URLhaus Database

You are currently viewing the URLhaus database entry for http://lpppl.umpalangkaraya.ac.id/wp-content/l8vdvv2-iwi59j-nysnau/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:173743
URL: http://lpppl.umpalangkaraya.ac.id/wp-content/l8vdvv2-iwi59j-nysnau/
URL Status:Offline
Host: lpppl.umpalangkaraya.ac.id
Date added:2019-04-09 08:04:07 UTC
Last online:2019-04-15 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-04-09 08:06:02 UTC to abuse{at}iconpln[dot]net[dot]id)
Takedown time:5 days, 21 hours, 59 minutes Bad (down since 2019-04-15 06:05:10 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-09493979184370_April_09_2019.docdoc 69417bd81b936a1b0840896d2c298a04603bee107b33c01403dc583f0bcbf81bVirustotal results 22.95% Heodo
2019-04-095770073008_April_09_2019.docdoc 1492b74a6c27a3e43a7b7d7e79b1b54236b9910818d5da58bc1597dc55c375d9Virustotal results 22.41% Heodo
2019-04-091667477250_April_09_2019.docdoc 70eb5523dc9783e0ce44c1d4b9c30284022687136603f1dc5c79434b6c24df80Virustotal results 22.03% Heodo
2019-04-09256030666433_April_09_2019.docdoc 3da52dd23993fc264f952f202c0170201cc1031ac66ef2cbddc866cbf5779f07Virustotal results 24.14% Heodo
2019-04-097399342752_April_09_2019.docdoc d564f6b53a1f701b77041ef9fdefe0ed83303b708db09473aad0a394124a20e3n/a Heodo
2019-04-0904694796629_April_09_2019.docdoc e433d3482cc74b781695031111d40fba1dff06c9d46ce3346e6c5dbab90da061Virustotal results 23.33% Heodo
2019-04-09040273538818_April_09_2019.docdoc 2de78bee39fc512251db275f95a32cdf5e5822d91ac6d0a0ba210bcdb2310e02Virustotal results 21.05% Heodo
2019-04-09229990199374_April_09_2019.docdoc 12532f26d6430fba452cc8a6ce6f2b52f0a8470a2850f7b3cfe0aafd7a5bf7adVirustotal results 22.03% Heodo
2019-04-09359064377087_April_09_2019.zipzip 11f298cef6f462b4633fc2a1c9ed812b91e15588b1f3567c3bd057caaf53a1a4n/a 
2019-04-094384855094_April_09_2019.zipzip 8b6de0c3f78e67daded72c6fa5a0b18c214082f12f970a2320eb2d5c39d07808n/a 
2019-04-0916805364342_April_09_2019.zipzip 5deb23d48c2ea82fc1f61084990c399cf083da2796156fbfac3e7e68ec819aa9n/a