URLhaus Database

You are currently viewing the URLhaus database entry for http://khetanji.com/wp-admin/DOC/QD3u3LC8AWJiEEmgz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:619375
URL: http://khetanji.com/wp-admin/DOC/QD3u3LC8AWJiEEmgz/
URL Status:Offline
Host: khetanji.com
Date added:2020-09-28 22:39:06 UTC
Last online:2020-09-29 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-28 22:40:03 UTC to abuse{at}sharktech[dot]net)
Takedown time:5 hours, 28 minutes Good (down since 2020-09-29 04:08:07 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-29XR6730_2020_09_29_XI075891.docdoc 246477a658fa6ecb8e5a5a6509eb87dc115c85a3cd1d465a8667f2cd468aa4e9Virustotal results 33.87%Heodo
2020-09-29REP-9555.docdoc 76625b162b7830d0e881fcc218b3a1a5e02876825b671ae1ea5234fa2c9863f8n/aHeodo
2020-09-29UNTITLED_2020_09_29_6705829.docdoc 6a4f1212417249a2a041859ef4fcb7c2968111ee6273aaf0fa840e06c7905b52n/aHeodo
2020-09-29MES.docdoc 1f78c0dce80e8230188b85299b481f143272c4d24f7feb19955ef389279bcabdn/aHeodo
2020-09-29Arc_20200929_QJ856.docdoc 54f986a7c4d63bb4318487b8abb982035542b034084b85e68a6f22edbd7d3b01n/aHeodo
2020-09-29list 20200929 239.docdoc 431d361d091946539cac8ed89298e63de4e17531277e185f37c063dd89273ef6n/aHeodo
2020-09-29inf 20200929 D446.docdoc 6507d66845c1e70cacab4feff11c6c27b240665a19d909a816639c3a59406562n/aHeodo
2020-09-28Attachments-20200929-XKQ0823.docdoc 822600fc7c81e8f5a12a4ff52869d121c2adcf36c2b3922a68213f4de2bcc769Virustotal results 27.42%Heodo
2020-09-28Untitled_2020_09_29_8301090.docdoc 87db481003cf7afd6d3cda5e4f25cec1329d666c4238e33a8dcaa986267b1d97n/aHeodo
2020-09-28list 20200929.docdoc 9fcd248c2fa42d29896ea9274c9b7f05eb7a278c36aeb3aa1ab0edb3ad4bcc37Virustotal results 27.42%Heodo
2020-09-28Doc 2130.docdoc 25ba07757eed7d8e7d07336a49141f5ee33fa19b03abf8e4dffdc67175f64b7bn/aHeodo