URLhaus Database

You are currently viewing the URLhaus database entry for https://bilhen.co.za/abante/mP/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:937991
URL: https://bilhen.co.za/abante/mP/
URL Status:Offline
Host: bilhen.co.za
Date added:2020-12-22 11:28:03 UTC
Last online:2021-06-03 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 11:44:02 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:5 months, 12 days, 22 hours, 24 minutes Bad (down since 2021-06-03 10:08:56 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-23ASR9LUTB0.docdoc 768f3c029cc79ae21d7c732487da93f0e8c7d19a83737f9ce7e107e3adc9054cVirustotal results 43.55%Heodo
2020-12-23LVM9FX3YYX.docdoc 6ed5539e92f43fcde23dc6343c4f41a93050576180fad637adc5014a49ed38aan/aHeodo
2020-12-2308YF64X2GZ.docdoc 7416386288f2b36c8a780f8bb2536f6322592a995fd19adbf86a919088563240Virustotal results 41.94%Heodo
2020-12-23BZSUJN9MX0X11.docdoc 0694e34c9b65631f74351ab2bb680c7d1ac6726bc4948a8897bc8bd62fd073a9n/aHeodo
2020-12-23FHZINLZS.docdoc 70cc44f855631b3a9358c0b5f202406738d8b5c6a21133f6ae2d775aaa3a8ecfn/aHeodo
2020-12-23C4TKX4WT.docdoc 381a05910438bfbe38d8cde701cbbf020f0e303a1be1a9825df6087a8071b37cn/aHeodo
2020-12-235URPDEIZZWT3.docdoc 08907511869c01824c3fa593161c3d71a507c9a403faefdb197811e3adaa4f8dn/aHeodo
2020-12-23UJE6M89DL.docdoc 2edf013ada24ea7a142b0844b980169d465e7f5aefdaf645b44ece962d10d74an/aHeodo
2020-12-23WGWD20NT9B.docdoc a7b7abb4d144045e42bf5e55e294d5b67850d11ccaac312734570ccca072851fVirustotal results 26.98%Heodo
2020-12-230K323EFFL.docdoc e9df17a69800a02dc5484a6fc60d1e9f19f7059ed8f0ef9c7847beecc39968a3Virustotal results 26.67%Heodo
2020-12-23JFB5042.docdoc 177700c186c08d0b3242e4a5b0879a20b0d1150c85368200b985b4db691d49e1Virustotal results 24.59%Heodo
2020-12-2327V2TTT.docdoc cb4f991bd4228ec60ab6af1bab6193e68f4fadf3a30b226e7ee9cdfe893113a0n/aHeodo
2020-12-233H5Y5O.docdoc 49f4475b4c4b63927d612bfcfc707d4a25237813c727333fbcb42fec441757dcVirustotal results 23.81%Heodo
2020-12-231DV2OWFILEY78.docdoc f8d8367d54febac27068bc20e25b1c3260b9bdc78d4874c00368e65ec2e37ceen/aHeodo
2020-12-23GSIKUF1N6.docdoc 7e0f29831e6732a730d1b231a94cae3a27525976381cf6b97d15fe45c295f239Virustotal results 22.58%Heodo
2020-12-2387VS829Y.docdoc d03bdc5b9f72efd01d6cb79bfb3a1a2abb46914234af6d3439f4879a1af9d35bVirustotal results 22.22%Heodo
2020-12-233F7V9QL0P7QG.docdoc 055f997b54c9f0fe5ab2c07849d8e88daae0adb0ff26458d823b6f7413f3ac72n/aHeodo
2020-12-23C4IQPOL.docdoc 6083b405a5bfb099398dc2417486e1c2913bba82b96baff811a71ee6feb0884dn/aHeodo
2020-12-233FB54AOBRIA.docdoc ebfadd85753d033e248aedd9f9c5772331aff8dc35049d0842e8c423d64ea08cVirustotal results 20.63%Heodo
2020-12-23P87J63L07.docdoc f0a4ee510f94aaef257225740c62c4a65b2da3ced23ca6b1513b9fbe11fd3cd8n/aHeodo
2020-12-23IO604SESGU8SZQO0.docdoc c31a2ac228c882d72c112ad120473d012e0ba62c8d157e83cb7738293120eb15n/aHeodo
