URLhaus Database

You are currently viewing the URLhaus database entry for http://shivakunwar.com.np/swift/ZenW4gwhknqJ1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:768624
URL: http://shivakunwar.com.np/swift/ZenW4gwhknqJ1/
URL Status:Offline
Host: shivakunwar.com.np
Date added:2020-10-30 08:42:04 UTC
Last online:2021-07-14 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 08:44:05 UTC to abuse{at}dimenoc[dot]com)
Takedown time:8 months, 17 days, 5 hours, 41 minutes Bad (down since 2021-07-14 14:25:55 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-19Inf_PO_11012020EX.docdoc 6c81a73a2c5d110beda68189fedde97590bf25c9c7c566e90c8b3b3a8ff47df8n/a Heodo
2020-10-31arc_3209105403395195388781461.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31FILE_65704427.docdoc 4ea3b44401112b07c8579bc245bb22ee9c40c153200538038bb8bc8d53f6b632n/aHeodo
2020-10-31Dat_6966948161.docdoc 396b664fbdde301d1ebedd54f4beacf4726ef9fe1d0807a86fe0b00e0a71772dn/aHeodo
2020-10-31FILE_PO_10312020EX.docdoc c0e896c6e7521d6431ca692ef69c30c605ab7e599336d9c027721e573d1b2161Virustotal results 58.73%Heodo
2020-10-31699640953520912145505933.docdoc 615de4c01c61e261c017bd338c822b21b294728d9f7bac3199e139be0d1c3675Virustotal results 30.16%Heodo
2020-10-31File_2GWXO5MK.docdoc 0ab261e8e21a48f3423dbe6d18512f5e2afbd09fd31af5d5c45d2814c2c709afVirustotal results 53.12%Heodo
2020-10-31Doc_PO_10312020EX.docdoc 96636e8803958a85be6974b0fc6c91e24526ae529a00c31dcfdbf3ed761c5304Virustotal results 53.12%Heodo
2020-10-31List_PO_10312020EX.docdoc c586bc35250934f22523a7bee6291bb320a8c31a1c2cda2689c51a9a65796524Virustotal results 52.38%Heodo
2020-10-31File_OMA_100120_EFO_103120.docdoc 3f1565ba4e9c93cf71b5b5a3f3b16869e7c6a7d86a837a32db34f1f0105e3aaaVirustotal results 54.69%Heodo
2020-10-31Untitled_LIN_100120_RIW_103120.docdoc 12ef90a776bc1f4ae05962313e6b3711ec5211f8ba450527585d2da80c2d03b5Virustotal results 51.61%Heodo
2020-10-31List_5975651696788179.docdoc 41c1aacf38f4e4b127131377357db324852107ff972122bb57ec3ba8f894a7bdVirustotal results 53.12%Heodo
2020-10-31REP_LG4604634834VZ.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 53.97%Heodo
2020-10-31LIST_SV8206015922MV.docdoc 4eabd4dcb81c28e86bbfd9ac62090d51aea5a733c96a8f3a7ad130a9841bce71Virustotal results 54.69%Heodo
2020-10-31DOC_PO_10312020EX.docdoc d1d8c0384f3780dd6287efc3e864f9fe60b6efe14f613f0cc2ec0efb0aa97dd6Virustotal results 28.12%Heodo
2020-10-30file_81189984.docdoc 84f8bd87a1f8207da3a4722b9eee322be498919fed6323fe33c0ce60ef7aadcfVirustotal results 53.97%Heodo
2020-10-30Attachment_PO_10312020EX.docdoc 621f149c8fdf5abbc449baa3bc86423a799301ca3017950f0b173a6977033e88Virustotal results 54.69%Heodo
2020-10-30FILE_KWS_100120_WTC_103120.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30mes_SO2800568507EN.docdoc 61aa32a570716ce0d7c579186cd0cc291148bdeb623f0709c3a0b0b3f3d4d384Virustotal results 23.44%Heodo
2020-10-30File_17301485.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30file_94551988.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cVirustotal results 54.69%Heodo
2020-10-30Inf_QBLCPTRL.docdoc d577446435b94d0af2a829f1160b594e95c8051f6b069400ff61fa38d151ba54Virustotal results 51.56%Heodo
2020-10-30REP_VCD_100120_KTN_103120.docdoc fee7c3d92d847b227a0310837bdd5bd774db43c7793d9e83c31405a79a35b9cbVirustotal results 33.33%Heodo
