URLhaus Database

You are currently viewing the URLhaus database entry for http://zok.ink/upmz/Scan/R0vk2YNDuL50xZT/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:549199
URL: http://zok.ink/upmz/Scan/R0vk2YNDuL50xZT/
URL Status:Offline
Host: zok.ink
Date added:2020-09-17 23:42:05 UTC
Last online:2020-09-24 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-17 23:44:21 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:6 days, 6 hours, 47 minutes Bad (down since 2020-09-24 06:31:48 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19Inf 2020_09_19.docdoc 4cd1338ce62760cd78c5eeb9a795195c5801a562e6adb2d0f0984640a5719bc3Virustotal results 35.59%Heodo
2020-09-1996495W 2020_09_19 ENV62086.docdoc b81a03fb70bafe2e7fd636ad7371dd77cd8fb21b274fda2b5bfb4b2d4356e91eVirustotal results 36.21%Heodo
2020-09-19Doc_460930.docdoc 5c8826f1210fa85335233abd36c1a1139d5689142c5842c0da0c688f104c6410Virustotal results 35.59%Heodo
2020-09-19Rep_20200919_B841850.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19DL67193-2020_09_19-WQ27108.docdoc 678355b541ffa2eb21d7b767a9e6039f3447aaaad39161002cf3b66c1d44c1dcVirustotal results 22.03%Heodo
2020-09-19Arc 64002.docdoc ab4d0777ea8585140a9d19ccb330eaddeea2151248785fff7e097912d0a3af25Virustotal results 22.41%Heodo
2020-09-19file 2020_09_19 XQX110.docdoc 75e37e5c3591743af109482748f2a48e550f1a9d767316a8cece66fb4fe8c222Virustotal results 22.03%Heodo
2020-09-19List-2020_09_19.docdoc 67cc9853ec0a3e3d1283d0ccc57907b9c5c60ff1359dab4e9456b581a3ebc3bdVirustotal results 22.41%Heodo
2020-09-19inf-2020_09_19-204.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19mes_2020_09_19_K499.docdoc 61df427b7811925c65b7097f247c0c66efd9be4177b08926eadc161d854b61abVirustotal results 20.34%Heodo
2020-09-19Untitled 20200919 6509.docdoc 8d1f2360b408776088872210b32de86eb3f9ba1f6c038e9167351edc66528823Virustotal results 22.41%Heodo
2020-09-19list-2020_09_19-FVZ1075.docdoc d0b4b470d5e523a36a9751cec3eb8c5e1fae85904ab8637b745f1aebea3aa8cdVirustotal results 24.14%Heodo
2020-09-19MES 20200919.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28Virustotal results 23.33%Heodo
2020-09-19List_EZF449.docdoc 906eb841dd00ed7c09bdb5dc7c0d3722f6313536e45201301a2db07d0fe04beaVirustotal results 23.73%Heodo
2020-09-19rep_2020_09_19_IO059.docdoc f0e6815411621dc6ccb4ca55c8c1ceba4ed59cc0f64b6884f0d93d49f9493bb5Virustotal results 24.14%Heodo
2020-09-19REP_26105.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19file QGQ407.docdoc bad0da6e5c3252214e74c5ebd3ebca1b19331a5dc3c62d1b0c400f8ad73303a7Virustotal results 23.73%Heodo
2020-09-19dat 20200919 JZ528524.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2eVirustotal results 23.73%Heodo
2020-09-19file_2020_09_19_7902479.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19Inf-2020_09_19-4027912.docdoc 8065f24a60e594dd6166d1474692a8497b370ea658769bea254a65eff805ca26n/aHeodo
2020-09-1941045-6344.docdoc 7d635d13a89e28fd6b0237c35f566e2be9502c55ae2dee5b94c1b5281c018152n/aHeodo
2020-09-19Arc-2020_09_19.docdoc 9f038a3f8faa7d88948648de22b5ab1fdd3cc1d598fc1125ff950daa9fadc4b1n/aHeodo
