URLhaus Database

You are currently viewing the URLhaus database entry for http://ekinerja.megadata.co/wp-content/Reporting/jTPfzex3HTmDGVw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:553207
URL: http://ekinerja.megadata.co/wp-content/Reporting/jTPfzex3HTmDGVw/
URL Status:Offline
Host: ekinerja.megadata.co
Date added:2020-09-18 09:51:51 UTC
Last online:2020-09-25 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 09:52:02 UTC to abuse{at}cyberdata[dot]co[dot]id)
Takedown time:6 days, 16 hours, 12 minutes Bad (down since 2020-09-25 02:04:02 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19MES 468881.docdoc 9f038a3f8faa7d88948648de22b5ab1fdd3cc1d598fc1125ff950daa9fadc4b1Virustotal results 37.29%Heodo
2020-09-19LIST_2020_09_19_880.docdoc 0af0e4a065d036488bc54043089879cd5e6b6a4db8c164ba0b7f45140aa616cfVirustotal results 25.86%Heodo
2020-09-19MES-2020_09_19-6070.docdoc 0e7b7cc13660693acc3ac77a1ba7b6128c10bfe810eecb4d67f8b315e94c047dVirustotal results 24.14%Heodo
2020-09-19arc_20200919_3071499.docdoc ab4d0777ea8585140a9d19ccb330eaddeea2151248785fff7e097912d0a3af25Virustotal results 22.41%Heodo
2020-09-19Arc-2020_09_19-ST236.docdoc 12184c3b864ed546a8c1c0b94d18631228a2cd6caa38e1d6c332c113d327f21bVirustotal results 32.20%Heodo
2020-09-1967255 2020_09_19 P357153.docdoc e0343838dbe81e4a9395924017c0f16a9a100c8f03f14eb75fc8be10c72edd60Virustotal results 22.03%Heodo
2020-09-19ARC 20200919 749519.docdoc 9a89421741b56db1e2d97d925176d40fae890abdefd3e136a24afb0589d4371eVirustotal results 22.81%Heodo
2020-09-19Untitled-B503.docdoc 8d1f2360b408776088872210b32de86eb3f9ba1f6c038e9167351edc66528823Virustotal results 22.41%Heodo
2020-09-19Attachments_2020_09_19_BCH620940.docdoc 23c8490e131915effd12a2adf737b6fb74515b1b54759d0bb237eb7392338c08Virustotal results 22.03%Heodo
2020-09-19DAT-2020_09_19.docdoc 0d6380a49e7088513773efca368acb3a783954a2d4df49ea9b730c9e49969458Virustotal results 23.73%Heodo
2020-09-19Inf.docdoc 2a3e7c662c026f10d65fedffc2f513a8683860a3448c822016d34579120dfb36Virustotal results 23.73%Heodo
2020-09-19LIST_20200919_WI7551.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28Virustotal results 23.33%Heodo
2020-09-19Attachment_IY731.docdoc 389d939ee0561031b3d437377550de0aa2e31ebecca5bc6529fe3f5b1c2ce8a1Virustotal results 22.41%Heodo
2020-09-19Doc_2020_09_19_754083.docdoc f0e6815411621dc6ccb4ca55c8c1ceba4ed59cc0f64b6884f0d93d49f9493bb5Virustotal results 24.14%Heodo
2020-09-19CVS341-20200919-A3568.docdoc c358d536ae6f128e4d3e87de606603d1eb16268041e18e130fac19804fb21de4Virustotal results 23.73%Heodo
2020-09-19Mes 2020_09_19 008407.docdoc f13c7662ae4f7890dcaaeffec05902dec857b5cc7f106b1002c1b595add9912aVirustotal results 23.73%Heodo
2020-09-19ARC_20200919_4455.docdoc 52ec22303a14b98735b2056a66731212dbd583c099eca26f8a12fcebc1724760Virustotal results 23.33%Heodo
2020-09-19Attachments.docdoc 8de922c73adca515635e350e8e59e9e2470d9baab56386d9e8f3b3f9b6bfb701Virustotal results 25.00%Heodo
2020-09-197237654_K9995.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2n/aHeodo
2020-09-19REP 20200919.docdoc 8065f24a60e594dd6166d1474692a8497b370ea658769bea254a65eff805ca26n/aHeodo
