URLhaus Database

You are currently viewing the URLhaus database entry for http://official.co.id/publicfiles/FZiR/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:293119
URL: http://official.co.id/publicfiles/FZiR/
URL Status:Offline
Host: official.co.id
Date added:2020-01-21 01:35:05 UTC
Last online:2020-01-27 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-21 01:36:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:6 days, 5 hours, 25 minutes Bad (down since 2020-01-27 07:01:11 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24Invoice GMY20_5395405.docdoc bd0cf935f8295a706aca3d1b869cdb093ab49f4cb4541dad1d94f71d24e3e597n/a 
2020-01-24Invoice GMY20_5395405.docdoc d821a8703d05edd646a699d3b35e4479561e7129d9c3b0c8ed0d36d87fd7e5c5Virustotal results 26.56%Heodo
2020-01-24INVOICE_DH0313_69713476.docdoc d830dd74d73625f82a36da760445920cea41b3321cba4769dd421d38e5c8b366Virustotal results 26.98% Heodo
2020-01-24INVOICE_HQ571_659262882.docdoc 21ed646e9c73d65b5355a50adb7b3a7b2f6d76b45d4248e2ad2480fd784ee8b5Virustotal results 25.40% Heodo
2020-01-24Invoice_OM32_13441185.docdoc e6227f508ea8149469cf318e6939e1fd1d8b32b728997677e8220d7c4b827ac3Virustotal results 25.40% Heodo
2020-01-24Invoice-BZGW94_5860258.docdoc f650d229a5a7baea3cf86104f874121c82bb34994d2be1d3344cf45769387accVirustotal results 25.81% Heodo
2020-01-24invoice PT77_520908104.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24Inv-VKCR9_60950247.docdoc 3019c5713b1eae96e9080ac03f4c948abb9012ec8937fd082bf6f26c9aabbd98Virustotal results 46.77% Heodo
2020-01-24Inv_VKA5_42742392.docdoc 0ca26646d4e6d640b628e402fcbf0dc050634baaf8b6468051b29dd30a1cc140Virustotal results 46.77% Heodo
2020-01-24Invoice-ME86_63015402.docdoc 34691ccf852ea3e1fc484a1b5e18dab1768f593de138bd42ccb9d6e36e58c87bVirustotal results 45.31% Heodo
2020-01-23INVOICE_P7880_981934.docdoc 4d65aa1d4d4356e59a68839a7e437a4e3d207e6bf481c90baf4ba6de5b9d0ed4Virustotal results 34.92% Heodo
2020-01-23INVOICE_OM08_26510167.docdoc 7a407a5d5853fcad0d7872e8ae60b0471662cf83c0b5bd56dfbd474fe2e6036cVirustotal results 40.32% Heodo
2020-01-23Inv-WS097_361326.docdoc 76f2ab5b7640f30ff423838998fc1337e13e6ad4d420753f7becf1e06c29768dVirustotal results 34.48% Heodo
2020-01-23Invoice-NRLO52_038530364.docdoc 02cfb7e59acad043e26b2a2effef7cef941860dfbb632d603c4a8cacf15c739fVirustotal results 33.33% Heodo
2020-01-23invoice-H39_75478366.docdoc 12958a0020162751f99e336844423a03e94d65328cc2bb55a570293e54d2a0c3Virustotal results 32.26% 
2020-01-23INVOICE_DI28_9836664.docdoc 3475216fd7f40791c7a6f620a37544ce6ff9866f4ade999ad3e4eab76ccb91a7Virustotal results 31.75% Heodo
2020-01-23Invoice-ZI3981_909103134.docdoc 93500a32e011f40c983cee5dd2d53b447421643672ec0823b81e5f7d5125a6eeVirustotal results 31.75% Heodo
2020-01-23Invoice_533_91028684.docdoc 3ceb6736ad41ce7eab6677db54901559e0f3aec143fea7d74390afa03e0ec421Virustotal results 30.16% Heodo
2020-01-23Invoice-S830_651043718.docdoc f8a99bfbf6c324f6f76f07ae81630edabaf926a75bc2bc290abeb01d910b9a67Virustotal results 27.42% Heodo
