URLhaus Database

You are currently viewing the URLhaus database entry for http://gkpaarl.org.za/language/e6xd-efwdg-viuslwndw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:162353
URL: http://gkpaarl.org.za/language/e6xd-efwdg-viuslwndw/
URL Status:Offline
Host: gkpaarl.org.za
Date added:2019-03-19 17:33:05 UTC
Last online:2019-05-30 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-03-19 17:34:02 UTC to abuse{at}gridhostservices[dot]com)
Takedown time:2 months, 12 days, 2 hours, 50 minutes Bad (down since 2019-05-30 20:24:23 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-03US14722729951232666653.docdoc 9e944296aa96e7136d82d50f98bec8fbeb3e0815ecf574051a92306d47ae7e69n/a 
2019-03-21US14722729951232666653.docdoc a3d5a4e7e08c0ac7f90688022cca87fa108a83c454c2a83bb8f481533016761bVirustotal results 21.43% Heodo
2019-03-21INSTR84938246465084666.docdoc d3d4e794b15a2758f70a49f8ac1e8041a321aad86b7f158288dbed2f48ece7e4n/a Heodo
2019-03-21US19554244864.docdoc 620f8b004d9025d11466ac548f07d0826ea4aa7ea78109d5dc91fb403a64af02Virustotal results 21.05% Heodo
2019-03-21AXE60329638053830043.docdoc 44d855d2d229adeebdb8ee1aa67cf53254ea12f5f0f0b1ccda9eb4f459c91c0bVirustotal results 20.00% Heodo
2019-03-21US4286030164378.docdoc 533ef1d2270013663393a29a5864f84793f8e9ed5024eb291e83b4559910e890Virustotal results 18.18% Heodo
2019-03-21INSTR8890307684042005.docdoc 8cca119dac9a876ff808e157477e6573e9629bcc90389ec579d04d6081327be2Virustotal results 19.30% Heodo
2019-03-21INSTR5045698117277094.docdoc 6bd9035d4b8ceb67e4b43e1abc52cc3088d24c393702bcce25bcb613d65fb757n/a Heodo
2019-03-21ACC88024153091496731151.docdoc ddcc0262c0ddbf84bcb18bb6160e05451282362bfcdf7e902e4fd61cf8f1cdcfn/a Heodo
2019-03-21ACC553681764562.docdoc 466ab59b4162af31780ee8aa988abed58a799277ab9a15d9efa4736fb5cab30cVirustotal results 17.24% Heodo
2019-03-21UVP81823136673051997.docdoc 8bae1a061f7a5c4e335bc119fb9678f8357d8ddbbe254a7094183e3b13830740Virustotal results 18.97% Heodo
2019-03-21PAY11017539650.docdoc d224874cf46c4526997f1ca3f502f651961830f4a949cb98059255da33175543Virustotal results 18.33% Heodo
2019-03-21INSTR7725688091520.docdoc 867d083f5e218d71a2ae027b6241c4d70d2eddb9fcaa092b851ee65d2f953ea9Virustotal results 17.54% Heodo
2019-03-21ACC3993810365599421.docdoc 69cf87c9857c832821d4ebe8088e24ab8b8d68f441f3aed1745f50755449d5d2Virustotal results 18.64% Heodo
2019-03-2117302968923874115552.docdoc a55451987863af11c80fcda0477d6ca926f4e6a88f4e3ab13186071068c7f5fbVirustotal results 18.97% Heodo
2019-03-21DCRFC483556682176339.docdoc 925f9285d457f4d8576ad29835160819199e399cddb13d3934aa6d1fd6c6fa07Virustotal results 17.86% Heodo
2019-03-21PAY1372720894.docdoc fc175b875fd103b92c2f5c7020f98b75a5384da2a484e5334236a087e135979bVirustotal results 16.95% Heodo
2019-03-21US913032741.docdoc 5d4812d217aba310a1285313e3ad04667bb909b504ef89ee4ff95920a9ac5969Virustotal results 16.07% Heodo
2019-03-21MXRHF47816836577129715956.docdoc cbba7563c17cc7231a8fb9120f021f047bad714300a076e3f3c9d1fe9ac52e8aVirustotal results 38.60% Heodo
2019-03-21INSTR47155563421971090287.docdoc acc8cb47c51650929060208eb5c533e7de63884ecd2e76091343cd439f9f78fcVirustotal results 37.70% 
2019-03-21ACC1434755361524659.docdoc 3bf0376e98b421c0a1c8a32b20314c01082615db3ac238d3c254765bc722d464n/a Heodo
