URLhaus Database

You are currently viewing the URLhaus database entry for http://web.pa-cirebon.go.id/De/NUIQFYX6511712/Bestellungen/Rechnungszahlung/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:104062
URL: http://web.pa-cirebon.go.id/De/NUIQFYX6511712/Bestellungen/Rechnungszahlung/
URL Status:Offline
Host: web.pa-cirebon.go.id
Date added:2019-01-16 09:02:03 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-01-16 09:04:05 UTC to abuse{at}acenet-inc[dot]net)
Takedown time:51 minutes Wow
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-01-162019_Januar_10_36_29_Uhr.docdoc bf34cdbfc143baf710e25dbbb29c52a557bbb0485e5325f085f926f32507ba63n/aHeodo
2019-01-1616_Januar_2019_10_05_54_Uhr.docdoc ba42bd3156b959557c225c8b8eebcc02394c935b8178902835924d1a150325eaVirustotal results 16.95%Heodo
2019-01-1616_Januar_2019_2223169140.docdoc 409a3d725202a5f66385fa3dec70b0311ded3871f8f0528c631cad1d2a3eca39Virustotal results 16.39%Heodo