URLhaus Database

You are currently viewing the URLhaus database entry for http://notify.promo.prajawangsacity.id/zz1wr/attachments/68tkx5bqqp/i61-77907628-81-fym4eby-tvfg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:295349
URL: http://notify.promo.prajawangsacity.id/zz1wr/attachments/68tkx5bqqp/i61-77907628-81-fym4eby-tvfg/
URL Status:Offline
Host: notify.promo.prajawangsacity.id
Date added:2020-01-23 01:07:26 UTC
Last online:2020-04-09 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-23 01:08:02 UTC to abuse{at}interlink[dot]net[dot]id)
Takedown time:2 months, 17 days, 16 hours, 41 minutes Bad (down since 2020-04-09 17:49:55 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-27FILE_UQD_010120_JSR_012520.docdoc 5c72126f08d285f4a4bd43992a50b4ef10e9a625dd5d2fd38b41fb8d3435e6c2n/a 
2020-01-25FILE_UQD_010120_JSR_012520.docdoc 457d74114a1f42f4e6c14f8c54e1ad26f09962d9403a2dc5175943df83f93839Virustotal results 41.27%Heodo
2020-01-25ZKB_010120_ZLD_012520.docdoc 10ccb0e6114b2932239292f029d8acd20c85228b81942340acfa1379b887ba02Virustotal results 34.92% Heodo
2020-01-24KQ2575306174IM.docdoc 5f57ff9e1cacb841e6e728fbb9ce5d082bae6fbc4c75756633c3007c7a195a1aVirustotal results 34.43%Heodo
2020-01-24DOC_PO_01252020EX.docdoc 724a5541c2dcfa538c7d02e7780bc282cd11b6a24d622368357e21d2889bf4bbVirustotal results 31.15% Heodo
2020-01-24ST_UAS3JPWHEFUZ03Q.docdoc b876900fc503778678180d9503b47290be3a4d028a091ca0bba9411b99b14ce5Virustotal results 26.98%Heodo
2020-01-24PO_01242020EX.docdoc b451ca27de63453de948c2bff97c43cfca5cd6c2f080aa4f260cb5c313b38db0Virustotal results 27.42% Heodo
2020-01-2472Y7VROO.docdoc 17d0af0278265e68fc7bd551aea53ca47aea8455884650d045407cbddf0d0b96Virustotal results 26.98% Heodo
2020-01-24PO_01242020EX.docdoc e848ede38876ef2dedf485fe2818f53dcfc4a4cdd21062ce8ff7a53d2f8e32b1Virustotal results 26.56% Heodo
2020-01-24J_8024387737110.docdoc 789f39cce8f34ef92a1114d703e66a8894c7d3025572c148161fa467d1b6fe81Virustotal results 26.98% Heodo
2020-01-24INV_DH5931980040OW.docdoc f0f981739b129260f4ce49dd2f8d7c2f60b9d821aa3e423f6dde6da50580df0bVirustotal results 30.16% 
2020-01-24WVR7D0QOZK.docdoc a73762a4fcac6839eb5266cc79c7363b551e6bd22d63e2ca84f916607b32f0f9Virustotal results 25.81% Heodo
2020-01-24INV_U68YK6PTICGFC32L.docdoc 72d90821b9c20296395cc4a57a6d2d7c45851726d1c52d4154cc037816c439e6Virustotal results 25.81% 
2020-01-24H_CKO_010120_ZGL_012420.docdoc c0a18fef0ae13f0382cc567ef09d500b74ac60a29ba17ae3461f72bff8bdf688n/a Heodo
2020-01-24REP_IBC_010120_SVY_012420.docdoc 907a6b87768814cbf5b5e0f3f1309013bc451d847c150fe7cd2cc6e99ef0c662n/aHeodo
2020-01-249ZZ0UC9A83RAQ0Q.docdoc bedffe567bdec300da442d0c24e30f94beca6e30401410ac906a60946b63fe9bVirustotal results 46.03% Heodo
2020-01-24PAY_35947054.docdoc 4a4adebca656caf3c9f4f0d9dcfd3b4dd73ab412fc73e3c40e3fa94b5d21e270n/a Heodo
2020-01-24J_SO6092647634WG.docdoc 73da5cdf0f98ea4dbedb8219ddd051b4d7a04c9750fc4b1d6f9c8e4f9e218c53n/a Heodo
