URLhaus Database

You are currently viewing the URLhaus database entry for https://pkk.cilacapkab.go.id/cgi-bin/sites/44457/WGdZlLh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:722265
URL: https://pkk.cilacapkab.go.id/cgi-bin/sites/44457/WGdZlLh/
URL Status:Offline
Host: pkk.cilacapkab.go.id
Date added:2020-10-20 07:52:05 UTC
Last online:2020-11-20 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 07:54:03 UTC to hostmaster{at}iconpln[dot]net[dot]id)
Takedown time:1 month, 0 days, 23 hours, 56 minutes Bad (down since 2020-11-20 07:50:33 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-21PA02 invoicing.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 32.20%Heodo
2020-10-21Electronic form.docdoc 2a603eb060abe8cf0ce5259b69da9cdd0e5c3015332a943828ef24212ae982e8Virustotal results 30.51%Heodo
2020-10-21Copy invoice #0656.docdoc bce4a6fe31eb854ee0fc5fb9c17c81ee19922b93a2998de467fdd004aa3ddf37Virustotal results 34.04% Heodo
2020-10-21Copy invoice #839127.docdoc 9cdd0e1ab1bd327fbf175b974de32d3f5c7591a31c72a34a842e2d03d8706ad8Virustotal results 30.36% Heodo
2020-10-212851353764BD.docdoc 3c54fe2565b2e6ff66e9b1eb34fc93333f99d82c4c76d757292dd4e8c6af406aVirustotal results 32.08% Heodo
2020-10-21October Invoice.docdoc 03e8290f5d44a7d129aa0e9614604b34b4b745f41c4dc8ca80db878cc82c26cdVirustotal results 33.96% Heodo
2020-10-21Form - Oct 21, 2020.docdoc 887c3473aab94ff54bed0af87135fad58dcb435bcb5dd630ca49ebfc6d1b9a55n/a Heodo
2020-10-21October invoice.docdoc f492868f49d7ac388ea92c1bf5895ce59c3b1de49e2d3b397a6987eb4c32abacVirustotal results 26.23% Heodo
2020-10-21Inv_3348.docdoc 4edbef59b575a4095b13edab1b9c640b1cecc8f25a2b61f93e988285c079b488Virustotal results 25.81%Heodo
2020-10-21Form - Oct 21, 2020.docdoc cf275b27c9d9ff1afbbf89c46cd4546584c4a173ddc75405c48b7ead240f7b0bVirustotal results 30.43% Heodo
2020-10-21PO# 10212020.docdoc db5fb70150903040a3e93dd5c87a0b442c28473d2dccb5ca3dc59c2957a243b7Virustotal results 25.00%Heodo
2020-10-21Invoice.docdoc 1c615910d79aa7763683cab844eb3542e60cdc0b9052bf2649a0fe8034ccaa51Virustotal results 26.23%Heodo
2020-10-21INV_57593.docdoc d00125dd0f069c23c0ae5f95db081c57dfd23bc67fd5308053a4204ace382b4cVirustotal results 24.59%Heodo
2020-10-21Inv. 0014971356.docdoc b1b68ff6e12d54572db4fa1a768108587786836e5e1c79f860f32d78e5f722e7Virustotal results 26.23%Heodo
2020-10-21Payment.docdoc d8e0f462d8d75918d376254506d8d9ca846f6fa1f33076a091cd9f61832efbc2Virustotal results 50.94%Heodo
2020-10-21OX0 invoicing.docdoc a32b8fc89045749411368894b5eb70012518a8d9d1703b940bcbc966c0e40bdfVirustotal results 50.94%Heodo
2020-10-210219298.docdoc a9b5951976e5aebe82b1a18ef33e379ec5f3a36a04b89103649e54d7dc746aecVirustotal results 49.06%Heodo
