URLhaus Database

You are currently viewing the URLhaus database entry for https://geekdeer.co.za/wp-admin/tajuYl8RmxN5AtIPjgqGBr9ueSL2k1z9eVw9XXdRS6MDrdKBNR2grcD4GU/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945610
URL: https://geekdeer.co.za/wp-admin/tajuYl8RmxN5AtIPjgqGBr9ueSL2k1z9eVw9XXdRS6MDrdKBNR2grcD4GU/
URL Status:Offline
Host: geekdeer.co.za
Date added:2020-12-30 14:59:04 UTC
Last online:2021-02-11 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-30 15:00:03 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 12 days, 16 hours, 10 minutes Bad (down since 2021-02-11 07:10:18 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-31SBR8TZ.docdoc 43af38ecd27585f00463abfee0ca7f492fb36fa862c8d215447d59be27652589Virustotal results 50.00%Heodo
2020-12-31CVQGV3.docdoc a19dbfe4090d5809a4e949d13a2812935f981a4f322c8665b6feaa908ebc33cen/aHeodo
2020-12-310OUJOFPYKP3.docdoc d08bca9f926920b2f85e5b7bec30f872cd48615f0ab552f727f9cae055fab628n/aHeodo
2020-12-311HZE90AN6RPRS.docdoc 2aae32497917afd5a493a921d6bae0556badd6dc783eabf9b3322806281435f9Virustotal results 49.21%Heodo
2020-12-31YX6PKQOSMWI.docdoc accd0141dbb5a3924866cfdbbdeca2edfd396cfbb611880588d8cfab0cd986c3Virustotal results 48.39%Heodo
2020-12-310043J0BV8MV.docdoc f13634d2bd3bc1469174a0cb871c0d10bcd89c1431232838e1251c25ce568a0an/aHeodo
2020-12-31T1DW41GDSRKFD9M.docdoc c68350e42d1fb6e27f14eea5b6a5994cc3d6f0a4c09880eaf03f6fe1382ece1fn/aHeodo
2020-12-31O6NQ0558.docdoc fcd4936265c3d59d43ed6c51658cafd788f22ab0e3601f832346c762c3d97c2bVirustotal results 47.62%Heodo
2020-12-313O6YECQP5X5VSCC.docdoc f4ba2bce0a0fcc57183c73e46feb6f6fddfcac25d12032d47d93302aa9bb40b4n/aHeodo
2020-12-31B9944PTWHLRGH3.docdoc 6c1e317361243614038a172a218b2050728fbcf3f6dc18937d02f92e1ff92354n/aHeodo
2020-12-31T1DXZV79AL290.docdoc 2af797939c0c67519484491cd884c884c2a345daa208a6d1ba67e3917edc04f6n/aHeodo
2020-12-31HTGL78O5P998BJT.docdoc 6de848bddd35ca7b7da3c3a8df4b16ce8ce22cc257299320639ca2b4f1af01d5Virustotal results 49.21%Heodo
2020-12-31V0OIOPZU2GPKZ.docdoc 9c05cd41d8c7fb3746acbcaad200dc66bdc79609905a06213a787799c9661985Virustotal results 47.62%Heodo
2020-12-31NZMH3EJK84GL7.docdoc 91086dde82b6ff0a38dcc4ceafee71808d2af326520ab5e0f610f0c2fc6637e9n/aHeodo
2020-12-31HUAH2JNNB8GB5GL.docdoc 7dbe3e3f4d5e95b69111858fc5e96f73c1b7f8284276a1280486ab64139324a2Virustotal results 41.94%Heodo
2020-12-31OFSXT74JGZBX1W5W.docdoc 12648728174c80a68b9992c8759df7e021f27fef6bbee5bed8af71b18a7fadd5Virustotal results 46.03%Heodo
2020-12-31WNRD6H6JKGXP6O.docdoc 3d426817cb9506ac02f7d7ae3cebe38e2125efde6eb7ee4af0251a6afdfa2d26Virustotal results 42.86%Heodo
2020-12-31XKSSR4BWG.docdoc d6704fdc1942538d16ddedbe3eff3c429e462d4378b33040597c5a218c0e852fVirustotal results 42.86%Heodo
2020-12-31ZRL0LMQ.docdoc 3bf59384c4c1a24eb5fef4453dd1fc63a75324f4aa6b86a62ba47de3393027a9Virustotal results 42.86%Heodo
2020-12-31V9WOALE6.docdoc 214c118a6ea6243f11f97d6a83c14ce0efa696dcf534eb46de221d4199cb7c88Virustotal results 37.10%Heodo
2020-12-31UWOFPG9M7KLH.docdoc 399701ae00f1f4e019e97b788362403c8323b417cd0f72fef7f9a39dd4ad4436Virustotal results 37.70%Heodo
2020-12-31KKMWWTEWJDYR1.docdoc d6dae3570b800a4a54bbb661e945c2870952058174a0ac704127c7cfe8330bcdVirustotal results 39.34%Heodo
2020-12-31L2TFY3DJH2D71MI6.docdoc 68dafb6ed5bb318a77e710fd66f9beffc66a4f84579fb3c160bb3c8c8b457acfVirustotal results 34.92%Heodo
2020-12-31WZZDCUAJKRUR.docdoc 14b98f981681ea78e6511ba3a68c28a85fee9696158358876cd49a9ac1110bb2Virustotal results 34.92%Heodo
2020-12-31EQKJQCKT6HQHGY.docdoc ebb494890c3756f3bd2d17fe15fea7443671ce48c7d22821b6f0e73920ab061bVirustotal results 32.26%Heodo
