URLhaus Database

You are currently viewing the URLhaus database entry for http://fib.usu.ac.id/templates/47KCARD/AU786861JDW/Aug-08-2018-91140040422/UDR-PTCUA which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:40212
URL: http://fib.usu.ac.id/templates/47KCARD/AU786861JDW/Aug-08-2018-91140040422/UDR-PTCUA
URL Status:Offline
Host: fib.usu.ac.id
Date added:2018-08-09 05:15:21 UTC
Last online:2018-11-19 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-08-09 05:17:12 UTC to soeharwinto{at}usu[dot]ac[dot]id)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-10-11PAYMENT 10FLSN.docdoc 38ed829e7a3c20c360a4bb69a21123bbb18cf5b0bda24bba8b8a3f38d343e5c3n/a 
2018-08-10PAYMENT 10FLSN.docdoc e65db6b0761c084030e561385ce281db5cf0444e78c00babc1c54622ab042357Virustotal results 35.59% Heodo
2018-08-10ACH 6SLHGDLWF Aug-10-2018.docdoc f0bf639da101f2a263b164a6eba4b6da81e7665ad82a0b33f6f360fc74babcd1Virustotal results 35.00% Heodo
2018-08-10ACH 705280RO.docdoc 96d33bc79689c85cb7bc5b22c2d5c7f7049eb9a844b1ad78f4471af0cdac92f6Virustotal results 35.00% Heodo
2018-08-10ACH 5M.docdoc 6a9b3661f52200da3d02070b646874fdde1902a5bd2a22dccb90ddc21d8df0ccn/a Heodo
2018-08-10WIRE 265366M Aug-10-2018.docdoc 54bf05efacb556c7ed106a9b802619b2f038d1e6b8adbcf4c8d632f8531e68beVirustotal results 38.98% Heodo
2018-08-10PAYMENT 5F Aug-10-2018.docdoc 37c08bc14f578f0b19f992648c113e46dc49e0ad1ddc9cd2e63dfb9242fe151cVirustotal results 36.67% Heodo
2018-08-10WIRE 62882V Aug-10-2018.docdoc 02c58585c45ba7f87a94eb10fda2ad3d1216dae821536c77bd1f53b5b48730cfn/a Heodo
2018-08-10PAYMENT 485028YDRBVHV Aug-10-2018.docdoc 56de2fad613807e46613e7159681a962cc8c54fc6ed20c7c3e90e104cdbfeaffVirustotal results 32.76% Heodo
2018-08-10WIRE 494927VVWJYM.docdoc f23147b0d5a9cae49c26d00b85809a3391ffbe0bb2366e3f38397ad31084e29cVirustotal results 33.33% Heodo
2018-08-10ACH 6694048S Aug-10-2018.docdoc a10a4ba4a1727a05d019f8f59d90d72419e63bb4d3c80c49037a194f77592563Virustotal results 30.51% Heodo
2018-08-10ACH 1054JUCRUT.docdoc 96ac2e256739d1baefe78966e86480a6480c73588e1948a1efe5f944bf1ef847Virustotal results 30.00% Heodo
2018-08-10PAYMENT 9GFFGNOWP Aug-10-2018.docdoc e2423145f3ce13deaf5f3f3407c926e4a08752c8d0d61e4ee18288314dbc77a9n/a Heodo
2018-08-09WIRE 9904B Aug-10-2018.docdoc da09534b67058e48e72b4a9b7a1d620818291bd7f684a4b05ce6a08ce079c90fVirustotal results 31.67% Heodo
2018-08-09PAYMENT 840AR.docdoc 340f3db26a6b990dfddad4b6685c9b557b7dad1afc6902f1099e90a159753488Virustotal results 33.90% Heodo
2018-08-09PAYMENT 86IWAQVA.docdoc 432e420e92ea7d24bd6ce29a64e707bb01de7fc178abbe4a1563be91acbce3c9Virustotal results 31.03% Heodo
2018-08-09PAY 9950CAPWXVZ Aug-09-2018.docdoc d325bd08af0075b3605c3497af5cf79214cda511507360b88eaa3e83273d3b8bVirustotal results 29.51% Heodo
2018-08-09ACH 1UXYUPNC Aug-09-2018.docdoc 4e1b752854a3087ac35addcde982f4f9b4b254a3601642fb0142ebb3803dfa34Virustotal results 29.51% Heodo
2018-08-09PAYMENT 32MQ.docdoc 4234d1c86ec274f439ff4948c531fc4ba9f1e78a0bade4ead82da90bd3272fa1Virustotal results 39.34% Heodo
2018-08-09WIRE 909513ANWJL Aug-09-2018.docdoc 9c45f42b5e6c88fc0d80708c11a9931be80e44aaea9a895379b8c8e2d92e1d19Virustotal results 39.34% Heodo
2018-08-09PAYMENT 7ITNELQB.docdoc 21657d092fa076607025eb55d39cc40b60c6babba1baa2e40e07cedf1a803227Virustotal results 39.66% Heodo
2018-08-09PAYMENT 55092DPBKYQ.docdoc 5f79433930e15c0a16d95b5eb14bf22fd018b55d12dbdeec8a63d03944c11290Virustotal results 38.98% Heodo