URLhaus Database

You are currently viewing the URLhaus database entry for http://onex.co.za/journal/ngxqjl7hc81/kkh36310984140hwad4tg3yhl3v6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:547411
URL: http://onex.co.za/journal/ngxqjl7hc81/kkh36310984140hwad4tg3yhl3v6/
URL Status:Offline
Host: onex.co.za
Date added:2020-09-17 18:21:44 UTC
Last online:2020-10-09 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-17 18:22:43 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:21 days, 5 hours, 46 minutes Bad (down since 2020-10-09 00:08:56 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19VP8611858963UA.docdoc e9325a711e0f6f605b85898c5b507d4320e1f1dc672c68172b06cda359b5107eVirustotal results 34.48%Heodo
2020-09-19REP_VBA_090120_ZFF_091920.docdoc 2219a032fd67333ac69e83d15651054f5fa2ebf7711e2ff700faf7cf27bb18f1Virustotal results 35.59%Heodo
2020-09-19REP_HYO_090120_IYW_091920.docdoc f4914cbba852a170c0da8d021e223ecd72be23357cf6dfaaac21d926ab043885n/aHeodo
2020-09-19FILE_48199922.docdoc 391cd9bd45449d75d87e8d3b434aeed7fc41ee587f7b36345418f388f2acb390Virustotal results 42.37%Heodo
2020-09-19Z_840970945728426267.docdoc dd1eb5d6665fa95590fbb058fdfb8311563d8d5b62f6b8b538cb33c967f22362Virustotal results 37.29%Heodo
2020-09-19DOC_89921977.docdoc 3304ef9cd1d55e1d892f5a18644273b8e62254f587e24e42428a460305129396Virustotal results 54.39%Heodo
2020-09-19DOC_PO_09192020EX.docdoc fbe339f0f024e007aa6965b220a545dcdbe63fc8c877adfa47c8ba137b8c94eeVirustotal results 51.72%Heodo
2020-09-19PO_09192020EX.docdoc c8fc2ffef7922459d1144fe2ea5973e62255d0256394126a4cb635bcaa107fben/aHeodo
2020-09-19DOC_ZBP_090120_CVM_091920.docdoc d7f9f33aa1e41e5cf3ed675039323eedced58cb2e29f20b2fb2b6df79ab141d2n/aHeodo
2020-09-19JCK_090120_LFN_091920.docdoc e5d9bb556a385de29f04eccbf388a0e8f73f556394bfcaff0a6c7ffb15e85a48n/aHeodo
2020-09-19FILE_NOZ_090120_XBJ_091920.docdoc 6da6b99d1e7334c2df666c15e596c4fb9cca58c3f3891e9cc6676580e5b1dcbfVirustotal results 35.09%Heodo
2020-09-19FILE_438073296327682025686.docdoc b37ef41801c298349f3b8d0e7f0bf41fb621f4925fecc934cf95f84c7ee19782Virustotal results 49.15%Heodo
2020-09-19REP_WPT_090120_KNB_091920.docdoc f74bbc7638bbd37cb3f3414110b7479daa77451e7e339a3c42d8bc72f93d6862Virustotal results 37.93%Heodo
2020-09-19INV_2141945760946882.docdoc e6d5b55a935e9959a5ba804422f473784371966923f5dd6a5ead212ef5bee845Virustotal results 35.59%Heodo
2020-09-19COK_0716852236400848667.docdoc 7c391c5dde83d6bcb96a44a794bdced0a65235c65e6ee19d33bd602b09df433fn/aHeodo
2020-09-19P52RDNAEYNA.docdoc 23e85a68c4a3b9d299d2ed531ada64c13d44ea288cad289752aa9dd3d3e08884n/aHeodo
