URLhaus Database

You are currently viewing the URLhaus database entry for http://karkas-home52.ru/administrator/logs/Reporting/UtKBKqmO15Vg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:698471
URL: http://karkas-home52.ru/administrator/logs/Reporting/UtKBKqmO15Vg/
URL Status:Offline
Host: karkas-home52.ru
Date added:2020-10-15 20:32:04 UTC
Last online:2020-10-16 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 20:34:03 UTC to abuse{at}reg[dot]ru)
Takedown time:11 hours, 31 minutes Good (down since 2020-10-16 08:05:46 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-1637567M-20201016-GT027543.docdoc 4a62341e7eba55b8c1a9b126d220bff4b129035a3ac48b5d6987e41e41d3e9f5Virustotal results 32.26%Heodo
2020-10-16Inf 2020_10_16 71602.docdoc 651e2fae54aae6799b64327aba5925cac20ee68263d8049e0d03e32f6e077dcen/aHeodo
2020-10-16Rep-JR33907.docdoc 3b7f8920c7db99db8aae73225dfd19e4519781f7cb79ba47fba3f0b57cfc8713n/aHeodo
2020-10-16REP_20201016_A3465.docdoc 23321ef2552ae21809b21f51b4380c31d17917222fe373a59d73500eedd99fdfn/aHeodo
2020-10-16Mes_20201016_7064701.docdoc 37c21f0f578d3c63515c63f95541e4b9415878dbcdd420e28a57ad221d118f2en/aHeodo
2020-10-16Attachments-20201016-ZWX4470.docdoc a6091d359b405ea83e58000e282b0bd40824c64d36b4546077d786ff19124be1n/aHeodo
2020-10-16Rep 673097.docdoc b1fe74e6e698918a809f1e28514bd425c29a7cd92a500a4f0b09d17e1f09d95eVirustotal results 50.00%Heodo
2020-10-16file 20201016 OK848438.docdoc 3d2d1bcb7c7201d4f9d46534f05e425a076fd6e5c3ebf67709ec194a0373c5ebVirustotal results 49.18%Heodo
2020-10-16Mes_2020_10_16_173845.docdoc 33e9aa06794873710331ae9974a1df6d3d1529d39553dbd6a504a1181b05bbe1n/aHeodo
2020-10-16REP 2020_10_16 531150.docdoc 5072f3218fa0300943629458afd87b56759783ef8776b3ca783f282ec185e33eVirustotal results 48.33%Heodo
2020-10-16dat_N014643.docdoc ef15c47fd8dcd129ee3580f45ef2062281b18b7410002a2631200043b9d170aen/aHeodo
2020-10-16MES.docdoc c0fcff9f41f313cc5a5b8033b5f724c61f19943859630958d99350d3b18b9ebeVirustotal results 46.77%Heodo
2020-10-16dat_HW244.docdoc 878bb13d04d93f1209ba23990aef838329f86ff7fbd86d5bc6bd24da81dbf0f7Virustotal results 46.67%Heodo
2020-10-16S8269-A867201.docdoc e1fa8ab1bc95406a6ca6938a72337e0b9206e90dcd5517bdcf36c487c5a92bd0Virustotal results 41.94%Heodo
2020-10-16UNTITLED_2020_10_16_TB4662.docdoc 40c27425399b1c51747bd4ecb6dbea00c530fdfc940f89bebc487d1cc2b810adVirustotal results 41.94%Heodo
2020-10-16doc-2020_10_16-WJ5533.docdoc 0fc7c5948e396de87107663a180678d0eb591acf3e897fc39502c371fe9e17aaVirustotal results 40.00%Heodo
2020-10-16Mes 2020_10_16 2325.docdoc 3be03cd4738ab3f977af3cfea372ba8def5e7c4515743292a9d45f7a39be67edVirustotal results 41.94%Heodo
2020-10-15FILE 20201016.docdoc 859a52cd1b0aa5c84836f1d4b6e63be3df7155d97fcb2f40fce4a55d4bebb495Virustotal results 37.70%Heodo
2020-10-15File_20201016.docdoc 39f443a944e3114cf6c84fcd6c270f6f8ed42bd1ecf833189fb7e9a96c8fdd2aVirustotal results 38.71%Heodo
2020-10-15UNTITLED_20201016_K878938.docdoc d1b6dd32cf8a5aff83fcbfdcae6e3ef17d7fdee013c76b2bbff8d6afadad569en/aHeodo
2020-10-15FILE-20201016-ZNW830398.docdoc 9224f06c0199e984b9bc5e2cfc12af8d8ea1d1022db475a557a1e93221030f76Virustotal results 39.34%Heodo
2020-10-15DAT-20201016-127985.docdoc b6a29fa485514c193ba2a233797415547a50dccb1b774ac2c80ea3809d4dc7aeVirustotal results 39.34%Heodo
2020-10-15inf-375.docdoc 57d9875f19239fe1fe11134bde1cf1eae57315b38691deced8eca15315650ee2Virustotal results 37.70%Heodo
2020-10-15Rep_I793191.docdoc bb0d9d8cf3e5d3fb3e4652b1bdf66f7e687ebb79f7a388a116abbaf16a4653f0Virustotal results 38.71%Heodo
2020-10-15doc 971.docdoc 087d4ce4b2eda3a5b3163a35e16fd76ec394796385ba25d0fe279bf11b725571Virustotal results 38.71% Heodo
2020-10-15Dat-20201015-BT6361.docdoc be2d72ee1a4da699026d47683395cd063bc94662a384bc7352e9596f63f6c843Virustotal results 37.10%Heodo