URLhaus Database

You are currently viewing the URLhaus database entry for https://tunik.my/wp-admin/balance/u0eco1t53899r/hd81e0hv70qjozexal/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:726826
URL: https://tunik.my/wp-admin/balance/u0eco1t53899r/hd81e0hv70qjozexal/
URL Status:Offline
Host: tunik.my
Date added:2020-10-21 05:53:24 UTC
Last online:2020-10-21 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 05:54:13 UTC to abuse{at}internet-webhosting[dot]com)
Takedown time:11 hours, 58 minutes Good (down since 2020-10-21 17:52:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-21XBG_100120_VRQ_102120.docdoc cdf08877df82aef07518f10414f3dc1ec0bca6a662ee6191b7c76105bb51a0b1Virustotal results 33.96%Heodo
2020-10-21MW_ZIE_100120_QUJ_102120.docdoc 3870c4b69f68d86fe116181343d8d6d97a22d191a028b02f300f0e5d1e33eb60Virustotal results 32.69%Heodo
2020-10-21O_88629818780303948408.docdoc cd8851bd896a7e87cc70c70d34d548cf3618138a015fc11eec546d47780a586dVirustotal results 30.65%Heodo
2020-10-21HGL_100120_ZTD_102120.docdoc 8cfa219330a7e68795a29e761cb2e73a2dce4884afebba4f91a0886dc8012920Virustotal results 27.42%Heodo
2020-10-21EV9753096750BL.docdoc 7fd4239f8f25bb0287746f554cbdffc534ced3346467f2a882722772a9d44d34n/aHeodo
2020-10-21REP_76623413.docdoc 4a8ef7b61c8dea7745464f96999dcc37abec856e23e55bc6eaa7ef374a6c1878Virustotal results 32.08%Heodo
2020-10-21243100434796288365.docdoc d6edabb30c96ad35f08d16e274d639b6a5a5208e7b35167d56392a44b3842599Virustotal results 26.23%Heodo
2020-10-21INV_93285348.docdoc 752491c57c15c686f143528a86da3db2cd1c4bc0513a2dcbef8d2ee47520f84en/aHeodo
2020-10-21BAL_VMQ_100120_BEL_102120.docdoc 58c9ea112ea67d4311a63c0cf87b4a97745c1e0f28e1a8a013047349d7d5bae4n/aHeodo
2020-10-21JAVDGFQPFX31.docdoc 442199396365c09418756cb80ff20ce46129c4a0cc2cfc6dabf5e8bb2cc42437n/aHeodo
2020-10-21BAL_ZN2730775115WV.docdoc 91b4636eaefca65ce60c334d8ae4d9c2b01b86dab6e1aa54127de53228272d88Virustotal results 50.00%Heodo
2020-10-21REP_IE4627509219SZ.docdoc 44ba6008506a7673feb84fe893ea958153dae8b82def146db7f497d3537bfbceVirustotal results 48.33%Heodo
2020-10-21EGKO_SR3935340749DJ.docdoc 3f28d23c6650e22fa69d824efc5153fd46fecbbdbd236ae7b4ee15bae4ef556dVirustotal results 49.06%Heodo
2020-10-21XUO_PO_10212020EX.docdoc 71ee0c6ba54fc6b648bd0b5a4a0a9856a061fd1c4cdbdbf677aaaf092bbd26f4Virustotal results 38.46%Heodo