URLhaus Database

You are currently viewing the URLhaus database entry for http://test.kselax.ru/wp-content/im1VV/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949624
URL: http://test.kselax.ru/wp-content/im1VV/
URL Status:Offline
Host: test.kselax.ru
Date added:2021-01-05 19:21:03 UTC
Last online:2021-01-06 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-05 19:22:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:21 hours, 30 minutes Good (down since 2021-01-06 16:52:57 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-06YEKS5E.docdoc 20e14707efc648839a55cd8297a14ede4490c68b493b193b7009dfc1546d3883n/aHeodo
2021-01-06LL2CTAQTH5PRI8KJ.docdoc 1a2240a1b93c241221a8801762613ffcdbe8840b783abbbbf0de723ca86d4f95n/aHeodo
2021-01-06RK6Z4DLMM0K.docdoc cf6b517dc42a9f9a8ea4a15a44a95fd6994ebc5ccb0f547be2ad41cf79fb9501n/aHeodo
2021-01-06M8NIQMZLZSC7XQR.docdoc 648e5645035a4f1fcf9eadf628bc815abdad364c4921ba6e08864c154685af88Virustotal results 55.56%Heodo
2021-01-06SSBQ70KFBNZ3YI2Y.docdoc 6357ca03d61fbda5c6bb4c9d077bfc05fde8629d6e1a780c1c450d30837a660dn/aHeodo
2021-01-06X17QIVMXPB4.docdoc 0de801b837a312d3b8f2261ee67cc0aed27efeaf1bdb8caa282dd4efaa314b96Virustotal results 55.56%Heodo
2021-01-06O4V0QCXBOVQ5.docdoc ee8bc000ee93b9fe36a73a563427f5e809bfe50e843d0cca24dee394dba1d5c1n/aHeodo
2021-01-06UZAV5PLRAUVR.docdoc bd92faf6df467bcb52378dbfe1a9a4566e45340d72cd949662cbde48b67a7120n/aHeodo
2021-01-069QS63V.docdoc 67cabee2a3dcf8a53b1ea9310c6028996c8811e1e2c7f2411ed79f99e60a1341n/aHeodo
2021-01-060OHJ60V2L.docdoc 212f20819f4e55f8230ff785b1831fc23c33751c2e0929626acfc1e3cd03dc99Virustotal results 55.56%Heodo
2021-01-06IMAMHOF4UI0S7.docdoc aa1d66929c9077c84bb85e61359693060bd76049ef9f79b7b7938539b9059747Virustotal results 53.97%Heodo
2021-01-067YN2CU7T2246V.docdoc 45092ba44beabdd777eed53aaa943751979444cea7c8a90369647ea9a4a60578Virustotal results 55.74%Heodo
2021-01-066NPWDA8YWZKY.docdoc 84b636e0e3f38e7936b9da9ef7e74395e693a6535f9854c38dc7c807e7af0648n/aHeodo
2021-01-06NOP9ZS.docdoc f66298ae04e44fed3e718965b64a80a8d70a223fc57019645de8b0f9ed5a05a9Virustotal results 52.38%Heodo
2021-01-06NV14V4ENIQPPG4U8.docdoc fd94f101390f77468eca0f818035d36eb7534df9d1aae125eccc0a4fcd3ca0fbn/aHeodo
2021-01-06E5S5J69QO.docdoc 896523844f2b50fbdc276aadc7757cdf18d23a9996612af8f0121ce04fcc6b65n/aHeodo
2021-01-06HD2X5EUNOT.docdoc b2f7bab95f522e14c0955cbcacdc6111b00c7073cd8f24d2e9a0ec5c721a59ceVirustotal results 53.23%Heodo
2021-01-069CNUFD18T6IB.docdoc 71c0e91c6c3fe936f070d727b1881971d387e0989cb112e40619e0675dd46a45Virustotal results 51.61%Heodo
2021-01-06FYBC0WHSE374IHN.docdoc de0a3645233c15feaa23ad91784a6ee8d68940d4defd54a50e3f10090bc65421n/aHeodo
2021-01-06D3KKE0DE48DZV.docdoc 625418b766b62ac4e70a33c1d51f0cf3f2be4c5e1941fb32f76bfab6cc668fa4n/aHeodo
2021-01-06BWV03IN9GUJZU37.docdoc c733ba160f91cbea84c70b9688bdad48b22318394bbdac64748b423dad327b94n/aHeodo
2021-01-06X4BGEWCG6VR2.docdoc 092750b8c97d95e7c116fa125e5446caec18da881b38a28c8f8d805647969a76n/aHeodo
2021-01-0610KTQ233.docdoc a6fb2e9f5db8866a8f8dfaba2d23fe53d60df660b8d356624998ea59b0678313Virustotal results 52.38%Heodo
2021-01-063FRHTZ8OYGPAHLI.docdoc 52c171a58f4283f108cd5723f49e70bebfcec79db213c247a26e9c3e116f24eeVirustotal results 52.38%Heodo