2020-01-23Inv RXN603_96537988.docdoc 4efe99e760c862d17d3128bc8c9bfe85a4512b981ac9944bd6f3c38d0d02651bVirustotal results 28.57% Heodo
2020-01-23Invoice_065_142875.docdoc 6e51e0155d05dcff84597c83d9f3ecbbbc59c0d1763e7b147cc5592e3cbbd704Virustotal results 31.75% 
2020-01-23INVOICE SHN339_9701023.docdoc aa561ec45a890d783fcb412768c706f829bf7648de033cdd190fab9584ed7a40Virustotal results 26.98% Heodo
2020-01-23invoice N08_099641.docdoc bcd78fb2ae376c31ea21a7d1b7d110e4dd0a49c9a8261bc5f68816e4d1091bbbVirustotal results 22.22% Heodo
2020-01-23Invoice ZK59_438140214.docdoc 68ac922c713a804c7deb999f07b98b907019e4c339554a965ee4251d5459b660Virustotal results 22.22% Heodo
2020-01-23INVOICE-Z6815_85394163.docdoc 0f8e10bbdc8728918591e85cccb046c2773c40bac92da35c9474905528e4f22eVirustotal results 20.97% Heodo
2020-01-23invoice LDJP81_664292.docdoc ce24b5bf4b297e7cab25447de321e39b443ef540da1a95e17c9952f589f341b4Virustotal results 31.15% Heodo
2020-01-23Invoice_R698_075651819.docdoc a6caf4ef566d28695b60b4316c66a9354a608127c38c5725d8bcde83f06c1ac3Virustotal results 28.12% Heodo
2020-01-23invoice_TS56_552777316.docdoc 48158e6a152e84a80d00ec820249636ae00b966099d2ef9ab8c768197efe2da4Virustotal results 28.57% Heodo
2020-01-23invoice-JRP98_5144274.docdoc 8fce0c3f5b2c7f7961769c009486ee767f9463bf3f80aee244f964717b5f0fc0Virustotal results 34.38% Heodo
2020-01-23Inv 11_143935.docdoc cfef2d0896c8f6b8665524c08dcadeaf306d68d6f41337b34bc6916d2b06e12dVirustotal results 32.26% Heodo
2020-01-23Invoice BBF78_876706.docdoc b880f03f8d1480e05b41dd7f4f69cf55c05166f273b59619d8af1386d2c92316Virustotal results 33.87% 
2020-01-22Invoice RS3_909224643.docdoc 5f90a562e8540b29714d08b103b911722e04e3662b4fa2326d1d4aadae35cc18Virustotal results 32.81% Heodo
2020-01-22INVOICE YLX63_17993186.docdoc cc05e1f6c0b7d004330ee5429b8e874f5251413f4b426f26e8666eaf823a80e1Virustotal results 27.42% Heodo
2020-01-22Inv UIAU7914_121315.docdoc 3c1cc64c9babf45acdb186c3dc9689517fefa31918bdd47faf8e17878f2e43e4Virustotal results 28.57% Heodo
2020-01-22INVOICE-LIHQ1_76707596.docdoc 029859049d0e521193d86baf0d209080d9d885e31b9ecab91b2c2484acd58af8Virustotal results 30.16% Heodo
2020-01-22Invoice_UPLT0_663286.docdoc b0f9b35af82ec49cfd0211971bfe8a148000d70a806f104e739600df1fb743c9Virustotal results 32.81% Heodo
2020-01-22INVOICE-J47_864004516.docdoc 3c883920142d8e22088985f3f3594665bd83571bfb755aa1aa5b7354fa7912bfVirustotal results 29.23% Heodo
2020-01-22invoice IQX9_534111.docdoc 424176c5eb3fe9eb958ac0e0b9ed8a3fc23ae3b56334f12d4e47f5cedadd49e1Virustotal results 26.98% Heodo
2020-01-22invoice_1308_857165.docdoc 52d7f4734f53db7694e9447a9828892e502a775c853659a424cc5387f4bdffc0Virustotal results 27.42% Heodo
2020-01-22invoice-62_62823337.docdoc 8c7789d0789c1577504a4fe78fcd941bf7213492ee0ac852e59a69e5f3365f2dVirustotal results 27.42% Heodo
2020-01-22Invoice-CUN3351_1571240.docdoc 033a4c80c7605607fcab6670ef5c1ec7745d1a32e35a0e5d5805851860c0ed58Virustotal results 31.15% Heodo