2020-12-23FEPIZNWJ6ZC88JN0.docdoc f2c16e9517e4e5e59a8640d99cda01c3078c6e7720f68f7f47a8a4d7b422b72dn/aHeodo
2020-12-23BBUL63R3PRV9.docdoc 0b92e01b938b2941f4f0940c53a2f53da1f523d08ac18e2f8bc4dd9cc96b52a5Virustotal results 41.27%Heodo
2020-12-23PKH78BTCBO.docdoc 47207dfadb642d35013dc02b38b9dbf49b10333f7447728b8471863fc9ca568fVirustotal results 39.68%Heodo
2020-12-23YRHFU7PVCS9L.docdoc cf2b33d88046f8e39c8299718c9132fc22247ef02bfe6ae6d404b0ca1c7c6119n/aHeodo
2020-12-23FKSTHPQX.docdoc 69c857ec1c8b113638e61d8da49ffbda13878a0785aab5d567bdc3fe251fd3eeVirustotal results 36.07%Heodo
2020-12-23AFOLY37.docdoc b534c439ac7a89c6af82331ebd70e5b5ce5e13a2e871bb7ab122b00004605e97Virustotal results 36.51%Heodo
2020-12-23QU7E5L0D081O7.docdoc 68e9fac6a7996f04c150777aec9f02864a62b4c0d59675625c1801a231461a0bVirustotal results 34.92%Heodo
2020-12-23H45LGHYFQWPGQQ.docdoc 525689f16129765cbfcab859edd5d99fbbec461ea04160605819b2f4b6150042Virustotal results 27.87%Heodo
2020-12-236AWLSSD8WW.docdoc 32485683a42778008538745c1475cd3abc5d9ec4f8cbb3210100d448b9eec74en/aHeodo
2020-12-236B2GIRXGE3IM.docdoc 168fe6ffe9e78f01a7f784833ba9306ef1edad3ccea334df35937424ef0220bcn/aHeodo
2020-12-235E19JEBME0B.docdoc 1f0dd0263393040d067ed555d604d764634263e4eb014755feb5d319af9db68dn/aHeodo
2020-12-23YRZEG4IL.docdoc 9377cbdbd93e4aed19bd96c21d35c83fa1a0927df233e481ce3f7eebe2c0b0dbVirustotal results 28.57%Heodo
2020-12-23RIVD7JC79C.docdoc c29f20dc33cf2304271a54734dc3746f342898284264bd66094dee544fc133bdn/aHeodo
2020-12-23S9Z2RG.docdoc eeeac0e4068f95a8d51d268eb14efdb0158a4a538bd414fde6f64911091f8211Virustotal results 25.81%Heodo
2020-12-23O53SW0P2P.docdoc 1a0263e1f86a9148e3b7434c12cc232b3a3c92df63c0aa48641c627e87949106Virustotal results 26.98%Heodo
2020-12-23BQOEQX4HJFP6.docdoc 31f327ab8307786ee50af20aaf5c4c2b6ecc974b69a584c78a2dce04fe5d327en/aHeodo
2020-12-23AFHQXJXY.docdoc c693baac5d3227d362a0fe99ad187c18cde1f45a404c94c881d424023303a744Virustotal results 27.42%Heodo
2020-12-23RVNLH9OK.docdoc 9d2ad424f8d1a39e1cf83b8d64131bc94d8b8ecf787b626e1118e348fc967f10n/aHeodo
2020-12-22IIUJ7R505HT1.docdoc 5c4cab29ee87b07eb6a57ccad782631b9281fa4db8f0a1b12d2672584426ccceVirustotal results 25.40%Heodo
2020-12-224AODEFI65YMA2M1Q.docdoc 32dbb92d892c9f50e99fc70db5b9f3efe0721a6464984a3f84e6592cda81684cn/aHeodo
2020-12-22LJNF1IR8GQNZM.docdoc 05c57f48c8b1958bf16f64a292f9aa05a43f6185d02c54a0d8cf03b2fbc56ab5Virustotal results 25.40%Heodo
2020-12-22ZOPJ8W9YZF82YO.docdoc 893d0822b033e0d5ea0484d9a61ce0354833603684cfb54e8e493f2740641784Virustotal results 21.31%Heodo
2020-12-22QCGKVRP2.docdoc 6db84ec96bdba956f2a1aaf37771903b47d79d69fc01b53e33ba039b8e7669adVirustotal results 20.97%Heodo
2020-12-22D3C4KQYT2WJD.docdoc bdfab9675a34c6da34487f2c70f297960002e6c3c2a8e6fdc60ae7edbe67101en/aHeodo
