URLhaus Database

You are currently viewing the URLhaus database entry for https://helpdesk.zkbrasil.com/wp-admin/sites/j6151678661866sg2mzn80v1ik/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:519688
URL: https://helpdesk.zkbrasil.com/wp-admin/sites/j6151678661866sg2mzn80v1ik/
URL Status:Offline
Host: helpdesk.zkbrasil.com
Date added:2020-09-15 20:24:34 UTC
Last online:2020-09-22 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002939102 created on 2020-09-15 20:26:05 UTC)
Takedown time:6 days, 14 hours, 55 minutes Bad (down since 2020-09-22 11:21:50 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17F_FUC_090120_JUE_091720.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17REP_JE7631418279OB.docdoc 339016f3d85e1e43b24fe0c43e85be15801e5268905882fd77f11c3b70d3ded7Virustotal results 46.67%Heodo
2020-09-17FILE_92789904.docdoc 09da007d427399a8878436226980680d7b93a39388023f1a70151a5fbcf16694Virustotal results 44.07%Heodo
2020-09-17KHD_090120_VEB_091720.docdoc 30fae41cd15ad7341c7e91b9e003b523538a2b23f9afa8d601ec22cdb738526bVirustotal results 42.37%Heodo
2020-09-17K_PO_09172020EX.docdoc 094dfdbb4dbf3d12242afde258c46b99e7694521eca82eadb8791d0fea6d3f1fVirustotal results 36.67%Heodo
2020-09-17FILE_PH9856459103BN.docdoc 266182936e91bf387900a37c29c044541d8646676cd85790aa27214e6f210848n/aHeodo
2020-09-17FILE_JD5GA5GA45M0RQY.docdoc 35988e06d5138f4cf247c13bff0f038f20c4e49cb95828cc087e2e25cf2fc65bVirustotal results 35.59%Heodo
2020-09-17F_VJLK1CBM8.docdoc b793dfcf204566b8cfc24272c1cb1b773a0b718ac3fa0c97b6865e6ed934232aVirustotal results 35.59%Heodo
2020-09-1752545401.docdoc fabd2f3729de07ef5f673b245597b0d770876cb520d02fe15d4e9e62c7c7efdeVirustotal results 35.00%Heodo
2020-09-17BAL_03068686.docdoc 53dda9daf6fa01985279e8148de1c182bb9957da8b396b100bc5b6f1aa67f983Virustotal results 33.96%Heodo
2020-09-17REP_PO_09172020EX.docdoc 9ffdb4d90517b3838da2fe89fe09c33a7351ab0d5b14173bf9674c01c88c1a7aVirustotal results 31.58%Heodo
2020-09-17HC_PXJ_090120_HFM_091720.docdoc 22823faf02dacc31bab524d0ff73e36775b3f629be5a241f9334b6f094220b0eVirustotal results 32.20%Heodo
2020-09-17FILE_CJ4052946839RW.docdoc 1e7768f22ed163e40214a6e4cc98050525441233f7a49852621606f4eedf937aVirustotal results 32.20%Heodo
2020-09-17DOC_KH1722028350IH.docdoc 9858faec65e0756d0003cfd8bcf4e322ebb83c537243e039ae6e43b4893c514dVirustotal results 32.20%Heodo
2020-09-17OD6081514426OI.docdoc 594c81be9be769fefbfc0df02c470a9ef138fac68992f136b55532e736d0e93aVirustotal results 32.20%Heodo
2020-09-17BAL_DZDXXEPAAFK5.docdoc cd7eff89ab25979594648885ed165b0e8cb844bf354d2cd77afb285047573fa3Virustotal results 30.51%Heodo
