URLhaus Database

You are currently viewing the URLhaus database entry for https://geekdeer.co.za/wp-admin/HIkbb3dyWkw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:767026
URL: https://geekdeer.co.za/wp-admin/HIkbb3dyWkw/
URL Status:Offline
Host: geekdeer.co.za
Date added:2020-10-29 21:47:05 UTC
Last online:2021-02-11 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 14:54:03 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:3 months, 13 days, 16 hours, 21 minutes Bad (down since 2021-02-11 07:15:50 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31ARC_498619435451160236949192.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31file_SJE_100120_KJQ_103120.docdoc 4ea3b44401112b07c8579bc245bb22ee9c40c153200538038bb8bc8d53f6b632n/aHeodo
2020-10-31Rep_MOF_100120_VKP_103120.docdoc 396b664fbdde301d1ebedd54f4beacf4726ef9fe1d0807a86fe0b00e0a71772dn/aHeodo
2020-10-31TY7642331746KM.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31Rep_QNBK27C1.docdoc 615de4c01c61e261c017bd338c822b21b294728d9f7bac3199e139be0d1c3675Virustotal results 30.16%Heodo
2020-10-31DOC_06155552373243964062165.docdoc 0ab261e8e21a48f3423dbe6d18512f5e2afbd09fd31af5d5c45d2814c2c709afVirustotal results 53.12%Heodo
2020-10-31Attachment_PO_10312020EX.docdoc b48b7231ac7d5bc0a2ba5883e7a634a557c606b06b97bf45b2842523959c4a37Virustotal results 53.12%Heodo
2020-10-31file_JC7949701214ZU.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-3110960289.docdoc 3f1565ba4e9c93cf71b5b5a3f3b16869e7c6a7d86a837a32db34f1f0105e3aaaVirustotal results 54.69%Heodo
2020-10-31LIST_371UHFYA6U.docdoc 0406910d3c48dbd18d57086dcab9b4f73a8081dae9fac3010f0ae90b73c7c34fVirustotal results 54.69%Heodo
2020-10-31FT_07112654459.docdoc 12ef90a776bc1f4ae05962313e6b3711ec5211f8ba450527585d2da80c2d03b5Virustotal results 51.61%Heodo
2020-10-31Attachments_40179680165907382191093.docdoc e054d39b0aac7c2b6c6b76bc40435c1d0ffca154764349deefbc46f9d6ba453bVirustotal results 50.00%Heodo
2020-10-31Rep_9HB86JB8FZ6.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 53.97%Heodo
2020-10-31INF_MH2822043586XV.docdoc 4eabd4dcb81c28e86bbfd9ac62090d51aea5a733c96a8f3a7ad130a9841bce71Virustotal results 54.69%Heodo
2020-10-31FILE_63431152.docdoc d1d8c0384f3780dd6287efc3e864f9fe60b6efe14f613f0cc2ec0efb0aa97dd6Virustotal results 28.12%Heodo
2020-10-30Rep_RQ2289794960KF.docdoc 66f30f7d40ef0e230f042cd6abe51971e49af52617515c3d0d99f3f365a59e90Virustotal results 25.00%Heodo
2020-10-30LIST_PO_10312020EX.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30Attachment_PLBXFYS9ETIU.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30list_JQW_100120_KEH_103120.docdoc 49931e499615a1dc36cda98151d3c406413f1c47504b38f2bb658631313c273fVirustotal results 54.69%Heodo
2020-10-30C_HOA41BE3OD79S.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30INF_NPC_100120_JMS_103120.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cVirustotal results 54.69%Heodo
2020-10-30Inf_4LN96NV5VFE.docdoc cc0614f4e21c1d63a80e1ddecfd591353e15aa849f754be9d8b709cc6e9841c9Virustotal results 53.12%Heodo
2020-10-30Doc_80815315.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo
2020-10-30Attachments_0CV1IJK0A.docdoc 8cfdaf7b364045782c53fe4094501d577114deba01267ff8e074d14d7d27833bVirustotal results 23.44%Heodo
2020-10-30ARC_PO_10302020EX.docdoc 90d39ca6bdaf9c010fd7f3a5d3c8588f1c777498f544ec5ad64329b6c06621b9Virustotal results 22.95%Heodo
2020-10-30doc_76511516.docdoc 6061326ca1f6965d9ff04a37eb1defb55b410556500c197c6d8c9207a4432fabVirustotal results 23.44%Heodo
2020-10-30CUR_100120_EHJ_103020.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30doc_BF3575275848XT.docdoc b86e09a5bdebde57bd67e1fa11ddbd3381e5972d091fdc61b68e34226fabf084Virustotal results 33.33%Heodo
2020-10-30K_PO_10302020EX.docdoc b0f3557b0ac948f3137f3cc926504dbe28038ea00d282c81a33fd46b93af1c25n/aHeodo
2020-10-30MES_506840764870127.docdoc e2b96a7780f1274b8e106466239f4c6b39c17c0b6dbf75223abe4849c04324afVirustotal results 44.44%Heodo
2020-10-3021361704.docdoc cd7af62b6cdbf35cdd60b11e87084e9e0c08ae9a790abe502c3a9d5a62c4e8d7n/aHeodo
2020-10-30arc_45881879.docdoc 5aeb983f62e296373a25bdde163ab799f0bd688f40567310960f16b815921687n/aHeodo
2020-10-30LIST_91803520.docdoc 001aae9a58f6352962e2e1635ef52e5cdc08a8db7e51aacd096f41f9de8db0ecVirustotal results 40.62%Heodo
2020-10-30ARC_WJS_100120_ETH_103020.docdoc 33478c951541dfc62cd1b974afa9e6be46b51b140a5228aa4f34f417a17b8a64Virustotal results 42.19%Heodo
2020-10-30inf_43158436.docdoc 0b8a8e7a53d7fe5cfe16dbec4b9d21361ce7f6eb2f21c9ece0c5fdea89d09b74n/aHeodo
2020-10-30list_ZF5447104034WI.docdoc 2a25d8a1cbc4a93a1a7f07a290d36e24c0e2750b65badf5e91709eb644fad12fVirustotal results 43.55%Heodo
2020-10-30Attachments_EZ2728116076MY.docdoc f47484c61c7b2b0541690f5cfb219d2efe962b5204064435481f99e8ba92f95en/aHeodo
2020-10-30dat_LIX0LGHIXPNFELAQ.docdoc c0b41e22e711cd0385c069a4c10ae102ca7dcc277460d218eecc4974cca8677dn/aHeodo