2020-09-19list.docdoc 13431cff4346b87ec1e099ca8da43a0b6b7dca250d9c69bbc46b8f28dd09a68en/aHeodo
2020-09-19MES-2020_09_19-E9874.docdoc 610c4e7f9d0c567d7d8a230edc8cbe856baae5fb20c5fbebe2a43c7c7d007feeVirustotal results 24.14%Heodo
2020-09-19doc 2020_09_19.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2n/aHeodo
2020-09-19File.docdoc 48eb7810be7073be627369d41227071fd89b859692c501707fdbfce2300e42fcn/aHeodo
2020-09-19MES 2020_09_19 7456573.docdoc be971e5ec9022f9fd6f2362de737a9133bda66f8e69ec70d11bba08b47f81075Virustotal results 22.03%Heodo
2020-09-19LIST 20200919 IGZ782.docdoc 62693145b7a340ec76dc8653cd1f603f1f25611da8b7e83de3979fee1fdb80eeVirustotal results 22.03%Heodo
2020-09-19arc 20200919.docdoc 4f95474b074798a5301ed054cc87ee6768a0c44b9d2a39f679750741537dcea0Virustotal results 22.41%Heodo
2020-09-19rep_2020_09_19.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47Virustotal results 22.03%Heodo
2020-09-19INF 2020_09_19 HJ6957.docdoc f5ca634bdeacd64ccc52ea932bd221762cc68524fcef2df96c77ecd777d16670Virustotal results 22.03%Heodo
2020-09-19file SF64937.docdoc ff17fcb2563e69e3f433d120bdcb9410c992e3abd0502b96fc663d2adda5bda0n/aHeodo
2020-09-19Doc-20200919-556.docdoc 23c8490e131915effd12a2adf737b6fb74515b1b54759d0bb237eb7392338c08n/aHeodo
2020-09-19INF-64953.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 22.03%Heodo
2020-09-18file-2020_09_19-9917409.docdoc 9cfbd2b1385991e74144b32795611bff463960304a0bac67116378ec94caf271n/aHeodo
2020-09-18Attachment-9897593.docdoc ea48e310224317a3a93d7679dbb50ae967383d973cf7713613d8a240224ff454Virustotal results 22.03%Heodo
2020-09-18ARC 2020_09_19 DT87952.docdoc 1b92e7710017ee24f07eb3119de1f3556bc53d686201c428cf4538d133fa8fa7Virustotal results 22.03%Heodo
2020-09-18arc-2020_09_19-49164.docdoc f56906e33a9a9bd3b074b3b5c24c2e98ba58817c4c61452977054f27d0d9312dVirustotal results 20.34%Heodo
2020-09-18Arc 2020_09_19.docdoc 03caf29484a047db9c68e15e6117f665c59b1cc6ea7cdacba9042f80149861b9Virustotal results 22.41%Heodo
2020-09-18LIST_2020_09_19_537917.docdoc 2cbeb14e3ad7c8a795f7454334ae6793f020780e53173535e65ddee8c2a717afVirustotal results 22.03%Heodo
2020-09-18INF FSF273522.docdoc fd925205136ce3b71945709fdfbbdda52ea8fd455f8e4e410f942ee48f893b76Virustotal results 28.07%Heodo
2020-09-18Mes-20200919.docdoc a4ea07f63c702a260cfc87703c09e635cf2fab0a0ed510439a57936ee5f6d4b8Virustotal results 27.12%Heodo
2020-09-18Dat_20200918_103.docdoc ca8696eb2a7a3679a7ae16ce3c6032ee9f69cba3cfa7aa47d9dabeaaccdb137dVirustotal results 28.07%Heodo
2020-09-18MES-2020_09_18-NM08673.docdoc 923692821eb7f6837085e7bef93e95d87c7d841697e21fa1730ee5d217312f14Virustotal results 28.07%Heodo
2020-09-18Untitled-2020_09_18-3301659.docdoc bb7673a01670e7e6892859b4f6829f63fc3d17a92a52cf3da83a1d984c42aa7en/aHeodo
2020-09-18INF_2020_09_18.docdoc b709505d72068d9b8b222a2b52a8178f0b8fc95b0256124c72f2fbcdea4dc417n/aHeodo
2020-09-18REP_161738.docdoc 8a3a2eecd83a01a3a12933b730e8ef7c752c7bbee0818f77940551ba926cf847Virustotal results 27.12%Heodo
2020-09-18ARC_20200918_ZR75319.docdoc 25c51061c2d3618e6fe43b51487ff7abad46d648b8d3b9661d757ab481a3a4f4n/aHeodo