2020-09-17REP_411942347477676.docdoc 53cb476741739fa01399bdb2984585d7b534db91b3501aeecd3a07f4d9f927adVirustotal results 31.03%Heodo
2020-09-17ZB0809808254LW.docdoc b929bd8a5f5519a7f5322a0bb13f74878a3782bbd4635c67427720c671c1c80cVirustotal results 36.21%Heodo
2020-09-17FILE_85928620388713118.docdoc 5331ea5ad449f1402737c6cfe0f9249a582b986ec49743db376e79c59e59ecbbVirustotal results 36.21%Heodo
2020-09-17DOC_PO_09172020EX.docdoc c3398d0143d68598160025f752138b7d986b35d277e83d05c6afeca8f7cced55Virustotal results 36.67%Heodo
2020-09-17FILE_ED0629814736OX.docdoc dd730a186b979cc083c88419bd457f1ad9a0c235f8ac5c7552b4b9d24fb9db2dVirustotal results 35.59%Heodo
2020-09-17M_67587116.docdoc fb1da662dff89db69ca276e03a883c96c5089932488e637ff60637aa73d876b6Virustotal results 36.67%Heodo
2020-09-17HPB_090120_ENJ_091720.docdoc e82e2f66ed32cd20f0d00ec484e270ab47084cb2fe8f88e1f00b9eb507e30168Virustotal results 33.90%Heodo
2020-09-1775107760349.docdoc 221dca340ea182b75f75dfeab42f56430776955fa1e0e314967aa2e5397efca0Virustotal results 30.00%Heodo
2020-09-17DOC_TXD_090120_PSO_091720.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17BAL_ZQD_090120_GKC_091720.docdoc 51d460db7db57fd212907c9aed23bba4891c43175f73978da2c791c60a412c43n/aHeodo
2020-09-17FR4914301772QB.docdoc c3474c39b7b924e42872d74244d0854423f1a19a0bc7bf53337994e269cad134Virustotal results 41.38%Heodo
2020-09-17WILOALACQPP.docdoc 9a88ee70e3fe3b917d0907d5061182917ad1a2fce66ea4cea78b8a9e870be220Virustotal results 38.98%Heodo
2020-09-17REP_666596824685923.docdoc 0c2e3b86f744311a9e0cfeff0f0a7c22284b08cde0cc7437289d9c416eaf4f69Virustotal results 38.98%Heodo
2020-09-17DOC_60174816.docdoc bd1df420c9abd76301cf6f1f9bc3fff3ae1c4e3601ac5beccb4f54777402c959Virustotal results 37.29%Heodo
2020-09-17BAL_66228400.docdoc 8bed6a4e027b38076c316eb5378c9d60d8fd9305217dba0e315e93974091667cVirustotal results 34.48%Heodo
2020-09-17DOC_X3ET1MFZ2L3.docdoc d9a35783bb245b622048384501eb1c30e098c547b4d3079e0c8d01e06336464cVirustotal results 36.21%Heodo
2020-09-17BAL_YQV_090120_FJQ_091720.docdoc 7787b958e5df87b1f31bc7382f7b5ff4b6bd764b807e381f75b8b2756623f393Virustotal results 38.60%Heodo
2020-09-17W_5VQR91199.docdoc be4589b5f647c7b97fdc399757c263c8fbe549218e25eea82148ad48f7fa5017Virustotal results 32.20%Heodo
2020-09-17REP_ASB_090120_CMD_091720.docdoc 524f6d1744c625d4ee827ab1ee1406f5aeef8c8799b8cf6474c2a53014a1dfadVirustotal results 32.20%Heodo
2020-09-1742714598.docdoc 3cf8f34ba881699b5932783c60c591a6b88b1523d772b1fa292425764b0aa3f8Virustotal results 28.81%Heodo
