URLhaus Database

You are currently viewing the URLhaus database entry for https://pwk.ft.uns.ac.id/wp-content/gallery/ozCZjbfQc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:429684
URL: https://pwk.ft.uns.ac.id/wp-content/gallery/ozCZjbfQc/
URL Status:Offline
Host: pwk.ft.uns.ac.id
Date added:2020-08-11 20:46:09 UTC
Last online:2020-08-18 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 20:48:02 UTC to abuse{at}uns[dot]ac[dot]id)
Takedown time:6 days, 15 hours, 7 minutes Bad (down since 2020-08-18 11:55:46 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13Invoice900980852.docdoc 92c1df73df4a4b0d12804bab4c44fee2727613545bacc7eafef757bc0fe492efVirustotal results 36.07%Heodo
2020-08-13Inv-FOP431-97736923.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo
2020-08-13Invoice-YS11-81002009.docdoc 294443b3b8e68154544b8f501310b598b2925bc108c42f5a30bccfa9598b6782Virustotal results 35.00%Heodo
2020-08-13Invoice_0_850013.docdoc bb480394e0201866ae43a5b60c1ec371e3dd37a01e922a8dd5ff68d8cb325f3eVirustotal results 40.00%Heodo
2020-08-13invoiceWAA61787071.docdoc d50993fa8e4d9ec3510e0980dd77bb417ce8cd1455e5b3b789b4bf66e4f7b29fVirustotal results 35.59%Heodo
2020-08-13invoice_DGH1_3289004.docdoc d9307573e21fb325573fe07acbd225175cb4268237930af8fcc685c62219e82bVirustotal results 35.19%Heodo
2020-08-13invoice-QQA99-395192.docdoc b133317c26c5f7804469fdb2d3cfe7bff2c09e8009f94b7e2e89120b95b6a996Virustotal results 32.20%Heodo
2020-08-13Inv_9077_664981774.docdoc 55260af4daec42317640803be79c9cb42f198db5c6194b7346c7c95c610f70f7Virustotal results 32.79%Heodo
2020-08-13Invoice-LYUL4-87344076.docdoc 196a89c54cda70af31877740ead0a738ead3533d3ef89e87e31b193044fb42f7Virustotal results 31.67%Heodo
2020-08-13Invoice-96-8234418.docdoc fca1b080bd37f31310426e23e3d06dff66c14e54fdc049af8896fd4970ea29c5Virustotal results 31.67%Heodo
2020-08-13INVOICE RFVQ82 577371.docdoc aa47a14fea86aba6e480c82c0b3f6ca81999d5f167f97577bba31919a701ecaaVirustotal results 28.33%Heodo
2020-08-13Invoice-6106-330756785.docdoc 43911a79aeb74fd3a33a725d3ccbb05e5e86c849166f578f3404711fa0bf5b42Virustotal results 28.33%Heodo
2020-08-13Invoice_J4334_437908478.docdoc f392265c903b4cad60edb998054c18fcb2cfdfe7e9e068ad6119545be62062e6Virustotal results 28.33%Heodo
2020-08-13INVOICE BFK942 391359.docdoc 5953ef2a295be371cee8f085bb2cd4dfd74a9f06108e5f5fdccdc568ca448e55Virustotal results 26.67%Heodo
2020-08-13INVOICEBK05307349922.docdoc dce7a722033797f2aa2ad0124f254c5b8774adde48fdb0be22e150e8b368588fVirustotal results 26.67%Heodo
2020-08-13InvP227740407980.docdoc eeb469414b6509fdd0d204f306b29d55021e2de94608991794b5f59c2add1e07Virustotal results 26.67%Heodo
2020-08-13INVOICE 091 492458.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13invoice97144095.docdoc 267245def36dc107de0213044013ec67b837c68ed109267f13728319263b5664Virustotal results 25.00%Heodo
