URLhaus Database

You are currently viewing the URLhaus database entry for http://www.zkeke.xyz/wp-admin/secure.myaccount.send.com/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:160155
URL: http://www.zkeke.xyz/wp-admin/secure.myaccount.send.com/
URL Status:Offline
Host: www.zkeke.xyz
Date added:2019-03-15 15:43:17 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Status unknown
AdGuard :Not blocked
Reporter:@zbetcheckin
Abuse complaint sent (?): Yes (2019-03-15 15:44:06 UTC to esabuse{at}hkbnes[dot]net)
Takedown time:19 days, 20 hours, 28 minutes Bad (down since 2019-04-04 12:12:07 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-04-03Receipt_032019_498721.docdoc 257819b9cd2d894cf3738ee3482d73b2f08843b9760e7bf06fee28b60aa36148n/a
2019-03-16Invoice_032019_85051341.docdoc 176fc8d7c9b766558643e303d26923c6fa2986729865aacc86f3221f2c97f05eVirustotal results 39.29%
2019-03-16Untitled_032019_2399995.docdoc 72f4edd6d9a0d0f97af9d60ae15fe29fa3fb47a36b8a431004868e875192699fVirustotal results 44.64%Heodo
2019-03-16Untitled_03_2019_173307496.docdoc 0dfad534e04f382f2667cf75ce6f6a3e6e87c0445906925cc9f4a57549f8a1b2Virustotal results 40.35%
2019-03-16Receipt_03_2019.docdoc 3826137a54e6d54a11fd3abc91ccf1f6a8ebe5fb97249b9acc1b78743e7fd2b6Virustotal results 41.07%Heodo
2019-03-16Invoice.docdoc c2fafdea65121542a5eaabc866c357056578622b9ad35c5eec9d6b1f0a0e32ccn/aHeodo
2019-03-16Invoice_201903_1050097.docdoc 06b4ce2f7e662c39b5bdbe3e0259274068eec935a4c94f7f14894253665b1db3n/aHeodo
2019-03-16Untitled_201903.docdoc f02e6224c6abab128890cb86360afa3503ae97f368223ee0a55f0fa90e412152Virustotal results 38.60%Heodo
2019-03-16Untitled_032019_064410194.docdoc d92dcadbddefbfb244f1f8b98b642fc25769f48a7ddca9cf2717ab7535ef3179n/a
2019-03-16Untitled_201903_322275.docdoc c4fbe1560255335c1841233e59cb2311a29a0c8e9fa048e5b9c17d63229a9af2Virustotal results 37.50%Heodo
2019-03-16Invoice_201903.docdoc bb12c614eace8d4d7b8189aac27d2abb3bebd376443720f019a4e0c2b889d9ceVirustotal results 41.38%Heodo
2019-03-16Untitled_201903.docdoc 3dbd2c570a9fefab5ae5423b4a1e4ee2e5880690db9d44a85e76352e07b2421eVirustotal results 39.29%
2019-03-16Invoice_03_2019.docdoc b542e1dcee9bd6b5f6e568ab45e96067c823d00510b6e557f2ac138d3ef0ba70Virustotal results 37.50%
2019-03-15Receipt.docdoc 60683e4d53f06d4fa4501753e6fc6068adce1da7e23903635406e85bbd299607Virustotal results 34.48%Heodo
2019-03-15Invoice_032019.docdoc 8835c4045c9d6fbd9e4ea35529a3ab434369458feab327a7d08ed878cc6f5925Virustotal results 37.29%Heodo
2019-03-15Untitled_032019_52039083.docdoc a203b6af59485d57d4530f2ba99f787233466005eef20da05b17976311370e2fVirustotal results 36.84%Heodo
2019-03-15Untitled_201903_8348000.docdoc 5c77f3a493cabe60afa8403288fd2cf521c373dbf286aa4299d5195a602161baVirustotal results 37.29%
2019-03-15Receipt_032019_3321184513.docdoc bcd76cfbb19148316273e9474206fc37f92a3359838a63c6898368ced0ba3fccVirustotal results 36.21%Heodo
2019-03-15Invoice_03_2019.docdoc a5509b36a9b9f001b6ec7abf32474ea8f71e3d79df8567e19b2bb3b30009deeeVirustotal results 35.09%Heodo
2019-03-15Receipt_03_2019_5770000876.docdoc cc1f1f483183f878d5eee9ca6eccc5f632ca499a8ca1dadc83faa53199a8c332Virustotal results 32.14%Heodo
2019-03-15Receipt_032019.docdoc 348012b3621f020c6f410c6305b925cde374a6c3eeede6fa3002a29741261c2cVirustotal results 35.09%Heodo
2019-03-15Receipt_032019.docdoc 6a1a7e4618a1803fce47331915610ffacc49abf261ee5783ef409e20b78c8e6dVirustotal results 33.93%Heodo
2019-03-15Receipt_032019_917131.docdoc e3467e09f74aed3c66b9966cee1c36b1ed161bc93782c48e98514ff3122f6564Virustotal results 25.42%Heodo
2019-03-15Invoice_03_2019.docdoc cc00fe1971c3af231965da04aa0098a0c4ed8074d42ad7013ec9de42d82d46e0Virustotal results 25.00%Heodo
2019-03-15Untitled_201903_134836.docdoc 099bcb5b2179f7c14bd95dc7c3f3f19bb0ed63e0bb5ebf8a687fb95947d12430Virustotal results 24.14%Heodo
2019-03-15Untitled_201903.docdoc 57277c706a102860896ee631755e31fa9624d1fb3e1683da4ae2bdef627b5b72Virustotal results 24.14%Heodo
2019-03-15Untitled_032019.docdoc 21af84f4b453bf740bd23fd90d43f3f3c135895f04f838a9ddcbc50bcb7f3754Virustotal results 24.14%Heodo
2019-03-15Invoice_201903_3952614439.docdoc 531d1d9c1f88f2f4608df5714cded69207e27052a9efa757a95da6007a790dc4Virustotal results 25.42%Heodo
2019-03-15Untitled_03_2019_6553614965.docdoc f5aaf81c747d98a8b5590a5d74bb1b0f5edb2a590b0448839378e64739bf2fe7Virustotal results 29.31%Heodo
2019-03-15Receipt_032019_987207562.docdoc da8c3f7530bd78692ddccf4acc9f5d2fe679e80df6af930f7950e3e8ff8ded5aVirustotal results 26.79%Heodo