2020-09-17BAL_XCUTBJE.docdoc 76bf8d09a314a6ed1f11e8794d3027fcedcc3762677e37d8f7a304e4d370837cVirustotal results 27.59%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 528a62bc2a5bb42529a57abc0367b0a612ebe84f846906aa5a6737e759d6ae84Virustotal results 25.42%Heodo
2020-09-17OP6361716404VD.docdoc 4fc07945a17ff1e3422b0c95992fa2750006aeb21b1e886f0c2876d4ef69a14bVirustotal results 25.42%Heodo
2020-09-17REP_39378370.docdoc 2bc521550fad4a12b0bb8f34a8958db7b2f5b50e9f8579d30d814cee697ab694Virustotal results 25.42%Heodo
2020-09-17OZ1B51B.docdoc 89c63f940c17124065f94ee04b40a3cf2f048fb270b93b38fe1b1e937ab4abffVirustotal results 25.42%Heodo
2020-09-16INV_EAK_090120_NZL_091720.docdoc fcb293cfa69d4cbbc6afa71ad0a6456746863f91a54c2af300ca91c088f9c2f4Virustotal results 25.42%Heodo
2020-09-16FILE_WE0FSSR8W8WDLXIV.docdoc f656f7fc2ac175767aea79393803f493b18211403a390c2daf9c5dae720e26e3Virustotal results 25.42%Heodo
2020-09-16BAL_CNG_090120_ZWX_091720.docdoc d1df096853342d0030f71b7be3c608ee35fd1c81bce971a45e00b001a7d85d3bVirustotal results 29.31%Heodo
2020-09-16PO_09172020EX.docdoc ca5204766a181d5961896a0f4c506ed00718fad078c3a951d9343e52ad7f16d4Virustotal results 28.07%Heodo
2020-09-16REP_VKH_090120_LTK_091720.docdoc f8be1cb32fdc9776f4b599f4b99eb0315d3fccebbdc850498b96f6a65fe9e02cVirustotal results 27.12%Heodo
2020-09-16T_8361937526293725534353.docdoc ba46d0a65699ff5ec5670d31287ae8d04710450b5d267d9e4a2fdf0e94078194Virustotal results 25.42%Heodo
2020-09-16REP_59235583.docdoc 85ecc831aac84128028e315d8229777d99b91e6adba5a437b18e0f2a3c34e76eVirustotal results 25.42%Heodo
2020-09-1636496345.docdoc 98b7ab7a1185220c44567c8e6562c858a1aa47058efd0113421a2f4d7fa63231Virustotal results 25.42%Heodo
2020-09-16RFP_4358132450755994.docdoc 8f96a4ee289f6093a2f1afe8c584cba4a802c054ef22fde70d451254191872fdn/aHeodo
2020-09-16ATIO08W4K4.docdoc fc4eb4fb15308d6878f61e096934ed77f56f5f25b48dc2f5f30f0f02cf23a0ecVirustotal results 26.32%Heodo
2020-09-16BAL_OWVLBEUN3V007RVD.docdoc c0418ebecc711ff38d29eb29f832c78c462b0c3f55201223702aac43a15f8e1dVirustotal results 25.86%Heodo
2020-09-16E0H7B45PEP.docdoc 66bd50b4b2f0524aff6b9f64fcad5a686d04778fc56eae470249da88f7c40077Virustotal results 25.42%Heodo
2020-09-16FILE_PO_09162020EX.docdoc e7631c5a69f76fea0835835a14a8e885f2f3b0c0dec2d577278e70d3776eb0a5Virustotal results 25.86% Heodo
2020-09-16I_GVT_090120_FZC_091620.docdoc 7cad27b68df51d87f204a171a2f75a578b52e11f339a2bab138c6ada02b5a196Virustotal results 25.42%Heodo
2020-09-16FILE_06805310.docdoc 76d5ed01f61e0d0291564dee1109b86eacb8257ea71b8a80af5ec03f2764f819n/a Heodo
2020-09-16D_PO_09162020EX.docdoc 9ca5390e9af21757dc77575f56e9d0528c527843951ae719c3aedd2d8680ce7aVirustotal results 39.66% Heodo
