URLhaus Database

You are currently viewing the URLhaus database entry for https://pwk.ft.uns.ac.id/wp-content/gallery/Document/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:434467
URL: https://pwk.ft.uns.ac.id/wp-content/gallery/Document/
URL Status:Offline
Host: pwk.ft.uns.ac.id
Date added:2020-08-17 08:43:21 UTC
Last online:2020-08-29 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 08:44:02 UTC to abuse{at}uns[dot]ac[dot]id)
Takedown time:11 days, 23 hours, 5 minutes Bad (down since 2020-08-29 07:49:27 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-19ELY_080120_JQQ_081920.docdoc 9be9c52a2ed346fcab910d6e22a065f7f1ddbb851e589a1c18e4b0577afe0e5bVirustotal results 45.76%Heodo
2020-08-19FILE_78296818.docdoc 4e187ac73b149abc0e10adc49388c872b2bf2dc68d4a7285586ce13e3b6bf427Virustotal results 47.54%Heodo
2020-08-19BAL_NO9279410482TE.docdoc 6ad811a3072f008affd2450407d0a37d9d45166d41c8fedc1d1e0ae2b61c77e9Virustotal results 46.67%Heodo
2020-08-19BAL_PO_08192020EX.docdoc 4fafaff4c35c7050da039eba46004fb4df1789b0f4cb103ecaf05d4fcf0834beVirustotal results 47.46%Heodo
2020-08-19REP_UEJ_080120_MXD_081920.docdoc ade0c61c5a90ff1c6aa1b54b0f5d9e29382b98feb206f3b170724aa6e34cb389Virustotal results 47.37%Heodo
2020-08-19FILE_PO_08192020EX.docdoc 0e79daf2a9f00edeae140c5e513dfe381e03f54ae3fec2dae7b2bd9f005b4f6fVirustotal results 46.67%Heodo
2020-08-19VC3349602499VT.docdoc dd63bc5cb0064bce22d30aa4bfdaf14fe0c2c4aee56b8604121557881bb831e5Virustotal results 45.76%Heodo
2020-08-19BAL_HP3817669704TU.docdoc 8ee0b1369011b26260beb1a9a2f128ed8d20b50f8637a820e0906bcbf7503f28Virustotal results 46.67%Heodo
2020-08-19REP_X2FNGPGLLYZV0G.docdoc 8cbff41f116777e211aaaf9dc201ab774ffd4c84ed9de0869f3b0f8edf3bd409Virustotal results 46.67%Heodo
2020-08-18REP_74204678.docdoc 560849f5b4cfc8e64f8d0ccabfbba2f9691f80103349650e12ebca53186d1dbcVirustotal results 45.76%Heodo
2020-08-18IAU0RN9JH8.docdoc 6c9d3d58e28a1e8bbf0d1c77a0bbb7f6c71a55ac204041c9f1f8e372b19df91eVirustotal results 45.76%Heodo
2020-08-1888025723.docdoc a7020f1523e0ca1bd34c500e4ced395bc0cb35697aa77932c1b0a8fbd995b341Virustotal results 40.98%Heodo
2020-08-18Q_XSW_080120_OVJ_081920.docdoc 854a0f9c565bc4cf2d20b21f33a107c91d3fca02047b2be2ba26c6271e10c139Virustotal results 40.00%Heodo
2020-08-18UBAW_89639730.docdoc 6da50cf09dccd404a87f6b692d5b3afecc03f6fdf1fa9e127257d26a137a92d2Virustotal results 38.98%Heodo
2020-08-18REP_81802749.docdoc 74378e529d305909ce9e9deea19aabe53f9a3f8ce0f9052c283f3a74982c8bf9Virustotal results 40.98%Heodo
2020-08-18W_PO_08182020EX.docdoc 58f54242a517952baf0ab77f9eba354e7f6299fc66a0a2ef3eddfbc9def3870aVirustotal results 40.00%Heodo
2020-08-18INV_62006880.docdoc 455f2ce2d5b18bbce7c1ff8a8eec0e143f98fe0c1e0a4d289aee56f5f8e33e4bn/aHeodo
2020-08-18INV_VJO_080120_BJF_081820.docdoc 2e671edf471827a78f9327e215f9bcf6dda0f639706319263dfe9cb37d0241a2Virustotal results 38.98%Heodo
2020-08-18MNY_080120_OPS_081820.docdoc fef24e0c24fefb1c867b231cecb3ca9fcfd7322a0df4f1d47be8c48000fb0ba5Virustotal results 40.68%Heodo