2020-09-19S_SU5002542138DS.docdoc 5b0a648192c791817089baf85e77206be78ec6b2fc7924b465bb1bd718d78b56Virustotal results 52.54%Heodo
2020-09-19REP_XET_090120_USM_091920.docdoc b8818fbdeecde51adf7270365592b9812f1e323c4cdbf81f12885c590727d3f2Virustotal results 35.71%Heodo
2020-09-19N_7982212593884760344041818.docdoc 9075458c2a7a9b59a7e7f9e575757a3069952452198a9c17ce3211d3de14eadbn/aHeodo
2020-09-19UW0626510788CH.docdoc 9609fd808a397cc58e8735df095c890db77e5ee974c087fe02834d1a04900b3eVirustotal results 36.21%Heodo
2020-09-19B_69670582.docdoc a1fa34071ea34019a6dc2db84db432ae749b2577700cd493d6e83c8af8e06cdan/aHeodo
2020-09-19REP_LO25PCOEKL.docdoc aae82415f0c1d33438261bb6ea1039cdff8bccc786541f5177e6938497f5b2d1n/aHeodo
2020-09-19DOC_3969594818774548991.docdoc 73620e838eb9f25fb84489e5a9b183790be59e762fb7aa8cd65a6958e83a00c0Virustotal results 40.68%Heodo
2020-09-19INV_89463778.docdoc 7a41acc2bae61a34f8177e8d2cfa0b5f268c583906f678bd7331d9aca266f238Virustotal results 41.38%Heodo
2020-09-19BAL_PO_09192020EX.docdoc 9126b6cf6a48ccd803d63160fbb3bf6dd1329fc766e2c660732b8a72d07ae0b2Virustotal results 38.98%Heodo
2020-09-19LFRX_PO_09192020EX.docdoc f29d80209cde1118a9399b3937016f28ff68863180d6f36ef6d55fd099de06c1Virustotal results 35.59%Heodo
2020-09-19DOC_XQKWQO3TZ6HL0FX.docdoc 4198131e8d2f03d52598f0c99b1f8765ed8d7380b175ec0ee5e9ef4e845f90feVirustotal results 40.00%Heodo
2020-09-19FILE_QXV_090120_BBJ_091920.docdoc 87888ab358912c8c811b942e25e6e58df8ad065a33cb1041ae790d60cfad79deVirustotal results 41.67%Heodo
2020-09-19BAL_743145092942.docdoc 375b8adece65a4d295e2b9104fb0e7fa3c3c7cc7ebb3dea4607776d050029316Virustotal results 44.07%Heodo
2020-09-1973054932202177.docdoc 7df3447e0e3af084cc5d6ad9a9f333ac88e09c1d60c0f9c0f00fcccb6d04b708Virustotal results 33.33%Heodo
2020-09-1995CXNCXYFG.docdoc ee2bfb3bfc62ad36246c4533bb4bb8c41aa21ffeb8bd74b216d3c6088cbc7b62Virustotal results 37.29%Heodo
2020-09-19N_5462750345.docdoc 25f6bd48cd22ddd4c34475c97f148f31887d589bbbd02c7dd149be3d04958842Virustotal results 34.48%Heodo
2020-09-19DOC_46136102.docdoc cfa732f080d66f4255202de5836aedb5332dbe226ea5ff3e49c926ee56519cddVirustotal results 30.51%Heodo
2020-09-19REP_7HBWNLL.docdoc b837078057329148a35e96ef42c7c83e16fd7f203fa7f1f225fc1a42246349c2Virustotal results 36.21%Heodo
2020-09-19FILE_HD7JZKN4DMFA.docdoc e701c5716c99c6e1549951ed3f1eeffb8b4a9625d8dadb55251998b731c7a109Virustotal results 35.59%Heodo
2020-09-19DOC_PO_09192020EX.docdoc 30c629812a610192dc5b3898cb7b30101d998bf327a9bae06c357cc2108a08a6Virustotal results 37.29%Heodo