2020-09-16V_92973304.docdoc 37af168ebcdcec12d2835ecc3a569839ed4660717927ae3ab0cc6a4b8a733012Virustotal results 38.98% Heodo
2020-09-16BAL_ZB8B1VR3JH.docdoc 6ffa316248fda88118682551c3b421820281e25578cdfb9a13e6457f174d7ba8Virustotal results 39.66% Heodo
2020-09-16BAL_PO_09162020EX.docdoc c94ba7222039884690f7049f607f0059bc3e2f965a11e75f937cfe271bfd96e9Virustotal results 38.98% Heodo
2020-09-16BAL_HS3924644132TC.docdoc 2ed87b6a729e1a7f3e6630bab57b2254b83a7cf47124bdee8823e08453bbc917Virustotal results 38.98% Heodo
2020-09-16A_95687057.docdoc 234a1653236e959e6329aec64c1de58538db56e66156f95517c05b62487d70ffVirustotal results 38.98% Heodo
2020-09-16LDT_MKO_090120_FHG_091620.docdoc 1c3544c3d12411b68e3260fa40e9dc0826c344c9a131928a04c7f8f517166645n/aHeodo
2020-09-16FYKI_PO_09162020EX.docdoc 07687b2d27dd0a53f82aaa9379b2bd9e62b3e60c83dc4cf2820fe254a93190d4Virustotal results 39.66%Heodo
2020-09-16BAL_PO_09162020EX.docdoc 6820256b4c1c4c5b50146126f828d2317ef12e023043a390611fe9b036cfe638n/aHeodo
2020-09-16SMQNLAISN.docdoc 953cc5a4a63e73641daca3f10028b2ec491780793ef97ba2e92b4a85b5245b82Virustotal results 33.90%Heodo
2020-09-16J_DDLBZVSNI.docdoc 54f3ff0a6c12843bdb1b448362320aac7421e7a1c1a210779dbb9c57ede15a75n/aHeodo
2020-09-16REP_KUPMJFRKBBWRZ6.docdoc 0c982fd7e6da85d772a410a46a6569667df380d6fd19d4c597ca1a0f30c140acVirustotal results 32.20%Heodo
2020-09-16PIGE_42061135.docdoc 895d3180e6cd0f21d0b56b5061eb6a16f029d010fc833dd6fc2b85ebbbd6b76bVirustotal results 32.73%Heodo
2020-09-16O_3JCJKZJ7.docdoc 39031955d734e86e67664eee812819b699a9bc4f869cfb4d28db7f4c99cbdceeVirustotal results 30.51%Heodo
2020-09-16PO_09162020EX.docdoc 11fc9d76f9ab6d54ffc389ea4c4b2445ab3d2c00935ea19c38de48d2e29010c6Virustotal results 27.59%Heodo
2020-09-16BAL_8228944990071206744900088.docdoc a8dab829058b2200575ec6773790780a48c8d38587dcd02bc094c9084cd57eb1Virustotal results 28.07%Heodo
2020-09-16INV_FG5607657434FL.docdoc ff0be8f9b0efc6b14928e8ea89ffb82ebe82f74db08241df5ec7713c073dfe91Virustotal results 27.59%Heodo
2020-09-16INV_G1Z2N5VUV5X4Z3R.docdoc ebc2b7cdf7a980a33d015502bafcb4a5b6333f49795569f1e2d7e18733d274d6Virustotal results 20.69%Heodo
2020-09-1601292933.docdoc 0e0913f7c913e70406fdc7b5e47f2455d7152c4e461770cc1b9bee581491fab9n/aHeodo
2020-09-16BAL_A64VZ1Q.docdoc 4f21e25c362b1dc72f9dd3b2b0910516918a46a4016a631a2ee276493d7d160dVirustotal results 20.34%Heodo
2020-09-16INV_5RXVETSQ1D680G5I.docdoc ba11cc626e1527c8dec4bf3fe20af2a338030cdb646252a4e170d19512d19d89Virustotal results 27.59%Heodo
2020-09-16DOC_13785515.docdoc 1e89a5f9dafcd1d66bcda4eb3a8e391448606ae28a808d4f723c1decc91292c4n/aHeodo