2020-12-228RJ2B2UBRHY.docdoc 70325bb19664b06520c37b48c9b0deaa5232904551fa5d01a82ac5a6e735a626Virustotal results 22.22%Heodo
2020-12-22E7RVYLODADPM8780.docdoc 3a6a1a101ff166519b8b881efee09a67e6b3fdd9de23e64eb8811d52604d9923Virustotal results 20.63%Heodo
2020-12-22P4GBG043BY0.docdoc fb2dc7dac3bf88b2407c132ee3640a68b2eec868b255245d07b6b88306065203Virustotal results 19.35%Heodo
2020-12-22MH37KMBGM1P52D.docdoc 29d2dd0591e75e000a0c6b8b889a9a1cafe79ce1f5b6a3468d55e31d7a820490Virustotal results 20.63%Heodo
2020-12-22FIXLW2JCMBH75.docdoc 0e0a8e32415a80ba95b8af747d13f3b6312498145d1677df7641ba3c9cf8e9b6Virustotal results 20.00%Heodo
2020-12-225KE96U.docdoc e992706fe1c263e83911d8cd96067ecadffda1437a6516db6097fae0d542f0een/aHeodo
2020-12-22B81298O4CF.docdoc f7c7d960892c6eceda47d8b21609311323d84eee43e2d6fe065c9c770204941bn/aHeodo
2020-12-220JEXN13I.docdoc e50ca86a89c2be0f4e271feba71c17c73e846bfdfc1f3ebd69d442f098acc0a0Virustotal results 20.00%Heodo
2020-12-22IL1TTP62.docdoc b5cabad4213a8d3f738e1ad1145a3130b3f5fe2739bcb8e5aa1f1ac3fa3fcd7cVirustotal results 20.63%Heodo
2020-12-226IOLFT4H.docdoc fabd2798310f1b90dc1321bffbfa1ee8c41695839459d40fd6e32618d3df7ccbVirustotal results 44.44%Heodo
2020-12-22X5AHIZ8KLFFH5.docdoc d86732f28284b8dbef93bd8eeee3150fa2696a1ccc22d520bd82a2a53c58c32bVirustotal results 42.86%Heodo
2020-12-22976691.docdoc dbd081ee503b65669b9a1a61dac9d5e95765bd9376783e784d2dae26751309cbVirustotal results 42.86%Heodo
2020-12-22NKVMNQP465BZ975S.docdoc 5b4a0dc192486378dcf0eea12dc55425b6166fb54866abce0b8a339b36d2fa26Virustotal results 42.86%Heodo
2020-12-22VV57PEN2HF21PK.docdoc 258bf32591a0ac34fc68c8d36075c55b6f45b79eaaf16e3e853ba48e90a3a220Virustotal results 41.27%Heodo
2020-12-22GU2PI3H2.docdoc af92a129d35b30bd55269f49ba230a5702cee5b9b18634c2f4829d052d208089n/aHeodo
2020-12-22JE1KHCJ8QFBBU4.docdoc 6f31c56a8ea0949ade1a3cabc55e00d367bb073cfaf7f1b447258c79483910f4n/aHeodo
2020-12-22I41TNR2LJET.docdoc f8a293a233f791740b03d5e9f763edbe9ce5b7118b45986d500a6951716f52c5n/aHeodo
2020-12-22VOFQ4FF.docdoc 2b9c863d07937c6130c145012febf915401100b8a7e5361cd8244ba88af53411n/aHeodo
2020-12-22IGKBW7LCHYCZMNZK.docdoc 72526ea70462d80cfb3edea310592329d47c4081c3ee6df1184a219a17b1a731Virustotal results 33.87%Heodo
2020-12-222FPGM94SJUR.docdoc 86942bbcea50514ec00c4794847620c7ab3863657d7cc8119cf593ffb539cae7Virustotal results 34.92%Heodo
2020-12-22O8SECVALF0RCDK.docdoc 110c702523b61a449c85889be0f1f3a8b2c0375bc3de47eb9051189eabd03445n/aHeodo
2020-12-22XESO5HZVIQM97QK.docdoc 7ec200a834392208ae8521c4804d11ff669137b4265b732a17660527ccf3cf36Virustotal results 36.51%Heodo
2020-12-22DH44BST9.docdoc 0ebdff0201647a1df0ad578dcdfff8ca9e91c379b6183c53845de8e226b95c39Virustotal results 34.92%Heodo
2020-12-22T7WL6DU67AXO7H9.docdoc 2eb890f47074a802abff73fabb722541ca607ff36a0139e4d236e875191e0078Virustotal results 36.51%Heodo