URLhaus Database

You are currently viewing the URLhaus database entry for http://relawan.ayobergerak.id/wp-admin/browse/wnd1jmig/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429649
URL: http://relawan.ayobergerak.id/wp-admin/browse/wnd1jmig/
URL Status:Offline
Host: relawan.ayobergerak.id
Date added:2020-08-11 19:38:17 UTC
Last online:2020-08-14 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 19:40:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:2 days, 22 hours, 52 minutes Poor (down since 2020-08-14 18:32:22 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13INV_54846690.docdoc 15d1980af7ca71885dba9f7887ad95dd5b49442818013ec5293e6145f4cf5897Virustotal results 38.33%Heodo
2020-08-13DOC_62958936.docdoc f153d1cd2401db480ab764a78b8a1928c558755e34f37ecc8ece84b1f14e6964Virustotal results 36.67%Heodo
2020-08-13DU1743016661GF.docdoc 92b38ca67d00bffc28647167730cef8ea6123542c4123464f1c565e59186b871Virustotal results 38.33%Heodo
2020-08-13DOC_PO_08132020EX.docdoc b8c7112d2672445960d4ca69da612b07b761b5119015c0dc4e75064b85978ff0Virustotal results 36.67%Heodo
2020-08-13BAL_21930468.docdoc 75b72728b4e1d6de964271f76b8536a1a62dba26552d07436aef8f183e57b267Virustotal results 35.00%Heodo
2020-08-13O_PO_08132020EX.docdoc b8748876a802240520ada4d1493ffef171a7e7a99ad42481dbeffec99b436c50n/aHeodo
2020-08-13712719057878369737724555.docdoc ef2ed63b4cb2dacf8ffec61d107ac14b12893509ecb1af06fe554072dc948e49Virustotal results 36.21%Heodo
2020-08-13REP_7PFYTAC5182U.docdoc 575f0ce42ff719dc940eb34657a8e1cafd665fc78c67e7ccd1b4916edfb1f3ebVirustotal results 32.76%Heodo
2020-08-13DOC_PO_08132020EX.docdoc 791dcf8ffb01baa42ea2f49201207266fe2ec8cf8f2422e6a03ee35614b8b973Virustotal results 33.33%Heodo
2020-08-13A_VXC_080120_YZW_081320.docdoc 5f13b204f1454bc08133eb8207a0bbd3faa357d80495f1136ff43768e69914e5n/aHeodo
2020-08-13REP_W4Q99KAA8T9.docdoc f713b47d988fddb110d3df8c38b06a4d3300de655dceabd009d0fb9dfff003caVirustotal results 31.67%Heodo
2020-08-13BAL_78414968.docdoc 0532eadbdda96ceadb7250d379491c1bb64d6d40b96bc71d551268896fd4bdd6Virustotal results 28.33%Heodo
2020-08-13P_0715620991797463601217880.docdoc 0dc89060ce65e1a001a41ac93d27d19df8f9072ae7d04b8c0619316d56479df1Virustotal results 28.33%Heodo
2020-08-13REP_YA9930357020QO.docdoc 479e00f4a39c727821fabea3c681e051bf755f4eb4c10e62f23055ca7f4a9353Virustotal results 29.51%Heodo
2020-08-13INV_6H19A2FS.docdoc 42eaa4648e10a90dbd8f1548a0bb66005643512187069f22f26e02aa84028e02Virustotal results 26.67%Heodo
2020-08-13REP_960580832415.docdoc 6abe762dcf788992b9e1b94b3ade58a35557ef0d7548ccffeaece390e4dffd5dVirustotal results 27.87%Heodo
2020-08-13FILE_TDL_080120_DNV_081320.docdoc 44a4e9297c1d0191631e49532aa755b5a7928836c63b7a9f37deb77293cf2ec7Virustotal results 28.33%Heodo