2020-09-16AUQ_090120_CMV_091620.docdoc 716dc594b3320a3bc8601253c2e46721df663c180acbb2b8e62c64f7362b06a4Virustotal results 22.03%Heodo
2020-09-16DOC_THT_090120_RRI_091620.docdoc 4127d459a04c32375faea92c1b93077f9a79c1c7ffff36dd050303fe2c295bccVirustotal results 20.00%Heodo
2020-09-16LZSK_74030423336913203351.docdoc 1d74eaf6b6fc4ebf83fa4325a27d62ee8f999df2c277d2357b777471f1b35bd4Virustotal results 20.34%Heodo
2020-09-16MJE_CD6042356422VU.docdoc c81e73cde0ba06145f34071dd88dcaa6a7a0490d9096b1c3f78886fbf5063669Virustotal results 20.34%Heodo
2020-09-16VSB_090120_VWH_091620.docdoc 09c3f3aad8f9bc8f65a86d581ecb23b0a6262a9e28d5c5e19750e6770aa5e40fn/aHeodo
2020-09-16DOC_TGD_090120_WGQ_091620.docdoc 5927e1050bff0bafdd3d27911f79db68592ead3752725e920c682910c76a8eafn/aHeodo
2020-09-16REP_Q5FG9TAB5RB.docdoc ae431c5920941951a5f48a3dfeea0729513e6fe01f6641fa747033213df45ed6Virustotal results 20.34%Heodo
2020-09-1691290231.docdoc a28a23ca128d4219c14856421649e8be9836b60650040fba71022341d239b6faVirustotal results 20.34%Heodo
2020-09-1636793996.docdoc b465429729fe580c1862844b5e743b4913418b2bde007ae65a8b150f3defe751Virustotal results 20.34%Heodo
2020-09-16INV_05066187.docdoc 4e7eb87760d48d2a83d6bc71a58b4a5f91e388305156ab866c6752003da0add4Virustotal results 19.30%Heodo
2020-09-16EYF_80797046.docdoc 1bb4012e89aef09b80eda22d99a564f0d3e923f96cbf25dc4a78ff6de6dbb31fVirustotal results 33.90%Heodo
2020-09-16REP_ZHP_090120_CJD_091620.docdoc 901353bf497a3403db274b0c2175a9e1dfc3a0f60720e0dabb97619da3cde741n/aHeodo
2020-09-16FILE_3883863434465774371.docdoc 0dbd4a1c724732ed63f98689408f3fc72fe81f5c82ceca3ac7c45f111965e4b3n/aHeodo
2020-09-16FILE_PO_09162020EX.docdoc b75415103d2353ac48eeb8630f5fb9c840dc5b1653351fd68b9a18b4bd070b5cVirustotal results 33.90%Heodo
2020-09-16B_02376438.docdoc f8033b99d4728d0e4ad633cd47aa7df527d0cfe6aa3808bbb2f120f4f6c7d931n/aHeodo
2020-09-1682375918.docdoc 305d99490d1652cba0e4ee0e78bbc8ecc201e44033a823f4cdbbfa5c43c41c51Virustotal results 32.20%Heodo
2020-09-16BAL_PO_09162020EX.docdoc 5a7087081eb26bcb32ed31747d75c75ffb62a1ed796fb4f08ebb3a2f9e32e09aVirustotal results 32.20%Heodo
2020-09-16L_PO_09162020EX.docdoc b2a10928dc3d7419e3b9ec74228185d8a4d57a7dbec48722c9fef2178b7baa68Virustotal results 32.20%Heodo
2020-09-1643434551.docdoc 67cb2e599dc74d3e6f8048e4f19b08bb8852579326ae869f8c39fa818ef144bcVirustotal results 30.51%Heodo
2020-09-16L_HDVBLTQS9IDGX.docdoc 52a5776503722d0ea87fa60009674bdd3ebbd4449ed9328bf502c7ec5c5ac516Virustotal results 31.03%Heodo
2020-09-16REP_50114702.docdoc 588439f42539c073b150e685ee9d555a0012c8bfbd92b3bb4091b6ba21ed3d6dVirustotal results 29.31%Heodo