2020-12-309YLCZI0C6CBZV3TE.docdoc ece0d267bc9cfa2b32d2d93569757b8895f379ef0b752fdafdb457da534a0de9Virustotal results 31.75%Heodo
2020-12-30OGPA593E6M1YN6.docdoc e561d015ba417615f931d69404149b840e6f30d937c6d1e8765462d08c33384eVirustotal results 30.65%Heodo
2020-12-30ONPAQHK.docdoc a2bee4290712595f0afb87e5a247cafe694d279fb7350e43bc163630e926aaa4Virustotal results 27.42%Heodo
2020-12-30BZSYGBNC6I1T.docdoc cecc306de3cae60a1f3d988356054754d0d3dcf8666045f718d5cfbf53e6a730Virustotal results 46.03% Heodo
2020-12-3091QSGJ.docdoc 819ebcf8ac92646fe0337cfb241ea5ae4d5a04fcc9284cde8adad3f068c018b2Virustotal results 42.86%Heodo
2020-12-306REDLLCO6GU3SMGE.docdoc a076dfb0f7e5a9217dd1cde4b003fd8714d6693b990f2ac4fd1b70fdbea38296n/aHeodo
2020-12-301CK3KET.docdoc 6b85d222fb12df6466d8b1dae31bb6e7706463ec73fd86f85e46ef7867183df1Virustotal results 41.94%Heodo
2020-12-30V52ZRUN.docdoc 14eef594729b6784626929323d1f4a040cf76e3774ad5b77a16c28449db182cfVirustotal results 43.55%Heodo
2020-12-30Q3UA0KN7RKV8YGX.docdoc ef0d7361d6fb7364b837a9356bee96b95aafbc934ce3836f631f7a4683ce40e7Virustotal results 39.68%Heodo
2020-12-30E33WLCSO3G.docdoc 712989be681e3a6e8cd47b84ce5feb957d2cfb47367d96bbc7dcd6551bef1f51Virustotal results 38.10%Heodo
2020-12-309RUU84GHPPW8.docdoc d2178edbfb636aa2baf306d59be6a8c651aa2167f67893e6ee70469cc13de307n/aHeodo
2020-12-30WBJEE3AX66OR0N.docdoc b19c3ed6b6012da42e3a700410a21231588c6b1da97f92911a540b9e3ae71b08Virustotal results 31.75%Heodo
2020-12-30K0SADV3.docdoc d700110437e868378fd668cf27a7df7611da72d285f7b9d7edfd2d08475a47b5n/aHeodo
2020-12-3036I78H.docdoc a3c7030635319611442140f4e775bd30cb0379b86a430e9b54df0ce366d7db30Virustotal results 29.03%Heodo
2020-12-30R2697E0TTR.docdoc b02db4eff71b9c4788273ae8bef5958210413d14e2f6704de106c437749aeeb3Virustotal results 28.57%Heodo
2020-12-309A46FG6RSNISTO.docdoc 315dce173e7c32092cf4b83b7d27b520156225dc90d11322b56244ac2b61810en/aHeodo
2020-12-300H7JFQ88AEZJSVO.docdoc 2247e8d912eac0fe04e0d232db8ed716ddb81a5a2f24f343b03041e267bf3d7fVirustotal results 28.57%Heodo
2020-12-3050VC3X.docdoc 71bab4125d8e53687619ff03b3dd9d67b832995ca1998183e77db10e3c2e0c5dVirustotal results 31.75%Heodo
2020-12-30W6BRR2I2UX.docdoc 2badabcc2c4dfb7a924c0530bf5f067915c4ecf9d74c21fd9c1b9a4b7124aba3n/aHeodo
2020-12-3036PKXFFD2A2P.docdoc 5f6b7c56f5a98721b71d91dcd9a177298006b37c11ca8dc6b0bacae198e17feen/aHeodo
2020-12-30QMXW3N0S7.docdoc 102752bacabf212b2d93d7dab6e84615f2e94a7c17f88f88c23cd2e87643da1cVirustotal results 29.03%Heodo
2020-12-302TK89C.docdoc d34dfac031661724abb4626c78172927bd98aec10118ac0117285d1ee6be8cc8Virustotal results 28.57%Heodo
2020-12-30NU2LZU.docdoc 0d90ca158eabbf8ebd00e4093c2ccbd118833f31c3c6902dc7cc079b6ad27560Virustotal results 28.57%Heodo
2020-12-30AYRGIHFAB3.docdoc 4c0bd56c72fbb8e4fc45f671c03970329a3070b215f7727f83040d529e44f5e3n/aHeodo
2020-12-30CB9E07NNOTW70C.docdoc 7f1d8891e82df21ebc705931bb6ac457463003dfd05ac290824f75ddfd86d70bVirustotal results 30.91%Heodo
2020-12-30LBFAJRZ7W7U.docdoc 62e5f85a3afbef81f4dd4d8281a0fe697d0dfdb6e714ade5175a0f2b68d40083Virustotal results 29.03%Heodo
2020-12-30IBY6TSY5BRP.docdoc 7fef2f36b64703910def4f6a15cfe314b2ac2f9691465ecd3999a29daf6b25c7n/aHeodo
2020-12-30BW8IOPWWDB.docdoc b8b8a0b9feb659e1a9f61285a8f8e98642fa46eda26a61a780df9fb698c63131Virustotal results 28.57%Heodo
2020-12-30BWASJAGE.docdoc a90b5fb7fe68a65962a5023189a8c8184bbaaa72f39ee8a1e071183398cfde46Virustotal results 28.57%Heodo
2020-12-30KV7FDABXG.docdoc be2287f06352c21f4412b81411c76a2e3c23bc99bfd67a39549574e6f0143ec5n/aHeodo
2020-12-30JZUQKVLDQ0H.docdoc 40862d0b1aafeb508f97893ee74e2b324ec7e1eb96bc924b3248b9174e43c1afn/aHeodo