2020-08-13Inv-XMXE93-8069525.docdoc 335ffaa3c9914aabf84fec4cf13a891465b4c0c3700777b1fa2877df708b4c7eVirustotal results 25.00%Heodo
2020-08-13invoiceTXIW669562786.docdoc 776396c0aa0fac10eb849a713ca7927a00cd7aa654be032e870fa7cbe3076078Virustotal results 26.67%Heodo
2020-08-13invoice_IQM79_4835300.docdoc ddc851852bb37a7d616d90e542bc5fcea9fde09471ec5a5908130a9c99509718Virustotal results 25.42%Heodo
2020-08-13invoice NXM676 2782047.docdoc 8d3707b8799040b4d0ae3452f01c096d3658cb6636834e49f602c9f745ccd6edVirustotal results 26.92%Heodo
2020-08-13Inv KN96 126044.docdoc d72f36fa492b648c515c4246b7072da043def4709a7e99d87d3a2aa447fb6f2bVirustotal results 26.67%Heodo
2020-08-13InvoiceRJGC95349736165.docdoc ef4bd4002ad40e14d4be0e1b65b772318b986c643bf1704805b738350cdf8747Virustotal results 25.00%Heodo
2020-08-13Inv-LLS538-49795510.docdoc 0cab070d00fe082504fdc13ea0398dee0f4dd71f4d3b296c8de086abde57a87dVirustotal results 25.00%Heodo
2020-08-13INVOICE-IBV76-037551.docdoc 5478e4974b64a8471ba220eb079a7dec82a9ceba893c8d56e165235a8df47f25Virustotal results 25.42%Heodo
2020-08-13InvoiceKOW839493462676.docdoc e1b7a11726c385bcad71dfe791b165802cc625ceaf2f1550a5a10f5f222ea90dVirustotal results 51.67%Heodo
2020-08-13InvARKB529968032.docdoc 10531f315432369a9c0706bc00ac1405445316044a9ec07b03de6606a6a9f9fbVirustotal results 55.00%Heodo
2020-08-13Invoice 5 06833093.docdoc cd0aaf460944efd580dcc39bc1dd0460f88f2c3c17e303694ffa1eae5020eab2Virustotal results 53.33%Heodo
2020-08-13INVOICEX4549027157.docdoc fddf4cab73e6e2ff5c40c7fee09d52d5eb903e6bd17ad77aa292c6ded707f394Virustotal results 55.00%Heodo
2020-08-13INVOICE 16 9650867.docdoc bd379f0e0dcc9c8c75d70a99df9f95dc56d70fd92cbf446a21dcb7b22ded59f9Virustotal results 53.33%Heodo
2020-08-13Inv-N6793-046292.docdoc 97e52709f1f9169fb2a3d0cfc7852f811d067999ed1bdc700c6b66bc7dc23765Virustotal results 52.54%Heodo
2020-08-13INVOICE-P277-47252370.docdoc ee1f5c8ab512406824b28cd257477afae1af144286ddd585d142664b10b2ec77Virustotal results 50.85%Heodo
2020-08-12Inv 205 647486847.docdoc b858572fbe695215c2aa6ade7ada24c980392ad2f5c9e3564d4e6446ef424383n/aHeodo
2020-08-12Inv-BMDG5078-964701316.docdoc 9b5d7e0c6ce7b00011f1c9fa7157bded3963629b18e4b79469bb62c84e80a312Virustotal results 51.67%Heodo
2020-08-12Invoice870768794.docdoc fb474008a44d536948b71f933bfc0289e7779352c43c4d62f0b3dff8f0ae478dVirustotal results 49.15%Heodo
2020-08-12invoice_A08_11245759.docdoc 5d53ea1eda34e3d47f8a388a248005f39d237681eea6f3155e21220b373429f9Virustotal results 50.00%Heodo
2020-08-12invoice-W6-429850300.docdoc 24b41c6091602c0f9df9cc64905ce9dac977a04f700ae0607de467c101a093dcVirustotal results 49.15%Heodo
2020-08-12invoice-UW67-4380099.docdoc 0c7d085dc88b57e56819a0a9319e1aa089ad9851a0ea21137aab6309395ed039Virustotal results 49.15%Heodo
