URLhaus Database

You are currently viewing the URLhaus database entry for https://lkfx168.com/wp-content/balance/wtwg4cz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:626125
URL: https://lkfx168.com/wp-content/balance/wtwg4cz/
URL Status:Offline
Host: lkfx168.com
Date added:2020-09-30 02:01:22 UTC
Last online:2020-10-12 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 02:02:10 UTC to ipas{at}cnnic[dot]cn)
Takedown time:12 days, 1 hours, 10 minutes Bad (down since 2020-10-12 03:12:42 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-308317417700112187698236.docdoc 2d09a2c2cc27e1e5e697d5c7fd6e7cbba00b82f6e118d417147a336d7c4fe92an/aHeodo
2020-09-30JLM_090120_RKW_093020.docdoc 7d2c8d827a62c501876d11119d9989eae86dc953f1f0ced0c65a9567cb616fbbVirustotal results 22.58%Heodo
2020-09-30CM8728927932WI.docdoc bffc637d28966b991a1135f37d733cd4d1041f8fad86215d623d14b6b0ead577Virustotal results 22.58%Heodo
2020-09-30K_PO_09302020EX.docdoc ba44584c1f1d349168d9003b0bd7fcd9d738c17877427c3f02ad492598d5c637Virustotal results 22.95%Heodo
2020-09-30REP_PQU_090120_MMT_093020.docdoc 6b28e785fb139d9950f37bf989bed92089e9f22d3160a16699b2fc8b0d3500efVirustotal results 22.58%Heodo
2020-09-30X_PO_09302020EX.docdoc 06f0f241e0f9d72b7bfa912752c572cef951ebe5403388f20bc330e2dbda3c5cn/aHeodo
2020-09-30BAL_NP0429348690MT.docdoc aa20d5b64ffd09ab64443f3159ab02394d97ae2baa93aa75de32fdbdf7f30e6bVirustotal results 20.97%Heodo
2020-09-30REP_89273729.docdoc e67c373437e7408c177a503ca9bcfc8ccce61d14cfc636074bedb0937c41eb67Virustotal results 20.00%Heodo
2020-09-30REP_00870714.docdoc 8cc454cbd44284ac4a4b398e7fb7e8ef64466cb44537458d884f54fea7d6374dVirustotal results 21.31%Heodo
2020-09-30INV_PO_09302020EX.docdoc 786c646aec87e25c98dfbac09f886f13f05a1e6690baf9974f99f1b37b6f3713Virustotal results 20.97%Heodo
2020-09-30REP_657147132546313102.docdoc 119dab813d43139ec7ee0f953f68341391776f7f5cdbc1fc6eeabf95356a8a21Virustotal results 20.97%Heodo
2020-09-30REP_LG2518021036LX.docdoc 605f71e5062dc6452e0f427294e6d436a184d7cebd4d4600c98d0a5542c30addVirustotal results 21.31%Heodo
2020-09-30IWP_090120_TEU_093020.docdoc f8fb4db3104cc2c9f261f3b3b43acb4132f5759f8e485677651a52478610f5bcVirustotal results 20.97%Heodo
2020-09-30INV_XBMPL1V.docdoc 5535272f513a3009b7bfb9a6614f96d6d4ed1c65fcfd7c416583ff2f35173267n/aHeodo
2020-09-30INV_UMU_090120_JBE_093020.docdoc 24e3ba16d86892e3c786b97123151b7a2294602a61bafd3c546475d0597a2a37Virustotal results 45.90%Heodo
2020-09-30U_KM5536073747IG.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081n/aHeodo
2020-09-30KVF_090120_LXZ_093020.docdoc 36c580f691c38f4e20792402ed6ac33c516b7f3cd27cdf24e45d9e8ce63a9522n/aHeodo
2020-09-30DOC_23287114.docdoc f69c957e912e4eb54ca00ba379a5808d47ebcb4667393b4b986d2d50ee35e7b6n/aHeodo
2020-09-30FILE_70548675.docdoc 3d322e72fd831b7624674c0a9ed650c75bf0cf2d05e5c2dcf7746ee4187260b3Virustotal results 45.16%Heodo
2020-09-30FILE_PO_09302020EX.docdoc 5b04551305572c828c0ac8143249ef7e94223b0fbf7d12b43f77c4e3da8bda45n/aHeodo
2020-09-30INV_48296536796913.docdoc 1a2856f6dfce0f239bb89c2fa41ba26f9d1761dd09caa8312e58c26aa1411369Virustotal results 38.71%Heodo
2020-09-30VWR_ZU4312100153FX.docdoc d2effbe4f93f76b3ee990f84ec39bf4705e34ee0a3925f32097fa08db254e4ffn/aHeodo
2020-09-30M_68565256.docdoc 8d0311de9248f3fc0efd38e822a2d51fb26ec893e9cef6a0f81a2c2b2ea62bd6n/aHeodo
2020-09-30DOC_45390626.docdoc cf47fcf596bf3abee5508f311666cec1399ab7e9b1f1632056db94a3e3a54468n/aHeodo