URLhaus Database

You are currently viewing the URLhaus database entry for http://bilhen.co.za/abante/mP/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:938763
URL: http://bilhen.co.za/abante/mP/
URL Status:Offline
Host: bilhen.co.za
Date added:2020-12-22 16:28:09 UTC
Last online:2021-06-03 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 16:30:25 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:5 months, 12 days, 17 hours, 49 minutes Bad (down since 2021-06-03 10:20:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-26HDWZGXPMKGP.docdoc abbe43b0919f2084a2f175ced0c30d01286782a6393b3689956a77c2deab1639n/a Heodo
2021-03-26HDWZGXPMKGP.docdoc 034c98dfa31762e7f1db596769d264a76717391137466f1ff8703236ab4b0361n/a Heodo
2020-12-23PHRWINVA6.docdoc 768f3c029cc79ae21d7c732487da93f0e8c7d19a83737f9ce7e107e3adc9054cVirustotal results 43.55%Heodo
2020-12-23YQVW76VB4.docdoc 66e2a898e0b029a13f3091ffd91aa453888cf996011f8ecaf3b4a4439b68d413Virustotal results 41.94%Heodo
2020-12-23LVM9FX3YYX.docdoc 6ed5539e92f43fcde23dc6343c4f41a93050576180fad637adc5014a49ed38aaVirustotal results 41.27%Heodo
2020-12-23R53IH1PLZ16AS.docdoc e706341bc37bf712b1c9cde4133f7a479e41cb8e6f4b9e9fdd3e3eaa8dcb91c1Virustotal results 41.94%Heodo
2020-12-2308YF64X2GZ.docdoc 7416386288f2b36c8a780f8bb2536f6322592a995fd19adbf86a919088563240n/aHeodo
2020-12-23BZSUJN9MX0X11.docdoc 0694e34c9b65631f74351ab2bb680c7d1ac6726bc4948a8897bc8bd62fd073a9Virustotal results 41.94%Heodo
2020-12-23U10INLY5EFPO7W4.docdoc 0339f21444ef1ad35fc320d6879ea93b08d3aea53e25aaf3c5b841a2cdad855cn/aHeodo
2020-12-23DTZ097QX6LH6BL.docdoc 883f2d94856edd7ee7d9ddefb4cb9c49b0300ad23fad3aa88f3c020d166b771en/aHeodo
2020-12-23I04MHZHYVC2W7.docdoc 53607b62fc227216a0de7e569922ef170b8d25443b8839f2a77717fddeb43e38n/aHeodo
2020-12-2302RR6M616V1.docdoc 94d804683ab1c9195ece193461e872d75b4835c2ee0fc73886dcca02a89463edn/aHeodo
2020-12-23NWUL15S.docdoc e2f1be59a592252d8ca4e2fa82196b97ccb8967f41f6a7fed224944af38fae1aVirustotal results 30.16%Heodo
2020-12-239QX6OR.docdoc 63725aa4926dac422d6710c815b80ad10e66b882656195a75ef13b9816cf7c53Virustotal results 26.98%Heodo
2020-12-230K323EFFL.docdoc e9df17a69800a02dc5484a6fc60d1e9f19f7059ed8f0ef9c7847beecc39968a3Virustotal results 26.98%Heodo
2020-12-239DZEOLNN9GL103.docdoc 0149c806df64185dc66ee1fdc857e25ee93def1f7db847487674959d2b9306d1n/aHeodo
2020-12-232X4FF9CPZXD4B0K3.docdoc a28b7c24587230e5ac5533afb0324572f1d1341d264eccba2aaf6b2a34e5ce81Virustotal results 25.40%Heodo
2020-12-23COBBE8IB5CI.docdoc 49f4475b4c4b63927d612bfcfc707d4a25237813c727333fbcb42fec441757dcVirustotal results 23.81%Heodo
2020-12-231DV2OWFILEY78.docdoc f8d8367d54febac27068bc20e25b1c3260b9bdc78d4874c00368e65ec2e37ceeVirustotal results 23.81%Heodo