2020-09-18UNTITLED-2020_09_18-3644.docdoc 5ab22cc852aaef34ff92b6dfc926ae182c1ca84cc17ddefb9cf2340a73dd7b64n/aHeodo
2020-09-18Z47415 20200918.docdoc 902d3ce3d266b665931673e3a33ca290f991ebc092aff43dfaff09a74701b5c0n/aHeodo
2020-09-18986K-1065625.docdoc 2af40cb6abf2d4d87c395830ee311bb8c173a2f99d4092973306b2703d416c9cn/aHeodo
2020-09-18MES.docdoc 07b5c8867dfd8461d140a439bce35285a61af1eab432f8a79a9880a37bc63d85Virustotal results 25.42%Heodo
2020-09-18Rep 6413782.docdoc 77dfe2eeed80414b4e3a1702fd0d7443e23a4b8ea93460bef56458aac2b2983dn/aHeodo
2020-09-18dat 20200918 LLA682.docdoc c6f91ca4de4035eea0cee737bcea230c3a1fc1b9bc3e0b8e59e1b0cb2c212dc8Virustotal results 26.32%Heodo
2020-09-18FILE_2020_09_18_44100.docdoc bd489be4b4636b4c0b9c2d7749b084fa534ec31195744d5b02e9d073925dd44dn/aHeodo
2020-09-18rep 2020_09_18 SO646032.docdoc a3243652b05c45b85ffbebf961ed8563c4fc164a71e7abf56feb805974745343n/aHeodo
2020-09-18UNTITLED_2020_09_18.docdoc c150a6907d073e3342215712f5898b7b4f1bbbd09664f2163c973bbcae0e2c40Virustotal results 26.32%Heodo
2020-09-18file 140.docdoc b4d8b63b7237791e55859b2b8382e359ddc8584ebc6e5d4227e371944d48e8e8n/aHeodo
2020-09-18Rep_2020_09_18_194814.docdoc 40afc53b7c0069afdc962caa737c4ac768d922b355bbe22c793eabc2017c3e56n/aHeodo
2020-09-18Dat-901600.docdoc 72e7bd4d09757bec76ea8bcfbdc7764868642f075916f99b6fe0623a5729533dn/aHeodo
2020-09-18List_TA342780.docdoc 2ffe410c23611da6f521bf9ea1c738509e7d399ef3fd0b539a2ac9469a132479n/aHeodo
2020-09-18list.docdoc 9f74c5855fc6ea9a1b608bc0a74b1ee1b6b0f14aa431ed67565aba64e7aab0a4n/aHeodo
2020-09-18ARC_2020_09_18_8078703.docdoc c82c3dc7341a149248f768f8f7da5e9f1ca7dcd9f2d1cd61a56386cfef07ff7bn/aHeodo
2020-09-18DAT 2020_09_18 MA58535.docdoc c23506c870efcda0c07a175908865a74947201cfd722d1351916cd6fb6aba3f1n/aHeodo
2020-09-18inf_S30127.docdoc 5ffb1d25ef83ae9dfb3073ada3fe94ea0d6f2e51d71fe066a5d70b2c32aab4e0Virustotal results 20.34%Heodo
2020-09-18UNTITLED_20200918_H165.docdoc 09efc100953970cc953692683b36677955124ee1930d5face350e33f13123f98n/aHeodo
2020-09-18FILE_2020_09_18_1903086.docdoc 8e4b5c75dfd8ad1acefed08603f4a69c435e29f076db8183c17703d238ea71e1n/aHeodo
2020-09-18LIST_IP925.docdoc 82e331bd54e99b710c3f3446239c18c0ac59e4b668cfcc1b78c1d4217173f865Virustotal results 23.73%Heodo
2020-09-18Untitled_20200918_P038.docdoc 4943c3503cede95a329c908942aa9f465a135fa27dfbe0c2a228bcca9d3621b2n/aHeodo
2020-09-18Arc_UC414086.docdoc fd1c756de37284ef14753f94de746cb901e9270d43d949a73a4199657563f7b2n/aHeodo
2020-09-18File_2020_09_18_997.docdoc 18db8bcb527056d84b100bcad7cf01a5b5f85ab4bfc235ad1bf54c7ace185c84Virustotal results 20.34%Heodo
2020-09-18Rep_2020_09_18_2455866.docdoc 6e9fc3559e42b8f89e02f650d056188acceaf34fbe3737cc98a6b4a3b5d560d9n/aHeodo
2020-09-18LIST-2020_09_18-NT148205.docdoc 327782e36e23c26b07c924376ee2b5f73ca8a498db216fa153c0a6d4830d0f26n/aHeodo
2020-09-18EE95239_954.docdoc a55304610ff46618fd3e74586f731acca7681d1cadbc70b8d0f04e644b5c9c84n/aHeodo
2020-09-18LIST 2020_09_18 62895.docdoc c8e971366664091a1da76bd55064f569cddef2d7221213dcf4f0f33c0e988e6bn/aHeodo
2020-09-18LIST_20200918_DTC312.docdoc 9a5647921a926cd3faf9498d4ca4a57b62570f869c31b1ac0e756356e134e88en/aHeodo
