URLhaus Database

You are currently viewing the URLhaus database entry for https://www.netkafem.org/wp-admin/maint/wt8ybhntw-y8uzkjfkie9flmq-disk/individual-yuoWJ-hB0folL4wO/S46OZBuuTylX-f67L3LnMvGJt/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300940
URL: https://www.netkafem.org/wp-admin/maint/wt8ybhntw-y8uzkjfkie9flmq-disk/individual-yuoWJ-hB0folL4wO/S46OZBuuTylX-f67L3LnMvGJt/
URL Status:Offline
Host: www.netkafem.org
Date added:2020-01-29 07:30:09 UTC
Last online:2020-02-04 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 07:32:03 UTC to abuse{at}ovh[dot]net)
Takedown time:6 days, 7 hours, 27 minutes Bad (down since 2020-02-04 14:59:14 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31Dat_2020_01_31_2706481.docdoc 3cc04f77aac8a4cda9d58d7ac08cc46443898774556b200a1fe78f26fcd46be8Virustotal results 22.22% Heodo
2020-01-31REP_20200131_9545148.docdoc 2d75164ed9f2d5641975aa54381d0398bbf1e2e2179c2c3aa131412e96a9e6f4Virustotal results 20.63% Heodo
2020-01-31FILE_2020_01_31_NZD88692.docdoc 6fd2e08f2dde33eac79877702712cc2d0e58ce9acd50807a6393b64bef1cc2f1Virustotal results 40.32% Heodo
2020-01-31Rep-74406.docdoc dd7ae3bc161b941e8ee4831dd583f504907c07c32c1d64d330d1f08e2030707aVirustotal results 39.68% Heodo
2020-01-31list-GL394108.docdoc 994ab85c2ed2004c1ac4b7eb7b3300ed9453ac6f02787c92e226c3cfb19cc939Virustotal results 38.10% Heodo
2020-01-31list_20200131_A886.docdoc 86bcc6e11d8939e59f3a8e96e2259c30079c80db1e6c3f3c8513c5e037c8a12dVirustotal results 35.94% Heodo
2020-01-31mes 20200131.docdoc cf37de24304aa0dd3b5ad32a824118e7e0b5621b5c65a382297f480b4d2290c1Virustotal results 35.94% Heodo
2020-01-31Dat 20200131 432.docdoc 6b016f4d9891d986c49c476530332757dbfe1d8a57715f3734fc1d3a5925a277Virustotal results 35.94% Heodo
2020-01-30Rep_7147.docdoc 1d75ee01f877ad2ad951d51e2396cd0c0c6be72e1b2fc190b59b64b733ddfd5dVirustotal results 34.43% Heodo
2020-01-30ARC_20200131_VG821588.docdoc 78af768890683c9271a83b8fa61ac0743bbf82ff74a00a23e8b36e1cc539b664Virustotal results 34.92% Heodo
2020-01-30Doc 2020_01_31 RB076.docdoc 5d669f3035b344006960d92b8e182bc4805b2f45783fc1393e39b27498e25cbaVirustotal results 34.92% Heodo
2020-01-30rep 20200130 MYW077065.docdoc 3d0d29f9f42fa9d58abba5af05b9a74a48a861b54ea5a1759c4115bb77bf8801Virustotal results 34.92% Heodo
2020-01-30doc S642.docdoc 915478aabf43d394dd3ef4f1cb6de4976b0415b9eea56cd6e50780c10b8da5f2Virustotal results 38.10% Heodo
2020-01-30FILE 20200130 L71354.docdoc 162e460256ab76b13ecf9daf16f1867bb2e13925b3894c8f56fc2d360781c389Virustotal results 38.71% Heodo
2020-01-30rep 20200130 FQB302328.docdoc 8f4a6501b7d0a50fd6e8efa50f1eb0cf68d343cd44f5e4b28c47fd843d56fe6fVirustotal results 37.10% Heodo
2020-01-30inf_5711662.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30list 081.docdoc 27e174efb0d6e8b05cf666fd50c3163d91cd9bc9416197af58f70c1f027d2a0eVirustotal results 32.81% 
2020-01-30file_20200130_IIN9074.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30doc-I01864.docdoc dbafc866496ce6edbe3c92ff5b13a847d53b29e211c6061de2f2881c8301233cVirustotal results 26.98% Heodo
2020-01-30REP-W49831.docdoc ddf014e6d9e70bc1709c2ccde24524fc72092f929ea37df901ee88f152ae4c43Virustotal results 28.57% Heodo
2020-01-30mes 2020_01_30.docdoc 6926bc1e1548f432acb621ea14a0a04189aacc9b0d3730cc275ea5be5ab2ddf7n/a Heodo
2020-01-30arc 20200130.docdoc 1db0c100dfea192f88767bedda9beef583fcfb5c7797f32d7f93dcf045d3239cVirustotal results 25.40% Heodo
2020-01-30Arc 2020_01_30.docdoc 05540ab9749b214e8557c647443d6b4f997326d9e3ec01cf69b855c519c53887n/a Heodo
2020-01-30rep.docdoc 4932fd4b350016a8ffd5945209efaabc177ab4bb83e310f2896d29c02e0a612fVirustotal results 25.40% Heodo
2020-01-29inf_20200130_DBJ540.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29File-2020_01_30-364.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29DAT-2020_01_29-YWU534.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 34.92% Heodo
2020-01-29dat_2020_01_29_8527598.docdoc 49e28f382793143c68d57be83f8e7252dea8674a30f06b9063dd9ccfc4f25e85Virustotal results 33.33% Heodo
2020-01-29Rep_20200129_AS26088.docdoc edcbcb15f211dd24abf15ab6fc923528a0836b3e8dfb5bfab6742a5a9ef384adVirustotal results 30.16% 
2020-01-29FILE 797356.docdoc b7be54905b7c6faa05793dcfbd48dbe4b489f5424a08a31cc09e12ffb7390060n/a 
2020-01-29Mes_559008.docdoc ac41ec25e6ec00aebc8f955b7a555f4510b16069331fea05e144d182128f9ea4Virustotal results 26.98% Heodo
2020-01-29DAT_QZZ115.docdoc 717b785246dc9287f784e18696ce1abfbcf2289df5d5fbd124092943be92e779Virustotal results 26.98% Heodo
2020-01-29arc_OMV064127.docdoc 41f2df35fe03375e39b939c95142a9c04e1613e60bcdeb4f50ea339349d04243Virustotal results 26.98% Heodo
2020-01-29FILE W6497.docdoc a570252bf1c2fa10675c88c55f9ef2362c2c7d3ac6e6bc1400102a49f2aac861Virustotal results 27.87% Heodo
2020-01-29LIST_2020_01_29_140377.docdoc aad9025b37d955a0929dc76185e7b87d374e735e3a30a258bd549dcfc7a1bf27Virustotal results 26.98% Heodo
2020-01-29REP_2020_01_29_7460.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29REP JSQ564.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29INF-20200129-46191.docdoc 9a3c832b35a4463b5a948c92cae3d257e41614ba752a2b3c2decf45c326c719fn/a Heodo