2021-01-06DA0KPM2BMJ2Z.docdoc 518bb7e643187438a185e0612c4bddbe62d736dbaf1b37cba4cb3f9e551eec09n/aHeodo
2021-01-06O5AH2Q6OWL6BF.docdoc 3f3242395a2a00370faff7500b86d7456d6dca638120963143d6158fb8c7f931n/aHeodo
2021-01-06EQVNKUN8.docdoc 4caba632ae9218e1820c95cc84d6d577243052781c50f304133a875481d13e08Virustotal results 52.38%Heodo
2021-01-06RV51COM5JTT.docdoc aa07e7bc9da1916a903106aafc34ae43dff4f658bbe653b655f5116a9e2ad990n/aHeodo
2021-01-06IFCCBV97UQ1I2FO.docdoc 0e3e1bebf0d7a01a8145946253003cea1081714253b1902eede7c59ceefea6dfn/aHeodo
2021-01-06GJCUBYTWDKI9U.docdoc 91301283dc9ff2a660bc059ae18fd6d89374f0ce7cdcf84629aa9c2846925022Virustotal results 49.21%Heodo
2021-01-05P7SLR8ACX2.docdoc eb5400bf745798ad446b0d55fdd552714dd90c26947fb9b92a3d559704ab91afn/aHeodo
2021-01-05PVZAK08VSH3WI.docdoc 0baffc20eaca4aeeb47c5c2ad8b6e1422d4407ebd13b501b7ebec60859dfe18dVirustotal results 50.79%Heodo
2021-01-05NOR44F11L.docdoc 65eeebdecf737d2e67f9b8073fef6be3b6668f1541e8a19a12f869063b217ce9Virustotal results 50.79%Heodo
2021-01-05F44MPYUP.docdoc aa637b00fdde01bdd5c1e2f3d0b91364528bee85d5f1a8c1ff80fa730cf79a8eVirustotal results 46.77%Heodo
2021-01-05SO7TGESP1E.docdoc 10662fecd3be581c0e3e48c76674df0e815878786e19bce2dcd21c3552655269Virustotal results 43.55%Heodo
2021-01-05TASRA4NM.docdoc cff0307e84e8f6c3c45d3ac88aee9f8761a6f7a271dc07e5c6b1a2b4012b654aVirustotal results 47.62%Heodo
2021-01-05LOOUWCKQ0EQEK.docdoc cdc5395931b2b7da44dbfe1d93bef7a982f103fafc2259f0d0b41025628b11b6Virustotal results 46.77%Heodo
2021-01-05F3VTUXWUZ8GUYUG6.docdoc 0ced2d1f1bbe1d20a40898ae28082521bc69ecc51d16b81d636de77791f0ef7aVirustotal results 47.62%Heodo
2021-01-05AZG0XD.docdoc 2668d532f53ad3bd92b9d0fb533d6feaf17a6a01a08ee85787667442e9c69e5bn/aHeodo
2021-01-05JEMGXGMM6.docdoc a03c9dc5727fee3968f4d2d8352258cfc56840dd972680704075d574c12dad5eVirustotal results 48.39%Heodo
2021-01-05177QTZSGQUAC6.docdoc 8c829198897d8ba3dd5a5b1f86741c5e5295a0eafb900bfa440802d1c622c469Virustotal results 42.86%Heodo
2021-01-05RJEEQBZPT.docdoc 122c549f9e875116b46ecdbce80ee12845bb24c40a4c703be57b4270731f7f28Virustotal results 44.44%Heodo
2021-01-05SJZ5970A7VQJ2.docdoc 4e30a0c0d464a13919be9367c51ec2d36f2972e27861997410add5b113bceabaVirustotal results 43.55%Heodo
2021-01-05NFSXYK4FYM3.docdoc 74e13fc7a5f9b1cf0480e925f0e2274991fef4b53dd6ab413f42a006599edb97Virustotal results 43.55%Heodo
2021-01-05CO6S72ULS7SPEZ.docdoc 7f9e6b9183a6a254ffcd68100012d645a5fb91caaf3b727bbbd76f4262595bb7Virustotal results 42.86%Heodo
2021-01-05X07OKX.docdoc 53968a89fd9c1d34d45403fc7882d3e15a8c8b832a2cdbf5f6d5b0967d777fd2Virustotal results 41.94%Heodo
2021-01-05PQOSYO.docdoc 9989dfbbd3669ca3164a605c485ac6a06d5c27ebf7357bf76968e81d2068d3c2n/aHeodo
2021-01-05UNZMB7WJL9O.docdoc 3c8d3c07935afc4bbc31b8c4a7a6b2cc77bdf0c2985a9595ec9edd6d3e8a5279Virustotal results 42.86%Heodo
2021-01-0594JN8NAB44R.docdoc 3c881e9db07a42e23408d2e8a96c65feec2857b04256e4e9c2a6a9789994258cVirustotal results 42.86%Heodo
2021-01-05FG7PN9UN88N8CII.docdoc 203f16a0313a65b940a054b564acd009dfd1d1737b41ed8fa081f8c1f1c53fc7Virustotal results 42.86%Heodo
2021-01-05I44V6E7C70.docdoc 1d7c91c4d2f76c54f4e0732030817ab00b79b727688be8a00122bc2a9387ea9bn/aHeodo
2021-01-05ECW8K6.docdoc c2a6153157de0da1987225400eb7e32c87f9574e825320466772d6804cf8d3b0Virustotal results 42.86%Heodo