URLhaus Database

You are currently viewing the URLhaus database entry for http://www.tekfark.com/18JWBE/ACH/Business which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:58462
URL: http://www.tekfark.com/18JWBE/ACH/Business
URL Status:Offline
Host: www.tekfark.com
Date added:2018-09-21 08:23:08 UTC
Last online:2018-10-09 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: j00dan
Abuse complaint sent (?): Yes (2018-09-21 08:24:38 UTC to abuse{at}cizgi[dot]net[dot]tr)
Takedown time:18 days, 4 hours, 36 minutes Bad (down since 2018-10-09 13:01:18 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-22BIZ #1674627ML.docdoc fa964842244e752950fd4ed711759382a8950e13cc2794d6f73ab7eb9169e5eeVirustotal results 40.00% Heodo
2018-09-22PAYMENT #9FVO.docdoc 23f16fce010a88b7d1170feebec531f0be11fefd68a7b42d00c4dc80a7b3bcb7Virustotal results 40.00% Heodo
2018-09-22BIZ #8KBHS.docdoc 345ab111b5c267ac9a36eadbf12d6840ef2eac5efd177d94d6cdbf3570f7fd17Virustotal results 36.07% Heodo
2018-09-22PAY #1FEMMMSVV.docdoc ce8eba00ed5d24f06d762cb90280383de8b58d9227e867215ead99ede9216077n/a Heodo
2018-09-22SWIFT #278V.docdoc 85f57a86e855fc2f64cd9b43e12a6def19fe8b881b2360c20e0ab6750206ed09n/a Heodo
2018-09-22SWIFT #365770XJUEOY.docdoc bdc0068e9d069ac4d868fe970a9cdaaa4f1dc2ced8942160da23908e52cec5ecn/a Heodo
2018-09-22SEP #900BBJB.docdoc e10491f9ba051cb82007b7a1cced46a6cbb028e1889c3cf6e1376ca40a9d0040n/a Heodo
2018-09-21SWIFT #948340VFGJTWAE.docdoc 6ed0c13acae700f65b74d0839ec6a6066ded60679249f77e033a2a008812f75dn/a Heodo
2018-09-21BIZ #8280BBI.docdoc 94fdf285501c76a55f28854253cf868fd47637df096780adfb581f6b4b88b03fn/a Heodo
2018-09-21PAYMENT #8397537AQSVD.docdoc 39133bb8a080184e0b01821445eb72fef43238980f2043fc7691af7003d89453n/a Heodo
2018-09-21PAY #3132RG.docdoc 4b04d7245c1d6f64efd042317a07da392972823797bb84e8ecbf5f23077ec31dVirustotal results 28.81% Heodo
2018-09-21SEP #66BMVBEFN.docdoc 7bf94f96f298cabab792d094909b8e5fa3ef7a15d1e2a796d8a6ab6dd9c35e89n/a Heodo
2018-09-21PAY #3H.docdoc 71f6056254b84d7764865fbc94a1b6c1874682ed36c53a293a436a9af274200bn/a Heodo
2018-09-21SWIFT #5212EHDQCFU.docdoc 8ed5975b9370704f775d32af5ce6fe3d12eca84b4695498a2999030e8c7360a4Virustotal results 27.59% Heodo
2018-09-21SEP #50417FEAY.docdoc 78e297673aec3eaa604d2a45bf6051329fe36729d396c540972e48f5d0741cb2Virustotal results 45.90% Heodo