2020-08-12invoice PW71 16586970.docdoc ff563f0125c05e1a24c111ca5306fc7394a4a705167d272704bb0c2067a96b4fn/aHeodo
2020-08-12INVOICE EYE2 796140.docdoc d1ce5170f24fdb09f187ca0e3e0f6e689fa2c73fc6953ff18ecc123bb8eed49cVirustotal results 50.00%Heodo
2020-08-12invoice-Q3-223920.docdoc bbf084bcd83d08a6693798f851e3af34cc7c303afb235c8c25fe237ec00315cbVirustotal results 48.33%Heodo
2020-08-12Inv EZ2719 66929309.docdoc 7cb03d988c912a877410fe03d55bdc4a5379a95e91ff6497875a139105f2cfdan/aHeodo
2020-08-12InvCG44023227.docdoc 1bf7159812124e19faf31cbed4b558aa9fa78b5f1a0562cad0dac81865d03094Virustotal results 43.10%Heodo
2020-08-12InvoiceO753949234793.docdoc 7ddd9bdcbe8ca80a8ffa5bdbf8ad1e388522433cf9925d2686ce9e3295c9bba5Virustotal results 41.67%Heodo
2020-08-12INVOICE-EPB398-4729819.docdoc 73dbd3589e2d0ca8f9f663da4f527cb110e5e29ce81026ff99cb0a24048fabc5n/aHeodo
2020-08-12Invoice EEQU2 59751050.docdoc 3f5261f4d28c39abec2986a50be9436202150bee5188fda8a1d52e186a7423caVirustotal results 32.79%Heodo
2020-08-12Inv_WE95_1525783.docdoc 501db74c182ca6ac3329ff9f536d58b82eee74b221ee3b0997a74a32110e6804Virustotal results 31.67%Heodo
2020-08-12invoice-ASPD8029-4434555.docdoc 5acefebbcc9a92b556c6f81e212c7db449fe2692e8877039dd7b6a920f8e5172Virustotal results 31.67%Heodo
2020-08-12InvoiceRV3076537346.docdoc 6f17ffc6e968596bcc7554237206467a43c24b88c81433a41add7c3c3b4d6803Virustotal results 30.51%Heodo
2020-08-12invoice_WSU9508_068402857.docdoc f3390052891e7cf3c580921e2522e4a8fe5aec87e6c819a16e738ab283ff586bVirustotal results 28.81%Heodo
2020-08-12Invoice-4306-342591.docdoc 58e99da90bc92faeff54c3c395483bb8140c2e586cb53ecc349fc87ee90cac23n/aHeodo
2020-08-12InvUF82431089.docdoc 6610beb62b2916d0194d87458804ec7ae2e18e6efd800866b9d65db7a6e6b361Virustotal results 30.00%Heodo
2020-08-12invoice CVRJ126 478436724.docdoc 18b61563a6f5f949870cf35801caa3b17dd86bde7d60f0446e77f85f974969a5Virustotal results 30.00%Heodo
2020-08-12INVOICE_545_462861934.docdoc f4504478495232cc27145aa9ec4d5844527a4d1cbf7f0e866aa5d989db3b2f38Virustotal results 28.81%Heodo
2020-08-12invoice_WCXO63_461424308.docdoc a9bae6fbce3ef6ebff32ad675adac80338a738edb330fdfd1e6dd09f7e35adf0Virustotal results 27.12%Heodo
2020-08-12Invoice-0699-6503800.docdoc 3539ddd1054e2a1d5373b18b892b3590663ae620ff5b2648fbef023018964b91Virustotal results 28.07%Heodo
2020-08-12INVOICE-VC7-101172.docdoc aa93187017f9056d5cdc98302b5c41c322d54bdf3ce694c30d598140c4ab8ed6Virustotal results 29.31%Heodo
2020-08-12INVOICE_E159_976403110.docdoc 0c8168de8059f07bdf21871e0043fb09e40f7788a4c6028ea4e69db047a17563Virustotal results 28.81%Heodo
2020-08-12Inv992508182986.docdoc 32750365d68890d9071db244c4b3534a22dc90130e47ca9dfb21d81277678528Virustotal results 28.33%Heodo
