URLhaus Database

You are currently viewing the URLhaus database entry for http://www.kingstark.net/cgi-bin/0Xz8Z66Ha/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:757968
URL: http://www.kingstark.net/cgi-bin/0Xz8Z66Ha/
URL Status:Offline
Host: www.kingstark.net
Date added:2020-10-27 20:37:14 UTC
Last online:2020-11-03 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003038050 created on 2020-10-27 20:38:06 UTC)
Takedown time:6 days, 19 hours, 17 minutes Bad (down since 2020-11-03 15:55:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28arc_AX2830725839KB.docdoc d91ac6b289bd863b217db0a852a8283c9964ffe543f3cfccd63951b76e7761cdVirustotal results 17.46%Heodo
2020-10-28Attachment_VXR3RYRHX.docdoc 3e40a7defd105440e12f2955234fba81780b20f1dbc188417b1381f6738ab15fVirustotal results 17.46%Heodo
2020-10-28Untitled_PO_10282020EX.docdoc 4e256fda887b295d063575d800b9635067589e649f555a0ebdd65ae8841fe9a2Virustotal results 17.46%Heodo
2020-10-28File_29111787.docdoc 8abc1a41fddc4a3a107138900b0401334fddf0298fa9fe0ec4e7e1f4fede979an/aHeodo
2020-10-28Doc_FCTU27FVDCMV.docdoc f3a50571ec16f6ce94dfc39a4079b0bfc70192152166c65da1f33e8e046cb06an/aHeodo
2020-10-28FILE_SGT_100120_MWG_102820.docdoc f60c05abd97590b8b38e8fdebfbd9f6dc73dfef0a767d075be889c4646ad19d4Virustotal results 16.39%Heodo
2020-10-28N_TUA_100120_HKJ_102820.docdoc 560dfd8d4f9642e08df6182f046002538246919e100717f57b5f918211a7e95bn/aHeodo
2020-10-2841272113.docdoc 1d9d2d513d2906aa7b8400819aece2cd5e80976226792618b60a507a2daa906bn/aHeodo
2020-10-28MES_LEU_100120_DKB_102820.docdoc 0285b11153063e88e38a1f507f0bc7da9d0cd443a93a28f5d029fb201910f212n/aHeodo
2020-10-28L_XAU_100120_VFR_102820.docdoc 3731935385f3f9940df18e1fe2a5efb5ff5dc256f1a9fd33882b58ba8b50589dVirustotal results 20.97%Heodo
2020-10-28file_91961063.docdoc 245da199877ac955b9c2640666afb19d13d640da90766a000f6fc8b2c909582en/aHeodo
2020-10-28Inf_LB8540642613HH.docdoc e3f985d78f34ecba84d0385e8f3eb538aef89ae24be739e98166ce3c3422b236n/aHeodo
2020-10-28Attachment_CRK_100120_HEO_102820.docdoc 8d7bfba7aa5d45dfacce4f1d01bd73c49ac08a57ca60560244f8e4d9220ca53en/aHeodo
2020-10-28LIST_PO_10282020EX.docdoc c7a9fcbd5e7cf2f7c00c2ce737e5f37d79fca2af4840700fbec2812fe888df80Virustotal results 16.39%Heodo
2020-10-28Arc_97352846.docdoc 0843e95e73e1d9c719d84439a7243f080d431179cc900f1d3744cadcb2d19d38n/aHeodo
2020-10-2884135867.docdoc 4760301c9f69ac873695b32575bfb814706e3f43c55aec6c05de900156550254n/aHeodo
2020-10-28LIST_087182627089204061692.docdoc 3e87aaf3d279a35bccdc62f3e00e6655ddf9ecfd260ab20062a448d8ad551d22n/aHeodo
2020-10-28doc_XDZ_100120_HYP_102820.docdoc 4c8c238793080292318a1698f8e3bb506d63d0e1335171fb6ba9ce1369c5daeeVirustotal results 17.46%Heodo
