URLhaus Database

You are currently viewing the URLhaus database entry for http://www.ajanews.asia/wp/Document/5r65712504026116389jmyzp09zw2b3sfn63/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:414052
URL: http://www.ajanews.asia/wp/Document/5r65712504026116389jmyzp09zw2b3sfn63/
URL Status:Offline
Host: www.ajanews.asia
Date added:2020-07-17 15:57:12 UTC
Last online:2020-07-20 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-17 15:58:04 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:2 days, 14 hours, 20 minutes Poor (down since 2020-07-20 06:18:16 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-18BAL_68R65WO79ULDFK.docdoc 56ca979add889f731b0f90db151af8bb24a5688a0a071e7a78d3811be6081dc5Virustotal results 44.07% Heodo
2020-07-18IS_PO_07182020EX.docdoc d9ceadf98a3189294345574d94f347d3908b03290b12b47d5b661203b9b1d695Virustotal results 42.37% 
2020-07-18M_DEC_070120_GPS_071820.docdoc 87fa22c9ec422e1416256a2521fc8b0aa4b22775e32b2b245d308ac43e006226Virustotal results 43.55% Heodo
2020-07-18FG4234809122DE.docdoc c9fab8bbf0f314bbc29c3932091a7f0977ac5180da759cd8ffe9a9fd633f2c3an/aHeodo
2020-07-18REP_QUI_070120_VYQ_071820.docdoc 17349a4713477389332878314d893e7719798a93f8f9a69e7784901234dab8afVirustotal results 45.00% 
2020-07-18REP_PO_07182020EX.docdoc 209e82fa6ae3e04595cfe5be6748f7edf64322f7a941cc0dea71cdfa58d67b16Virustotal results 43.55% Heodo
2020-07-18INV_382005856.docdoc d7351d476dfea357ef165b3a814032a1fe16a6f210cf0e088dca698673c90836Virustotal results 43.55% 
2020-07-18REP_WD5179736660RD.docdoc aa1a0ff9b42a8d686ce043eebdd511b76c27e8222269bdc8df22216bc188a533Virustotal results 44.26% 
2020-07-18PO_07182020EX.docdoc 9affebf9743a24814684c2e6b915db97652fbebf374ce6847c90b555b2df48d0Virustotal results 43.55% 
2020-07-18INV_JP9890475468YQ.docdoc 41b06487e7b6c55c9e976984578c8b04cf014f52f49c2a6cc5f3797ac269550cVirustotal results 43.55% Heodo
2020-07-18DOC_51376904.docdoc f2262f9662bf1ca8b067b9109f19363c3fb02939a16b35a07bf5f90c2c9e9ee7Virustotal results 43.55% Heodo
2020-07-18X_PO_07182020EX.docdoc 55875b80f7f06204639c132b298e3af7ec60a7800d4a6c415a98feea351e598dVirustotal results 43.33% 
2020-07-18PO_07182020EX.docdoc f1b757ac5477a25c821784f0b5059c5ed36b2669cbfabd38a0b840b8f526dc03Virustotal results 42.62% 
2020-07-18S_BNX_070120_MVS_071820.docdoc b4eda7af47e2c0b94b97b4f79df478c65e55fdb9165964be8b21d611bc091ac6n/a 
2020-07-18DOC_JML_070120_JBK_071820.docdoc fecc6b5b0136dcd5e19ce47cc1ff27fd3d9c9751a6f310c17ff2cc76fe73cd98Virustotal results 41.67% 
2020-07-18DOC_77177809.docdoc 3dc12218cbf996e560620f4da980be34859c07955857545d22b2a376d9e3b6eeVirustotal results 43.33% 