2020-10-21CX-100120 ZKOC-102120.docdoc 33931df25bbfed2013a987a32738c165a5799d274381e76cbf534ba189be293eVirustotal results 46.15%Heodo
2020-10-21Invoice 10412.docdoc 5ab195348086d508a9be2e1c480fa60e9de009a7f057dbaf696f8468ec4fe0f5Virustotal results 45.28%Heodo
2020-10-21PO# 10212020.docdoc a83dce48be132b625d87853a68a56238720b2fad3e3bfb67c50bdf1d677a98ddVirustotal results 43.33%Heodo
2020-10-21October invoice.docdoc a3bd9261b5a8844a6a6a77e06f0eabf6a21d998001e99718a42f8bfc8147762dVirustotal results 42.62%Heodo
2020-10-21Form - Oct 21, 2020.docdoc a4b9c8bd73e09cac4fa51d9601686766c566cc1afcba7986eb46da97f56449d5Virustotal results 40.00%Heodo
2020-10-21YU-100120 MINT-102120.docdoc 31b6905dac8845a6ec882d8c569a76792cf589be6591ec8270168d35a8047a3fVirustotal results 41.94%Heodo
2020-10-20Form - Oct 21, 2020.docdoc d590ed65aef80ecdc7f0a44755ee436937f30c0b05287ce6d177b654512940e8Virustotal results 40.98%Heodo
2020-10-20invoice #50859.docdoc d2b7e7d77c65f006e6878f64efc31bcc0fdcacf7293e2e19c30e3bf4e40b09fcVirustotal results 39.62%Heodo
2020-10-2005237058489.docdoc 9be377b592614918b5f4aa295f73afeb586e3e386f7bec12cf04637f31433d7bVirustotal results 42.86%Heodo
2020-10-20O-100120 OZCK-102120.docdoc 0fd8d47fc4990dfad6cb0567737449722837d2aa312d68143295e1a2846ed1ecVirustotal results 40.32%Heodo
2020-10-20Payment status.docdoc a8e92bb15ad9bcd8e93e71644a570c2aeb6d030e2b496412500deb4ee2a23889Virustotal results 37.10%Heodo
2020-10-20Invoice.docdoc c1a2f053ac0b9cafe6d08072e6971d0dfad8f938cc167753df413b1a5ee4065bVirustotal results 32.79%Heodo
2020-10-2037957.docdoc 80112c9d5f76aa1687aa0df70c0d7f1d96f1b7524da942b87480ff37231091e8n/aHeodo
2020-10-20INV #0884493 FOR PO #003016396627.docdoc 36bf9ecc1a8a1ba3e8b3adf9e916e0f5d5e7f0247f6c4efc53dcdc496443de74Virustotal results 33.33%Heodo
2020-10-20Z000 invoicing.docdoc 1949d127f8cad19649adb5f4534e1b6eff752a31d5ea73e427d0ef8c90511ceen/aHeodo
2020-10-200359759.docdoc c9804b898a9d2326b05f4037b2eace298777d1a387273033692c9f6deede6cabVirustotal results 32.73%Heodo
2020-10-20Payment status.docdoc 1fad7db33eae6c2158f57709f82ff40f10276a88a34414418c06ad738eb22299Virustotal results 32.26% Heodo
2020-10-20GN7837416592AR.docdoc 5de10aad274888c1ae2d0b13f1cc5199b0fbf596200f2f0d567aa2e2df2e2e22Virustotal results 32.20% Heodo
2020-10-20Electronic form.docdoc 2c393e1c62282d084b3c0dd82e7795f08d0af0f150b7e6dacf81de3116186969Virustotal results 32.26% Heodo
2020-10-20PO# 10202020.docdoc 61835e08172767d73a9e6c5dfb1fcc8b904d60c3b9cd7b382bcfe43aeab5c2c0Virustotal results 30.00% Heodo
2020-10-2000324469127.docdoc 4217ed123cc2bd063b8cc599340aec39fda437a4e62df3118a01251a915c226bn/a Heodo