2020-10-28L_RL5807119647PX.docdoc c52d8de4c0df2d3039b4e550b081b8386bf713ff22749065c331fd9c03bfa88dVirustotal results 17.46%Heodo
2020-10-28rep_82209082.docdoc cb10354a6aff051fe7ae1c2cfb38b40e5ed1c8fd1a4c4b1a35724efed4885995n/aHeodo
2020-10-28Doc_RI0121183900VX.docdoc b2a8f6bc160f4536d6be6a9e5ef41244a96a2bf0de49f9d088c5d68853f2d69dn/aHeodo
2020-10-28MES_PO_10282020EX.docdoc f8ce9f330d0b10e66d01f784d66c98d45fb6dc902c622d65ab15dbe965cf36bdn/aHeodo
2020-10-28WLK_100120_OVO_102820.docdoc 2ed9663048bfe1c969ee302588f17bbee321277d16204ebc6fcc3a626d03addbVirustotal results 28.57%Heodo
2020-10-28Attachments_YDP_100120_SZR_102820.docdoc a2b3de3e6d67d8b984e20da13e2338fb10bb97088378f08537ed93228f6850e1Virustotal results 28.57%Heodo
2020-10-28rep_HD1221105396XU.docdoc a8d759c3b4c570d5c7d196edd616d1816f0bf51f7d858bbbdcf8bb41f85242e9n/aHeodo
2020-10-28Arc_5WM71KLR81AN.docdoc 16b04fec1fdcdf3e7cd7b256ab6d5eb83277fc58d66fbea24c54202ce5fcd96dVirustotal results 28.57%Heodo
2020-10-28FILE_AU3XV69D8WN.docdoc 783e3178de387969ad58cadd83de2b88c6cffa406063d2f66e5ee8b67db11b4aVirustotal results 32.08%Heodo
2020-10-28Rep_AJG_100120_IMS_102820.docdoc 7b343ed21ad3bb90d645e681807a420dfe3d74c032752a75cdaa9aa8cd934663n/aHeodo
2020-10-28DAT_BQIIWDO7JF9SOGQ.docdoc 4a40f7f94b6987d15605eb7e6ccd22baede35a72d60278537f9aedbd6d7a909fVirustotal results 28.57%Heodo
2020-10-28LIST_WKX_100120_NEG_102820.docdoc 95d0a6acc83d661cf2f495f1e9b4c465b64f5fcfdfa6a75c0ad72beac8e31b19Virustotal results 28.57%Heodo
2020-10-28rep_QB6406050445PP.docdoc 21f741f58102f6494c54d7fc6830b266d1ab2f8afc85546d8e2a2d7b6d51c767Virustotal results 31.48%Heodo
2020-10-28Untitled_51092325.docdoc e2f58ed91009de4f156ecdfb6fb04401ce82b2281242941e3a80fa9fe451cfcdVirustotal results 32.00%Heodo
2020-10-28Untitled_122752352871714664.docdoc 34eea5e4f2e92b636f9fcade14a7aec223d0ef960f9c0f6c749b2b806096aeb5n/aHeodo
2020-10-28arc_UMK_100120_LDJ_102820.docdoc 5dae469fdf99625a0b53d223a55b04fc4e77d3e660e1ab904e79071d5dc13c9bn/aHeodo
2020-10-284Z8IX5SS0PZYUR.docdoc ed432b4a387becc419df96f24140626602c26a169999780c2309f0f5190a1321n/aHeodo
2020-10-28XO_AML_100120_EHN_102820.docdoc 9c509bf6c3b7824436cb299b2efffd013f3b0b156e9398a6975b71b50152cac3n/aHeodo
2020-10-28W_GL3019461569WR.docdoc 0b62b154422aa927a6906a75fdc8edfd4c143365e4b5e4a8ffd58badd6fdb0d4Virustotal results 38.89%Heodo
2020-10-28inf_39604757.docdoc 553f438bc1486ee99b764c15bf3caa7e8fc1b49c48ace061dbd07220a7e56eb7Virustotal results 27.87%Heodo
2020-10-28list_VDA_100120_ELW_102820.docdoc fe13971c49c4731ae4fdc32c49bbb6796383a27db3ca2340642ed9d0c1753880Virustotal results 31.48%Heodo
2020-10-28PO_10282020EX.docdoc 1371c2d34a1e3ad727d60804b08ef021e7568a841acc95ce5cf1773149657ea7n/aHeodo