2020-09-18BAL_98485676.docdoc 9b38f99bf028d06da1c2b0ff276857ffca68abea77256a72cce711edeb81368dVirustotal results 31.03%Heodo
2020-09-188003388745.docdoc a89a3fb97be7cefc4d26bbdfb463943abc4b7a4ad8f448b559cabed432592458Virustotal results 35.59%Heodo
2020-09-18REP_PO_09192020EX.docdoc 3cecaccb2ac195f3828add4513535047bf92e18f3fd39df822a1aabf5a50ac4eVirustotal results 23.73%Heodo
2020-09-18INV_CPULCKZNTNBBI23.docdoc b5718d755ae4e46d507e6fc54db7738a1c231ba9625ac6470b6a3393ae120d96Virustotal results 30.51%Heodo
2020-09-18REP_533080195643350791023411.docdoc e6efa97f9a08f01b78d5a5e02d3ef06892f126a52bacb798cd5546dbfcb5e139Virustotal results 37.29%Heodo
2020-09-18S_79450892.docdoc 05eb736917a11db255084e194c37d2af8e64f70d50bf4c604bc9eca81198fb74Virustotal results 30.51%Heodo
2020-09-18BAL_75160498.docdoc ea676e753bad13801a314d24b69b710dadbe8afbaaf399c1ad2dff18c0d7b3f2Virustotal results 35.00%Heodo
2020-09-18INV_BUD90ZJ9EBQJ2.docdoc 6a500490be1db393b419c4d2dc1bd43557bd87fe40b7b996037834fb137d8d0eVirustotal results 31.03%Heodo
2020-09-18GGF_090120_RQE_091920.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-18INV_IN1809440968TK.docdoc 523f29c1434d7c2b71f1516c5c73cf9bd1546f0669e730fdf9282641ced7cfd4Virustotal results 42.37%Heodo
2020-09-18DOC_73NL9TE12.docdoc c0922c3c055ffde4da5b482105dea26df27c58e1a615ec81afc024d55010f8ebVirustotal results 42.37%Heodo
2020-09-18INV_PO_09182020EX.docdoc e3c7337d6899a5aa8ee475f563c6c84af325ac88c2a30a676f56d6182a75b59bVirustotal results 42.11%Heodo
2020-09-18FILE_60073697.docdoc 38e7fa7dcfa64e6daecea109f43d9c5cc104cf0bc66873449b03ebe6eb6df03aVirustotal results 44.07%Heodo
2020-09-18REP_77159718.docdoc d30150c62052607c9dd68065e9bf07da7c7490bdc0be48077a770b13f28d77b3Virustotal results 42.37%Heodo
2020-09-18CZC_090120_YQN_091820.docdoc e6c59aa272b0319132af611954aba4331117e24c05ed652fdbf58c0ff36e991dn/aHeodo
2020-09-18BAL_UGDCSFRMF52.docdoc f4df1dedf37fb1a9ad0516f16dda120c0985d796a40d02474b9ae4c613c402adVirustotal results 30.51%Heodo
2020-09-1847019189.docdoc 3794f324eaaa25b46f1e7f2d4c169c9839efa90483f52fd6816bd621f0984562n/aHeodo
2020-09-18PO_09182020EX.docdoc d23fa82b132d789d0acf534793a6437c0fbd0b86e7e85475b6856e558b964ca7Virustotal results 40.68%Heodo
2020-09-180516513755729125.docdoc d81e151fbf63278ef5320ad506045027ea5427813ed63ebca0f919970b41460aVirustotal results 40.68%Heodo
2020-09-1879015650.docdoc 3b752d71ed854f4870f70aab5782715daa51d69594c62f93c34e2f0ebba6f3bcVirustotal results 40.68%Heodo
2020-09-18REP_14192741.docdoc f6dee1b273f9ff061e9c1bcd320d7f98484283f3f6ce1973877bf93231a08562Virustotal results 39.66%Heodo
