URLhaus Database

You are currently viewing the URLhaus database entry for https://pwk.ft.uns.ac.id/wp-content/gallery/5Tavh0sNyAX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:756438
URL: https://pwk.ft.uns.ac.id/wp-content/gallery/5Tavh0sNyAX/
URL Status:Offline
Host: pwk.ft.uns.ac.id
Date added:2020-10-27 13:29:15 UTC
Last online:2020-10-29 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 13:30:06 UTC to abuse{at}uns[dot]ac[dot]id)
Takedown time:1 day, 23 hours, 9 minutes Poor (down since 2020-10-29 12:39:40 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27Doc_QRB_100120_BSV_102820.docdoc d6a6701bc63354fa0f34492bdbe6c22bfee5f624d5714b329a8795508ff5b6e4n/aHeodo
2020-10-27C_9ZGNF4ZN.docdoc f0cfa5e0da830c64b718ca4ef0e2a826727e13e6f59321d4bd07c41f1ce888d7Virustotal results 20.00%Heodo
2020-10-27list_08549607.docdoc 0b8ac5c9dc030e537de800452a108f34d872311dbe2d68949a7230e90cc2ca63n/aHeodo
2020-10-27List_0H0GVIX0H.docdoc 18d5538b99af884d1bb696f03df08bb7ab04370724b050f1dd643690430da470Virustotal results 19.05% Heodo
2020-10-27INF_PO_10272020EX.docdoc affba7e7949c06840bb7887c8373003434c8755505fd274c8274210b5c8a2961n/aHeodo
2020-10-27F_5YW0IICJLCE.docdoc 31b23d9a8a18a659b89c36b6b116aa8f28579df18ff6d5f81e557ed41c1cc271Virustotal results 47.46% Heodo
2020-10-27ARC_EZV_100120_EVF_102720.docdoc 94bb2eb0f0b8a0f61ff20360dbf6e4b89188c5157bc940f9d38dd4cb68a4539an/aHeodo
2020-10-27INF_KBT_100120_TSR_102720.docdoc 1ad28606bff91478a2383c7deb56c563f2c3912df1f1ae81b0fd16892f3842d4Virustotal results 46.67%Heodo
2020-10-27file_UKH_100120_VQF_102720.docdoc a3c05445fcb1e6c242295e16252d4fc5c64ad8857ca3356f4445217cd28746d9n/aHeodo
2020-10-27mes_P2MADSDAY8OPFNB.docdoc 82304be765e94c28cde780b5f7e90c056ace4fd6e5aa3059ff05f9c4202a92dbVirustotal results 47.46%Heodo
2020-10-27inf_PO_10272020EX.docdoc 3a6999a4a9e86c13cc7384d88715d7e2ba2f571b311c29c076b654a9d15aeb1fVirustotal results 46.55%Heodo
2020-10-27Inf_PO_10272020EX.docdoc e298717a6f9ade752fdc64bab13127ed179c323b1bf54c9e8f79d64bc6227943n/aHeodo
2020-10-27LIST_RL4337345938GB.docdoc b5af6d7f4fb7ae66fbaa6bec875c3445c56507a2307d92800e26f08d169adfd9n/aHeodo
2020-10-27Inf_XF5139742065EO.docdoc 5ed7759274be901ba33c4f6edc3933a460141c8fd98a83304db9c6a344adecefn/aHeodo
2020-10-27L_5881288187068180513.docdoc 8e2379ffe37bd31c9d501b4fea3ae2e28b59f933520d89a5fae9580c3bfe9368n/aHeodo
2020-10-27dat_1GLX1309SEF.docdoc 46a3e3abecccb7dab19ff4c6940f0d2b503d409524a59b07bea431da55dac765n/aHeodo
2020-10-27WV2153665034ZD.docdoc 88c3d6cac3e781e9e7c07099efe0a5920b3da23acbd2ac4240b7495c923c7ce2n/aHeodo
2020-10-27Inf_9K2AWV3U.docdoc bbc60f6a3e441d49e8c3797ddfab56b309bf6e162bcdf8400e73e7651d117c54n/aHeodo
2020-10-27Untitled_YHWZQ4M.docdoc e7209fda6a92ab1c1d55690ebcbfa32f2f0dd773e2912bcd0259bb91509a2e94n/aHeodo
2020-10-27MES_QJN_100120_QNF_102720.docdoc 6512da0f704fb89d4a8ce055a88d766ec48ec1131286d971fef1f708277351aan/aHeodo
2020-10-27DUZ_767495893493.docdoc 53c15a0758065226ff440e2d77fd9566797ad3e8ab328de743a0fc0e63c54799n/aHeodo
2020-10-27UNTITLED_PO_10272020EX.docdoc c120434d0b02ba65e0e0cb0a24abde6889eb5d169602923f1b0f87567f9ac207Virustotal results 33.33%Heodo
2020-10-27RF8018411411SL.docdoc 822b7150456ce4824d3136d2b173e2981a20870b8533b3379c2feb83f55288ban/aHeodo
2020-10-272736594837117.docdoc 235b10dcd06777c5834503b9ec2da2d0fd23ff9288244bdc9e941137f25868e3Virustotal results 38.46%Heodo
2020-10-27INF_02529913.docdoc 9ef432b9526e75b9aa481ba043077d6ffefb4a706388c90fd002e320dac8520dn/aHeodo
2020-10-27INF_II3608760143FF.docdoc ece8580e8d356701d4a0c0c5d7d19cb4b5c08ad86d2d06ba58566f1a6c2aef0fVirustotal results 33.33%Heodo