2020-09-16REP_PO_09162020EX.docdoc 1315727eb211a211a51d3c0766d9b4a340960aa2c917aaea173e6621858a2157Virustotal results 28.07%Heodo
2020-09-16A_AA6182954315IC.docdoc 8e6f30327f622ec5f0e0af698a465ea3e932a184bd57077e5561244208e45f8dVirustotal results 27.12%Heodo
2020-09-16ZS_95313980.docdoc aff9c4fbadddf0c2b4c80320ddb1809027d157508adbf5e5f12d88db367c782fVirustotal results 24.14%Heodo
2020-09-16K_PO_09162020EX.docdoc 233f0708bd18c6dcfda50809ba5b1d71184f0743d6a9903de9d06dbb5fdcfdd3Virustotal results 25.86%Heodo
2020-09-16INV_486866564203.docdoc 9656f634b78c149e6a428cb521d7a9ae339fb27e467de4ab2d6131cc7673021aVirustotal results 25.42%Heodo
2020-09-16REP_ZWD_090120_CQI_091620.docdoc b08ba532b43fe11e03765134c030e9f47fcd626ebc014e8b2d1d3cf4cd7f1074Virustotal results 25.00%Heodo
2020-09-16REP_78735073.docdoc 8c88e1e8081c3c1795039fb19de72e17b4e0a72076d49470327bd62bf090909dVirustotal results 25.42%Heodo
2020-09-16INV_48746442.docdoc 9a29066aa3490e60be3e563dadcd9f7ef75e6eef752abd1bd40ab5323a57a83eVirustotal results 25.86%Heodo
2020-09-16BAL_PO_09162020EX.docdoc a4161a1c0ab452048658bdf4e30fe550fe9da9f47ea4525fdb2858949f42887eVirustotal results 32.76%Heodo
2020-09-15FILE_ZNM_090120_MWC_091620.docdoc 4f256d7af5ae891b5f196fd51cbed3f7ba7ac2b82d86e8dd998cec459949f00aVirustotal results 27.12%Heodo
2020-09-15REP_AM1240141341BT.docdoc 1b3feab547c227fce46787527a728a57b05f236dc7f3be77bade5b9e661017b4Virustotal results 32.20%Heodo
2020-09-15INV_UD8973876746MB.docdoc 5e96a02fb1ec1284bbdd4f122425a6f635312ee541211269b39acd5addd3dd5aVirustotal results 30.51%Heodo
2020-09-15INV_CGEBLCEHSEPO4R.docdoc adbca35477fb3a09c475fd0866dc9150946d2e4bd9b05650f9f066118659df26n/aHeodo
2020-09-15PO_09162020EX.docdoc eba11506102b0d17ade3dd25ef88614226a2faa5c3710af2a89b5588f49844a2n/aHeodo
2020-09-15F_PO_09162020EX.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360n/aHeodo
2020-09-15INV_PG6YVBZJKQG.docdoc 7cec88df6a841fbc1251142492e673c8a2cddc58f21d6fd402f8167ee96e194cVirustotal results 25.42%Heodo
2020-09-15FILE_GFS_090120_RYL_091620.docdoc c8c52e1ff627d998a9a7ab47afecc546bab7e768dddab4862fb9f2d0b25fc070n/aHeodo
2020-09-15PO_09162020EX.docdoc 6783ef413f3dc640c8c9accbac37c09de5db05eee45604f5334cd90e7bbc109eVirustotal results 25.42%Heodo
2020-09-15UXH_090120_OGO_091520.docdoc 231d8f32ef0ff8e1a2b69db9bf1bf6c665c0cdff42bb4e3407cf7fe579304994Virustotal results 25.86%Heodo
2020-09-15OT_ONH_090120_SBB_091520.docdoc 5184e08e6c595ddbb60b6ac4030286b2e70fa5ee7567cb0360b2a66ec04f8d89Virustotal results 25.86%Heodo
2020-09-15DOC_PO_09152020EX.docdoc d413b9053b30e18ef4358645da23d5c4f74ab8d57d2d78a6e7d423103985b071n/aHeodo