URLhaus Database

You are currently viewing the URLhaus database entry for http://okiembociana.pl/admin/gwru-3im4wb3-nppj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:166625
URL: http://okiembociana.pl/admin/gwru-3im4wb3-nppj/
URL Status:Offline
Host: okiembociana.pl
Date added:2019-03-26 23:03:11 UTC
Last online:2019-03-27 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-26 23:04:14 UTC to abuse{at}hetzner[dot]de)
Takedown time:14 hours, 54 minutes Good (down since 2019-03-27 13:58:21 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-27PBIBY78846344443471991.docdoc 7761c5b2ddabd554f743addff9012f1644c05fb82b400e19db67d38328257dbbn/a Heodo
2019-03-27PAY8065036766811.docdoc a5244fd330c010b869e7ac452d68e91382e8e95977dc8fc3f7f26e5d5d92d33an/a Heodo
2019-03-277215172700699320340.docdoc 1ce61864f0f234ed316999c07f5cfe62499d8cc491dfe81dad2dbf3edb9f2de5Virustotal results 22.41% Heodo
2019-03-27U02987963091.docdoc 808690689d3fbd8316a0db64ff30528395d16b6c15a5a9d70e50beb7fb0d4d83Virustotal results 22.03% Heodo
2019-03-27US372792466.docdoc 5930802567671384b717edf74e414b4c7813e7e953b09f8581beb9f8c6e0c268Virustotal results 22.81% Heodo
2019-03-273882499745673244973.docdoc 3e024c72c8f0e292eba530a2a79aeb980ceaf3ea38e8d24a5070864bb59f46c8n/a Heodo
2019-03-271470764220704154.docdoc 7af35b23f969bb0a8053eb2faf5862b5e746ff8a15a3f4342600453a361d1ee3Virustotal results 22.41% Heodo
2019-03-27INSTR59829834471132780.docdoc 1c6870532e5b6e13eaf11871daaa703fe93c206e7902bebe6ce58d270065b4b1Virustotal results 22.03% Heodo
2019-03-277938809702492.docdoc d9feb9ce54dc51fb2d8b9ca9487aa43d132f2c0e93e1c0abfc3fc487be2074f7n/a Heodo
2019-03-27SHCAZ4041186014805168337.docdoc 46946372c81802503f01b6d9739fd4dd9fe39225973c8b9c22ef625666d48debVirustotal results 37.70% Heodo
2019-03-2720637983930058.docdoc e51f057ce172ee70159a9fc7bc8521e6f6197831d054b8dc445e7f8ce0989d5aVirustotal results 37.50% Heodo
2019-03-27F698809791.docdoc 6026ab30130b1065ac3d1bbd68b0d3eb29e79390ebd55e4d5c8e55313abfafc0Virustotal results 39.34% Heodo
2019-03-27M364128504.docdoc 7718b1b4a6fcb490c5e5912dd0155a450de8a86586209b56695a1d77ca21425eVirustotal results 37.93% Heodo
2019-03-27ACC911241899396831.docdoc bf3ac1d80daaf533b3af1f1c3b030803791374ac22ad5d4530d8c5b8b3a6c5c8n/a Heodo
2019-03-27INSTR567924312800238.docdoc 4f910d9c86a9f647fc2c9ee8018925b2c7bc974cab6331e252d5d17485ec1e06n/a Heodo
2019-03-27ACC31052710185657324.docdoc 8ca56f45320ae34538a0bef0318e6c28b758017ba91e157369363b7dfa3f2598n/a Heodo
2019-03-26UY6820979972844012128.docdoc 07c63e38cb12e5e8e259602a0a04acb44cc372c7d09acd675b395be858adc06cVirustotal results 36.67% Heodo
2019-03-26US54593313218017349.docdoc 12801117100fff39edbbc870c6a21e4f180a7dabb92168a0ebfc0abdb2617f72Virustotal results 36.84% Heodo
2019-03-26PAY173130875579.docdoc f8d23636c045e3ed40a552d3d37c81f46c2b885ed0dbfe789dbc9ee81dcf086dVirustotal results 35.59% Heodo