2020-08-13BAL_04012863.docdoc 09bd7f442749dac84e11577aa507719969f7eac112f256a50e5b9e8d823a3b78Virustotal results 26.67%Heodo
2020-08-13DOC_XLJ_080120_JWU_081320.docdoc 79b609ddf074406de181d656544923255389ac44a068ddaeb858e6546d2787f4Virustotal results 27.87%Heodo
2020-08-13REP_85655985960175917599554.docdoc ee5d444d2829e2f9cfc90756f94149f85514b3766615fd081b722c6587c331d8Virustotal results 28.33%Heodo
2020-08-13E_92887621.docdoc 52426d2c2644ab78cd7fbe3a9e0d19acbd34903d9f62d42fe2e999b964e3eea7Virustotal results 29.31%Heodo
2020-08-13O_PO_08132020EX.docdoc 38e3c26b06d4851a715d80468183e2570986994966c56fcc81486f5474fad2a0Virustotal results 29.51%Heodo
2020-08-13DU9640321449NN.docdoc d366a539f2295b53ca4674d4807b866b78979fda3a5d80e006ce2aaf2e1c24c7Virustotal results 30.00%Heodo
2020-08-13880983553173078231091.docdoc f1194d491ba7c0f8f39b1c0b9d47c4324742b324adc2e4a3feba13f77e9b40feVirustotal results 27.87%Heodo
2020-08-13E_506154481559516054256521.docdoc 0652c184cccfd772644a2b72467b93f57ee93b1095894cc08ab3a9d9470fbac9Virustotal results 26.67%Heodo
2020-08-13T_S941NYJPQX.docdoc 30aceb60d6841a0f444bf36dbf53b021d32f7c1494c42f2c8600c6ea1b84909eVirustotal results 26.67%Heodo
2020-08-13EL1506459511AY.docdoc 1ac4188f22c717e76b493881ab12ef60e719cb86d2e5289f743b42b338cb5b96Virustotal results 27.12%Heodo
2020-08-13ER382GS.docdoc 9806f54f8d2769646e6a9caee3f1c15a1b47f781be6eef64c390d6e9ee867bd4Virustotal results 26.67%Heodo
2020-08-13RBG_080120_SUK_081320.docdoc a8bba76a96bc1cc1852b0b70a3e75776d9dda9cdd9a5978c25f38dd031cd1d4bVirustotal results 27.87%Heodo
2020-08-13INV_PU2016495008UR.docdoc 4debefe39873729300f071043efb6c999142cac16f823ba1cde0677994586ad6Virustotal results 27.87%Heodo
2020-08-13VCUD_803439359265968723831.docdoc f3288815441008b2291c6b17d597d58fe606f7475c4641bacba49ad56c1b1142Virustotal results 51.72%Heodo
2020-08-13391078747476699.docdoc 5d05496cf28924d44375333ce8c68c5919abc9cc35ba4e8c9a35d02ea07cf5c0n/aHeodo
2020-08-1335443171.docdoc 0938a3eb8d86fa634cbaa1f643bd2c6cafcdacba202e4683cf7245705bd11fb3Virustotal results 52.46%Heodo
2020-08-13B_VJC_080120_EQF_081320.docdoc c2bb5e128810c06abd15ad3ef0bc95622c20da154ca500892972305c94feabedn/aHeodo
2020-08-13DOC_46897002.docdoc 69341ac462d01e1c60463f96617271d866fe20babc67b0f19627a86d8cc91f1eVirustotal results 52.46%Heodo
2020-08-1363266800.docdoc 5ec2a412f6729dbbd84453b84c85ac56f93e865a1900eb514efedefedc56467fVirustotal results 50.82%Heodo
2020-08-12F_FTW_080120_GDH_081320.docdoc a9af06ae735677ec282b4a66f7bc85a343dc7c71491658673fed6150e05ef3c5Virustotal results 50.85%Heodo
2020-08-12DOC_ZVZ_080120_LRC_081320.docdoc e9bbc3d987e57144a6554ea1c30a527af2db5a40b2c12e9fa6b28a79ea2afb3aVirustotal results 49.15%Heodo
