URLhaus Database

You are currently viewing the URLhaus database entry for https://kdthreadss.com/wp-content/INC/gqnrqgh7-0176445/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:735200
URL: https://kdthreadss.com/wp-content/INC/gqnrqgh7-0176445/
URL Status:Offline
Host: kdthreadss.com
Date added:2020-10-22 15:19:04 UTC
Last online:2020-11-05 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 15:20:21 UTC to abuse{at}contabo[dot]de)
Takedown time:13 days, 13 hours, 39 minutes Bad (down since 2020-11-05 04:59:55 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22ZA0058 invoicing.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22INV #050373 FOR PO #020610609933.docdoc f9390045c0aecc111eb3b34d5a18ed0f8a5f639169463735528801c99fad0af7n/a Heodo
2020-10-22October Invoice.docdoc 73afab923f309960ba6ef1f00b4d373abce5e6605b10a2b214ca42b7736f1f6bVirustotal results 40.74% Heodo
2020-10-22invoice.docdoc 8f46672fc4bd13f926555000c39b3ff624d7b96f41429e568aa2bad30431bbe8Virustotal results 39.34% Heodo
2020-10-2203724379.docdoc 188d183f83a1b99f55ae2810384c67e6f7be09014e6004bb5ddbf245abda02b3n/a Heodo
2020-10-22Payment status.docdoc a92e9fd1aaea72831f29e20e4afe829f2fd63c7645e2ae3b8b4786a8ade2b0b6n/a Heodo
2020-10-22form.docdoc 621c80400686860afb16c417aa76f5068c7bcd642104a225644b805539b9e5c6n/a Heodo
2020-10-22form.docdoc 05c27cabbde0441208b26f77df5a0f5346f2c057b25ab1515c61805324c18ae9n/a Heodo
2020-10-22Electronic form.docdoc 9192adc6ad055a6e640fd17c385e4aa7e88fad75617119f2f64efcec5dc4da19n/a Heodo
2020-10-22form.docdoc d078837cdc9042641925b36475f87954994b19f05d89c10b4ab4a1ea28a806efn/a Heodo
2020-10-22Payment.docdoc a53f4bb796189439737207c506acde597330328109ac2d78b693d2d6a72e4ba8Virustotal results 32.79% Heodo
2020-10-22invoice #25188.docdoc 2f11fb391c4e5106c86f7af02261b1ce605f84877b62af40538177fc258c9e05n/a Heodo
2020-10-22October invoice.docdoc 9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701Virustotal results 50.00% Heodo
2020-10-22Form - Oct 22, 2020.docdoc c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897Virustotal results 50.91% Heodo
2020-10-22form.docdoc ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0n/a Heodo
2020-10-22invoices 113 & 83600.docdoc 30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864n/a Heodo
2020-10-22invoice #45525.docdoc fe69570cfe43c056f36d0a40929d53d4532cd181924613bda7436913979c33cbn/a Heodo
2020-10-22INV #07957 FOR PO #81297438992.docdoc 46035df42146415903e45c8938c23ce819bf83cb2e5328b555ec947a0d1b9bd0n/a Heodo