2020-07-1835991635.docdoc b69be57ed72b61452b73f2690fd2240aefad9f90f34c2af1663ad26f0a5b2f30Virustotal results 41.94% Heodo
2020-07-18DOC_PO_07182020EX.docdoc 75f0d4945e98a3f8bc73e66436cc437061ea5f38510e7e554d6b26617460b74aVirustotal results 42.62% Heodo
2020-07-18REP_18681208.docdoc 0321dcc5d416f60aa5a24e206e06a2f787dc3021fa9a4589508637668f25c892n/a Heodo
2020-07-18FPT_070120_HJK_071820.docdoc 372a312952d5f8a1df0b77bdeee39ad2b4bb16c3d04b12fee5575e0d21204610Virustotal results 41.94% 
2020-07-18PEY_070120_KVZ_071820.docdoc 66341377204cc1f59817b6449fb99384c8d173153ada7a859a907cce12bbc54en/a Heodo
2020-07-18INV_I3BN51FO16MT6.docdoc 235905e0f1e943ece9739738d7eafbe365d0b86d3e8c80453056e6cf5f94df17Virustotal results 40.00% Heodo
2020-07-18REP_726987437033235084009458.docdoc e9cdb9eed210e1ef9fef04891b1739922b435e2ca30c9dd18cde8d79c4c25c4fVirustotal results 40.68% 
2020-07-18INV_LSRVUJWDJB.docdoc 306d6c3978c7ab7f9b4453ed2901b3c250556695dd0f2b9ae7d4e361bf33c9a2Virustotal results 39.34% Heodo
2020-07-17PO_07182020EX.docdoc 1d5a17b767d9159f1c285fe3291b2c3914f5f02d996e093fdd0187727e7c95acVirustotal results 37.70% Heodo
2020-07-17QC5385745162XD.docdoc 8336b8c1e755f2f490572d7be01321aae42ecb94822deee84a78a0d28a4f3fc9Virustotal results 37.10% Heodo
2020-07-17PO_07182020EX.docdoc 5f6d8525a28494c7eda3df2fbb04bcacc9ec20abd2884a8e690d91a2de033807Virustotal results 37.70%Heodo
2020-07-17IUL_DY1857590187CR.docdoc 80fdf1be057aeeffabf88cc551c7c54430259f75b413391064642f8217eefa36n/a 
2020-07-17REP_80421352737373852884683.docdoc 25941d1dac273e9438afe0bf0b3a913474ff21b6c559c8f9c5a1820eac5e6281n/aHeodo
2020-07-17C_XMK_070120_GYO_071820.docdoc 9733e04aff3f386bf6dddf3dd39186c03f4d4e5a842b85898877bc75202125e3Virustotal results 30.65% Heodo
2020-07-17F_AT3731999650OY.docdoc 57f9025a6b2f793ecb441fead80f3443ee2423ee3e1a273fa7ca7910c931cd80Virustotal results 29.03% Heodo
2020-07-17E0TIJBWLC.docdoc 841439a2ad14784959d57c8b1ad8fb09014fbb03b41aedee51947e8f31e5c4a4Virustotal results 27.42% 
2020-07-17I_61912572060805.docdoc 973b004896e71141aa2b073101a02712ba7cf9d9c15ed7371a338d05ec725106Virustotal results 27.42% 
2020-07-17REP_ALL_070120_BKK_071820.docdoc b232aa9c0f20263cb714d75fd663a826ccb2c6987fcf62b815f39a3f111a075cVirustotal results 28.33% Heodo
2020-07-17REP_5IOQHW29RJ7.docdoc d1a117224d6084e8c49f1dec45be3d1bc2227f21988735f86d9e9c9d4a2a102cVirustotal results 27.42% Heodo
2020-07-17M_11F5P66VPF6XS.docdoc 45833b34f285a5105d355c15d2afa190b86d1875763e42f531185263227e1d93Virustotal results 27.87% Heodo