2020-10-28dat_85637896373.docdoc 3a183e3b2c742a3307c322a6e8e75c3741b4b35e456bacd95fead4ceb74fcf12n/aHeodo
2020-10-28file_16359609.docdoc 95d5a2d7dcee12209de69b8db569c01e68322524257ca16c36f43ac546532c95Virustotal results 25.00%Heodo
2020-10-28DAT_96887644.docdoc c3e8b7bf6e9c96cf2335ab8c491d537cf81a2c322e9b305fd0545d051c613a83n/aHeodo
2020-10-28Inf_08194311.docdoc 25578de149cb4dddcde0db6ab49f1ef760faf659fee06a0b86d0fe095cc438e6Virustotal results 24.14%Heodo
2020-10-28PO_10282020EX.docdoc b7ee22f0341587e221b8a80c3caf8fe78b8d8ba06220d4cc28641f82d0d32bb0n/aHeodo
2020-10-28LIST_IQ7724127636QR.docdoc e809029e144d585294881c1cc21836d527c1547b45b9f97446ca6bc9987c3ee8Virustotal results 25.00%Heodo
2020-10-28Arc_J0YC7Q2.docdoc 5e692d0f6341638d540a0dd0458062a4852cdc65dd6551956aaa28c4d417416an/aHeodo
2020-10-28Z_VO4899076188MK.docdoc 1fb4278069691dd947dc414fae8cd33f4b9309293ff8919ab9fdf39e30cda63an/aHeodo
2020-10-28Untitled_24007122710541286916685.docdoc ef87afc95689c73759bee33f83ee37d3a46dcdd5dcd498921e9cc06eb3f02455n/aHeodo
2020-10-28K_15119878.docdoc a30d2b343e3646a2a05e98c5b7f976a1f67e12574ecb880a2a460bec35735f6fn/aHeodo
2020-10-2829772053196.docdoc 4d2065b87b5e9b6d1f4bc0bb53b3244c9d61eb3fd8c95d64757935758065ff29Virustotal results 22.58%Heodo
2020-10-28UNTITLED_XFE_100120_FBQ_102820.docdoc 5b5139dd7a1ffc7d31ef829c6f23afb23a459dc8aa0a8f900970875ecd254e39n/aHeodo
2020-10-27ARC_2J0VFI3Y3H.docdoc 9efa8997bf4ffcc29b996b1a0dd651e92bacb8e79143a0c008cf1eb4a8b41cbdn/aHeodo
2020-10-27Doc_70446676.docdoc bab42b7ee6d4b385f15274f7900f7f2a4d5d68d7f527d20b0bfac926752f9b3an/aHeodo
2020-10-27FILE_19565614.docdoc 51dc9e5a948487f714ef9600e3188b99aaebca09db45c0cd628d561945767476n/aHeodo
2020-10-27MES_IRZ_100120_KQH_102820.docdoc 8e85fc146f42da5ce9bd07ed3322d5b72df91418635f9d077b0de01c0fa30231Virustotal results 22.22%Heodo
2020-10-27Inf_5685517719019522481.docdoc 58c6d43427679cdcaa82662a3a2421ce675d528b81de08448e7c904c9afcb992n/aHeodo
2020-10-27U_1VOJSKGZGDRQ2P66.docdoc 98c713e8df6c92a443138d43fc4435e730cf2515b07e1402ca23c7b03e6f6448n/aHeodo
2020-10-27arc_50358437516769049.docdoc 1db431c17705bc1c2fee12058ed445716e38f8e65de2b269114a9c9fd9be40bdn/aHeodo
2020-10-27mes_43284629.docdoc b01b01566c73b1c2ecfd4f04bda6c7cc3c1c12646562ae1f615733fb1cc89b37n/aHeodo
2020-10-27Untitled_34140657037008931.docdoc c321e5d2dd294190dcdc02438a5db924cad6a12d6727644bc3c04c00e0b029d9n/aHeodo
2020-10-27DAT_AGMKPEMPNAAZ.docdoc 251a04c35632c730c9a078fb1c90f62e448ff4240fbe64834a2cd05ee798b826Virustotal results 22.64% Heodo
2020-10-27Dat_IZG_100120_HQK_102720.docdoc 18d5538b99af884d1bb696f03df08bb7ab04370724b050f1dd643690430da470n/a Heodo