URLhaus Database

You are currently viewing the URLhaus database entry for http://bonusowekody.pl/locstones/Reporting/sWpkn8cR3wjay82Rh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703080
URL: http://bonusowekody.pl/locstones/Reporting/sWpkn8cR3wjay82Rh/
URL Status:Offline
Host: bonusowekody.pl
Date added:2020-10-16 17:47:04 UTC
Last online:2020-10-17 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 17:48:32 UTC to abuse{at}ovh[dot]net)
Takedown time:12 hours, 26 minutes Good (down since 2020-10-17 06:15:09 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17Untitled 2020_10_17 GE0245.docdoc 294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092n/aHeodo
2020-10-17file 20201017 537985.docdoc 61a22d08e168e2bce5feaf96a0859d60c6bd10b4c9f1a32f302c9e75a4463650n/aHeodo
2020-10-17arc_2020_10_17_EE24718.docdoc c8e0ee6566b5536ea46f25964313ce3c6d88ef6329133772236f4afe57bdacd4n/aHeodo
2020-10-17Attachment 20840.docdoc 1cee91ca2689e165e0a72614f98d0dc71da6671ecd0e7f32bb3d6d2710e8dd0dn/aHeodo
2020-10-17DAT_20201017.docdoc ccad29eac2b2a4c03fc1c9a9ac36544345fb0a5f454746c05dbb5f02d4d53210Virustotal results 53.23%Heodo
2020-10-17List_20201017_9065005.docdoc 971e189c279099a876618c3226ef35e5afc62b91daf3b8bde466a424fdfaa063n/aHeodo
2020-10-17DAT-787.docdoc 3fef345a1fa8f779f98589ca704dff21e59f8842175c3cdab8caeb16e5e61ad2Virustotal results 53.33%Heodo
2020-10-17LIST-2020_10_17.docdoc 78f2969b92269cd9a3e1cc7003b0949f47421d551c323dbeafa94ad0a836bf34n/aHeodo
2020-10-17Attachment.docdoc fca525a70cdbc09d5adb7e320849a4e9958f5edb129e2accce15281a340edf54Virustotal results 53.23%Heodo
2020-10-17Untitled_XW71217.docdoc 49bfab81e7c83836e13d24a1c3e607ce00aa745e850f110ef848cf96ab0b5b30n/aHeodo
2020-10-17UNTITLED-2020_10_17.docdoc c64264c7336d7e9f516999fa287be55be63b634b63f5ebbf1bab24e38ada5e8en/aHeodo
2020-10-17File_YK542987.docdoc 1e52bc38ce5e8a3c4da25a7c7e4d8169a31fa22bfdd9e43759ff57d25b40db02n/aHeodo
2020-10-17Dat 2785.docdoc 1e59616d8d30b5c30b132e96368fd13723b10d8111db17a2c7aded6d311983e5Virustotal results 52.46%Heodo
2020-10-16file 20201017 2019554.docdoc a9d9b8357ff803bd36d7bd0c12c770487fe774ccd22e81318606bad0f6ddaf90Virustotal results 52.46%Heodo
2020-10-164831XZK_2020_10_17_0560.docdoc 528b63ef8c44d0a5b08974fb6ad9efa60e0021ce6993d25b30ef1b90c00df222Virustotal results 50.82%Heodo
2020-10-16REP-2020_10_17-JLD346942.docdoc 622c685b93473b545637dfeced3852e83ae18b3144058f11856f73eb76b5cdb3n/aHeodo
2020-10-16078WAY_JCJ582.docdoc fd15389b3b01c59ca8423ab71c03de2492fa548fdb0905592ffe35c9289a8227Virustotal results 50.79%Heodo
2020-10-16inf 2020_10_17 AUH9323.docdoc ea0d3c6f16a0b6c751479d44c06e9fc4ee4f7e47803b008c8ac0ea1ae93f5171Virustotal results 52.46%Heodo
2020-10-16Doc_20201017_PI056754.docdoc ee2a584f20b8fae9caa25baa3476b1dae0aac0d511a2a2584dde95eeb42c4d06Virustotal results 52.46%Heodo
2020-10-16Attachments-089586.docdoc 10b0ede6060dd0c9b69d6519e93f211c940959e36b1e98a6dcc1ad9a4093c4acVirustotal results 51.61%Heodo
2020-10-16DAT_2020_10_16_SM94204.docdoc 0d613e3b8dd87abdca992787394ba93c986820dd46d13b63128699ff814aa6e7Virustotal results 52.46%Heodo
2020-10-16Attachment.docdoc 6db73d3f7fc4ac1265b81af31cd04fb1ef63de503ea603a20b93daa896e18c11n/aHeodo
2020-10-16Rep 2020_10_16.docdoc 0f3f04ac85e78d80efbda9617f67a8790049ba50df890fc992c9b0ea0688cb96Virustotal results 50.82%Heodo
2020-10-16file-2020_10_16-T85888.docdoc f4af9d4a8529e7b2cc1ffc59afc271f35f63fd2f0b043cecdc60553c2ff8259cVirustotal results 50.82%Heodo
2020-10-16Dat-5342.docdoc a1d573517ffbaeff20370dbfc3a3c7ae1abfcbde0154abf7010feae3d2911f3bVirustotal results 50.00%Heodo
2020-10-16UNTITLED_2020_10_16_4745.docdoc ff2225f50847fbfdff2af9e81b67fc82dc5a26f7c4a78edbe36d775f1c153c22Virustotal results 46.67%Heodo
2020-10-16Rep-2020_10_16-92135.docdoc cd64bc23d4d04318406357db3c760bd5cc9b8eb88659b2df36be6d823fb0bfddn/aHeodo
2020-10-16file-2020_10_16.docdoc 08720082a85becdd96c2f6a15bd2e14fc19f13517c2a0b9aeae5fc4334adf92eVirustotal results 46.77%Heodo
2020-10-16REP_296656.docdoc 3cc8c557bf3d2dd43a937e6a38d78f32dddf8e118a06663c5eb8f3dbb4bb9afcn/aHeodo