2020-09-18UPBZOT5BG5.docdoc 7b2741d8a1eefed939245c6e4fa381d3c3e0a2279397d4fb05f9f99c67a140f8Virustotal results 40.68%Heodo
2020-09-18I1JB6KV.docdoc 5f669eaa381cbe719de4bf1c0797e827639abba64b165820dc2186f68ab55552Virustotal results 40.68%Heodo
2020-09-18PO_09182020EX.docdoc efcd54dbe67c5c0dcbb01abfc3f21030c54a8834d7edcdfcf1144f0b49773000Virustotal results 41.38%Heodo
2020-09-1808667090.docdoc e85fdc5e599626bcbde0c04176a3e77a8d577bb6b0a97347ca809aa9b4bd109cVirustotal results 40.68%Heodo
2020-09-18BAL_PO_09182020EX.docdoc 14d4a9b0fcaf5e4ca2f256c713a3d11328f128ce09841b02479238cd866b9f11n/aHeodo
2020-09-18PO_09182020EX.docdoc 8389b0d8b9f07eb8e55e2d7c3d6bad98dc5d0c37eb030652e43b799b0a5ee5b7Virustotal results 36.21%Heodo
2020-09-18INV_BR7846417302SA.docdoc ab12c1e29940b5c9d1de3096cf615f14a888ac2735c582f0ea6e3a4d421684e0Virustotal results 23.73%Heodo
2020-09-18KP5154242591XU.docdoc 1d55fdd4f6aa4b5c9cd2c2403b68667142a71582d3021724542c6c0582de0ce2n/aHeodo
2020-09-18EJUVMVL5RZRXTWWW.docdoc 8e5ac6f2951e0bfdd5e7c036075f4f8706bdf1a1639c43372f38fc91047d0a4cVirustotal results 33.90%Heodo
2020-09-18XI_IP0146679122YJ.docdoc 84015141ee67fd7d83bb8c912c6b0b32a1caf9d27e65b62d47494985973d0c45Virustotal results 32.20%Heodo
2020-09-18REP_E55KY6B.docdoc 7c81019f932c35ff188d4260fe0b23ba6cb27363922cbb8265a8f3121e26c32fVirustotal results 24.56%Heodo
2020-09-181UL0MR1CWVOFNUAM.docdoc 59b07ee573d9567fe99ebe983b0641353a94c1584dbd8a330ce9a1b1ead621dfn/aHeodo
2020-09-18INV_12227356.docdoc 1bd22346068e0c3ebd43f84602033625137f3f35c3b3dc18473cd089834f4541Virustotal results 24.14%Heodo
2020-09-18INV_PO_09182020EX.docdoc 8116e0ec558a71b144d6212ee1d386b79b9160668257180f288b1b979b494059n/aHeodo
2020-09-18FILE_PEBRPLWJU9NI.docdoc d2a69c58abe4e6aa189d2eb2df014d31d32208d552627e3802565ae231cbc587n/aHeodo
2020-09-18FILE_PO_09182020EX.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 49.15% Heodo
2020-09-18BAL_INR_090120_QFM_091820.docdoc 1783b7210fc11d49c254e9d01607f32e9124044eebc736c34bf7d3fe06d7c0b0n/aHeodo
2020-09-18F_PO_09182020EX.docdoc 01dc05c389198097e73f0e51d7e1ea7d9038367c30cf1e0408129374d3ed7db3n/aHeodo
2020-09-18XNF_FSV_090120_JER_091820.docdoc fcba92929cd27ca2bdb803c58ca49fdd35fc6f3b2781278d45dd62e1e46f8742n/aHeodo
2020-09-18P6Y68T4JPRNM.docdoc 95aa58c779d17b78ffab83759ad0e70fdf40edf24f573b20839e2da83896d55an/aHeodo
2020-09-18INV_19903646.docdoc dc0b178d082fb9ef3479c57bb72a459f9129a9dec9ae09543e29610b27df1baaVirustotal results 48.28%Heodo
2020-09-18BAL_KI0477717043UX.docdoc 72a840be472b024fe4cd2e80a56e9a80988be7d4f16fa5df74eed66262615262n/aHeodo