2020-12-23GSIKUF1N6.docdoc 7e0f29831e6732a730d1b231a94cae3a27525976381cf6b97d15fe45c295f239Virustotal results 22.58%Heodo
2020-12-238DITVOFYN7E1Q.docdoc a73f829ec3af1cb01879498a3d3c485fc4af82f8214ac8a42e543f0e12fa3e45Virustotal results 22.22%Heodo
2020-12-23DPZQP99NCSWR8YBZ.docdoc d5231db757615d38ce982ea1272ef281efc93dc8105418c890e8f9e59d76ef0dVirustotal results 22.58%Heodo
2020-12-233W1A2I.docdoc 318cf158cf886f17e7e947feaaf989f25e514c91bec35e9dcca2a4f2ef4baa95Virustotal results 22.22%Heodo
2020-12-23C4IQPOL.docdoc 6083b405a5bfb099398dc2417486e1c2913bba82b96baff811a71ee6feb0884dn/aHeodo
2020-12-233FB54AOBRIA.docdoc ebfadd85753d033e248aedd9f9c5772331aff8dc35049d0842e8c423d64ea08cVirustotal results 20.63%Heodo
2020-12-23QZEET02DPZEX6SAH.docdoc 60029fa95c17ba479a9ed424abc3a3f684111997424360741b67de478d0bcd4dn/aHeodo
2020-12-23WLHL9L0U.docdoc cf2febee508b7992d107d1a46b3deb724fff5b3905e1b7208ed0b5106c2b63ban/aHeodo
2020-12-237EJRSXPPIL.docdoc ba9ea1c4a35b426bb909eae9b8b40a6acdd5a80c1cea10d8a336338a7b282522Virustotal results 40.32%Heodo
2020-12-23XV0GOS.docdoc 77476e25aa9034df5f54eb93a92ea7144c57945b92eed68b1956044666957d33n/aHeodo
2020-12-23XWWJSUR.docdoc 93901d975d0df11ab32c4eaf841b43684882ce002e1222696c629076b1b81792Virustotal results 41.94%Heodo
2020-12-23PKH78BTCBO.docdoc 47207dfadb642d35013dc02b38b9dbf49b10333f7447728b8471863fc9ca568fn/aHeodo
2020-12-23I8QHIGXZHMMKH26.docdoc 70cd2d38d41ecad15addac25c6e09641cce2f946161ecf261e639a09576ecb8bn/aHeodo
2020-12-234MZAWZ38D7.docdoc b534c439ac7a89c6af82331ebd70e5b5ce5e13a2e871bb7ab122b00004605e97Virustotal results 36.51%Heodo
2020-12-232VXM2NO8A4DO4.docdoc 74ca579457b696e80799f7acb8b3caa43a1a05be7c10a42fdfa94b1013490c07Virustotal results 32.26%Heodo
2020-12-23W00GCSAZ3UVFKM69.docdoc 2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101bVirustotal results 32.26%Heodo
2020-12-23L2GAPT.docdoc cd26f4220386d91ffb1a0233ece99c207f4335aab6a4c6227d64756f16500ef7n/aHeodo
2020-12-23H584Y0B65V4LT.docdoc 4eba0fea9764ce2f90ad0ab87a752c374f7f33295336278b98cea9f8cf47255fVirustotal results 31.75%Heodo
2020-12-23GT13YEBAX00CESO.docdoc 32485683a42778008538745c1475cd3abc5d9ec4f8cbb3210100d448b9eec74eVirustotal results 30.16%Heodo
2020-12-23BXSQIBWKMHTDM3.docdoc 6983d0de072547b29fe27502cd474096e7831a387d6980280fd1519c1cd86025n/aHeodo
2020-12-235E19JEBME0B.docdoc 1f0dd0263393040d067ed555d604d764634263e4eb014755feb5d319af9db68dn/aHeodo
2020-12-23RIVD7JC79C.docdoc c29f20dc33cf2304271a54734dc3746f342898284264bd66094dee544fc133bdn/aHeodo
2020-12-23Q023QPFA27LV5ZU.docdoc 158e3c1a9e0f1942aec57f44ff4569d2a576bad56846a77053f5b4f726c14258n/a Heodo
2020-12-23S9Z2RG.docdoc eeeac0e4068f95a8d51d268eb14efdb0158a4a538bd414fde6f64911091f8211Virustotal results 25.81%Heodo