2020-08-18N30ER3IB8IU3.docdoc bdb11339f1bd60995f4f996322b18b502f9fd561ba97b25fbb7e290f03c44e28Virustotal results 35.00%Heodo
2020-08-18REP_87393638.docdoc 59a09a4e193789a268b7d79fc4e5a2f5be16c87cbb04c5fc10e2ec27aaa641d5Virustotal results 30.00%Heodo
2020-08-18G_PO_08182020EX.docdoc f769750910439a4e1091fe3e718a7cf0b9e2fc7441d1ea7fa6bb6c9340367283Virustotal results 28.33%Heodo
2020-08-18ABY_PO_08182020EX.docdoc 1e7b2f22e62fd0e33598ececeb566bad70292bda2ebcf7849e0c05b1088dc58aVirustotal results 20.34%Heodo
2020-08-18BAL_PO_08182020EX.docdoc 09904d529c1234df3f3e0b318aaf40b31cd8c353cc884a2310d328af4675fd09Virustotal results 21.67%Heodo
2020-08-18REP_PO_08182020EX.docdoc 5c8ecccdd3152ef12c7449cc2637ddcf40c2e53920f92ccd91885695605d118eVirustotal results 21.67%Heodo
2020-08-18FILE_25WY7BHZ29.docdoc 248558f5b8547279882c012169b965765eab106c30275d475e3de2ba02e6c7e6Virustotal results 22.03%Heodo
2020-08-18W_15743037.docdoc 188f12c1b555d0e6cd96ed8fa6f5ecf13108f9f4d163e6c3d1ae189e2b13e8d6Virustotal results 21.67%Heodo
2020-08-18ATEB_EPX_080120_DHQ_081820.docdoc c0e32bb3934d16ab19f764e6471ad6f135e2bee38ef98451fe976f56613e0bebVirustotal results 22.03%Heodo
2020-08-18BF0144816078CE.docdoc 456510d5a40582d308f81577cbf8ae64f2b616539e4bae452df2916721b027d8Virustotal results 20.69%Heodo
2020-08-18PO_08182020EX.docdoc 42a17008576c5465f5efff9d1a844f425b1391aa877e0d02b91ed7e09e978f57Virustotal results 20.00%Heodo
2020-08-18NMY_080120_TBE_081820.docdoc 44974173c8c152eacecf1666341f64fa98a2f1aa1bf8a557fd492be4b14a448cVirustotal results 21.67%Heodo
2020-08-18DOC_PA9101105065BF.docdoc 94e51fa641e5b3a8e7516bab8ef519893aacd7d2328919f853585ac02e2a9899Virustotal results 21.67%Heodo
2020-08-18PO_08182020EX.docdoc 8a2f685f91dd2181e76fb8b1ff4ffc7e1fb4614e320cd035c38ba5b4f20689a8Virustotal results 21.67%Heodo
2020-08-18BAL_DYGAOHY4F75U.docdoc 6e95c43a8b2b08d6d37fdb596544522ec747317954db11749b8585aa8bf5594bn/aHeodo
2020-08-186725550507674640546.docdoc d43ab83c9405de6cabd5db3463beaaeba958d73c6d6566f43fea69b522267ae4n/aHeodo
2020-08-18REP_PTE_080120_WRJ_081820.docdoc ab6c9909e16fdf41b17881417d7ae3e0caa1a66bff25a443a4e5ce8b338ddb0dn/aHeodo
2020-08-18RJL_080120_DXZ_081820.docdoc 7976a8188a5d793cdbb85eae76d2bf5dcd550789634815969fd953edefd06been/aHeodo
2020-08-18M_PO_08182020EX.docdoc 2878d51a069173a45aaee4fccba253fa62445e225a814e55c56a0a8e57d00815Virustotal results 45.00%Heodo
2020-08-1846203123.docdoc 7f1c65238bdfc720f45f489cc20e78173bcc8d8bacad5a4299fcb08f010a0a14Virustotal results 48.28%Heodo
2020-08-18V_HLO18OL7Y.docdoc a821076f4e8ae03d113a981ac01066b1025195206bace6b13c4a12e00b868bdfVirustotal results 45.00%Heodo
2020-08-18DOC_YXS_080120_VRN_081820.docdoc 0b3be7a3505e7e03f2cf5ebb03d0081fec7fea29f6e21515280dd5362cd50b4aVirustotal results 45.00%Heodo
2020-08-1810649805.docdoc 41f1e702b57bab0ebc27e61570867b5417e34c5aa1b9046382207f7f62fd15adn/a
2020-08-18FILE_DU8320469682KV.docdoc cfaa4978055fc55bd548e88bc67bb4119515406afc1303c47cb314b4cdbf7a5dVirustotal results 46.55%Heodo