2020-09-18REP_11505300.docdoc eaf897448ba42c47e03919da87640483febb9e38c0f457471d5b91d0bd6b99e7Virustotal results 46.55%Heodo
2020-09-18SB1035722514HF.docdoc 1121962d0a0d52780b13618c7cdcc2916ea8ffdcccb17ae0e54e0b9f8799c5ean/aHeodo
2020-09-18X3QSS1PI5LC1YQJ.docdoc 018f912e134b424700bb01c6a3b3b30d8337eefec291cf518e31c8c4eda6f3f1Virustotal results 40.68%Heodo
2020-09-18BAL_PO_09182020EX.docdoc db5b2b2884b15b7c147a886a252cc856516d36b4c8fb587dc9a46063f39153a1Virustotal results 40.68%Heodo
2020-09-18DOC_JZ9003828407DM.docdoc bd6e4786281e2b7657586b4cc071d1233e90dcb59638890dc1dbe6b10127978bn/aHeodo
2020-09-18L_LT8209760409MM.docdoc 7c59a227af18d0ce74f71bcd465aeb811332968c24b837a6d9761a61bf0b2abdn/aHeodo
2020-09-18K31NA55.docdoc d35c221d6da8fb62ac4d9b14ed2a8112b1d26af20f8f82a0ee4b60fcaa759903Virustotal results 43.10%Heodo
2020-09-18FILE_JNG_090120_MYJ_091820.docdoc 07610dc0b3d7c1c61c9b30505f85c5cb407258560a13dd183500c1693dec0dadVirustotal results 38.98%Heodo
2020-09-1821775575.docdoc 4b9a2688db3fd6465d84ee5baf9fbdf6c50772a16d3e7c265c758ae284e8a63dn/aHeodo
2020-09-18MFF_090120_XUD_091820.docdoc fd659c59f931854b96e0428e622a370da964253713c66c1b28343011322629dan/aHeodo
2020-09-18PO_09182020EX.docdoc 0201f9b5765c77f097c4e2c4c55dfb1bc9c99f104bb07af3dcdc6d62731d99c2n/aHeodo
2020-09-18OZUC_PO_09182020EX.docdoc f6bd46837e705aee39428d412f28116876f6351e1148b7ce01d5e1848b7d0061n/aHeodo
2020-09-18BAL_ZYTCBU1YSSSOG.docdoc 344be8e47a1c334ca0f6e8d6383c509d62ca9004f050e5a368e064e87e2e947fn/aHeodo
2020-09-18TFM_EOB_090120_IRP_091820.docdoc 5c9ee841d3f2ca4934e2df7970319d3d7eaa875a68f3df8f691f19191fd138fen/aHeodo
2020-09-18763996425.docdoc 043a2eea0e970c626f6ff1aa5ec43ffd5974bb5192e55c0595ca6b3ef0404fd7Virustotal results 34.48%Heodo
2020-09-18GKKV_PTQV03QMEBSY.docdoc 09c747a3e72d8531c6bc31fb7da3dd71c0112e6bdc7a08c92794adbe46857574n/aHeodo
2020-09-17HBF_090120_MHU_091820.docdoc 36d46656d6969e3946e5b7d590c3f84bee9577d16dc333b05a115c41760636b7n/aHeodo
2020-09-17REP_ST5312433702TA.docdoc b7ddf91ff9e8e25f296efc62a0d79d6077c5ab794410acec14f45d7e96a35d4bn/aHeodo
2020-09-17INV_LY6699364420EK.docdoc 24b4b9f235edf4c63faa8b1722508868d0727dd455e4abcbdaf1ac38eb379dfen/aHeodo
2020-09-17BAL_YH3144917597CW.docdoc 18921283b9df87bfd574d3b19108c1b987dc19729196d6d54235ec8c102b4e1fVirustotal results 33.90%Heodo
2020-09-17TMJ_WWXJB8YR.docdoc 12d6b38f752ecea5e77fa8c3623f322427bd77fbe3070efe165d432a739f4bd1Virustotal results 33.90%Heodo
2020-09-17PO_09172020EX.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo