URLhaus Database

You are currently viewing the URLhaus database entry for https://kodiakheating.com/ldnha/Documentation/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:628974
URL: https://kodiakheating.com/ldnha/Documentation/
URL Status:Offline
Host: kodiakheating.com
Date added:2020-09-30 11:08:06 UTC
Last online:2020-10-08 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 11:11:23 UTC to abuse{at}liquidweb[dot]com)
Takedown time:7 days, 23 hours, 51 minutes Bad (down since 2020-10-08 11:02:44 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30BAL_DS0011195392QN.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30DOC_YR3081619261CI.docdoc 499e1db2bcd68d444f9d810f5489c4bacfc42b709036484694dfab71fcbe1153Virustotal results 25.00%Heodo
2020-09-30ETU_090120_SFH_093020.docdoc 74824146908abe5c7caad5b6c9c7f86a6aa087b0422fc5066abd490ae864f456n/aHeodo
2020-09-30INV_7645007646573274107.docdoc 89184bca1106ed62901477bceef09ee282bceca404d17c44630544fdd803cbbfVirustotal results 25.81%Heodo
2020-09-30PO_09302020EX.docdoc 79b57cc855cd58d4819bb711bb59dd13e35949ada72c908e0f968d51aefc35e8n/aHeodo
2020-09-30GRG_168166233046839456.docdoc c7b170de74bd23faa6d777bed0c29b826d7a0588fed94fe5ce051f61da72c9cen/aHeodo
2020-09-30BAL_81897368.docdoc 25ea63c6b2b40a9e3cd16e7ff7bef353fc6d0a0d87b8a661aebc9e377439f8efVirustotal results 22.95%Heodo
2020-09-30FILE_WL6965685239UD.docdoc 340edbbc6b875bfedadf402c810c9fbdde4fb3d9fee5d5f9996b9723d9fd5c94n/aHeodo
2020-09-30REP_YO0995396606RK.docdoc 1d5daccb3ffdca9e417370c654eefb0f6a0b2c3de51d7ca751c676d623cd57bcVirustotal results 22.58%Heodo
2020-09-30PO_09302020EX.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52Virustotal results 22.58%Heodo
2020-09-30REP_BN3458367522DP.docdoc a4ba9b07b2355a1be394ecf01c4d26aae440491439fa0db4e7905eaa82a79e81Virustotal results 23.33%Heodo