2020-08-12Invoice-FU41-688580.docdoc 57b46608e379e736e4b390fa8ed0d2fb63206d41d90f6342d0089272dfe846c0Virustotal results 26.67%Heodo
2020-08-12Invoice_234_6622598.docdoc 17a0a5dee2e6cfda254eb826cb317a6b65e7dca543f512967086340cd367582fVirustotal results 53.33%Heodo
2020-08-12Inv JSD91 6594555.docdoc 06599954bc7ceea181a10e35a518aa4d63d1a911ba58c350a271295bc4f36b6bVirustotal results 52.63%Heodo
2020-08-12invoice97424736607.docdoc 14d93df0399c7d05a889be5ce346344db476d9f2cdd29e15050da09fdac9a621Virustotal results 54.24%Heodo
2020-08-12Inv-WIMZ612-708535540.docdoc c594321ad25c0a0e2cbd28d850bd14056f97b05472ef3fc60aeaf17e43cc95c0Virustotal results 51.67%Heodo
2020-08-12Invoice_XJCB52_5357651.docdoc a2b1d13fc111d276dc837aa2c6e155e9aa2944ec66d9133932b1f183cbecad32Virustotal results 52.46%Heodo
2020-08-12INVOICE KP038 3852783.docdoc a9dd0c1dc51e0d6deadf4a1cbd8ad39e41c1ef2ff8f222bb877a3590bbd5439en/aHeodo
2020-08-12Inv-KL4-080282233.docdoc 25e3c7f92b7b6c4d2a0bf01c2e0375ff93d1547ce1ac973169615136f290835dVirustotal results 49.15%Heodo
2020-08-12INVOICE DDKX737 602285.docdoc a3c27802860cdc8195b53a7a9a0308f67c631bec4c450329dc8421a206c65d08n/aHeodo
2020-08-12invoiceKORW0902539025.docdoc 644d19b28f8eb49ad2929b4c9685442b9bc7121929f330c6a7e0d117fdf2462fVirustotal results 53.33%Heodo
2020-08-12Inv_IDOK2_91409952.docdoc c57f8830d597b05f0dbf9031092be52ed1ce11f9f75f530bfd698f46f624901an/aHeodo
2020-08-12invoice RJF780 81699529.docdoc 252a44229413353042efc9846e4521a6c230832832d0d7efd0bb8b2677026afbVirustotal results 53.45%Heodo
2020-08-12INVOICE-X48-8031612.docdoc 6e9b1ad824b0bc35792a2ec92fabb0456af70c654e99e5f6d0067903f3c771ceVirustotal results 52.54%Heodo
2020-08-12INVOICE_TF9691_0130562.docdoc c9a3637927d6c089d282b7e5f89be7e0269eb7fd1e823cefe8844e25153f2cd2Virustotal results 51.72%Heodo
2020-08-11InvoiceP2769105606614.docdoc d1ada929c1d864f25ddf89d90029767d6c3b46a1bcd2f20cc967703c3d84bf5bVirustotal results 50.00%Heodo
2020-08-11INVOICE_4_654779.docdoc 96c6a329f0da6f8cb3e414f2bde2a0084912d8de0f46d04f69f613f061c0ccbcVirustotal results 50.85%Heodo
2020-08-11Inv-YHDF9037-74000990.docdoc cbf6ee8e987a618ed4bbc8efb689fab62d912808ce3d959106e7697637d3a217Virustotal results 50.82%Heodo
2020-08-11Invoice22879684.docdoc d73d3d4008607aa85da7da86d829db51efb32444af68f33a88a957c15e3dc7cbVirustotal results 50.85%Heodo
2020-08-11invoice-UP96-260753842.docdoc ba9a8497f8d62ce6e51e23f89f045998e57f187f7b8b9ff3168e5289d1758e80Virustotal results 50.00%Heodo
2020-08-11Inv_YACI39_9976863.docdoc cbb857ef4e6a3fd6c97835111cd57faa9a633931718e00486d9d6ab47dbc88c0Virustotal results 51.72%Heodo
2020-08-11Invoice SBZ443 371175.docdoc c45b228e93af0e566d2bd17f6a59f923a95517fb7eab92217995375cba5ed65cVirustotal results 49.15%Heodo
2020-08-11invoice 8787 214998278.docdoc 56c51ff53855b5a8e7ec16e3d2ef9aa462ca007d3dd0f6101d605ef95aa9b95en/aHeodo