2020-08-1899716439.docdoc 749a587028fb1f9362ba6a0fc4a256b6c471166c8fc3f5e52a2c22adff147884Virustotal results 45.00%Heodo
2020-08-18DOC_PO_08182020EX.docdoc b4391434a4bd48c6f939fb55a7ed439917514aa935d56b3bf82123bcf44d1d54n/aHeodo
2020-08-18FILE_UI8176984407TY.docdoc d2b8765df72f5975d4984c9186d5373ea19685fa981b09438eb6600188ce4477Virustotal results 45.00%Heodo
2020-08-18DOC_TFT_080120_VFU_081820.docdoc eb46b89d7e58183df45838e5a44989e33a129063e6b410d5e1a0fb8eb9e5cfban/a
2020-08-18INV_PFYQ16J6LQZBHOC.docdoc db593f135aa15cb1d2279c26e034744e979223392fe2ecd2d5e204648bd0ca6dn/aHeodo
2020-08-1862691020.docdoc f5938c3d6599dd45b99fc2c626e01c9a6d9718e4170519a9802ff99a6b9f3373Virustotal results 40.68%Heodo
2020-08-18PO_08182020EX.docdoc c5a5417ac06397f164bc4984deb3c87c1d4290465e649f541f74aa3e19854fcbVirustotal results 41.67%
2020-08-18BAL_AUI_080120_EWY_081820.docdoc d455be8bab47cee43ba5e71e1ecb482cddbc0c320d39874a081d23d5d27d7fa8Virustotal results 42.62%Heodo
2020-08-18FILE_TD3583696750RM.docdoc eec53e193ef4301a8a7e0c901b5525cc447136daa569cb0a4e589d75bed15be9n/a
2020-08-18DOC_PO_08182020EX.docdoc 2a06b2a913102a6c410bfbcb01e2d57a80f0d62a3c32d9a1cae4a1611cc300bdn/aHeodo
2020-08-18NQLROPE1JH.docdoc 75323534a680ebae38b785c4c4eaac9dadc66c0757c61eb12c8dfab01e917d3eVirustotal results 42.62%Heodo
2020-08-18OE0361359774UW.docdoc 5c8b923944c5816b259806159d34a3d379b2c8f347ef3b69cbc5b18f60637d93Virustotal results 41.67%Heodo
2020-08-18IM9904603977ER.docdoc a9f2dfb969ec4a5c09edfdcf49a041eed112c8ef64c36610131b1ef17118292an/aHeodo
2020-08-17FILE_34363114151.docdoc dff1df7c560a8a24caa14cf006d941b7c3d80648923fc99f691cf668706dd683Virustotal results 41.67% Heodo
2020-08-1729027748.docdoc 48ac357a569de9399290b5cce4f93f578284a5d9d3084db298f250e5fd364feaVirustotal results 42.37%Heodo
2020-08-17DOC_PO_08182020EX.docdoc 000a79f815b3fec41875c4a836751712c6447fad1a61998108810463c083a669Virustotal results 41.67%Heodo
2020-08-17IO_19IUQU6SES3A0E.docdoc 6eb52f464c8845b595169880341a670e6dfc2fb1c5ba4e59f01122d6e15c9536Virustotal results 40.68%Heodo
2020-08-17X_4167387645.docdoc b46dc61d653d60ad6c496660e2145b3fd27354a3c6e1ff594d17394f2cd887f2Virustotal results 40.98% Heodo
2020-08-17FILE_PO_08182020EX.docdoc c70fe59a67a2136f0a15f346ebb447c499d6d4a8642552cc3b0f8573b1a3ef2an/aHeodo
2020-08-17TVS_487037210750.docdoc 3ee4af869f74285c3506566a4df827b46129038c38f621349ae70b937ac04b20n/aHeodo
2020-08-17PO_08172020EX.docdoc 9c19784b1ba93b71935f0e3cf46fe35dd570c0a7ce4a79791351eef6946269fan/aHeodo
2020-08-17REP_PO_08172020EX.docdoc 8c5b8907514829cd3c77fd2dc48359d7a74533ae80fc0451d6ac51a998894584n/aHeodo
2020-08-1705771591.docdoc 1cd70b85d84995c98f97e756a60de5967745ffb88d33877402208761aab5ea86n/aHeodo
2020-08-17BAL_3075085058589.docdoc 98b1f2eff24595a16d48e214e8f412c7e6dca8a44e20f4bc3aee00441439eab8n/aHeodo
2020-08-17P_PO_08172020EX.docdoc 5416c3000e8b3831a1dd3d838f30ceed8c0c7f7730fa8a0bfc5736885655a090Virustotal results 30.00% Heodo
2020-08-17REP_BXO_080120_XIL_081720.docdoc b00bc4b91da3c54d72c5b3346efd850a8bb54e00ab57489630c8d5e93bc31604n/aHeodo
