URLhaus Database

You are currently viewing the URLhaus database entry for http://fib.usu.ac.id/templates/429ETCorporation/DUO03613880UKUU/Aug-10-2018-58115774/ZU-ETN which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:41317
URL: http://fib.usu.ac.id/templates/429ETCorporation/DUO03613880UKUU/Aug-10-2018-58115774/ZU-ETN
URL Status:Offline
Host: fib.usu.ac.id
Date added:2018-08-10 19:06:29 UTC
Last online:2018-11-19 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: unixronin
Abuse complaint sent (?): Yes (2018-08-10 19:12:13 UTC to soeharwinto{at}usu[dot]ac[dot]id)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-10-11PAYMENT 0344826ZH Aug-12-2018.docdoc bdb47e34d316a7e79aa95525e4e87aa99d151a0e27df4a8f1dce2b7087b22a6an/a 
2018-08-11ACH 7IMY.docdoc 403fdb65274fbfeccb8868e0b400f3ee2281426c7dbbdc7bdb263dff0979d704Virustotal results 43.33% Heodo
2018-08-11PAYMENT 90EHRCQDBV Aug-11-2018.docdoc 9c2716bdc8d1689e655df6e8037769dc3307eeb14353a957833fee4474375273Virustotal results 41.67% Heodo
2018-08-11PAY 860HZZG Aug-11-2018.docdoc 514672a0a6a86f205e72f5f27d91a3a4e7b9d45ef76189940b7dafd1c204af3eVirustotal results 40.00% Heodo
2018-08-11WIRE 304065U Aug-11-2018.docdoc d0535f3fbfbfb0bca61e08984f2d52a419c0527b015024cfdc7d8c02e20a9d97Virustotal results 34.48% Heodo
2018-08-11PAY 57MZZBP.docdoc a69dcc4079828f21306defc7c454cc5a9416ea833d64d3f5a7316e3edd85ff4dVirustotal results 36.21% Heodo
2018-08-11PAY 3203JXUIQPKH.docdoc a5470f723b60f5857cb440672eb33b431274064c10b5f61000786c56a31b44c1Virustotal results 35.00% Heodo
2018-08-11PAY 054IBGST Aug-11-2018.docdoc f9f27a07223d881a5611604f5a3735115c069917444375b6302a6b2efc8c78aaVirustotal results 35.00% Heodo
2018-08-10PAY 1717HVJTG.docdoc 2c0fe2518278a6aa348ddf16656ee4abcc4a896a063c3393342f98205b24641bVirustotal results 35.00% Heodo
2018-08-10WIRE 8719EFRYC.docdoc a495bb70a501e572be1b28ee66adeba0c007e5be32faba94efa9e807b45ba52aVirustotal results 35.00% Heodo
2018-08-10WIRE 224WAV.docdoc 8e6eb58750e3640ee51ed65939083430ef76d6615079f69f618e4caeb6985e56Virustotal results 36.21% Heodo