2020-08-12DOC_FE1686466945XZ.docdoc e96e3e7fdf34ca4a62dc44effc09b4043202d720c273b0ca7fe86bc3cbbdedbaVirustotal results 49.15%Heodo
2020-08-1263780007.docdoc 6d377770b986243d95806974b9d72c7f06f0cc80801d73a0860866cf4d95376en/aHeodo
2020-08-12JCPJ_PO_08122020EX.docdoc 5ec93d8ade8ce137e0a4718134228f587451d59aeaa2e27d24713ccc4866e8edn/aHeodo
2020-08-12XBFL_61503138.docdoc 44d9b68f5aefc2eef02bbb78ffdd24d10ff0097705b179cd623a8833dc64ff89n/aHeodo
2020-08-12REP_JZG_080120_EUE_081220.docdoc dceec18acd12a79bca8eae2f6ab24d6a662bcc19e5eeb3b28180884563adbfb3Virustotal results 48.33%Heodo
2020-08-12REP_JP7020765273HJ.docdoc 73d993b62b39229b0ab7fea80829a2adc7b229bb3cb9737b3f905c219aa9754fn/aHeodo
2020-08-12TC6856014010BZ.docdoc 4b94ba4ad2c65349c09e18ba049dd76f5b61a5491812b3ea60961945d1866446Virustotal results 48.33%Heodo
2020-08-12DOC_PO_08122020EX.docdoc 01817dd6570dc258829c88ceab491052f8376cc5071286d89c5ef07b621f96ddn/aHeodo
2020-08-12INV_DJ6948297019BE.docdoc cf71122cefc9da3a118c409800dcdf2f9a961238a3341bf9c373d69fe3923959Virustotal results 45.00%Heodo
2020-08-12INV_KPW_080120_ZQZ_081220.docdoc dd4525e6914fa0fd2f91bde41f2df30ef8857b9f08c19e0a106ec78098ab63c1n/aHeodo
2020-08-1253843014.docdoc c8a786dc04983454baecf5cf019aca018b4616625ced2d911f1ef8ae0f350b92Virustotal results 38.33%Heodo
2020-08-12099281781662560252365.docdoc 25263694227734da43c741c2d09b0f0aceb8cb2d9488378a2ea765c6c19be594n/aHeodo
2020-08-12FILE_8KKEOHL.docdoc 4020a8982e70b51b150cd40a837ea5dfceb35f0a6c9f9858b3fae5e00404ae62n/aHeodo
2020-08-12INV_DX7852255858CM.docdoc 632b6d0a99555d9a6319cc5bac55848d67014534e79c08823b2763fdda37679cVirustotal results 30.00%Heodo
2020-08-12D_OJ4DCSGAF8XP.docdoc 801b894083a28702abb0010b0d8c0fdbdb840c5ca75143f0b3651ffcd9f4733cn/aHeodo
2020-08-12YAEC_PO_08122020EX.docdoc fc15009f0b0f3066546203abf08c3f98e289f63a7791d5de4b94a666e6348483Virustotal results 26.67%Heodo
2020-08-12FILE_997688006.docdoc ae3f98c31cbf01b3809feeb57990ae8270686b4e716f2c8971f8408ca1676532Virustotal results 28.33%Heodo
2020-08-12G_XPG_080120_SBJ_081220.docdoc e9b11c739e5d0a771cb4efdc41e3d084460fa975e42a309294ab185eb2836728n/aHeodo
2020-08-12FILE_BB8629648614CB.docdoc 23be0779d59df875485b237b812b0b7d7c4d53c41dd57cc961cfa570bf09eef4n/aHeodo
2020-08-12QDA_6910953138910.docdoc 7eba5b17df94761ce65d93039d81735e0a1525f6b3244704a023df60dd04c17en/aHeodo
2020-08-12BAL_88454143.docdoc 265373b64df48b69c520486d767efa8c028ec29d4b7cfaba05e0459400ad0b2eVirustotal results 28.33%Heodo
2020-08-12DOC_PO_08122020EX.docdoc 16d2a267cba033c59963d01757e9800048ac1fbcf7cb53595dad21ee5bb027c6Virustotal results 27.12%Heodo
2020-08-12964115703.docdoc b00309dc3091f93c13fa36bd5d5fb4f1d080f70ab1eabe94d84eb8423dc3d5dbn/aHeodo
2020-08-12HW_FZMIGB26S7IN.docdoc a56d5701d53cd34f450eb0a957c6f5c0716a835bc9c9070e315e22f71889b72bn/aHeodo