2020-07-1722674507.docdoc 6e6bf8344fb9473bb6804815ea6162440c958a04e41ce815f048034b6f4d4f3eVirustotal results 27.87% Heodo
2020-07-17R_EHO_070120_LTB_071820.docdoc af29da688320e9dd533fd56f53aa58a024797de685963ab6a4b570757e78bb93Virustotal results 27.87% Heodo
2020-07-17FILE_ZW72I9LT9YU9OM.docdoc 89d25bc2c2358fd59e84c0ae5496bb0f32872ed55d60cc61c35bd96f679b17b9n/a 
2020-07-17FILE_CD6150766981OV.docdoc 2107707a5f10d329d96ef8aff1dc26362634aea94d5e0e5a9e9f5cefcaa0bcdbVirustotal results 26.67% Heodo
2020-07-17FILE_FKM_070120_SQN_071720.docdoc f909c6fc593985a3df36c86b32588edbbf3e2c43a7020a8a32b081ec3153139dn/a 
2020-07-17I9YZQX9YK.docdoc 039d3c16562212063e5d5fabb2cbc3c783f134c0e073a13c900d3d0aa2904bb7n/a Heodo
2020-07-17REP_PD03E02.docdoc 10ec404f1a061e9911313932f279e74cd87c7d00f077f2461a0efb413687ace0Virustotal results 27.42% 
2020-07-17W_JT3294062378JX.docdoc 603250a8b6b9eb43a05e0b98498b77a7cb8b5a1fac668262ee07a24986a08670Virustotal results 27.42% Heodo
2020-07-17INV_IY5821304689WQ.docdoc 9b9318fde51ab32fedc80fddd35a8a803afc91d702725e36fbdb12ac0f9cb92bn/a 
2020-07-17LKM_3U4OLQ9ECKP.docdoc 2157e86f3671697567de6df4003777938813cd4726e2781af97a32a44490aff7n/a 
2020-07-17BAL_5908548238710212677.docdoc 916952ee03739b67a15604a644771826cbc68d6134354e8173f79dfd09466b6aVirustotal results 24.19% 
2020-07-17REP_75007251.docdoc c0379496fb724eaafc718b7ec2ac362e420ae85098ab5b18fab991af52802193Virustotal results 25.00% 
2020-07-17BAL_VD8ZGPDM9LN5LE42.docdoc 5a6fed1e3fbaf23508b2010143e2fbd9dee8b98f118b8cc1d8ef4208cf8a7fa9Virustotal results 24.19% 
2020-07-17FILE_PO_07172020EX.docdoc d5606359c71b5217e35ccdb928404788494c2ccbdc3cd2d4026bed510628caecn/a Heodo
2020-07-17BAL_PO_07172020EX.docdoc ec99c82fb7b072159cf6f439d0d7f53c2355bbeb31a963383e35ccdd6cd384d3Virustotal results 24.19% Heodo
2020-07-17INV_CZK6PWGI2AZFMKQM.docdoc f899c40439696439b161e1c4a0b6a1b48d552afde6ce5e136df4bb5cbd3360eaVirustotal results 24.19% 
2020-07-172112658846369677550802758.docdoc 17649aa7c5391a0f362e6c8f19665ad418b3ddaa2fe2924d455674760721d0edVirustotal results 25.86% 
2020-07-17LML_070120_HPF_071720.docdoc 1f9da8d9c9ed9e611f84ed4fddb6280272435ce3d7cc0d132c9cd031c89c7be8Virustotal results 24.59% 
2020-07-17KZ9023127125OL.docdoc bf72069bdf671e14c551ae12b4b287ab44dc12df4096be4506cb9602154c5421Virustotal results 24.59% Heodo
2020-07-17G_24366019.docdoc 884d7bd6124c83a1aa5b4a6f35d0dc396dc53046e7cb4dfa623858cfbc83e1feVirustotal results 24.19% 
2020-07-1749724347.docdoc 12f6f01ef71b7de2db435f021a609cd232909faa600650741a8c4ff0d73a52c9n/a Heodo
2020-07-17O_TC0001095519KA.docdoc 258a9a04dab843e1b9e2ebe98d6e2ac69b9e6b1b67c1f0a7f3720ec322b9bda4n/a