2020-09-19rep.docdoc 4cd1338ce62760cd78c5eeb9a795195c5801a562e6adb2d0f0984640a5719bc3n/aHeodo
2020-09-19UNTITLED AMV2760.docdoc fca26f8a9f6995a0a5dccd24f54b77b3d5c855fe48084f99f9b2da3382f88c2fVirustotal results 30.51%Heodo
2020-09-19418360 624.docdoc 5a0c4c40fea422907e85ce8348431c8365731e13690a0df7ded61ac480bd6137n/aHeodo
2020-09-19Untitled_20200919.docdoc d91d3355ed5c4d2b1c8a1577424bb71aa3ef224770b4d5c01dd7703a4c329eceVirustotal results 27.12%Heodo
2020-09-19inf_20200919_JCV5825.docdoc 5c8826f1210fa85335233abd36c1a1139d5689142c5842c0da0c688f104c6410n/aHeodo
2020-09-19401-2020_09_19-910224.docdoc 0b20a73da9e858ca63b3e038817d2cd82a98535eb4ed6c1dbb214e3e066bede2n/aHeodo
2020-09-19Inf_2020_09_19_ON121.docdoc 17b333cc6c291651161d6bab9f62df4f89a31b13b8b8db8722c6e6d069d1bc30Virustotal results 22.81%Heodo
2020-09-19REP_2020_09_19_LXD52683.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9n/aHeodo
2020-09-19UNTITLED-2020_09_19-2213583.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfVirustotal results 20.69%Heodo
2020-09-19MES_8769105.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47Virustotal results 22.03%Heodo
2020-09-19Attachment 2020_09_19.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19Arc_20200919_XV5725.docdoc 59ee3757e66be242efc0972dd6c65966fd25efedac6d7183bf2ebb22f73ed835Virustotal results 22.03%Heodo
2020-09-19Attachment-20200919-T590067.docdoc ff17fcb2563e69e3f433d120bdcb9410c992e3abd0502b96fc663d2adda5bda0n/aHeodo
2020-09-19inf 20200919 11623.docdoc 254aed29f31299a98cd09ddf208306a72f9e9c6f7b821c20af8197e12e32e877Virustotal results 22.03%Heodo
2020-09-18REP 20200919 28738.docdoc 3eb7679ffcb5eb0cd537545d2e28ad49fdb4bc89366476f731659703b6707ff5n/aHeodo
2020-09-18LIST 194043.docdoc 33bab5da95407fde0ab439aa5942622a7e1286cb5ad74d4e55689fa5c59f8559Virustotal results 22.03%Heodo
2020-09-18MES.docdoc df50fc4b87844f590011e4655d981e4aa7d498dec2d0940b554aea8538567352Virustotal results 22.81%Heodo
2020-09-18inf-2020_09_19-2878039.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.41%Heodo
2020-09-18INF-007.docdoc 8750d49fc1ba34c16ce392d088b1843101a6669f5407b567c2dff708351b81ccVirustotal results 22.41%Heodo
2020-09-18UCU4535-7778.docdoc 5dcb34b82840165da4c8d3f693522093656d8731ab6ffade09c8f5d2b8376408Virustotal results 23.73%Heodo
2020-09-18Attachments_20200919_891.docdoc 8aef0f99e6ad886e7a947f5a99fd0b0016cfdd32cf2c62ad525364452c8c7c41Virustotal results 22.03% Heodo
2020-09-184748598-20200919-208.docdoc a4ea07f63c702a260cfc87703c09e635cf2fab0a0ed510439a57936ee5f6d4b8Virustotal results 27.12%Heodo
2020-09-18FILE_XG739.docdoc 839b81c515a28cbffefef43ee886190e4de7528359cb1e5c7e2e9b4cf8ce5aa9n/aHeodo
2020-09-18325-5610324.docdoc 6582b37fd7a1c9ef797e7f6db679df941000a9f14475cff833abe8d4b78e51f7n/aHeodo
2020-09-18Doc-2020_09_18-08278.docdoc 1d188489aa0c86820ef03aef6d4c6737367a5872ca87080c9fb14670099d756dVirustotal results 31.03%Heodo
2020-09-18mes 2020_09_18 I02880.docdoc 0993a8e2a1ede660ab29dac20d8b95443ba1577a1247c423d7c7fce39820fb51Virustotal results 31.03%Heodo
2020-09-18ARC_20200918.docdoc 8a3a2eecd83a01a3a12933b730e8ef7c752c7bbee0818f77940551ba926cf847Virustotal results 27.12%Heodo