2020-01-24PAY_LM8765594386OH.docdoc 2caa93025cda12c41ce7d3ac89a2e81c7db0a40a6571fb3cb406c98e2ec71097Virustotal results 44.44% 
2020-01-24P_8458726199859.docdoc ddf866c230e59d9ca832eab360303767357ba3355a1cdc0509e069fa3234898aVirustotal results 41.94% Heodo
2020-01-2352422491.docdoc 0722f8049954458b37f5abac8260f73b904d3cc22b749cd8f17136ce6640de34Virustotal results 36.51% Heodo
2020-01-23SET_PO_01242020EX.docdoc 826405ab23ee390f30113412530dd8fa36957b7fd600826efea19868f3f20b3dVirustotal results 38.71% 
2020-01-23ST_6890446038004.docdoc 86eec0c136bf128a3ecff3448b635759a3f1a59bd572354ee242b6104910bd10Virustotal results 30.16% Heodo
2020-01-23BAL_XTF_010120_NOD_012320.docdoc a48692ac69029e43c34f02d17df8103b91037aabd7db83fd7ac40cf461ebe95aVirustotal results 31.75% Heodo
2020-01-23SW_PO_01232020EX.docdoc 1a8f402887a84a260d9e95bf23a2862212a8a358390d810e04c581f7790bae58Virustotal results 31.75% Heodo
2020-01-238T3INVTQOG7BISIO.docdoc 03975584dfaf6b80fcf9852d8d6ba600c00c3df57f762ead0f0f754cf5044cd8Virustotal results 30.65% Heodo
2020-01-23PAY_XQX_010120_DTK_012320.docdoc 7ce67c2130cfdb654ce311489c29444f88fe55f5fae3d6f560506a2bc921d163n/a Heodo
2020-01-23REP_ZWT_010120_HMF_012320.docdoc 1fd3b81ca3d30c9017a44eef7861ac902255560376ba3a1524e22f8bee5fcaa7n/a Heodo
2020-01-23ST_PO_01232020EX.docdoc ce43998d0af42cb9a17bf220f9fe9418948e1e05c4b007cc306bfd2d4580d2a8n/a 
2020-01-23INV_PO_01232020EX.docdoc 667a70d5b2b7840b6e7668f011e10182bbd2103b7885111ed07392813d2af6d4Virustotal results 31.75% 
2020-01-23DOC_PO_01232020EX.docdoc 8f57a1a62bed296020fc8eccb69e151133940788c6b8b87ceb2d95273dcae200n/a Heodo
2020-01-23R_ZZGDWUWYK79.docdoc d744c1d20947939b65a0dfa826e7b011a996521e9aea99c7a6be5531639e82eaVirustotal results 26.98% 
2020-01-23DWH_010120_PYB_012320.docdoc 3dddeb95fb091ba145a2b0705117b8ecefdcf833024674c193dbe2ccbc4c6bd4Virustotal results 20.63% Heodo
2020-01-23INV_CTIS4CED30GII.docdoc e0d5b5e788d2707e296ecee76f68c8c2ec1d9df9115ebabe6f14a1251cb9dbc6Virustotal results 20.97% Heodo
2020-01-23TTJZ_ZTK_010120_ZTB_012320.docdoc 260b5a47eceb11eaeaddda02644c85294da44e3eaca951d45152e1db6b9f1c79n/a Heodo
2020-01-23RP_76977693.docdoc 9cd39ce28644fb0f4e0e7dad49fed36f777b06e6950bcd98c30eb410e42cfc5bVirustotal results 20.63% Heodo
2020-01-23REP_25818739499843448945442.docdoc e50ca42cece8459c5ed1bf0713f580775a5bea5fd9384b1e5f284e52f2db08b1Virustotal results 20.97% Heodo
2020-01-23SW_PH16GIXT6L.docdoc 425dc31b9652f83260c405be0755dcc694bee850e115c19c8aab134a108c8ef3Virustotal results 32.26% Heodo
2020-01-23FILE_593921304011814.docdoc 9af2280771f435166b53ce4682f2cedf9072877a0fd338920e1a7ae4434c47caVirustotal results 30.16% Heodo
2020-01-23BAL_EE3963783314HM.docdoc e63aa1c3401d847d86e7d7a0183b1b09932060991feb79d6e2b775a27f30c36bVirustotal results 30.65% 
2020-01-23PO_01232020EX.docdoc cdeaebd03429208eceed139a0f59d30e5aadf522c52543ce2266b405b3566c2fVirustotal results 26.56% Heodo