2020-01-22invoice-AFL031_65639663.docdoc 28dd5855d4a2794c748e05180897d51cec6ddce941374738098c85fa53caaf19Virustotal results 29.51% Heodo
2020-01-22INVOICE-XRYI00_01952939.docdoc ba04b0a3fbcaa93c4c4d55e8686205b50d5467373fe6cf3961c41a6d9b5e2d85Virustotal results 29.03% Heodo
2020-01-22invoice_7_707165498.docdoc 25ab5becca6ea62d79f93b084c7b1ff26c19bb617da5291b8f44a3ffa5503c9dVirustotal results 26.67% 
2020-01-22Invoice-945_9072946.docdoc 053acb16b2b378bb2d3e47318df335ccd37ec8d0c358faedeca182a57ad2fde2Virustotal results 26.23% 
2020-01-22INVOICE_C158_312680.docdoc 88ce28544773169c40c27fca43e493f73d997ad67d58000d9554edd251754738Virustotal results 26.23% 
2020-01-22INVOICE-QKZV1_3353649.docdoc e3c19433848a0b0023963e05496e09744003119af344985daad6a614cebfb1b4Virustotal results 21.31% 
2020-01-21Inv CGYE0299_3820153.docdoc 5fc5b0f1165fd1d3c8d8143b5ba08e4ab2b38f7a7d2d4e68bb454d0f14272414Virustotal results 21.67% Heodo
2020-01-21INVOICE_SZ8550_677345.docdoc 6e45a9ae91897bec6b4aaf8f30420016e4f6875e176f032b00102a67f94ed9a1Virustotal results 22.95% Heodo
2020-01-21Inv-FFZO1_412613.docdoc 3fb6dabd9e46b09e9906cad336321983eedb8601725e0cfd49c9e99ddefe09c1Virustotal results 22.58% Heodo
2020-01-21Inv F816_032107.docdoc bde730e3c431c09700268d1d1ed11043248973fc0a946de535cf05dfb8f9d332Virustotal results 22.58% Heodo
2020-01-21Inv-OHJ118_554768011.docdoc 7501ac37ca9adce1a6c87e4cc6db66d985a25c0a47eab1ebb098d308f8b1a96fVirustotal results 22.95% Heodo
2020-01-21invoice_YXG63_422595943.docdoc e373a7a4b54c1ebc385e4200abe5710412cf82d191ba8c77801ae899486cdde9Virustotal results 24.19% Heodo
2020-01-21Invoice NWF8_471336.docdoc 911c7302bba8ebf022f7b06d72b4ad2d70a53021ad08349b0b974a61177cd886n/a Heodo
2020-01-21invoice-KB77_925527108.docdoc 7c138128d8dcfcef1f383d815bb70b4c4e33f6a88ca5996fff2f67bde4f4b26fVirustotal results 22.58% Heodo
2020-01-21Invoice-QBLI756_73317483.docdoc 08a411548d58e3087177a29c74daa8e41a5fba66715c8017c29cadc0edd4bceaVirustotal results 22.58% 
2020-01-21INVOICE-KXE4_51696962.docdoc 87171d8a9f307a3eb15346cf8cc328cd6d28398b7095e88b869a518060f7e5ebVirustotal results 22.95% Heodo
2020-01-21invoice UI732_156414827.docdoc 3d54a3649da061513fa3169fbc132afe22f3c0534d8eb483c38a9abf1f4bae66Virustotal results 23.73% Heodo
2020-01-21invoice-E794_92895590.docdoc 82bf92f8f30ec4f7813dce2e62d60dbcfbd53b5e53e5ded8307d4898e41ab0a6Virustotal results 25.42% Heodo
2020-01-21INVOICE-7_75550089.docdoc 5e4d7fe7b015da8212c2430900e6a4cd61d246c9785f6e85f5acc72d04432cc4Virustotal results 25.00% Heodo
2020-01-21invoice_0_689385549.docdoc e09637eddfc2bfc14bc5b1c30b82abf32499e5dc406882a5a825ecb223492e86Virustotal results 28.33% 
2020-01-21Inv_BT4_74803159.docdoc 2e616a4428b0ac862b6015ba2845aa97b9334f0372c4908efacf3365dbcd9331Virustotal results 27.42% Heodo
2020-01-21Invoice_NP750_60038252.docdoc 41a39aba7e866bc9556210ca2f0fdbb66cee751719cf7ca1f6ae526ef0005460n/a Heodo
2020-01-21Invoice-XY0511_530228.docdoc c9b288f025cd8dd448fc3b9a7315b5f54fd97d274d7c3716334e92b10c22bad9Virustotal results 33.33%