2020-09-18DAT-4701747.docdoc ce3d56bb9a92571db4a67479712b847889f5b07415451253d0dbbd0bfebc563en/aHeodo
2020-09-18Untitled 2020_09_18 73101.docdoc 9949e3d333621f908c51a04136a6b85f266068d36c239f2ae844bb50e4cd4bf5n/aHeodo
2020-09-18DAT_E58914.docdoc cdbddc6e344dca0161e590649d5937d6271bd7c6fd53cdfac8ac5f235b4b2ad0n/aHeodo
2020-09-18Attachments_X98145.docdoc 9389726a4695c75fae2220fa887ba98b870a4d53207c6b4dd39ecf3627dd0ecan/aHeodo
2020-09-18Doc_20200918_F67019.docdoc f6d20fe1029cfc1d45c851270e67615554369e87500d3b2337a878c6346b2481n/aHeodo
2020-09-18LIST-J8721.docdoc 8cc271a3c843d86d10e06a206bdb54c29e0879fb671d22d8eacee4b90ce21f38Virustotal results 18.64%Heodo
2020-09-18File 2020_09_18.docdoc 93b355ce46612ca6f1553506670478aa91b4ba2aaab153d9289a28f5765b759bn/aHeodo
2020-09-18XI338-OLT40369.docdoc ee557edbc49aa2b3e356e776e4ce00dfd865a95968678856d0d1252d58a7c600n/aHeodo
2020-09-18Mes_20200918_RID175.docdoc 3902190a013506ce9d9a565c38db09efd0f34de99da36d42c56fcf1bd9cac9b4Virustotal results 49.15%Heodo
2020-09-18list_525.docdoc 48269194d5f4d7e90e2ecf404c45608a995c627a81cfc1aec5f60962423ed564n/aHeodo
2020-09-18list 2020_09_18 E39363.docdoc dca5c450c7d663b7ddd8657472fba6593c71ce0a7d7bff9eb98f72a5bcd57228n/aHeodo
2020-09-18Attachment-20200918-IU22996.docdoc 186ef4aa313417e178a272142392d6f289c1b9e3c9bc3818b3c04a399670b2e6n/aHeodo
2020-09-18list_2020_09_18_1555.docdoc 23b73b6d7e3d2266bcf0c20586d750bae5d4b3e873447a95e582df8e1d31f945n/aHeodo
2020-09-18Doc-20200918-59132.docdoc 7adc5494cfdb1138366faec52f5b46d22959763dd3dbf3fbd0bcaffe3373d837n/aHeodo
2020-09-18Doc-2020_09_18.docdoc 96d436517f2e35248a049283382d963b8924ec0a569f93a093838f1cce8e3708n/aHeodo
2020-09-18FILE-20200918-640042.docdoc 1cba542ea755572052ee0ee05629e5f1a0b3161fc11106ad6e2679fc5ee2a6f4n/aHeodo
2020-09-18rep NO78688.docdoc 143fdd99fd4e7254e358b5fc3ffbecc50110ed5fd0e920fd22898893455adc35n/aHeodo
2020-09-18Arc_IY328.docdoc fed5e7580640c07c65d8f7dc61525cec900564c60b608e59670491b4e82d8e8cn/aHeodo
2020-09-18Inf_2020_09_18_0457971.docdoc be065218e692a53d74321795262f984c695178e5735c063069ba03c4ce3a4388Virustotal results 37.29%Heodo
2020-09-18Rep_20200918_XEY0780.docdoc 3db14a0f76fa86e356c825ad449d554cdb00374a712dc8ec992b8394c8756b56Virustotal results 37.29%Heodo
2020-09-18Doc_2020_09_18_HN93444.docdoc 0fa784f6a6eaad808c6f9037d5515f435da8c204edba06b50d4839499bccd481Virustotal results 37.70%Heodo
2020-09-18INF_ADU59058.docdoc a5dcf96a690cc7c036613316d9003c9f6ee74e66dc2a8ac00502e63f8dfae85fVirustotal results 35.59%Heodo
2020-09-18arc.docdoc 393e7f7b1076dda565b8910fa5cbcd172477be0d32cb668b7ba7f32f122c1c26n/aHeodo
2020-09-1811430QU 20200918 NYK836730.docdoc d43356345eda22fd3100b860df7cd151651be7931f0b01eeedf055aad895cbe6n/aHeodo
2020-09-18Untitled_RA9947.docdoc 562c1a653b94bfc9219306d06089d0621f9f3fd9712476d1e543828e67d1eb83n/aHeodo
2020-09-18Attachments-1309006.docdoc 694a675405bba3ed747dd1bb25ef59a25081523c6ded90281559d95d2f262737n/aHeodo
2020-09-17Attachments.docdoc 5b75b8ef50bfcbbb530308fd7bf20ca6fed376e9e93b36bfffc74d7917457d49n/aHeodo
2020-09-17list_20200918_TLG76857.docdoc 7e471a0df104975c9e269668322c7a09a6892fc3a375150e2c8b0eef6b7b6f23n/aHeodo