2020-10-30Attachments_BAD_100120_IGY_103120.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30Mes_PO_10302020EX.docdoc 75ca20340c21dbd94ba3ec4c8eeb14f3a78e68a955701cbdc754c29163674a3aVirustotal results 33.87%Heodo
2020-10-30DUE_YWQ_100120_NMI_103020.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30Attachments_BZC_100120_NBT_103020.docdoc 1e363452c2a67d40f01390488a99f68ce6fab805b45eab93ee2db2469bf1b05fVirustotal results 42.19%Heodo
2020-10-30FBO_100120_QOM_103020.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30file_17362414.docdoc 8cc9b34e2f5d86937d174dd238bb8b4e27adb981bb7b44078e619ad9a438d218Virustotal results 46.77%Heodo
2020-10-30file_GT0072234982LA.docdoc eb5d0c08628c3ec2c081dc472157b78cff5ee705d96de5cd061c582c575bb7e9n/aHeodo
2020-10-30Untitled_610861437043810.docdoc cd7af62b6cdbf35cdd60b11e87084e9e0c08ae9a790abe502c3a9d5a62c4e8d7Virustotal results 42.19%Heodo
2020-10-30list_QX4809155824GP.docdoc 4e1fa1070d35befd506b61e5fcd7757c603c2289e9c09d657c6378bdfa6b8583n/aHeodo
2020-10-30UNTITLED_EC7466122483RY.docdoc 40688ed280f40248483c6bac4e362a918147bdf98ab4993db657a0f7eb6e6018Virustotal results 42.86%Heodo
2020-10-30dat_TP7265831231FH.docdoc 13ff09c8c571ca79e57407ccd19cc0ede9e1a625dc4903a9152c3504b10ddefdVirustotal results 41.27%Heodo
2020-10-30dat_OKM_100120_BHL_103020.docdoc 33478c951541dfc62cd1b974afa9e6be46b51b140a5228aa4f34f417a17b8a64Virustotal results 42.86%Heodo
2020-10-30UNTITLED_61673538.docdoc be0b7b1655cf76359f685b7367592ccbacace133e9a4b1180b5dd7c364d6be29Virustotal results 42.19%Heodo
2020-10-30inf_60755004.docdoc ee781329e536d1270bc3e7ad2496b545535f3ceba3db2743fa213b6405d011a7Virustotal results 42.19%Heodo
2020-10-30Attachment_42372408.docdoc f47484c61c7b2b0541690f5cfb219d2efe962b5204064435481f99e8ba92f95en/aHeodo
2020-10-30FILE_PO_10302020EX.docdoc efecc77229f059187f228b3a93fc9ab4be5df0e2d5886b96ae44e10b00c6648aVirustotal results 42.19%Heodo
2020-10-30inf_PO_10302020EX.docdoc 21d510dc43e2e064f6d94e3b502c483eb6fc1171828a5349dd22c43ccba66638Virustotal results 42.19%Heodo
2020-10-30Inf_39495833.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30MXM_100120_SHB_103020.docdoc c21fd3f4bfb11db1fc709bca4079eb7f97b6001e5695a430566b61e5e630053dVirustotal results 29.69%Heodo
2020-10-30INF_UQ3125161833WH.docdoc 0ff00e35cca1451486afc9af5f9ec922a120201c1ad664d440e5511c370bef3cVirustotal results 27.42%Heodo
2020-10-30Rep_7648853823247015.docdoc 0406910d3c48dbd18d57086dcab9b4f73a8081dae9fac3010f0ae90b73c7c34fn/aHeodo
2020-10-30arc_TE4425990814TO.docdoc 665ca5b6b8e24008d94bd73e8fc3862a558d2074f35ab952eb016e2ecfb2c125Virustotal results 26.56%Heodo
2020-10-30MES_O2KUFYPHH8GAP.docdoc 6a8e52f8792ecae215c55e1f73b2895cc0b304ee39db3908356b71ac38722b0cn/aHeodo
2020-10-30rep_LHT_100120_FFC_103020.docdoc 22a4eae8735782a3f12e3f7ee5b6d0839cd7c4a8b91dce6ce27e2414b2e5f817n/aHeodo
2020-10-30Arc_40816624.docdoc f2413a07e3362999d85fbab3f6c2fe8f228e4567eac899cd565ad65a2d0eede9n/aHeodo
2020-10-30DTS_100120_DHP_103020.docdoc 0df4e83145becd16b2074bb93563596b613e43856bbd653b98a316f5d92ab817n/aHeodo
2020-10-30LTUC_YG3064102706XD.docdoc f2ce2b3d2bf2f5d0f22eabb44f0b7c9183e0fea547e90ab926beae89d85cdf0en/aHeodo
2020-10-30list_IJ6732778776GP.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068n/aHeodo