2020-10-20R0 invoicing.docdoc 5048d7b27c53cf32d071bbfbe3a208164d350d1d9ef8d2bcd423631b5d1b21dcVirustotal results 32.69% Heodo
2020-10-20invoice #8810.docdoc 18286f51c980997e07241a170822a950f101cfa264c232edbfcb4d67694d5b45Virustotal results 31.15% Heodo
2020-10-20PO# 10202020.docdoc 6a003ad11e4785ca68e20e102246780b6e3d1ef660453fed530da4ba2ed14639Virustotal results 30.51% Heodo
2020-10-20invoice.docdoc 589c7b11cb037b2183fcee493e98930358a15693532b1340c7f4cf1d2f50c636Virustotal results 32.20% Heodo
2020-10-20Inv. 9148220.docdoc 6664d59aec5871d443503652ecf25bac9b57963b8022e44f0d00711ec4aca495Virustotal results 30.00% Heodo
2020-10-20Payment.docdoc 47914da6e4ee4b6892b42cdb0076cc23a9887a862a7b366434d7c77c0a21123dVirustotal results 32.26% Heodo
2020-10-20October invoice.docdoc fcf66fd33f42c75abf852452c661e3ccc4f85c48a721dbc4471bd28332760145Virustotal results 51.61% Heodo
2020-10-20PO# 10202020.docdoc 2f0abbe89ce350352b4029575dffb4895f42d2296aadc1745287763704b7093dVirustotal results 51.67% Heodo
2020-10-20invoices 59027 & 82858.docdoc c31795e9d2a3b7bf6e19d054a2574f0ea3eef997e49bd9318316efd609cada94Virustotal results 50.00% Heodo
2020-10-20Invoice #129698.docdoc 5cfa1457e7ddb2e7c49419cabef1c969debc4d677e7ca6f72d6edd8e2ac88a32Virustotal results 49.09% Heodo
2020-10-20October invoice.docdoc 9fdb062ded6d82fd2d2d452643f3eccce639b07b20b205b0ce7cb8ceb31ac487n/a Heodo
2020-10-20Payment.docdoc 60ac2df8c0a56c198ce34633dc5af133c4fda800a85383a2ea9e6da298e77904Virustotal results 48.21% Heodo
2020-10-20Form.docdoc 365d3d49f5595f8f953aea3c3d22743b8319fad46a667472b4c3504b8efb805bVirustotal results 52.83% Heodo
2020-10-20October invoice.docdoc 2e7f73ead896b7eef85db343d77418c1307c087dccf1c575b506835d23cdcf99Virustotal results 50.82% Heodo
2020-10-20Payment.docdoc a87b11057f5f368f21b06d60e9a37fded4628321086aef6c70755d753195fb3fVirustotal results 46.67% Heodo
2020-10-20PO# 10202020.docdoc 63079c50ac6b966778ae92e6a4d39927b58a475be4b8d095192b40ad5a877756Virustotal results 48.33% Heodo
2020-10-20form.docdoc 31f0b205c09b9d99e10c2626936588bd3b473116e313045031cfa6f9a8bf23c8Virustotal results 57.89% Heodo
2020-10-20Invoice 008576.docdoc 73f22ba33ef477380a8177c19532c0e6a7c993ac47333c22b3ad4b53544bade1Virustotal results 49.06% Heodo
2020-10-20Payment.docdoc 45327af6d3d75a274f4c5d122adc41d42ddff44e520c7c02efb3df87adc64be0Virustotal results 50.82% Heodo
2020-10-20Payment.docdoc 7c78e9a0268425f2bff9e8fdf80e9bef5210401291ab9d1f251a97849f2711c7Virustotal results 49.06% Heodo
2020-10-20INV_6799.docdoc 9d08e7c389570de57d78a8cf91e14d9c814ec46202b241acdcea2d9dcf7c427fVirustotal results 50.00%Heodo
2020-10-20000203218.docdoc 9fe84df0e721c3be3f87b18797064adf7294d5fc84605bdd396e1d7492e85c0aVirustotal results 50.91% Heodo