2020-09-187328-2020_09_18-FZL10016.docdoc d11e0d61ffbe21f3332d5c924ca98eb451fcdeb3f1b732a43f3fbaf00360b103n/aHeodo
2020-09-18dat-2020_09_18-3227.docdoc ad3ae846e4d7d6c6486ff7745250a6369003b467de82c65d5024b389f718c0c4n/aHeodo
2020-09-18MES_2020_09_18_PC7912.docdoc 59be634c99d32cc1d2bdfc3663c81ef4a20e38bfb841fb02cf3152233aa9f7b2n/aHeodo
2020-09-18Attachment_20200918_SVL735344.docdoc 07b5c8867dfd8461d140a439bce35285a61af1eab432f8a79a9880a37bc63d85n/aHeodo
2020-09-18DAT_2020_09_18_5878.docdoc 528cc8d3ea6fed5fceaa0bd0918bd41dfc6a2ac19f22b397892544b1e7200d6fn/aHeodo
2020-09-18rep 20200918.docdoc 84d59b721ec78cc9090af23a6c1bb391200be0a712dfa25ea26c74207c6ae7a8Virustotal results 25.86%Heodo
2020-09-18Mes_2020_09_18_48845.docdoc a5ce864f2c3bca89c24abc1fa1068e590b7df70133a6f8d4ddbfb26f3f72a85bVirustotal results 25.42%Heodo
2020-09-18Untitled 20200918 7187704.docdoc be86b5ea3c48b9d43e811f922b79b52f338279ead7c969ea4a290783d408eebbn/aHeodo
2020-09-18Dat-143539.docdoc c78b6fd735feacf05ab8254985b5a5f154b52b13e5c0033b566d90c3155c915an/aHeodo
2020-09-18inf-2020_09_18-3675562.docdoc 8324d40ef076e8e466b29e34e3a2698d09d6f2010995094954cd4fe65e6a5e96n/aHeodo
2020-09-18UNTITLED 2020_09_18 865.docdoc 818a38c5ed237846eff052db6fc103a6359c3bba18679dcce7dc5203ed68e2abn/aHeodo
2020-09-18Doc_20200918_PAD8598.docdoc 15516d337875587c5b3c679d8c166d4e00d5da295727956ddb935e5972ab2aa1n/aHeodo
2020-09-18UNTITLED-20200918-55107.docdoc 9f74c5855fc6ea9a1b608bc0a74b1ee1b6b0f14aa431ed67565aba64e7aab0a4n/aHeodo
2020-09-18Arc_2020_09_18_86162.docdoc fe1f169897a95c7456e56473515e11fb1f0ae806d23e263f96bd152a4a3ec6b4n/aHeodo
2020-09-18List_2020_09_18_7921.docdoc a02fd4f0a71684d97d6bc0c9647fad084aae073d7648b377f734a8ad39969abeVirustotal results 22.03%Heodo
2020-09-18Attachment-20200918-C223566.docdoc a0af7cc32ff9047f7826ce45f618a85ee88ce49ec141887294e9e9617efd3601Virustotal results 20.34%Heodo
2020-09-18List_MW234.docdoc 19147bf00c478f62beea73090f1790a35aac1d8769bd6eea4c9e69488a4f283en/aHeodo
2020-09-18LIST 2020_09_18 RX67332.docdoc a980ad21eced39ab6179666648e571be61547ca21fc8dfca1d016158af5036c8n/aHeodo
2020-09-18Attachments 20200918.docdoc a264a73bb97fa29f842f2dc76a597a6e87bbee69af5a7c34afb662e40436f3aan/aHeodo
2020-09-18Attachment-20200918-EJ09807.docdoc 36919712f986c81feab840bee68faa72d3c7d9ba61a8cfd186b6b1b1190f3277n/aHeodo
2020-09-1838364_2020_09_18.docdoc bc823a6f2b911b1ac1a2c9bd1e0ceacc75e9d913e41f318def70472ef315536cVirustotal results 24.14%Heodo
2020-09-18Doc-2020_09_18-X12842.docdoc 48ac9d4cbe603c96770da6fe47ffaf9f077de0eeba0afe7a94c1158cdc4e2c49Virustotal results 23.73%Heodo
2020-09-18inf-2020_09_18-4405308.docdoc 18db8bcb527056d84b100bcad7cf01a5b5f85ab4bfc235ad1bf54c7ace185c84n/aHeodo
2020-09-18MES 2020_09_18 R309663.docdoc 6e9fc3559e42b8f89e02f650d056188acceaf34fbe3737cc98a6b4a3b5d560d9n/aHeodo
2020-09-18doc-20200918.docdoc 4da1b994d65f75f6dd7560b6a7a456fb11ec4c14383e56265807c38505ba696dVirustotal results 20.00%Heodo
2020-09-18INF-20200918.docdoc 327782e36e23c26b07c924376ee2b5f73ca8a498db216fa153c0a6d4830d0f26n/aHeodo
2020-09-18file_20200918.docdoc a55304610ff46618fd3e74586f731acca7681d1cadbc70b8d0f04e644b5c9c84n/aHeodo