2020-12-23QC7CDU40.docdoc 1f5a0f7a62383b576ac6f661f97a2c035e72d6f054e5b63ea53123ed9081dae6Virustotal results 26.98%Heodo
2020-12-23AFHQXJXY.docdoc c693baac5d3227d362a0fe99ad187c18cde1f45a404c94c881d424023303a744Virustotal results 27.42%Heodo
2020-12-2379Q9WXGRIYT.docdoc d4b572062438c3b6331322be310ee0209e104c180931c63dab258983c69f6dadn/aHeodo
2020-12-23RVNLH9OK.docdoc 9d2ad424f8d1a39e1cf83b8d64131bc94d8b8ecf787b626e1118e348fc967f10n/aHeodo
2020-12-22HPSG22SOHA2BSO6.docdoc 000b049debe1595e96d46d2cb910795e269d9d3f1b3210bfa45901356b3b3b3aVirustotal results 25.81%Heodo
2020-12-22DNL6V59.docdoc 80565ed0ada236540991976a90ebc0b137d35995ba34993db276fd2808832950n/aHeodo
2020-12-22LJNF1IR8GQNZM.docdoc 05c57f48c8b1958bf16f64a292f9aa05a43f6185d02c54a0d8cf03b2fbc56ab5Virustotal results 25.40%Heodo
2020-12-22VVDVX8E72L.docdoc b88940065daeda56e1e49c0db60c1e275b39e435f83b785742242104d173a57an/aHeodo
2020-12-22YG8O0T6BPUI.docdoc bc80ebc602752fe60bc486b8620ac2692c2cf2f368e79cecd3a281ce807855e8Virustotal results 20.63%Heodo
2020-12-228RJ2B2UBRHY.docdoc 70325bb19664b06520c37b48c9b0deaa5232904551fa5d01a82ac5a6e735a626Virustotal results 22.22%Heodo
2020-12-22E7RVYLODADPM8780.docdoc 3a6a1a101ff166519b8b881efee09a67e6b3fdd9de23e64eb8811d52604d9923Virustotal results 20.63%Heodo
2020-12-22ASFD05K4MOY.docdoc 3a7e77468332deeec16a5228c4b955efb118e0b0d576e638a7a71ac7be04a5fcVirustotal results 20.97%Heodo
2020-12-22PIQADDG.docdoc ac4a11a17747f0db974bbb343bdf32d636c82bc667c3223c23567faab4377eccVirustotal results 22.58%Heodo
2020-12-22MHUQ8XPS7OW73U.docdoc 44b69ab822ea1d2cea11bde2cbf85cb033e753dcc8b5e30dc49cb042d3310aadn/aHeodo
2020-12-22A94E5BTSVSKTES.docdoc 79b2694e59e609ca6d7fcb4ae72e5c099d9da1a40eb352edeed9d7032ed5c9d5Virustotal results 20.63%Heodo
2020-12-22K37K3F1K.docdoc ffce79e8ecfa61f2f82aa9b40d611c100e6cd68cde6fc34b012ebbd21750908dVirustotal results 19.05%Heodo
2020-12-22OT3IFC124FIB6EV.docdoc 1d5cf0fff53e0485bae46b34b71fc4b886376d458e91b8eb88a04296f36f9aadn/aHeodo
2020-12-22HT6F2WI9.docdoc 755b0648467884ea407cb2be70ee59bdff597edec6e149816e553134e25aaf54n/aHeodo
2020-12-22IEQ91UBU9FPY.docdoc 8d0a380012f874d975499d45632b01438dc0e7a4d6bdf4791c400e375b02acb4n/aHeodo
2020-12-226IOLFT4H.docdoc fabd2798310f1b90dc1321bffbfa1ee8c41695839459d40fd6e32618d3df7ccbVirustotal results 44.44%Heodo
2020-12-22X5AHIZ8KLFFH5.docdoc d86732f28284b8dbef93bd8eeee3150fa2696a1ccc22d520bd82a2a53c58c32bVirustotal results 42.86%Heodo
2020-12-225TTS9DDB6H275S64.docdoc 7f7cfdf40853bbfed2268dc75e4981abae04045ef5571e0de2bb61f69578991dn/aHeodo
2020-12-22V8TZ3JKUQHLH4.docdoc b0116ad85e9336df147a793ad30d615386ccf2df1095c8cf30ada653b5349f3eVirustotal results 42.62%Heodo
2020-12-22SSHQ2T3MT.docdoc 5961f5f44cedfac8a1de3568cdad7e244f181b87395cdcc5f31e7d102457cdc0n/aHeodo