URLhaus Database

You are currently viewing the URLhaus database entry for https://www.tekadbatam.com/wp-content/Document/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:529547
URL: https://www.tekadbatam.com/wp-content/Document/
URL Status:Offline
Host: www.tekadbatam.com
Date added:2020-09-16 09:45:06 UTC
Last online:2020-09-16 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-16 09:46:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:1 hour, 12 minutes Good (down since 2020-09-16 10:58:15 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-1664228056708708.docdoc ee69760c14fa03c104d83ca3e3ba2c9649d7c8feafea5c32b239f32e21851a7dVirustotal results 21.05%Heodo
2020-09-16REP_9YGBJ3T9WL6R4B0X.docdoc 1d74eaf6b6fc4ebf83fa4325a27d62ee8f999df2c277d2357b777471f1b35bd4n/aHeodo
2020-09-16REP_29541260325629.docdoc b7d7c443145be4e2543b2786517f68cfef114f06e7c276368a6046c98963b766Virustotal results 22.03%Heodo
2020-09-1604410474.docdoc 09c3f3aad8f9bc8f65a86d581ecb23b0a6262a9e28d5c5e19750e6770aa5e40fn/aHeodo