2019-03-21C973358439352763103.docdoc 6351391df902146d5b24dc85b79c1bf284bcc58029ea6d0507cd185469db5b17n/a Heodo
2019-03-21INSTR210587839148059.docdoc fcedd5e2b48efb98526cd9b7462e8d771023f5257d6b52e170643c92bd3eae4an/a Heodo
2019-03-21PAY88891285446240.docdoc b936e27e3fb79efb1680941b7f4cb519f46a3722715facc2d27407a659a83a0aVirustotal results 37.29% Heodo
2019-03-21PAY1474763144649813.docdoc 023ca21f517ae8c1dab26cd17ceb16765a6768ddb02d7bf03e8777fca53b4bc2Virustotal results 32.73% Heodo
2019-03-21RAK725724860293461738.docdoc 84811d076fae0f573eb91d0c8aa792dae2aeb6a5e6f0f989296e7bc97da67ab0Virustotal results 37.29% Heodo
2019-03-21ACC70127728284488707414.docdoc 706351643c333f88061c12b433e84ff56ce5b3fc89edb46423b7ca5fb1aa2981Virustotal results 37.29% Heodo
2019-03-21US1664728133.docdoc 784ef6e2d484f191705d49dc3f1b7ce8b442dd3a5916c33136e61e903a76d818Virustotal results 36.67% Heodo
2019-03-21WS3423800843808218.docdoc 6a78108ab0b40c65f501481fd0ea94c1541dcc419d93f12fb6a7a06d699eaaf2Virustotal results 32.20% Heodo
2019-03-21931628648.docdoc 329b1ffed8f5fafc30fdbe2df189842a247a69bd37cf158b90e50bb086c4c394Virustotal results 32.20% Heodo
2019-03-21ACC260465348.docdoc 27c96680382ea3cd21b2e384525174c9e5f6761e7ab15e6232c11d22cfc6df8fVirustotal results 33.90% Heodo
2019-03-20ACC583565569.jsjs 869f09c1b430433a385b4ec13a90eef4cfe0cba092a46fe71107de2f865bdf0en/a Heodo
2019-03-20860539378838684910.docdoc 0d0e0dcb30161c1caebd0228add4efca3881aa1fbde72e77c2a4eb8b3e9bc99cVirustotal results 21.43% Heodo
2019-03-20PDZ7646279782651.docdoc 58ebec99bc0f80218f9e36e121e22d569ce5b28b8b843990294c29f5ec7b82a6Virustotal results 20.34% Heodo
2019-03-20PAY17960821797195178.docdoc d39f048c46cbf9e3e71fac8dbdc06222089fd0d48a69f531a065fe4dfff94e36Virustotal results 20.69% Heodo
2019-03-20PAY855323879359.docdoc d58ca69e03c4f1e840867f1f6c5a2a927164393698bfde6fbb4f1112e7dfd1d9Virustotal results 19.30% Heodo
2019-03-20INSTR741890451788.docdoc 11316a1c4c089e8503fdb6d897e1a3cb446a782d3400831b8864a3d26bac67aen/a Heodo
2019-03-20208487575.docdoc 211be866b21316604e53bd3f50bc502280c7b1603ab7ef7ef96c22b369402030Virustotal results 19.30% Heodo
2019-03-20US47468152176.docdoc 2f07a4c89370248b99160b0c4001f1945d14fba6c9ffa5523e7f117422f8498dVirustotal results 18.64% Heodo
2019-03-20ACC608266835.docdoc 9e565c060b4be380a1596f693d18c72f3a7d0a7df583b605b2f4f5e544e02467n/a Heodo
2019-03-20AMY581496273.docdoc 291df82b52799bd469a851e0b9d83a415c5d29b5b4c6aa22602b8d03559f79e9Virustotal results 17.54% Heodo
2019-03-20PAY34744312065204262642.docdoc 5b42db8d80442f5c13e700ebccef1f0ea8cb2f929a9be800543d7ad4c88c48e7Virustotal results 17.54% Heodo
2019-03-20PAY800387213465660.docdoc 3cec3e84c24ba8c5bf86107f7ccf4a344268662b2ce9d919bb75bed08ac43bf8Virustotal results 20.69% Heodo
2019-03-20792137513625930309.docdoc e42363f56d36e49a55a9f9f2adb171ba79590c2ac82c4a85f6da5dc1410553baVirustotal results 19.64% Heodo
2019-03-20PAY16676657869.docdoc dcc316942b32efdac4d8a87fec151d0a727562ad0ec8cd086de8f32ca24d2974Virustotal results 20.69% Heodo
2019-03-20INSTR5720717015229.docdoc 4230607779d62bb99027fcef81dc5d92454f4e38f08ab27b8620ba03f715ea89n/a Heodo
2019-03-20INSTR65132214736353257624.docdoc fa9f68eeb3e65b760aa781b207c75df1b73c9dead610b34221dfb08a6a45fe83n/a Heodo
2019-03-20INSTR69008069065348.docdoc 65e4b399804f938a56db8a31edc7c83b4d843004e963ecdc23bac696a3491055Virustotal results 19.30% Heodo