2020-08-17DOC_PO_08172020EX.docdoc 8c3c3fea1dbe95885292e7e451eb78885b32d903b97fa622c32167f09a7f6588n/aHeodo
2020-08-17FILE_0TE9ZGOYM.docdoc ea5c34f5476af3a195a69280a548a233ef0657ade8908a1df661ee3c9abbb802n/aHeodo
2020-08-17BAL_73471820076015152.docdoc 70f3628c3181a33d9a229405c5acda119382faebdec8d14aef17aee00c73f76cn/aHeodo
2020-08-17K_TB8307300578SW.docdoc 5d4046aedad795f57476452a5ecde53fa5d12cbc005ba7c8cf91bd438b25d250Virustotal results 25.42%Heodo
2020-08-17REP_PO_08172020EX.docdoc 6d8658726b4fb0e9ef7e2c4da945df3eb19d81048f5b0d4445be37f1e6cc8ad2n/aHeodo
2020-08-17INV_PO_08172020EX.docdoc 5ab6a65545b12347703be18b93a92d8fc9c5a4598080bfcbb5b2bddd593507daVirustotal results 27.87%Heodo
2020-08-17INV_62401926898.docdoc 60ce5a43b92959c9ae1640d4528ebdc2b6bc3abe8a3e4f77ba69910eab384b08Virustotal results 23.33%Heodo
2020-08-17FILE_XAPPH7QAB.docdoc 29d60bc7e4e20f26c55afa5ee7d6139f9cab9cece5c0eb2ee3676777343403b2Virustotal results 23.33%Heodo
2020-08-17REP_RTCJ2KNZU9SI0C3.docdoc f160b7196b2ae74264c75c03364a119a8e59a322a5e56592bb5037130a236252Virustotal results 23.33%Heodo
2020-08-17JHPL_900821002748176326688216.docdoc 84ccb7dd64a2a08a9be41050698b514edd4b7b2360f42a6342f4960977bccdc5n/aHeodo
2020-08-17PO_08172020EX.docdoc b7294a864de05ae57bbfb41d555203d9e0e7073587f2a8c7a062bfb5644bc2e7n/aHeodo
2020-08-17L3KQKF4GA.docdoc 9929898e10dcd99ea93c2f09a547e6a8e63e9c0ac53f0e066e799b0acd1bde65n/aHeodo
2020-08-17J_RND_080120_VUV_081720.docdoc 85063dea74121863a9ec22bae6b095765373c4f3bb6fb8fdc7d4c7a97aae6344Virustotal results 21.67%Heodo
2020-08-17OI3236961460CX.docdoc 5703c758f1686aafaa3e8b0dc664b5956216319aa48e2188e759ffdcbf68aa02n/aHeodo
2020-08-17REP_ANQ_080120_ULD_081720.docdoc da9dc42c7c6633c150e79f8c1cdbad078bd29454742d4b23a921cf5e30442a09Virustotal results 22.03%Heodo
2020-08-17DOC_PO_08172020EX.docdoc 08c731bebb1d85d885be1410af6889e2eb74e0336043a575380f9f098b5c73fdVirustotal results 23.73%Heodo
2020-08-17FILE_82717068551358.docdoc ea56327d8b3a8b42c4b38c67f08c64f2dbc1e93c4eeec498d92936605b2416daVirustotal results 22.41%Heodo
2020-08-17BAL_96566763.docdoc 98b945d93a035bdab99b81e33963dd916377a238e5127137af130547bb458500Virustotal results 20.34%Heodo
2020-08-17VTF_HERXC0AVRPTF.docdoc 53d67af3f62ff73291250c291ed5413a0ea1cf2488bffbf02a5487e3b5de729dVirustotal results 20.69%Heodo
2020-08-17REP_OC4455153049AG.docdoc 4c92dd4427eeab992c68a28f70dd48f4976aed5fb0212c9c84151d09fb3dec15Virustotal results 22.22%Heodo
2020-08-17BAL_VY7275211359AO.docdoc 290a88fd37c8a07eb104a0bffb5fb13c1b784057a87bd7f9f96ca35fdb1836een/a Heodo
2020-08-17INV_94353771.docdoc 8d38a6081eae6f7f5138a9186763cbde03a86957d7d6ae4fbd60076d38acd5d7Virustotal results 20.34%Heodo
2020-08-17DOC_33HNKHJ99TH0E.docdoc 0cdecb6053ad442fb90c7079c9a9c448230a460e84f64b1e5a72c9f7b2387a9cVirustotal results 20.00%Heodo
2020-08-17JKAU_56010362.docdoc 4363fc523995de2f965e7508de32dfa577fb373b56ff499d9fd33f05a4f5c909Virustotal results 21.31%Heodo
2020-08-17FILE_URAZPGT9US.docdoc ab8b69f9e755225c4f63ef1daa4a0a2b927c79578125fb8339d2637683cc4565n/aHeodo