URLhaus Database

You are currently viewing the URLhaus database entry for http://administrasi.utp.ac.id/-/BBIAP5x/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992876
URL: http://administrasi.utp.ac.id/-/BBIAP5x/?i=1
URL Status:Offline
Host: administrasi.utp.ac.id
Date added:2022-01-20 15:03:06 UTC
Last online:2023-01-21 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-01-21 09:27:05 UTC to abuse{at}te[dot]net[dot]id)
Takedown time:1 year, 0 month, 5 days, 19 hours, 23 minutes Bad (down since 2023-01-21 10:28:05 UTC)
Tags:emotet link excel heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-2210735583381361661485.xlsxls fd83649a426e706a363449d7dcb503e4bf5b59cc3ab5d5a346e4ed308ec2e2f3Virustotal results 40.68%Heodo
2022-01-209516290950.xlsxls 2dc878cbd56aa3817a893c118a8257f705517f72326c6d5424d2b498fcb0c54bVirustotal results 20.34%Heodo
2022-01-202910799083566131.xlsxls edefd18d0580d8d25297bcddc843c3478c20f650b124224460ca9ae267529878Virustotal results 16.95%Heodo