2019-03-20ACC5174022563359640.docdoc a9eca651c74880a4879ef98dabf00f9d29cecb7de47e107ffbfb082252db7cf9Virustotal results 18.33% Heodo
2019-03-20ACC23566059161266025078.docdoc 9df14de20af3979affe96bc7e8c32e593382bb67a1dde947db160565e124df90Virustotal results 19.64% Heodo
2019-03-20INSTR2226800576479306.docdoc 30db246c83a0a3b6af0e65e21af39be03e0d917d35a009855174f5d696180534n/a Heodo
2019-03-20PAY612224405101592130.docdoc 13b5d65b58920696584037f8236c0d1b28b04e85ef1c7a8e57e2fbd51f643572n/a Heodo
2019-03-20INSTR8952322860558503979.docdoc 4771951b18a708931be4c0e5624e0d0e60f87d393ac8c8bbcee4340b1e2b69e9Virustotal results 18.33% Heodo
2019-03-20US8760371759077338674.docdoc 6ca53bb668081720377b01b08b42306ec2c3f1290b6c7d050dda9d0129b1169en/a Heodo
2019-03-20PAY58665940499.docdoc c4e07f9b7d86b1afe452b97d8dc4c0baedfb75c0ec8419a48df0e1b0bad103ecVirustotal results 18.64% Heodo
2019-03-20ACC04469875105.docdoc b50537b0892f6efafb0bd1c814bd014246ac93ecd33ee7be0839a0483a0bc27bVirustotal results 19.30% Heodo
2019-03-20PAY4064556628880.docdoc 365e98c9680bb5642b6861c90c5a265eb65d5272e38a767c1559acb82d3c3c92Virustotal results 39.66% Heodo
2019-03-20PAY5887556389.docdoc e0dd530812d079c2c5b907ca2161c78d6ba99e33168716aaacd09775fc0ce059Virustotal results 38.60% Heodo
2019-03-20446425585981248.docdoc c026fa10b57b6ea2ebd6d6efc4a04df4b1edf8b13ce1c660b615ad0a70a8a714Virustotal results 42.11% Heodo
2019-03-20ACC153774090.docdoc 111aa62fa00b552ce5c43b05c1aa4de70d35ed8a335899857edd5e88b71aadfdVirustotal results 41.67% Heodo
2019-03-19INSTR6040737802.docdoc cc3271ca03f5d8f33444da17467e0c5416241643267bdb6bffa34a38ceefee00Virustotal results 37.93% Heodo
2019-03-19INSTR4268283744364906.docdoc f7821a0e84fb83151caf26a8ac681206999bcca59c085c6c8b74acae73485707Virustotal results 36.84% Heodo
2019-03-19LJTQM27156049808001423421.docdoc f24f3d547fdebb1480100a8ab61abf96220222fe80c5d40bf7c9ab006937659bVirustotal results 44.64% Heodo
2019-03-1955623101935.docdoc 003683fc6d2c425be2b87c127b27207b19525f0e348cf5c75d8430f6c3f5eb0bVirustotal results 32.76% Heodo
2019-03-19DCYHX807777144001504.docdoc 8c97a981866b6121ec734ac9b0da80d1805af5e4008d6d20ae16753c6073b804Virustotal results 21.05% Heodo
2019-03-1990256641993894.docdoc e545364bfe8e1e072499b805fdba2566887c176ac004783879bb66b22983c671Virustotal results 32.14% Heodo
2019-03-19US060777211286.docdoc e11c31f3bb29f29c6c5604cdf643f38e344822e1d83ab5ae1f8b9c81d55735b6n/a Heodo
2019-03-19ACC182046801728781.docdoc 936b959e68e56e6a5d2cf15e21a7fd100634d0eaa7e42563fa5a9dc0a2ddf246Virustotal results 31.03% Heodo
2019-03-19US4192885423830.docdoc 34f713682281f772f3490f6d894c97c93eed50eb3866a4fb2fe2988df4b0112bn/a Heodo
2019-03-19PAY054932058780.docdoc c45cd1be90e54011a5f26aaee821ebe47b0aa9c022e8b10727a493fb73dd7814Virustotal results 32.14% Heodo
2019-03-19ECFQU002252831.docdoc 2a45a1772ee1999e6c15019bb04568485af17259f0d5f4dd0dd599a9c908a7d9n/a Heodo
2019-03-190885399277.docdoc 2d2822e1fa837db5e8d3722253f06ed82fbe43aaee6c724ca01488511fe2f298n/a Heodo
2019-03-19INSTR418149223.docdoc 915c28d4ec0173040a2eaed24c603942bdc9937919c16dd3386c4326e393ce0cVirustotal results 20.00% Heodo
2019-03-19PAY059728711.docdoc 1be3b9c63166b8792a8766fcb089442aa9f6a0042f47437ced571939dc476f73Virustotal results 20.34% Heodo