2020-08-12E_CTF_080120_SZR_081220.docdoc 214f91b9b3ab2ea28b14536241901516f9141df4e12fd3b2ce52088fef0a3734n/aHeodo
2020-08-12BAL_79833135503479791.docdoc 121ffe67a99b7c122a7a9812f00830d7a5e9605d6e18ebd7d84e74f2c22a6670Virustotal results 28.33%Heodo
2020-08-12BAL_11358819168834762.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12X_BUI_080120_BKS_081220.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 54.24%Heodo
2020-08-12DOC_PO_08122020EX.docdoc c978e204a4343d19a9b1df57379618a391455fe0f0fd17e49fcb670670c4241cVirustotal results 52.54%Heodo
2020-08-12REP_644668033249841116291.docdoc 6f973501cc2dece992aa2f959f8e352e424e96f06abb300b4bed8bcf2ab4bf34Virustotal results 51.67%Heodo
2020-08-12H_PC9235156269SZ.docdoc 035f407beebfa56f402f686f6bf72e0217cf4d4b06106b1dcb3877e1167fdfd7n/aHeodo
2020-08-12T_UWM6DDTWMV1UAPUC.docdoc f9f228e552c3971983d4b5909776c052df083b9b41f65f764ceba0dc9d6219e7Virustotal results 52.54%Heodo
2020-08-12N_177693231.docdoc e95c19b3173d0c69d60efb950859b2ffd3020235efd6c47ffebddf950a0edf52n/aHeodo
2020-08-12BAL_34659636.docdoc 29a8f854081e5f20b6709851863472cd33a1863fbed4867153edf6fcc5e86dc8n/aHeodo
2020-08-12J_PHZ_080120_UMB_081220.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12XHX_080120_ZGS_081220.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 50.85%Heodo
2020-08-12LLOWSIXXY0.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12INV_PO_08122020EX.docdoc 5d38e73c8e461773d7bd09fd69760d3e0335e51cd3df39676a4c2af22343c43cVirustotal results 51.67%Heodo
2020-08-12BOC_080120_DDO_081220.docdoc e4d1deaefa7f905c5ce7490867ae09ff2d50fdf4162f102e276653c1c46eeab6n/aHeodo
2020-08-11308316947220568.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0Virustotal results 50.88%Heodo
2020-08-11BAL_79867238.docdoc 896db11ae3dd47bbbdaef6de2e44964142461c89f1fd377015b96affcc75cf60Virustotal results 50.85%Heodo
2020-08-11PO_08122020EX.docdoc 854be831ad01f15c5a5cc2f0f253d059b2a9faaac66db5b90fe51b3daa401c57Virustotal results 50.00%Heodo
2020-08-11DOC_30426410.docdoc 1aac25866333e7f77dc237137353a0a65ce189972d87658229eae96e3037bc68Virustotal results 51.72%Heodo
2020-08-11NKB_080120_DMR_081220.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-11INV_57538401.docdoc 6c5380e193b725ec3ea512a3146d8c0925c7c489800dad57d1b4b2f940751d22Virustotal results 52.54%Heodo
2020-08-11DOC_9253567550954346064.docdoc bb6e3d0f0394c94254fd90afa543277a215c6834d045f0c20aabd990cb68856dn/aHeodo
2020-08-11INV_TD9321123795SP.docdoc cbacf0f510ec4c1a5cacd10259c0e6075f65050b602e47fc67409aefcb6af60en/aHeodo
2020-08-11BAL_Q4UYG24UGI7BBBM.docdoc 597ed34e38d2b0c2313a9d95a421d70af23bd88d60c66de8e04f4127d425c6e3Virustotal results 50.00%Heodo
2020-08-11FILE_PO_08112020EX.docdoc 0dc77319f898db1037b996e421c171d0ddbd13166a8b589ab1da97b8bcfc99cdn/aHeodo