292020EX.docdoc 930f463961fe5e9a4f12294d8b8971666d98014f3dd408c1ffa285c37276cd8dn/a Heodo
2020-09-29GLZP8QBXFQ9HFY6G.docdoc 59f15b56958e59270a62cc0cdd726486f7afc4094d189b78461abebb9ba864ddn/aHeodo
2020-09-29FILE_2284351067891.docdoc 09f01c56f55ddcc492ab96f0de1660c3c247f4c452871582c37b084794799e13n/aHeodo
2020-09-29FILE_828437506705.docdoc 0a6914c8963270953b61f36ade0e4c58afe0c516ca6b2ee47c7643f08fd2bb8dVirustotal results 25.42%Heodo
2020-09-2908728461.docdoc 56dfd0f0158a03100c555377e533b61e3e84dbe5bfdbdf554097f27242411915Virustotal results 24.59%Heodo
2020-09-29PO_09292020EX.docdoc 52d4d3ba3631c4dd2d1c90876ed2268eb3da0bacc02fd451a5ea5e4c84bd96c8Virustotal results 24.19%Heodo
2020-09-29INV_PO_09292020EX.docdoc c3954486dd6baf409dc2dc6dfe8f865fc58f1d4ad1c9daac5ca0fb51147d6ef7n/aHeodo
2020-09-2962197834.docdoc 436730605ea5778074d11883f5ade96ea5af66e7acb281438b36aa3ec0680de7n/aHeodo
2020-09-29INV_QW4840123769QJ.docdoc df2cba973bcd8676db56a9682b8546e0e4ee4d768a75e1f84edf2722fb14b24an/aHeodo
2020-09-29HIS_090120_OMP_092920.docdoc a0d65313a8c5c4788cbe425f50f07f9a6ca0bacbfacc94abe3eab4edd1ac6d98n/aHeodo
2020-09-29FILE_03142398345331.docdoc 9837d0e98959e8df159836eb545f5246cb56cfc6834a2c5e7165a3d6ab093adeVirustotal results 24.19%Heodo
2020-09-29G_34050115.docdoc a32651ce03177d2f8041c778caf33bf6e04eea4980f61175dd535d94af5f2562Virustotal results 24.19%Heodo
2020-09-2967187555.docdoc 4b40209defb6a8ee079d69bd340f6539efcb4d3852381ee79a94227bec9f56e7Virustotal results 24.59%Heodo
2020-09-29DS_ZW9559644521OR.docdoc 0da375987ca85423a9ba820c1000eeb64083a2efd303617b7a1e33de0a7d21d1n/aHeodo
2020-09-29911691251343103387266.docdoc 1b2178832ee64a78fb24f7846e95c4084c6d0656a4504c264e0d9c5b0516e31an/aHeodo
2020-09-29FILE_7FOF4BMJOG.docdoc e2d5c58fe96c8c07e41d295cac04880d46d517456bbc99dee797b7d2d2c1541an/aHeodo
2020-09-29REP_212687964263819695.docdoc b172d2ab044bb42d8fc4206feb9293fb72d9893d242685ae4e7a20d8531c7954Virustotal results 49.12%Heodo
2020-09-2943962055.docdoc 27442f20eb59b4d209325e6568821d54267357d72c350b9aac8bdbe721e0235cn/aHeodo
2020-09-29H_QJE2C534HHZ.docdoc fe99636ff633a694b3154481012964211dd0d673f3035496a7b56890c7a66994n/aHeodo
2020-09-2922097969.docdoc c5993484123b8c05d147b63face63ead4bc3ef2f591797eb4bba28bc6dd93112Virustotal results 45.90%Heodo
2020-09-29FILE_EF5085249300UK.docdoc 63f795ea1096d9e86352f2bbb2ba0c971a7b61a187e273268a48876faff51592Virustotal results 45.90%Heodo
2020-09-29BAL_TC9977967609JD.docdoc 16b6fb9ec33ddfbfe170b96abde09256746cdc4b02e531d5064454b62d4dc694Virustotal results 45.16%Heodo
2020-09-29V_PO_09292020EX.docdoc b2e71daf0ebe60a19e0b62852d7198b9e94b1d5cc89227fed97ae2054e7e3d71Virustotal results 45.90%Heodo
2020-09-29YSH_LX3230394890JB.docdoc 760dab7018f626be3c6aaa9e57e0350cea3ae2cb057de45687c1f251aba72f8aVirustotal results 45.16%Heodo
2020-09-29DOC_6605645132208812194.docdoc 53dae3befc68ced078e625daf5a95fd5dad5c27b3787cd9dec07da93f745b6a4n/aHeodo
2020-09-29I_41537785.docdoc 04b4ca2b62111893c8b9d72f55fc818d3b9930694c78eeb03336f9911a069f5eVirustotal results 45.16%Heodo
2020-09-29REP_BJS_090120_QNU_092920.docdoc f0b67e53770af42aa08ec513bd9ea60d15d3b506a1d2609e88e0ce31009681ddVirustotal results 47.46%Heodo
2020-09-29I_UE9353590386SF.docdoc 1f05ac51daee57a330e0b2e270a5455a23d6866da5392138b1403ac63e5b4793n/aHeodo
2020-09-2979770597.docdoc 1b4294152cd807e23b698599e9be39ec531fc28ab159272ea894cc5633ab2cbfVirustotal results 45.16%Heodo
2020-09-29XLA_090120_FBF_092920.docdoc 80c77811d31daab98c1ec0882d3c59b98ad3faadb511c21e4ac662cb9673e1b2Virustotal results 41.94%Heodo
2020-09-29FILE_PO_09292020EX.docdoc 4b7fd3aa52853241aaa5c8d95e005ace57390afc9406bdf9da287bd7c6ccd123n/aHeodo
2020-09-29YRKJQMXAL3AX20H.docdoc 665a83304be8126632283c77fd184c5093b67885447b2ff3832e60ca7131675bn/aHeodo
2020-09-298I3402YIQZIMIUG.docdoc ccc18b91da784754f83482778c7bfc1de931b4416de9957b6e7b61b25d8d43caVirustotal results 40.32%Heodo
2020-09-29INV_PO_09292020EX.docdoc e5d1b3e601628703582a921fef151b6f35ed2776cd4a18887cefac671899cee6n/aHeodo